Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9197A8F/63ACD5F459DB11EEA737FE0AC4F9AE02/bZYGiLbecUGnIYmOngc-FneP7zU.mft
File:                     bZYGiLbecUGnIYmOngc-FneP7zU.mft (raw, json)
Hash identifier:          sHY9Azl056ZrQaD92b9EorLRW7unwtYDX6+5XsVNhXg=
Subject key identifier:   F5:AC:57:60:76:99:7C:20:D0:2E:80:5F:36:68:4C:6B:19:54:60:09
Authority key identifier: 6D:96:06:88:B6:DE:71:41:A7:21:89:8E:9E:07:3E:16:77:8F:EF:35
Certificate issuer:       /CN=A9197A8F/serialNumber=6D960688B6DE7141A721898E9E073E16778FEF35
Certificate serial:       01FA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZYGiLbecUGnIYmOngc-FneP7zU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9197A8F/63ACD5F459DB11EEA737FE0AC4F9AE02/bZYGiLbecUGnIYmOngc-FneP7zU.mft
Manifest number:          01F3
Signing time:             Mon 11 May 2026 03:18:59 +0000
Manifest this update:     Mon 11 May 2026 03:18:59 +0000
Manifest next update:     Mon 18 May 2026 03:18:59 +0000
Files and hashes:         1: bZYGiLbecUGnIYmOngc-FneP7zU.crl (hash: ozLnw0vP21axkFERE9wA0EEOmaSnH25WBz3b0yRD01s=)
                          2: A663285A59DE11EE85CFCB12C4F9AE02.roa (hash: XXVUjsyhZNJjR2zCirDCP6YTvzsx5dU96ixceZ4TvBU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9197A8F/63ACD5F459DB11EEA737FE0AC4F9AE02/bZYGiLbecUGnIYmOngc-FneP7zU.crl
                          rsync://rpki.apnic.net/member_repository/A9197A8F/63ACD5F459DB11EEA737FE0AC4F9AE02/bZYGiLbecUGnIYmOngc-FneP7zU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZYGiLbecUGnIYmOngc-FneP7zU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 03:18:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 506 (0x1fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9197A8F, serialNumber=6D960688B6DE7141A721898E9E073E16778FEF35
        Validity
            Not Before: May 11 03:18:59 2026 GMT
            Not After : May 18 03:18:59 2026 GMT
        Subject: CN=6a014aa3-44fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:7f:b9:2f:d7:0e:98:e8:59:50:14:ec:1e:1c:
                    dc:75:9f:cb:77:53:df:69:48:e5:9c:3d:d6:d8:60:
                    09:8b:28:d8:4f:3b:10:d6:4c:77:3e:0c:17:91:6a:
                    98:05:33:9a:f0:a9:4b:0a:7f:c9:bf:8d:41:33:dd:
                    62:1e:53:13:dd:d3:c0:33:34:77:a9:56:7e:68:50:
                    e9:ae:70:bc:3a:f3:a9:c5:f7:32:05:84:7c:a8:17:
                    fe:ec:95:0b:a2:69:4e:19:c6:83:ed:8a:90:e3:c0:
                    ab:03:b5:d1:1d:3a:33:e3:65:53:f5:8e:8e:2b:bb:
                    a7:9c:b8:f6:cf:41:2f:4a:df:33:c4:1b:45:ca:5d:
                    bd:bd:7e:54:1d:53:c7:f3:8f:48:77:f3:5c:02:ef:
                    be:02:de:1f:46:49:14:6a:27:4a:a1:32:23:63:0a:
                    72:b7:c6:e9:09:6e:15:29:78:22:7d:71:3c:bc:f3:
                    b8:bb:29:d7:77:13:9a:50:ac:b9:05:ce:17:64:2b:
                    69:d1:b0:82:06:ab:5f:8f:b5:51:ff:9e:8c:40:c3:
                    32:cc:f2:26:29:1b:1f:3c:be:77:fd:23:a4:94:fc:
                    73:13:dc:a7:ae:6c:87:86:e8:14:a2:40:fa:08:da:
                    13:23:e2:b9:fe:ed:20:9c:39:04:bc:82:a9:54:5e:
                    44:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:AC:57:60:76:99:7C:20:D0:2E:80:5F:36:68:4C:6B:19:54:60:09
            X509v3 Authority Key Identifier:
                keyid:6D:96:06:88:B6:DE:71:41:A7:21:89:8E:9E:07:3E:16:77:8F:EF:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9197A8F/63ACD5F459DB11EEA737FE0AC4F9AE02/bZYGiLbecUGnIYmOngc-FneP7zU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZYGiLbecUGnIYmOngc-FneP7zU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197A8F/63ACD5F459DB11EEA737FE0AC4F9AE02/bZYGiLbecUGnIYmOngc-FneP7zU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:12:10:b0:18:d2:9f:7b:bc:bb:e1:9b:46:23:11:0a:03:85:
         ed:1f:04:29:55:ca:60:71:91:08:ff:78:76:81:18:62:9b:17:
         a8:a4:d2:a4:10:43:92:e5:b6:49:38:00:bd:8d:70:14:8c:af:
         d7:f3:07:30:30:63:18:4e:e3:73:85:b9:9f:21:45:77:32:97:
         db:dd:05:2b:11:39:3e:54:63:98:77:07:a4:d8:14:9e:5b:36:
         50:e3:70:13:33:7e:fe:50:d0:48:2e:0a:b3:25:87:f5:dc:9e:
         28:a3:42:9c:58:61:5e:a3:7e:47:45:9c:f7:f9:d4:5d:a1:ca:
         b7:bf:8f:e3:45:2a:20:6a:03:c3:24:c0:ba:95:55:53:4e:e5:
         46:ce:45:a7:b8:be:06:89:12:38:24:e2:e5:26:94:e5:0c:90:
         53:9f:e6:1a:a2:2c:89:84:f3:a4:ee:47:5f:02:19:39:13:d8:
         83:8a:8e:7e:5f:5f:3c:c9:1c:a8:b9:68:77:43:47:82:10:24:
         83:46:60:6e:12:f1:ea:ca:36:cc:c8:fd:e3:12:7a:47:29:f2:
         a0:df:4b:1c:82:ac:dd:c1:46:eb:cd:d8:25:90:f9:9c:21:b3:
         31:e9:86:d6:4a:d2:0e:f2:dd:03:e0:99:f0:9e:8b:58:df:98:
         e4:87:88:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:43:49 2026 by rpki-client