Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C563/11B6336417C111E981080F6CC4F9AE02/BKAnX1srXBgOfg0Slu7WC8DPY0c.mft
File:                     BKAnX1srXBgOfg0Slu7WC8DPY0c.mft (raw, json)
Hash identifier:          dlcy8V7RyyYAcV7GVxMU/2n5snkGkAusmldHkU06LGs=
Subject key identifier:   DA:C8:50:9A:C5:95:58:3B:67:46:1C:76:96:48:06:DC:31:61:9B:90
Authority key identifier: 04:A0:27:5F:5B:2B:5C:18:0E:7E:0D:12:96:EE:D6:0B:C0:CF:63:47
Certificate issuer:       /CN=A919C563/serialNumber=04A0275F5B2B5C180E7E0D1296EED60BC0CF6347
Certificate serial:       11CF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKAnX1srXBgOfg0Slu7WC8DPY0c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C563/11B6336417C111E981080F6CC4F9AE02/BKAnX1srXBgOfg0Slu7WC8DPY0c.mft
Manifest number:          11BB
Signing time:             Tue 12 May 2026 17:12:44 +0000
Manifest this update:     Tue 12 May 2026 17:12:43 +0000
Manifest next update:     Tue 19 May 2026 17:12:43 +0000
Files and hashes:         1: BKAnX1srXBgOfg0Slu7WC8DPY0c.crl (hash: Gk83Xigbpeeg5wTpS2A0FZGh3jS7G+vs3n/jldXbKVw=)
                          2: 7F35DF3CB74E11F0B044DA80C4F9AE02.roa (hash: cXPjCHPaKFx65HIG8toHkGNypseR6/vfwRdThb3BfVw=)
                          3: C484F3C0B74E11F0823EBC10C4F9AE02.roa (hash: h2DwpWR+IjAMG7fxYPQ9pAtPnP4GTYNqqiG9hVcrgDE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C563/11B6336417C111E981080F6CC4F9AE02/BKAnX1srXBgOfg0Slu7WC8DPY0c.crl
                          rsync://rpki.apnic.net/member_repository/A919C563/11B6336417C111E981080F6CC4F9AE02/BKAnX1srXBgOfg0Slu7WC8DPY0c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKAnX1srXBgOfg0Slu7WC8DPY0c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 17:12:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4559 (0x11cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C563, serialNumber=04A0275F5B2B5C180E7E0D1296EED60BC0CF6347
        Validity
            Not Before: May 12 17:12:43 2026 GMT
            Not After : May 19 17:12:43 2026 GMT
        Subject: CN=6a035f8b-f403
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:36:98:7c:3a:6b:f4:74:8a:d6:1c:51:fa:85:
                    3b:a3:35:35:61:f1:e0:28:a4:45:9c:5e:1f:f5:b5:
                    6c:79:67:15:10:8d:84:e3:e9:2d:a5:32:f9:63:6a:
                    1b:df:62:5a:5b:92:a6:fd:78:9f:55:89:7c:a8:f4:
                    da:ec:0d:04:19:c7:70:4e:4c:65:bc:24:d0:0a:81:
                    c1:7a:1c:38:45:45:10:b5:21:c4:68:ad:96:3c:83:
                    cb:b3:61:64:d1:b2:ae:3a:54:02:88:1b:88:54:b0:
                    53:7c:6f:98:c9:b7:12:5a:92:0f:41:6b:0b:49:ef:
                    ff:d8:f1:f0:39:c3:11:ac:c1:2c:33:6b:42:3e:31:
                    ad:72:09:a7:9f:be:c0:e2:88:81:c6:13:8f:9c:72:
                    22:d6:08:d7:e2:56:03:2a:c6:07:25:02:fc:47:c8:
                    6e:7b:d3:fe:12:70:23:44:55:71:9d:c5:b5:1d:fe:
                    51:c1:d9:4e:ed:44:7a:7c:af:72:54:ee:fd:8b:b3:
                    cd:18:f7:54:3f:de:83:d1:68:8b:5f:db:ae:55:94:
                    65:eb:e7:c2:0e:82:34:e9:cb:dd:b6:48:82:c1:9b:
                    13:9a:e4:11:eb:57:1e:88:8c:6e:8f:ac:59:0e:64:
                    66:bd:ff:ae:c0:f1:82:08:2b:67:1c:8f:9f:e8:08:
                    d8:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:C8:50:9A:C5:95:58:3B:67:46:1C:76:96:48:06:DC:31:61:9B:90
            X509v3 Authority Key Identifier:
                keyid:04:A0:27:5F:5B:2B:5C:18:0E:7E:0D:12:96:EE:D6:0B:C0:CF:63:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C563/11B6336417C111E981080F6CC4F9AE02/BKAnX1srXBgOfg0Slu7WC8DPY0c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKAnX1srXBgOfg0Slu7WC8DPY0c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C563/11B6336417C111E981080F6CC4F9AE02/BKAnX1srXBgOfg0Slu7WC8DPY0c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:26:4a:d4:1d:d6:e6:7e:63:55:56:18:03:ad:77:5c:29:6d:
         b3:51:b2:c1:39:69:2f:be:72:9a:e9:80:9c:f1:0c:08:57:27:
         31:5d:6e:e8:f4:52:be:86:3c:a3:af:84:88:68:8a:28:89:eb:
         be:5a:1e:4a:69:a0:16:dd:ea:fa:a7:e4:16:de:56:07:18:06:
         b3:29:03:87:dc:f4:4f:e7:6d:88:5c:20:73:10:0e:30:67:2c:
         87:cf:6b:bc:bf:55:cb:65:a1:80:b5:94:87:ed:90:be:fb:97:
         0a:3b:c3:ff:23:4d:c2:45:29:42:b3:82:a1:bc:7c:45:d8:96:
         b0:d5:81:4b:e7:24:45:87:ce:5a:23:bf:af:45:3b:a2:ed:f0:
         2d:e9:eb:4b:84:3b:ad:b0:57:53:d5:be:91:27:e7:76:34:2e:
         46:ed:54:42:aa:89:13:b8:f2:cb:7b:2f:2b:1d:e2:4d:d2:83:
         6f:b9:61:8b:63:87:45:27:f5:51:99:d0:fb:40:b1:59:89:4c:
         f9:21:f7:f9:4e:32:6c:fc:fa:a5:b7:05:ff:48:e7:bc:a3:3e:
         e7:d8:a8:d7:d0:e6:5f:db:87:a2:dc:17:f8:0c:e8:a2:2e:b3:
         80:26:a7:05:4e:9b:f4:1e:87:25:18:c4:f2:3c:1a:a7:39:8b:
         41:ef:a7:56
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEc8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUM1NjMxMTAvBgNVBAUTKDA0QTAyNzVGNUIyQjVDMTgwRTdFMEQxMjk2RUVENjBC
QzBDRjYzNDcwHhcNMjYwNTEyMTcxMjQzWhcNMjYwNTE5MTcxMjQzWjAYMRYwFAYD
VQQDEw02YTAzNWY4Yi1mNDAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuDaYfDpr9HSK1hxR+oU7ozU1YfHgKKRFnF4f9bVseWcVEI2E4+ktpTL5Y2ob
32JaW5Km/XifVYl8qPTa7A0EGcdwTkxlvCTQCoHBehw4RUUQtSHEaK2WPIPLs2Fk
0bKuOlQCiBuIVLBTfG+YybcSWpIPQWsLSe//2PHwOcMRrMEsM2tCPjGtcgmnn77A
4oiBxhOPnHIi1gjX4lYDKsYHJQL8R8hue9P+EnAjRFVxncW1Hf5RwdlO7UR6fK9y
VO79i7PNGPdUP96D0WiLX9uuVZRl6+fCDoI06cvdtkiCwZsTmuQR61ceiIxuj6xZ
DmRmvf+uwPGCCCtnHI+f6AjYIQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNrIUJrF
lVg7Z0YcdpZIBtwxYZuQMB8GA1UdIwQYMBaAFASgJ19bK1wYDn4NEpbu1gvAz2NH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzU2My8xMUI2MzM2NDE3
QzExMUU5ODEwODBGNkNDNEY5QUUwMi9CS0FuWDFzclhCZ09mZzBTbHU3V0M4RFBZ
MGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0JLQW5YMXNyWEJnT2ZnMFNsdTdXQzhEUFkwYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
QzU2My8xMUI2MzM2NDE3QzExMUU5ODEwODBGNkNDNEY5QUUwMi9CS0FuWDFzclhC
Z09mZzBTbHU3V0M4RFBZMGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAtCZK1B3W5n5jVVYYA613XClts1GywTlpL75ymumAnPEMCFcnMV1u6PRSvoY8
o6+EiGiKKInrvloeSmmgFt3q+qfkFt5WBxgGsykDh9z0T+dtiFwgcxAOMGcsh89r
vL9Vy2WhgLWUh+2QvvuXCjvD/yNNwkUpQrOCobx8RdiWsNWBS+ckRYfOWiO/r0U7
ou3wLenrS4Q7rbBXU9W+kSfndjQuRu1UQqqJE7jyy3svKx3iTdKDb7lhi2OHRSf1
UZnQ+0CxWYlM+SH3+U4ybPz6pbcF/0jnvKM+59io19DmX9uHotwX+Azooi6zgCan
BU6b9B6HJRjE8jwapzmLQe+nVg==
-----END CERTIFICATE-----
Generated at Wed May 13 04:08:09 2026 by rpki-client