Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8CD2/043C6AF4D8E511EB80685D5FC4F9AE02/bjPVE5klw9tNCFk3zmms03vqeU0.mft
File:                     bjPVE5klw9tNCFk3zmms03vqeU0.mft (raw, json)
Hash identifier:          RtWY0EUpRChGrKYrMBmuQqUadvIKEY8KjJ6/RHe4uJE=
Subject key identifier:   0B:C2:D7:2D:DD:4C:D9:B0:3E:6C:8F:3C:A4:02:5D:75:E0:29:37:90
Authority key identifier: 6E:33:D5:13:99:25:C3:DB:4D:08:59:37:CE:69:AC:D3:7B:EA:79:4D
Certificate issuer:       /CN=A91A8CD2/serialNumber=6E33D5139925C3DB4D085937CE69ACD37BEA794D
Certificate serial:       0665
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bjPVE5klw9tNCFk3zmms03vqeU0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A8CD2/043C6AF4D8E511EB80685D5FC4F9AE02/bjPVE5klw9tNCFk3zmms03vqeU0.mft
Manifest number:          065E
Signing time:             Wed 22 Jul 2026 23:20:06 +0000
Manifest this update:     Wed 22 Jul 2026 23:20:06 +0000
Manifest next update:     Wed 29 Jul 2026 23:20:06 +0000
Files and hashes:         1: bjPVE5klw9tNCFk3zmms03vqeU0.crl (hash: nwCAddWppFpBrPdid0mh41hNSssWdjaI94eR/tDlPRI=)
                          2: 5D10DEF0D8E811EB8ACD3C66C4F9AE02.roa (hash: Q/eW/jjSE1MG2v5NlEStDHyoTqbWbFolM/mjc8hiojU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A8CD2/043C6AF4D8E511EB80685D5FC4F9AE02/bjPVE5klw9tNCFk3zmms03vqeU0.crl
                          rsync://rpki.apnic.net/member_repository/A91A8CD2/043C6AF4D8E511EB80685D5FC4F9AE02/bjPVE5klw9tNCFk3zmms03vqeU0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bjPVE5klw9tNCFk3zmms03vqeU0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 23:20:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1637 (0x665)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A8CD2, serialNumber=6E33D5139925C3DB4D085937CE69ACD37BEA794D
        Validity
            Not Before: Jul 22 23:20:06 2026 GMT
            Not After : Jul 29 23:20:06 2026 GMT
        Subject: CN=6a615026-30fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:78:fc:d3:73:5b:3e:8e:09:0f:32:79:61:11:
                    99:04:18:ae:61:14:5e:2a:69:e1:77:2f:8a:eb:7e:
                    e1:7c:9b:bb:74:65:93:13:86:ae:3e:ba:cb:4c:79:
                    63:d6:13:ce:fa:f7:13:44:38:ae:45:de:5d:29:41:
                    11:45:2e:14:77:b1:d7:f9:ce:28:7f:0e:00:86:da:
                    c1:8b:dc:6b:0a:bf:bd:a9:ec:af:6e:41:bc:a5:3b:
                    93:c6:f6:da:92:21:ab:4c:14:e2:5b:83:7d:34:90:
                    59:c8:8f:aa:24:3a:e1:d4:bf:20:9d:1f:3b:e6:b7:
                    06:42:1d:fa:0e:a6:3e:e7:f2:2f:be:63:b4:ea:41:
                    5f:5e:90:ab:4c:c3:f2:bb:67:3b:9c:a8:bf:6a:91:
                    c9:69:c5:8e:ef:cb:1b:a1:96:83:e4:8f:4c:4d:7f:
                    41:fd:21:99:94:5d:08:65:55:ad:22:25:55:18:48:
                    63:8e:75:59:49:69:88:c2:86:67:b7:c0:1f:0d:fc:
                    35:0d:c9:5d:46:b1:92:f4:0c:1c:49:65:fe:43:f1:
                    64:f4:48:b9:f6:96:05:ad:ed:a0:62:53:8a:ac:5b:
                    1e:a8:5c:9d:4c:1a:66:17:07:e0:78:64:2a:4f:73:
                    2c:35:3d:07:07:c6:56:6b:8d:ed:1b:e6:8a:dc:07:
                    b8:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:C2:D7:2D:DD:4C:D9:B0:3E:6C:8F:3C:A4:02:5D:75:E0:29:37:90
            X509v3 Authority Key Identifier:
                keyid:6E:33:D5:13:99:25:C3:DB:4D:08:59:37:CE:69:AC:D3:7B:EA:79:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A8CD2/043C6AF4D8E511EB80685D5FC4F9AE02/bjPVE5klw9tNCFk3zmms03vqeU0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bjPVE5klw9tNCFk3zmms03vqeU0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8CD2/043C6AF4D8E511EB80685D5FC4F9AE02/bjPVE5klw9tNCFk3zmms03vqeU0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:77:03:19:ed:d3:e7:c4:8b:c8:eb:4c:1a:de:5d:a1:9f:cf:
         9c:7b:65:ea:e2:ce:a9:8b:e6:68:09:ae:1f:65:ca:72:d3:92:
         61:b9:85:60:4c:ef:aa:7a:65:be:c6:12:7f:b8:ff:83:cf:ff:
         be:44:ee:fa:8e:b4:b5:70:31:57:77:07:26:75:4c:44:4d:f6:
         3e:41:3f:59:fd:ab:16:0e:81:3b:bf:d4:73:15:d5:e3:91:39:
         c7:0d:f1:c5:6b:54:67:7e:d1:3b:c0:62:4e:69:1c:e5:70:a8:
         f3:3a:fb:57:01:3c:8f:e6:ea:ce:7c:3e:65:41:8b:1b:9d:2a:
         a5:34:2e:d4:6e:05:cb:50:a8:ff:7e:cc:e1:ef:85:1a:67:d3:
         56:dd:f5:52:e9:17:08:23:a2:9e:d6:45:2c:70:fa:f8:76:ef:
         bb:43:e4:5c:45:32:99:6f:4c:ea:d4:f7:35:e0:02:72:bb:a6:
         28:e3:6b:50:11:8a:e2:ff:9d:ea:70:ad:ec:96:a6:e7:0b:e8:
         a8:d8:90:f1:f4:dc:f4:62:a0:ee:0b:c3:89:9d:93:45:3e:2d:
         2b:14:5a:19:dd:ae:7c:41:8c:78:09:df:44:c9:79:0a:ff:d0:
         b0:11:73:39:e8:c3:db:8b:e2:19:ab:6f:30:21:d5:89:37:d3:
         b8:eb:a8:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:53:18 2026 by rpki-client