Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.mft
File:                     BcMvXW_ZVny3AAWx10pBqFtb5xI.mft (raw, json)
Hash identifier:          kDaT6WkZqdonjuva3CSB6jWGNRK+lU/H3SN3vIpY1AI=
Subject key identifier:   37:B2:AE:77:7A:67:33:16:3D:BD:FD:46:C0:77:2D:CB:8B:06:09:47
Authority key identifier: 05:C3:2F:5D:6F:D9:56:7C:B7:00:05:B1:D7:4A:41:A8:5B:5B:E7:12
Certificate issuer:       /CN=A91BB5D3/serialNumber=05C32F5D6FD9567CB70005B1D74A41A85B5BE712
Certificate serial:       0707
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BcMvXW_ZVny3AAWx10pBqFtb5xI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.mft
Manifest number:          06F7
Signing time:             Wed 22 Jul 2026 22:53:50 +0000
Manifest this update:     Wed 22 Jul 2026 22:53:50 +0000
Manifest next update:     Wed 29 Jul 2026 22:53:50 +0000
Files and hashes:         1: BcMvXW_ZVny3AAWx10pBqFtb5xI.crl (hash: cXDtVba3QjuLDnKNeoCoMeTIMtSSi/DRpARCgYsksWs=)
                          2: F164038CBBE211ED8685DC61C4F9AE02.roa (hash: tT9i1DbRbJsGaFhFIKWc3hF5z1oqGKKoTGSshBbumJ8=)
                          3: 27B648124C9C11ECACB77370C4F9AE02.roa (hash: K7MZ3T0dMRToMyp98c/Q67E9wIW0vsuQeli/CjrwVoo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.crl
                          rsync://rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BcMvXW_ZVny3AAWx10pBqFtb5xI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 22:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1799 (0x707)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB5D3, serialNumber=05C32F5D6FD9567CB70005B1D74A41A85B5BE712
        Validity
            Not Before: Jul 22 22:53:50 2026 GMT
            Not After : Jul 29 22:53:50 2026 GMT
        Subject: CN=6a6149fe-5e0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ea:ac:78:e0:27:b1:9a:3d:a0:98:0d:37:d6:
                    0e:34:bc:9a:2e:9e:85:a8:e9:52:67:5f:50:53:d7:
                    9d:ab:e5:ba:60:02:aa:9b:5b:ff:48:b3:3a:86:17:
                    da:f7:b3:e6:f2:d1:a5:b0:dd:1c:86:72:ff:73:e9:
                    30:ef:44:aa:c4:1f:11:67:12:b9:d8:e9:75:a0:db:
                    48:fa:4d:2a:b0:57:b1:8f:8e:37:6a:74:90:09:42:
                    39:b3:39:fc:93:66:45:cb:c3:1f:5c:af:6a:09:78:
                    ed:3b:d1:71:c4:35:95:91:7a:49:8c:d2:01:09:61:
                    01:68:60:5f:de:05:e6:84:c9:cf:d6:49:a0:e4:49:
                    36:cd:45:85:19:65:30:61:38:32:81:45:cf:86:00:
                    5b:f0:a8:9a:a0:d5:75:2d:2b:7e:28:86:27:b5:a5:
                    c3:81:cd:b8:1f:51:be:d7:df:b1:0d:6a:4f:7d:3b:
                    f9:e0:11:d9:6e:55:75:55:d7:3c:d8:9f:f0:aa:5b:
                    97:7e:60:c6:b4:40:62:ea:92:5b:5b:bc:96:0f:76:
                    69:ed:65:44:cc:0a:e4:dd:a3:69:d4:5d:73:2d:e9:
                    be:24:c4:00:8b:9e:ed:f0:92:9e:80:37:3f:2b:42:
                    17:e3:db:b7:b7:82:75:25:39:7b:6b:8c:42:1c:b6:
                    c1:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:B2:AE:77:7A:67:33:16:3D:BD:FD:46:C0:77:2D:CB:8B:06:09:47
            X509v3 Authority Key Identifier:
                keyid:05:C3:2F:5D:6F:D9:56:7C:B7:00:05:B1:D7:4A:41:A8:5B:5B:E7:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BcMvXW_ZVny3AAWx10pBqFtb5xI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:17:41:58:16:ac:fe:80:48:5d:ca:8c:f7:b1:5f:aa:a5:16:
         d0:5d:93:c6:15:e0:09:c6:2f:d0:25:2f:87:c1:91:5d:b1:ec:
         7e:3a:02:93:91:af:4d:e5:30:84:30:af:a6:0d:98:c9:70:2a:
         26:2e:c6:bf:57:9a:10:48:da:43:eb:5b:93:ea:13:9f:57:1e:
         77:aa:68:da:5e:d2:aa:3c:fb:f9:72:26:62:a1:ba:db:4e:be:
         07:ac:58:c9:a5:81:b0:5b:17:cf:d9:51:7f:bd:10:a5:fa:1d:
         d8:87:92:98:1c:0b:cf:00:d9:69:67:cd:e9:41:17:f0:4e:f6:
         11:43:12:a5:fe:9e:de:f8:78:5e:32:22:39:2a:91:ac:08:6a:
         69:d5:8c:39:25:9b:f9:b0:6b:3e:06:9f:40:f9:d4:df:b2:71:
         9c:a4:82:44:90:16:48:9f:e1:d1:cf:48:e8:e6:84:44:df:a4:
         69:f0:14:67:69:95:18:b2:f6:bb:0b:e4:93:9a:9e:49:22:d7:
         60:11:26:50:1e:16:de:cc:47:33:91:67:76:44:50:a7:40:8b:
         53:49:78:84:f3:a8:2c:62:7e:68:b3:2f:15:57:5c:a2:69:ef:
         9e:11:f6:90:ec:57:bd:ae:ca:f8:19:ec:2e:46:c1:f9:83:3b:
         f2:0a:b1:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:58:29 2026 by rpki-client