Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.mft
File:                     BQcL-a2TBEn7O2m4aRzyDAEnebk.mft (raw, json)
Hash identifier:          aVJ/r3COJA9g65WrmNglwQp/y9upTHU20ESRvPOmIhY=
Subject key identifier:   4B:E8:77:E9:97:09:E1:00:73:A3:E4:B7:A6:F9:15:B1:8B:5C:BE:0F
Authority key identifier: 05:07:0B:F9:AD:93:04:49:FB:3B:69:B8:69:1C:F2:0C:01:27:79:B9
Certificate issuer:       /CN=A91DEC12/serialNumber=05070BF9AD930449FB3B69B8691CF20C012779B9
Certificate serial:       0D17
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQcL-a2TBEn7O2m4aRzyDAEnebk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.mft
Manifest number:          0CF6
Signing time:             Wed 22 Jul 2026 18:40:04 +0000
Manifest this update:     Wed 22 Jul 2026 18:40:03 +0000
Manifest next update:     Wed 29 Jul 2026 18:40:03 +0000
Files and hashes:         1: BQcL-a2TBEn7O2m4aRzyDAEnebk.crl (hash: rlk2qW/laffEUYyvZ8P4WzUgEDBdRgyB/Ds3I28wieo=)
                          2: A766D10CF86B11EF86A73884C4F9AE02.roa (hash: XzUEcWrFObnHhypJzqr40j9vQlCZVakmt78JschNZdU=)
                          3: A87393C8F86B11EF86A73884C4F9AE02.roa (hash: nj+oib/V31McsWuRSdIo8ebXzbzd0Aai1WTDOvqOntk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.crl
                          rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQcL-a2TBEn7O2m4aRzyDAEnebk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 18:40:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3351 (0xd17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DEC12, serialNumber=05070BF9AD930449FB3B69B8691CF20C012779B9
        Validity
            Not Before: Jul 22 18:40:03 2026 GMT
            Not After : Jul 29 18:40:03 2026 GMT
        Subject: CN=6a610e84-bf7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:31:8d:72:84:8e:e2:f9:d3:ca:01:17:c3:77:
                    77:3d:bf:6f:73:c3:8d:eb:58:89:d5:db:ca:f9:87:
                    7a:d1:53:d1:3b:26:f3:87:3f:f9:f4:6c:e5:ef:e6:
                    28:0e:75:4d:dc:4f:9f:22:1c:3a:f2:9f:e7:4a:26:
                    00:11:15:79:6b:40:18:d4:19:76:de:be:52:15:71:
                    da:78:68:cf:cc:69:c9:36:09:8b:ab:51:c2:e2:d0:
                    8a:e2:e5:ac:6e:67:87:18:0a:65:da:f9:5d:c5:57:
                    15:ac:65:63:b5:8f:87:7e:e4:af:f6:62:5d:ff:81:
                    d7:ed:26:61:b9:a0:8e:0c:e3:cc:35:7e:13:e4:d8:
                    8c:df:b2:22:11:0e:3f:f6:d2:b6:28:14:57:f9:40:
                    3d:49:52:78:b8:a2:23:7f:e8:5c:0b:41:96:93:4d:
                    fd:75:a9:57:34:bd:c0:c5:b7:aa:82:bc:d7:48:43:
                    48:3d:8b:0a:f3:c1:f4:73:a3:b2:ee:df:35:7b:23:
                    f2:c6:1f:71:de:2e:11:7d:1c:96:09:ae:b2:69:e7:
                    ee:38:28:8b:f1:1f:77:a2:cb:ed:5f:26:a5:4a:e9:
                    54:16:60:e2:97:02:f6:5e:8c:35:57:78:90:a8:b7:
                    6f:68:f9:1d:2c:6a:15:83:09:f3:68:c6:70:a6:7f:
                    53:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:E8:77:E9:97:09:E1:00:73:A3:E4:B7:A6:F9:15:B1:8B:5C:BE:0F
            X509v3 Authority Key Identifier:
                keyid:05:07:0B:F9:AD:93:04:49:FB:3B:69:B8:69:1C:F2:0C:01:27:79:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQcL-a2TBEn7O2m4aRzyDAEnebk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:09:65:2a:e2:74:77:a3:98:1b:aa:fb:ba:2b:9f:80:14:89:
         d7:a5:c3:07:ee:98:bd:4b:93:a4:f3:ae:69:c9:3b:f3:b7:1a:
         75:bd:d6:64:1f:63:62:a5:fb:7f:93:21:ac:8f:6a:03:9f:e0:
         2c:85:44:7c:0b:dd:61:52:7d:29:58:63:42:4b:bc:d3:eb:19:
         b6:16:d8:a1:4c:2c:03:88:69:de:1e:d0:5c:bf:fd:9d:8d:0f:
         c5:ca:8a:b1:61:6a:50:9a:13:c3:b8:80:39:6b:88:0f:9e:93:
         99:3b:bb:63:fa:51:21:25:07:0f:df:e5:59:8c:c0:58:a8:09:
         dd:71:0f:af:ba:06:6f:fe:1f:8e:1a:72:e8:af:8c:b3:3b:c4:
         12:55:06:ab:39:77:f1:21:51:32:7e:c7:d7:e4:e9:77:3a:e8:
         04:21:cd:a3:e2:80:d5:42:fb:ea:72:50:23:3b:76:aa:46:14:
         76:59:cd:d3:ad:67:f8:80:95:30:95:db:f3:23:1f:6f:86:63:
         c5:4f:fd:30:91:c4:09:76:9a:ba:e7:cf:9d:e1:ec:14:10:60:
         d9:c3:bf:15:e7:cb:e2:89:63:de:b1:69:6f:ab:a3:0d:5d:ed:
         d4:35:a9:d4:00:06:4d:38:f1:31:dc:bc:7e:ca:b7:b3:d1:28:
         55:6c:23:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:31:57 2026 by rpki-client