Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2EFF/A314847C484911F0BF070370C4F9AE02/BstI9X1UOpeC2KfJbaTh3tvDwws.mft
File:                     BstI9X1UOpeC2KfJbaTh3tvDwws.mft (raw, json)
Hash identifier:          it2lP+hm9LAw4Yp3060gPxGrbAoDTn+99ZuavBqTom0=
Subject key identifier:   34:0E:4F:64:C3:C7:7D:E6:45:94:BB:79:64:19:D5:3F:B6:07:B7:31
Authority key identifier: 06:CB:48:F5:7D:54:3A:97:82:D8:A7:C9:6D:A4:E1:DE:DB:C3:C3:0B
Certificate issuer:       /CN=A91E2EFF/serialNumber=06CB48F57D543A9782D8A7C96DA4E1DEDBC3C30B
Certificate serial:       DB
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BstI9X1UOpeC2KfJbaTh3tvDwws.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E2EFF/A314847C484911F0BF070370C4F9AE02/BstI9X1UOpeC2KfJbaTh3tvDwws.mft
Manifest number:          D5
Signing time:             Thu 23 Jul 2026 08:30:31 +0000
Manifest this update:     Thu 23 Jul 2026 08:30:30 +0000
Manifest next update:     Thu 30 Jul 2026 08:30:30 +0000
Files and hashes:         1: BstI9X1UOpeC2KfJbaTh3tvDwws.crl (hash: oGJ7Euneyi+xAhQw06WEbpBzKubv78bxQQgLcXgKEeU=)
                          2: 6BB1AB46753D11F192ADDCCA7EA30FBC.roa (hash: 54hEOegvqKHFu2sFkesEF7BLwvXcxGU9hQJpTA8Y7Js=)
                          3: 7B744F9C754311F1B2D369B17FA30FBC.roa (hash: 6h+dViv9HHF043rn54yjzvjKc8Qv6o5bk2lEUKwA0u0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E2EFF/A314847C484911F0BF070370C4F9AE02/BstI9X1UOpeC2KfJbaTh3tvDwws.crl
                          rsync://rpki.apnic.net/member_repository/A91E2EFF/A314847C484911F0BF070370C4F9AE02/BstI9X1UOpeC2KfJbaTh3tvDwws.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BstI9X1UOpeC2KfJbaTh3tvDwws.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 08:30:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 219 (0xdb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E2EFF, serialNumber=06CB48F57D543A9782D8A7C96DA4E1DEDBC3C30B
        Validity
            Not Before: Jul 23 08:30:30 2026 GMT
            Not After : Jul 30 08:30:30 2026 GMT
        Subject: CN=6a61d127-e258
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:81:ab:88:e0:b4:64:5d:ec:26:96:8e:b0:90:
                    fd:82:a0:e6:64:b8:ec:24:db:7d:5e:04:c8:7c:16:
                    4b:9f:db:f3:5a:f6:02:57:89:2f:cc:af:19:48:48:
                    cc:f3:3e:eb:85:52:6d:57:40:55:e4:63:88:18:96:
                    fb:fb:69:b9:ef:00:26:e9:51:62:a3:20:4d:3c:20:
                    4a:fe:a1:9d:c0:01:2d:2a:bf:1e:9f:45:f3:4f:af:
                    8a:24:a1:6e:20:9d:6d:44:65:97:66:44:b9:5f:d3:
                    2d:b6:f5:f1:a2:ee:33:64:88:8a:fe:18:d7:3a:01:
                    ed:c2:ce:88:9a:67:6c:c1:ad:cb:e6:0d:b0:bd:22:
                    1a:74:23:b4:19:65:df:46:9c:04:79:87:9d:15:95:
                    5f:68:06:ae:05:40:5c:6e:eb:34:ef:ab:40:91:9a:
                    59:17:7c:9d:40:5d:16:c7:43:91:82:f0:27:da:b0:
                    04:ec:e6:a7:07:b1:0b:a2:87:4e:bb:c4:0d:42:5f:
                    1b:98:47:fa:d3:19:81:1a:4f:73:59:78:38:83:ee:
                    d6:f1:4a:df:d6:63:51:4d:f3:e1:8c:06:b7:14:04:
                    2c:c5:18:2a:3c:a6:37:b3:54:bc:84:af:07:33:42:
                    47:d1:d0:cf:e0:92:52:23:0f:e3:fd:bd:3c:7f:e4:
                    d7:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:0E:4F:64:C3:C7:7D:E6:45:94:BB:79:64:19:D5:3F:B6:07:B7:31
            X509v3 Authority Key Identifier:
                keyid:06:CB:48:F5:7D:54:3A:97:82:D8:A7:C9:6D:A4:E1:DE:DB:C3:C3:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E2EFF/A314847C484911F0BF070370C4F9AE02/BstI9X1UOpeC2KfJbaTh3tvDwws.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BstI9X1UOpeC2KfJbaTh3tvDwws.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2EFF/A314847C484911F0BF070370C4F9AE02/BstI9X1UOpeC2KfJbaTh3tvDwws.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:56:b6:d7:2a:4e:84:f4:99:52:a8:a2:f0:a5:c4:ce:b1:27:
         c2:52:bd:56:dc:1f:f8:96:4d:a2:e6:5d:ed:3a:78:ea:63:5d:
         24:b7:29:ae:ea:3c:82:08:0d:6c:17:91:e3:34:b5:e7:5e:0e:
         55:91:55:99:35:d4:99:08:c4:25:eb:1a:6f:73:5c:f2:e5:4a:
         6e:08:2d:22:7a:1b:f4:93:22:00:bf:49:c0:a7:8c:55:40:b4:
         59:4f:3d:77:3c:ba:9b:b6:c6:0c:a3:cc:20:38:5c:20:35:0d:
         79:9d:b4:ed:a2:00:81:48:46:a7:be:8f:19:16:ea:b9:17:87:
         a4:4d:16:02:a5:61:18:bf:b3:4b:bb:11:cf:df:7a:51:9c:3f:
         2d:8e:fa:7f:9b:08:6d:a8:e6:0c:d9:05:22:40:fc:41:37:12:
         8e:02:bc:90:42:01:19:64:31:64:01:d7:1e:17:59:0f:09:08:
         85:88:42:62:f6:fe:60:14:98:ac:44:c7:02:7b:7e:9a:05:80:
         ab:41:db:18:a2:da:da:82:d6:41:0e:4d:37:36:38:13:71:d7:
         91:75:9b:bc:fd:66:5a:a4:ce:69:a6:b8:55:1b:40:be:95:51:
         74:64:bc:79:3b:c7:33:63:9f:19:b2:33:25:0b:23:71:04:48:
         88:82:d3:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:51:20 2026 by rpki-client