Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2EFF/A314847C484911F0BF070370C4F9AE02/BstI9X1UOpeC2KfJbaTh3tvDwws.mft
File:                     BstI9X1UOpeC2KfJbaTh3tvDwws.mft (raw, json)
Hash identifier:          xH6IFXEizRMOxd7tk3gU/Q4MeulnwhY54MZAy2eA1UU=
Subject key identifier:   DC:BF:3B:37:F6:FF:83:E8:75:A1:05:3A:C6:50:69:09:F9:CE:3E:71
Authority key identifier: 06:CB:48:F5:7D:54:3A:97:82:D8:A7:C9:6D:A4:E1:DE:DB:C3:C3:0B
Certificate issuer:       /CN=A91E2EFF/serialNumber=06CB48F57D543A9782D8A7C96DA4E1DEDBC3C30B
Certificate serial:       AD
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BstI9X1UOpeC2KfJbaTh3tvDwws.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E2EFF/A314847C484911F0BF070370C4F9AE02/BstI9X1UOpeC2KfJbaTh3tvDwws.mft
Manifest number:          AB
Signing time:             Mon 11 May 2026 07:19:13 +0000
Manifest this update:     Mon 11 May 2026 07:19:13 +0000
Manifest next update:     Mon 18 May 2026 07:19:13 +0000
Files and hashes:         1: BstI9X1UOpeC2KfJbaTh3tvDwws.crl (hash: vm218xdakWwH/JcytJ8gTGTPYYH00vrZJe9S08vUibM=)
                          2: 3698C9BA484A11F0B96B9D10C4F9AE02.roa (hash: 0vz5hH8Qi0mQ8l4HL29D2PA4e6vODvqozBm3+6JiuQo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E2EFF/A314847C484911F0BF070370C4F9AE02/BstI9X1UOpeC2KfJbaTh3tvDwws.crl
                          rsync://rpki.apnic.net/member_repository/A91E2EFF/A314847C484911F0BF070370C4F9AE02/BstI9X1UOpeC2KfJbaTh3tvDwws.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BstI9X1UOpeC2KfJbaTh3tvDwws.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 07:19:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 173 (0xad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E2EFF, serialNumber=06CB48F57D543A9782D8A7C96DA4E1DEDBC3C30B
        Validity
            Not Before: May 11 07:19:13 2026 GMT
            Not After : May 18 07:19:13 2026 GMT
        Subject: CN=6a0182f1-2185
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c4:3b:60:67:f1:01:fa:a9:5c:d8:27:c7:3f:
                    42:c8:f8:db:66:06:b1:2e:57:d2:0d:19:3f:57:c8:
                    a9:12:68:e1:b3:25:7b:f0:7b:9d:cd:68:0a:73:3a:
                    40:83:c0:66:f1:4e:92:dd:3a:2b:78:ca:00:d8:0f:
                    ee:7f:4c:68:8e:ab:08:0b:85:5e:5a:ef:10:c6:d7:
                    5d:5c:bd:7a:93:ea:99:d5:14:01:86:0a:89:60:92:
                    b5:21:7d:1a:33:5a:fb:9c:f7:67:8e:47:92:6b:b6:
                    39:17:ae:27:f2:04:36:80:af:ef:74:ad:f2:90:ae:
                    e0:9e:3b:03:6f:33:09:98:0e:2b:5e:eb:8d:ee:98:
                    b2:b2:7a:c8:14:dc:a1:8f:3b:40:12:ae:4e:6b:77:
                    50:43:7b:84:b3:83:91:ab:79:e8:85:4f:47:ed:62:
                    ff:72:f0:53:29:68:2f:20:83:47:f1:f4:71:ea:1f:
                    c3:22:6d:03:cc:54:ae:10:65:43:47:5c:ed:c9:c7:
                    a9:27:21:3e:fa:b5:23:1f:d3:6f:6d:74:70:18:3f:
                    cf:d8:b3:be:8c:fb:a8:a0:c1:2a:d8:7e:e6:b7:80:
                    fb:56:cf:16:8b:74:db:bb:f9:75:47:bc:3d:91:24:
                    a5:4c:3e:86:37:79:ab:bf:89:f5:3b:93:43:b5:6a:
                    20:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:BF:3B:37:F6:FF:83:E8:75:A1:05:3A:C6:50:69:09:F9:CE:3E:71
            X509v3 Authority Key Identifier:
                keyid:06:CB:48:F5:7D:54:3A:97:82:D8:A7:C9:6D:A4:E1:DE:DB:C3:C3:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E2EFF/A314847C484911F0BF070370C4F9AE02/BstI9X1UOpeC2KfJbaTh3tvDwws.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BstI9X1UOpeC2KfJbaTh3tvDwws.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2EFF/A314847C484911F0BF070370C4F9AE02/BstI9X1UOpeC2KfJbaTh3tvDwws.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:58:ee:19:5e:fd:c2:e9:31:83:7f:34:43:ab:e1:40:66:cd:
         17:81:23:f4:61:e1:5e:16:5a:c2:c6:75:a0:91:d7:09:49:19:
         4c:99:c7:cb:dc:51:6a:bc:76:fd:4c:ee:3e:6d:0a:b6:95:7d:
         97:21:58:93:42:26:3f:bb:59:2f:f0:9e:1a:d5:54:31:fa:61:
         76:75:72:0d:36:a1:68:ec:8d:37:7e:fb:c5:87:4a:37:81:46:
         7a:1a:f7:c6:13:d1:5b:29:3b:75:77:a5:76:50:24:60:06:0e:
         32:cf:92:07:d2:46:f9:ce:2b:67:7f:26:ab:f6:ee:0c:b3:43:
         72:d3:4b:4d:24:21:39:f8:bd:f9:05:cb:80:ff:da:93:12:72:
         a7:40:35:7f:a9:d0:ed:95:3a:17:b5:73:12:ee:73:f3:fa:1b:
         40:45:4e:6b:86:1c:32:9d:e6:71:28:bb:56:3e:0d:b1:3d:89:
         d8:cc:30:98:54:38:44:2b:28:1c:00:84:2d:85:71:6c:a6:f0:
         31:1d:82:aa:8d:fb:7b:2a:b4:61:37:17:f4:dc:5b:12:c3:a2:
         36:00:df:e6:62:a8:10:6d:2e:fd:a5:75:c1:0b:88:d4:a4:97:
         c9:05:e9:d6:e2:ae:f4:0a:83:e0:80:76:bc:8f:bf:11:e6:29:
         9d:eb:17:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:49:33 2026 by rpki-client