Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF74B/61A3384A782C11EBAC04F672C4F9AE02/BZ5vA652dqnQ8J1fbL25CGGFWlc.mft
File:                     BZ5vA652dqnQ8J1fbL25CGGFWlc.mft (raw, json)
Hash identifier:          xAp1Lo7AnBe1PuRXNaH2b5TKzKSdEtD9DZKIg715nQM=
Subject key identifier:   8B:2C:B2:B7:1E:47:93:B9:FF:5B:53:0F:AC:BF:6E:F0:E2:2A:71:A0
Authority key identifier: 05:9E:6F:03:AE:76:76:A9:D0:F0:9D:5F:6C:BD:B9:08:61:85:5A:57
Certificate issuer:       /CN=A91FF74B/serialNumber=059E6F03AE7676A9D0F09D5F6CBDB90861855A57
Certificate serial:       079C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BZ5vA652dqnQ8J1fbL25CGGFWlc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FF74B/61A3384A782C11EBAC04F672C4F9AE02/BZ5vA652dqnQ8J1fbL25CGGFWlc.mft
Manifest number:          0774
Signing time:             Tue 12 May 2026 21:23:14 +0000
Manifest this update:     Tue 12 May 2026 21:23:13 +0000
Manifest next update:     Tue 19 May 2026 21:23:13 +0000
Files and hashes:         1: BZ5vA652dqnQ8J1fbL25CGGFWlc.crl (hash: 8C33FGu36erpeio1tyoHLwlcsS6uIuDZIocXzT7w9FY=)
                          2: 7E0AB01C782C11EBB0B71971C4F9AE02.roa (hash: QZpGdBeLR/9QiZlZAdnU1Y45E5G+uOVVhczPqvB6SAw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FF74B/61A3384A782C11EBAC04F672C4F9AE02/BZ5vA652dqnQ8J1fbL25CGGFWlc.crl
                          rsync://rpki.apnic.net/member_repository/A91FF74B/61A3384A782C11EBAC04F672C4F9AE02/BZ5vA652dqnQ8J1fbL25CGGFWlc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BZ5vA652dqnQ8J1fbL25CGGFWlc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 14:50:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1948 (0x79c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FF74B, serialNumber=059E6F03AE7676A9D0F09D5F6CBDB90861855A57
        Validity
            Not Before: May 12 21:23:13 2026 GMT
            Not After : May 19 21:23:13 2026 GMT
        Subject: CN=6a039a41-b89c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f2:fc:5d:22:a4:41:50:05:2c:62:d5:7c:63:
                    a4:db:f3:08:40:61:5c:80:6d:74:80:50:dc:73:59:
                    55:29:16:74:0d:e4:27:b1:c2:37:db:2a:89:0d:6c:
                    02:ec:8d:68:a6:6a:48:31:ae:69:a3:35:42:6a:70:
                    bf:e7:6d:97:89:da:6d:e1:f5:48:3b:10:1e:f0:48:
                    bb:a3:96:bc:e1:ac:0d:fd:be:ca:8c:56:12:5a:ae:
                    11:53:b6:27:21:83:08:52:c0:0e:27:7c:e7:c7:c6:
                    09:c9:c8:c3:7e:90:6d:04:d8:83:47:fa:07:b4:75:
                    86:74:a8:6d:b4:7f:14:db:a9:45:a7:46:71:01:c3:
                    9c:1e:44:7a:46:5a:6f:2a:87:51:fc:b4:16:b1:e6:
                    3b:7f:50:89:00:b2:fb:72:00:41:18:ec:4d:bc:ec:
                    e7:be:6c:57:9a:7d:6c:8f:ff:df:4a:22:9f:2e:28:
                    48:2d:a0:a4:ad:55:f1:fb:3a:58:48:2c:de:b8:de:
                    07:81:83:c4:9d:cf:ff:f8:6a:38:12:79:55:69:10:
                    b1:cf:41:fe:e1:4a:ba:59:a2:05:d5:83:bd:8a:7b:
                    e7:66:80:6a:3a:08:05:f1:d6:ca:1a:ce:bd:e0:b7:
                    f3:a6:05:3a:e1:ea:38:88:7a:b5:a8:ab:2a:2c:9a:
                    76:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:2C:B2:B7:1E:47:93:B9:FF:5B:53:0F:AC:BF:6E:F0:E2:2A:71:A0
            X509v3 Authority Key Identifier:
                keyid:05:9E:6F:03:AE:76:76:A9:D0:F0:9D:5F:6C:BD:B9:08:61:85:5A:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FF74B/61A3384A782C11EBAC04F672C4F9AE02/BZ5vA652dqnQ8J1fbL25CGGFWlc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BZ5vA652dqnQ8J1fbL25CGGFWlc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF74B/61A3384A782C11EBAC04F672C4F9AE02/BZ5vA652dqnQ8J1fbL25CGGFWlc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:e6:83:8d:bb:02:c8:1c:4a:4c:f6:10:05:19:1c:23:4f:7d:
         26:c7:ce:13:62:77:6c:cf:b9:92:02:88:10:7f:56:c7:3e:a4:
         46:97:75:0f:d0:72:e8:30:be:de:c1:e4:77:a6:9f:41:02:51:
         25:d7:68:7c:8c:b5:88:b0:cf:fe:58:68:44:bc:0d:2b:90:e3:
         6e:bf:48:79:37:32:25:c5:fb:d9:87:d8:94:ab:6a:ea:9c:d9:
         8e:e5:fa:c1:c6:39:28:5b:46:d0:65:ac:67:c2:eb:b5:b4:3f:
         6c:fa:29:64:19:77:3c:a5:49:9d:e9:f6:59:99:8f:33:ae:8f:
         1e:87:32:6f:0c:53:62:fb:83:e8:40:a8:df:83:45:4e:5c:ce:
         a0:41:f0:0c:bf:4a:92:fb:ca:3e:dc:42:29:48:67:17:20:db:
         df:00:ed:2d:f5:f7:18:30:76:de:93:2a:ce:69:97:7a:91:db:
         6b:24:4c:3d:4d:76:90:1b:bc:dd:7a:0d:db:5a:22:77:35:e6:
         74:6a:59:0d:ad:47:dd:60:96:65:96:78:c3:dd:2b:00:0d:e6:
         a5:3d:53:17:9e:0b:b1:9a:b7:71:81:aa:a3:a9:a6:7a:a6:43:
         d3:4c:d4:e0:20:93:cc:95:d9:2b:6d:00:bd:73:0b:e2:52:6a:
         8c:61:b7:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:11:35 2026 by rpki-client