Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91166D1/ABDA5142E71511ECB82CB06EC4F9AE02/bgopAGEwM5uDbSj3ABgC9xpaTkI.mft
File:                     bgopAGEwM5uDbSj3ABgC9xpaTkI.mft (raw, json)
Hash identifier:          oqmKwhsJzL5JlVm/JXW5odwzbivlKbxHEl6jOSvghrI=
Subject key identifier:   E1:4D:D0:94:E6:7C:78:B8:97:FE:3B:58:64:47:64:E7:5D:C4:22:B6
Authority key identifier: 6E:0A:29:00:61:30:33:9B:83:6D:28:F7:00:18:02:F7:1A:5A:4E:42
Certificate issuer:       /CN=A91166D1/serialNumber=6E0A29006130339B836D28F7001802F71A5A4E42
Certificate serial:       03BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bgopAGEwM5uDbSj3ABgC9xpaTkI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91166D1/ABDA5142E71511ECB82CB06EC4F9AE02/bgopAGEwM5uDbSj3ABgC9xpaTkI.mft
Manifest number:          03B6
Signing time:             Mon 27 Jul 2026 01:43:06 +0000
Manifest this update:     Mon 27 Jul 2026 01:43:06 +0000
Manifest next update:     Mon 03 Aug 2026 01:43:06 +0000
Files and hashes:         1: bgopAGEwM5uDbSj3ABgC9xpaTkI.crl (hash: ASPGI3ce0qdZCIN7xg28x8AJyzTDrd4S5dQLH3igTTM=)
                          2: 3C3A98A4E71C11EC9128DF0BC4F9AE02.roa (hash: 8fpsH6/SqOFGmCMoUAvx02jdqLvAfY0Dq9WTxlxXP88=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91166D1/ABDA5142E71511ECB82CB06EC4F9AE02/bgopAGEwM5uDbSj3ABgC9xpaTkI.crl
                          rsync://rpki.apnic.net/member_repository/A91166D1/ABDA5142E71511ECB82CB06EC4F9AE02/bgopAGEwM5uDbSj3ABgC9xpaTkI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bgopAGEwM5uDbSj3ABgC9xpaTkI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 01:43:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 956 (0x3bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91166D1, serialNumber=6E0A29006130339B836D28F7001802F71A5A4E42
        Validity
            Not Before: Jul 27 01:43:06 2026 GMT
            Not After : Aug  3 01:43:06 2026 GMT
        Subject: CN=6a66b7aa-48fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:5f:f9:3d:cc:c8:60:7f:1a:d9:cf:80:a2:60:
                    b0:0e:73:ce:26:5f:01:50:8f:bd:1d:26:ba:88:88:
                    82:9d:54:0a:27:bf:dc:43:76:e5:db:06:26:ef:dc:
                    57:02:64:ea:b8:e9:55:92:94:91:50:60:1c:20:31:
                    2c:b2:2f:95:39:1c:f7:e7:72:9f:4f:14:86:49:d0:
                    49:ce:c6:2e:59:ad:d3:4c:60:8a:01:13:05:fb:06:
                    bf:e8:5b:79:b9:2b:7c:10:ef:16:3d:0f:91:5b:66:
                    60:22:7e:66:87:3b:00:9e:01:9c:55:1a:aa:41:67:
                    2b:77:34:f4:d1:d6:c2:c9:4b:83:c7:51:b8:ac:90:
                    63:2c:a6:47:f2:17:f5:7d:12:dd:ea:80:7f:8b:13:
                    ad:d3:ae:cd:7a:e2:09:c7:2b:fe:fd:f4:90:3f:32:
                    b4:8a:63:cf:4a:74:59:c8:7a:0e:c8:53:91:fb:1f:
                    27:57:9a:da:2f:4f:47:84:d6:81:c4:36:06:4c:46:
                    e5:e8:df:a1:d3:7b:87:d9:aa:37:be:83:05:99:19:
                    89:49:81:f3:c9:d0:82:cd:b3:c1:2f:17:4b:ce:04:
                    f9:cd:b3:ef:57:9d:6b:65:17:47:70:d6:92:d2:bc:
                    c2:8b:21:ed:75:b8:f4:0e:bf:03:8d:71:fa:c9:3e:
                    8d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:4D:D0:94:E6:7C:78:B8:97:FE:3B:58:64:47:64:E7:5D:C4:22:B6
            X509v3 Authority Key Identifier:
                keyid:6E:0A:29:00:61:30:33:9B:83:6D:28:F7:00:18:02:F7:1A:5A:4E:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91166D1/ABDA5142E71511ECB82CB06EC4F9AE02/bgopAGEwM5uDbSj3ABgC9xpaTkI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bgopAGEwM5uDbSj3ABgC9xpaTkI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91166D1/ABDA5142E71511ECB82CB06EC4F9AE02/bgopAGEwM5uDbSj3ABgC9xpaTkI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d5:00:a8:17:67:b7:fe:c6:3b:e8:82:45:06:81:a5:cb:61:1f:
         ff:63:8a:e4:5e:56:e5:ac:03:d3:c7:ed:5c:e5:d5:9b:68:3f:
         a5:94:05:3f:ea:e5:fa:80:4b:8e:2a:af:c8:ae:5f:42:aa:66:
         88:93:ab:9a:41:f9:9e:de:21:8b:b2:d3:2c:47:7d:a1:a7:03:
         84:bb:70:7d:d6:ed:48:aa:5d:e0:b3:1e:d3:06:5f:1e:f9:f6:
         66:57:65:68:c1:dd:45:1a:81:80:c6:c4:13:c5:25:00:8a:ec:
         07:f9:e8:8f:e4:fe:b2:eb:56:64:49:8b:f1:b5:5d:0b:19:16:
         6e:74:41:22:4b:30:96:6f:ac:b9:60:7f:8b:43:18:b4:af:ce:
         ab:20:fb:65:0a:e8:6e:29:64:81:27:41:e8:7f:43:81:36:22:
         08:81:0c:31:f0:e8:d2:14:6c:a4:fe:eb:49:5c:f8:2b:15:5c:
         bd:1b:18:4d:a4:45:8b:5c:17:81:16:ec:3a:0b:ff:24:58:22:
         a9:3c:a8:81:35:56:70:5f:57:f5:b0:84:ed:e8:36:bd:ed:43:
         89:52:86:7e:06:8d:0f:7b:59:d2:46:e3:7a:cb:cb:dd:bc:4f:
         91:d2:da:37:1e:02:2e:79:b3:a2:ee:0f:36:ea:90:77:c3:41:
         3a:6e:89:c7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA7wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTY2RDExMTAvBgNVBAUTKDZFMEEyOTAwNjEzMDMzOUI4MzZEMjhGNzAwMTgwMkY3
MUE1QTRFNDIwHhcNMjYwNzI3MDE0MzA2WhcNMjYwODAzMDE0MzA2WjAYMRYwFAYD
VQQDEw02YTY2YjdhYS00OGZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA01/5PczIYH8a2c+AomCwDnPOJl8BUI+9HSa6iIiCnVQKJ7/cQ3bl2wYm79xX
AmTquOlVkpSRUGAcIDEssi+VORz353KfTxSGSdBJzsYuWa3TTGCKARMF+wa/6Ft5
uSt8EO8WPQ+RW2ZgIn5mhzsAngGcVRqqQWcrdzT00dbCyUuDx1G4rJBjLKZH8hf1
fRLd6oB/ixOt067NeuIJxyv+/fSQPzK0imPPSnRZyHoOyFOR+x8nV5raL09HhNaB
xDYGTEbl6N+h03uH2ao3voMFmRmJSYHzydCCzbPBLxdLzgT5zbPvV51rZRdHcNaS
0rzCiyHtdbj0Dr8DjXH6yT6NaQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOFN0JTm
fHi4l/47WGRHZOddxCK2MB8GA1UdIwQYMBaAFG4KKQBhMDObg20o9wAYAvcaWk5C
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjZEMS9BQkRBNTE0MkU3
MTUxMUVDQjgyQ0IwNkVDNEY5QUUwMi9iZ29wQUdFd001dURiU2ozQUJnQzl4cGFU
a0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2Jnb3BBR0V3TTV1RGJTajNBQmdDOXhwYVRrSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NjZEMS9BQkRBNTE0MkU3MTUxMUVDQjgyQ0IwNkVDNEY5QUUwMi9iZ29wQUdFd001
dURiU2ozQUJnQzl4cGFUa0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA1QCoF2e3/sY76IJFBoGly2Ef/2OK5F5W5awD08ftXOXVm2g/pZQFP+rl+oBL
jiqvyK5fQqpmiJOrmkH5nt4hi7LTLEd9oacDhLtwfdbtSKpd4LMe0wZfHvn2Zldl
aMHdRRqBgMbEE8UlAIrsB/noj+T+sutWZEmL8bVdCxkWbnRBIkswlm+suWB/i0MY
tK/OqyD7ZQrobilkgSdB6H9DgTYiCIEMMfDo0hRspP7rSVz4KxVcvRsYTaRFi1wX
gRbsOgv/JFgiqTyogTVWcF9X9bCE7eg2ve1DiVKGfgaND3tZ0kbjesvL3bxPkdLa
Nx4CLnmzou4PNuqQd8NBOm6Jxw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:11:20 2026 by rpki-client