Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127C93/4021A4E65F2411EDB80C1921C4F9AE02/Bst2YhlvZE7eydz72HmbjHPjlwk.mft
File:                     Bst2YhlvZE7eydz72HmbjHPjlwk.mft (raw, json)
Hash identifier:          N86Pj6Eyaqvrbmltx9OWr1ia9234KqlA8s02NjGaAH8=
Subject key identifier:   67:B4:71:34:7E:F2:C2:C7:70:5A:B2:7F:72:AF:21:F1:40:AE:EE:68
Authority key identifier: 06:CB:76:62:19:6F:64:4E:DE:C9:DC:FB:D8:79:9B:8C:73:E3:97:09
Certificate issuer:       /CN=A9127C93/serialNumber=06CB7662196F644EDEC9DCFBD8799B8C73E39709
Certificate serial:       02C8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bst2YhlvZE7eydz72HmbjHPjlwk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127C93/4021A4E65F2411EDB80C1921C4F9AE02/Bst2YhlvZE7eydz72HmbjHPjlwk.mft
Manifest number:          02BF
Signing time:             Mon 27 Jul 2026 02:39:21 +0000
Manifest this update:     Mon 27 Jul 2026 02:39:21 +0000
Manifest next update:     Mon 03 Aug 2026 02:39:21 +0000
Files and hashes:         1: Bst2YhlvZE7eydz72HmbjHPjlwk.crl (hash: FZWnsMg+ngaUWFrJG0jvIJOCUKbn/rgSQWVQ45e2Ngs=)
                          2: 2965791E5F4011ED9361C246C4F9AE02.roa (hash: AgO/ia/0+cpVqOKmEZX2Qt0MRXIe0z/Pf54LEMjOTz4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127C93/4021A4E65F2411EDB80C1921C4F9AE02/Bst2YhlvZE7eydz72HmbjHPjlwk.crl
                          rsync://rpki.apnic.net/member_repository/A9127C93/4021A4E65F2411EDB80C1921C4F9AE02/Bst2YhlvZE7eydz72HmbjHPjlwk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bst2YhlvZE7eydz72HmbjHPjlwk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 02:39:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 712 (0x2c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127C93, serialNumber=06CB7662196F644EDEC9DCFBD8799B8C73E39709
        Validity
            Not Before: Jul 27 02:39:21 2026 GMT
            Not After : Aug  3 02:39:21 2026 GMT
        Subject: CN=6a66c4d9-7f08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:97:e3:70:1d:9a:98:1c:78:82:63:74:cd:22:
                    34:aa:0e:88:89:87:e8:e6:d8:1e:09:d2:b0:4e:fe:
                    aa:70:ad:df:a5:e4:31:1a:8a:e2:14:71:8f:fb:e9:
                    d0:af:e5:da:d6:3d:b6:77:29:68:67:bd:0f:55:84:
                    94:fa:62:55:e8:a5:4b:a0:a0:3f:38:e5:92:fe:ae:
                    8b:0f:59:a6:cd:6b:6a:85:56:83:bd:1f:5f:1a:49:
                    06:66:5f:2d:b7:64:32:19:58:b4:f1:58:25:c1:64:
                    b0:f2:06:14:97:32:60:4c:94:3a:cc:d4:69:66:01:
                    e2:70:03:64:c1:82:64:80:ea:66:3e:a9:9e:80:4d:
                    9c:50:02:d1:51:06:45:db:53:53:2f:21:fb:e3:f1:
                    20:1d:ee:c7:ec:1a:3d:00:ef:b0:9b:f6:8c:b6:ec:
                    95:93:63:3e:00:c5:6c:4e:fe:55:7a:85:67:42:2b:
                    62:a6:a9:41:65:f1:4d:35:5f:96:1d:52:16:1c:1c:
                    2c:70:78:f2:0d:7b:27:5b:16:60:6c:ae:9c:ef:e6:
                    c6:0b:7e:a4:28:7f:30:19:b6:d0:01:9e:a8:6f:34:
                    eb:11:bd:53:17:56:c0:24:10:9e:c1:fa:8f:17:e2:
                    b4:34:9c:79:1b:2b:0e:18:1a:22:ed:71:b4:93:eb:
                    ea:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:B4:71:34:7E:F2:C2:C7:70:5A:B2:7F:72:AF:21:F1:40:AE:EE:68
            X509v3 Authority Key Identifier:
                keyid:06:CB:76:62:19:6F:64:4E:DE:C9:DC:FB:D8:79:9B:8C:73:E3:97:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127C93/4021A4E65F2411EDB80C1921C4F9AE02/Bst2YhlvZE7eydz72HmbjHPjlwk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bst2YhlvZE7eydz72HmbjHPjlwk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127C93/4021A4E65F2411EDB80C1921C4F9AE02/Bst2YhlvZE7eydz72HmbjHPjlwk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:1e:cd:f0:26:d7:20:d8:cc:7a:a8:07:bb:6b:06:ed:9c:f5:
         58:66:87:57:b9:5e:35:40:17:9e:b6:56:2f:c0:44:7e:c5:9d:
         5b:e0:95:16:1a:4f:2b:13:61:8f:21:8d:39:90:1e:30:c2:ac:
         71:4f:a7:67:2e:d7:51:cc:f8:43:31:8b:32:1e:7e:84:b5:25:
         11:fc:a4:35:99:bd:88:39:6c:50:dd:9e:8b:0c:07:2b:49:5a:
         d1:80:6b:56:ba:c0:62:94:b3:e8:42:c4:a4:5a:fc:5b:6c:05:
         5e:1c:7b:c8:7c:e9:16:3e:82:d2:a7:ae:85:40:fd:2f:b2:90:
         07:d0:54:28:7a:17:43:f9:b8:c3:4b:92:fa:ae:11:74:cf:77:
         75:70:cc:73:72:d3:b3:87:62:44:80:1d:db:80:55:10:69:13:
         b1:0e:d0:c2:dd:4a:c3:9a:0d:90:9f:57:35:b2:69:dc:4f:80:
         23:3e:79:bc:b4:ca:45:99:8f:b2:f3:52:33:e1:8e:5b:a3:0e:
         5a:54:36:33:24:e2:78:e3:38:f4:0e:e7:15:8f:b3:68:2b:86:
         44:dd:f1:cb:fe:a1:10:97:f5:3c:ec:5b:61:fb:c9:24:e9:52:
         72:f8:bb:3b:61:08:24:4b:46:d7:5c:10:43:e6:9a:6c:4f:fe:
         a7:36:25:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:42:02 2026 by rpki-client