Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912978E/D5AE7FAC53CA11EE8049935EC4F9AE02/bfCTVmC1JNKoCAZDaLCvxWU4ppo.mft
File:                     bfCTVmC1JNKoCAZDaLCvxWU4ppo.mft (raw, json)
Hash identifier:          /03TTDX/mI+QVZbMjjfXoSo3ZUn6Gpeg/7RSfZkTuTo=
Subject key identifier:   C5:4A:E5:6E:68:08:39:ED:D1:AC:84:AB:87:3D:7D:FE:96:09:A8:A9
Authority key identifier: 6D:F0:93:56:60:B5:24:D2:A8:08:06:43:68:B0:AF:C5:65:38:A6:9A
Certificate issuer:       /CN=A912978E/serialNumber=6DF0935660B524D2A808064368B0AFC56538A69A
Certificate serial:       01F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bfCTVmC1JNKoCAZDaLCvxWU4ppo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912978E/D5AE7FAC53CA11EE8049935EC4F9AE02/bfCTVmC1JNKoCAZDaLCvxWU4ppo.mft
Manifest number:          01EC
Signing time:             Sun 19 Apr 2026 03:05:36 +0000
Manifest this update:     Sun 19 Apr 2026 03:05:35 +0000
Manifest next update:     Sun 26 Apr 2026 03:05:35 +0000
Files and hashes:         1: bfCTVmC1JNKoCAZDaLCvxWU4ppo.crl (hash: BoUb7zkUSEgtS9tHQ5F8qYs0dLeHT42OBpNNpO6pvXg=)
                          2: 59923F2CA72011EEA63ABF4AC4F9AE02.roa (hash: jTw+k2qXsMBUja+xPqB6A7knrLM1Ewwr/1IeQgLz3tU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912978E/D5AE7FAC53CA11EE8049935EC4F9AE02/bfCTVmC1JNKoCAZDaLCvxWU4ppo.crl
                          rsync://rpki.apnic.net/member_repository/A912978E/D5AE7FAC53CA11EE8049935EC4F9AE02/bfCTVmC1JNKoCAZDaLCvxWU4ppo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bfCTVmC1JNKoCAZDaLCvxWU4ppo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 03:05:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 500 (0x1f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912978E, serialNumber=6DF0935660B524D2A808064368B0AFC56538A69A
        Validity
            Not Before: Apr 19 03:05:35 2026 GMT
            Not After : Apr 26 03:05:35 2026 GMT
        Subject: CN=69e4467f-d36c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f1:f9:91:f4:14:d6:df:b1:90:4e:bd:2d:7b:
                    6f:a4:40:af:6b:a1:57:9a:d8:37:aa:8d:9c:12:4f:
                    be:b6:e9:a1:07:81:97:b9:e5:bb:33:06:c7:3e:4e:
                    5a:61:3c:69:19:7a:c2:8d:63:15:03:0e:c3:13:45:
                    9c:0f:83:8f:e7:89:44:b0:25:47:49:be:ad:c7:99:
                    52:93:e0:8e:9a:6b:68:11:bc:d8:73:bf:d4:ce:2a:
                    c6:d1:62:07:4d:9e:40:2d:05:1a:27:03:bc:43:86:
                    2f:60:ac:72:58:08:a6:fe:ff:01:ca:4d:7d:cb:76:
                    ce:b5:5b:89:d6:66:ad:7f:29:47:ec:79:6d:de:5d:
                    c5:05:1d:7d:98:26:d5:ae:71:b3:f2:80:ec:d0:c7:
                    37:9b:92:53:bc:5a:4c:a7:ef:f4:13:95:30:20:5e:
                    4f:70:d3:dc:f0:91:de:49:d5:ba:ac:93:1a:6f:77:
                    6d:61:99:d3:03:a1:25:a0:4a:cc:9e:f9:78:25:05:
                    d8:73:c0:88:57:21:3f:9f:c4:8a:b4:2c:fc:cf:7f:
                    1f:95:4c:07:e3:25:f3:ec:0f:78:2c:2f:9f:6f:d9:
                    d8:7c:6c:45:c9:34:20:13:23:dd:bf:77:4d:5c:e2:
                    cb:96:86:3a:e9:16:2f:6f:f7:1b:cd:ba:c2:24:72:
                    45:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:4A:E5:6E:68:08:39:ED:D1:AC:84:AB:87:3D:7D:FE:96:09:A8:A9
            X509v3 Authority Key Identifier:
                keyid:6D:F0:93:56:60:B5:24:D2:A8:08:06:43:68:B0:AF:C5:65:38:A6:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912978E/D5AE7FAC53CA11EE8049935EC4F9AE02/bfCTVmC1JNKoCAZDaLCvxWU4ppo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bfCTVmC1JNKoCAZDaLCvxWU4ppo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912978E/D5AE7FAC53CA11EE8049935EC4F9AE02/bfCTVmC1JNKoCAZDaLCvxWU4ppo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:11:d2:35:7f:ee:64:21:62:15:92:b1:b7:4f:71:3c:99:d1:
         3c:bd:f4:a3:72:4b:b7:d6:94:62:3d:2f:9c:0a:eb:b1:13:3e:
         09:d3:9f:76:ea:7f:ed:d6:23:cc:ee:9e:5c:92:f9:08:9b:f6:
         eb:f4:f7:3c:11:94:04:c1:dd:d2:e3:ca:e6:80:40:72:bf:76:
         1b:17:47:2d:f2:a2:59:37:48:dd:73:0d:5d:59:1b:9c:1f:b0:
         b1:16:d7:99:45:1d:56:6d:51:b5:59:a5:8c:f8:18:50:92:12:
         a9:4d:e3:1b:03:fa:80:68:6b:b5:bf:01:04:32:1a:71:66:af:
         5b:08:cd:8f:28:00:9f:e0:e3:96:ff:af:a4:3b:19:ae:7c:14:
         cb:c6:56:a1:03:ae:fd:55:04:fc:3c:c5:46:ef:59:16:49:70:
         49:9d:fb:ff:04:f3:ba:69:08:ea:41:6b:0c:73:2f:7d:87:17:
         9e:c9:53:62:3a:0c:50:3a:41:ca:77:37:08:b9:9e:b0:d2:aa:
         39:bf:bb:26:8b:61:22:11:4e:d3:99:9e:c5:39:87:85:b5:06:
         b3:30:85:ea:b1:71:b7:97:c7:cd:da:1d:71:05:e0:6e:cc:b2:
         55:1e:33:dc:77:47:78:98:7e:e3:4e:c7:9c:d9:c8:f7:6f:7a:
         0b:5f:fd:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:42:02 2026 by rpki-client