Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912DD36/7F4023F2253211EFBC93211AC4F9AE02/BN7ay9uvpcHBT5KBe5b39QMQCig.mft
File:                     BN7ay9uvpcHBT5KBe5b39QMQCig.mft (raw, json)
Hash identifier:          2LrlvaYhs6gZ8fQtqQr0v/gv1cvlXWUwy9BulzEFwc0=
Subject key identifier:   D8:F6:9C:15:E8:92:BD:B3:1A:31:90:FF:18:E4:80:18:00:0B:68:27
Authority key identifier: 04:DE:DA:CB:DB:AF:A5:C1:C1:4F:92:81:7B:96:F7:F5:03:10:0A:28
Certificate issuer:       /CN=A912DD36/serialNumber=04DEDACBDBAFA5C1C14F92817B96F7F503100A28
Certificate serial:       019C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BN7ay9uvpcHBT5KBe5b39QMQCig.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912DD36/7F4023F2253211EFBC93211AC4F9AE02/BN7ay9uvpcHBT5KBe5b39QMQCig.mft
Manifest number:          0192
Signing time:             Mon 27 Jul 2026 06:08:33 +0000
Manifest this update:     Mon 27 Jul 2026 06:08:32 +0000
Manifest next update:     Mon 03 Aug 2026 06:08:32 +0000
Files and hashes:         1: BN7ay9uvpcHBT5KBe5b39QMQCig.crl (hash: C5pfiCIGeE1mc9sogdCO/KIZs5RiLvc/qm4gn60+2wE=)
                          2: 09EC8E16662211EFB6FA446CC4F9AE02.roa (hash: b75sAYMEIXYdDT25gmVHvykzgLoZpS+x22joZCKSsl4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912DD36/7F4023F2253211EFBC93211AC4F9AE02/BN7ay9uvpcHBT5KBe5b39QMQCig.crl
                          rsync://rpki.apnic.net/member_repository/A912DD36/7F4023F2253211EFBC93211AC4F9AE02/BN7ay9uvpcHBT5KBe5b39QMQCig.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BN7ay9uvpcHBT5KBe5b39QMQCig.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 06:08:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 412 (0x19c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912DD36, serialNumber=04DEDACBDBAFA5C1C14F92817B96F7F503100A28
        Validity
            Not Before: Jul 27 06:08:32 2026 GMT
            Not After : Aug  3 06:08:32 2026 GMT
        Subject: CN=6a66f5e1-f700
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:16:34:90:7b:02:ba:f1:09:26:c7:27:25:80:
                    24:7e:bb:eb:cc:9c:23:64:b1:59:46:9a:e6:9e:ad:
                    76:d3:e7:69:f4:19:6b:09:78:3c:5f:2d:48:4f:ed:
                    c2:05:be:da:c0:bf:e9:ba:d9:c9:19:52:1a:43:40:
                    7c:1f:74:62:6e:b8:56:da:f3:ba:3e:01:28:ea:82:
                    b7:1f:21:43:98:ce:96:8a:51:d0:fc:b0:f1:4a:f6:
                    db:59:71:eb:5d:0d:0a:c4:0c:a8:57:d0:c2:d7:08:
                    e9:d0:53:44:f2:ca:7c:a8:01:a7:10:c9:63:43:06:
                    55:2d:19:9d:77:aa:aa:9d:82:77:40:06:e6:73:28:
                    3c:46:16:0f:fd:e4:63:c8:4f:ef:02:2b:ba:16:58:
                    d4:33:fd:43:1e:64:24:85:5a:39:f3:c1:1c:e6:04:
                    7e:31:82:da:d7:e0:92:2d:0f:34:d9:ec:36:0c:a3:
                    a7:7a:2c:3b:f9:47:e7:e1:fc:05:78:fe:78:fa:a1:
                    ac:70:83:55:2d:9a:23:ff:88:51:46:4e:67:40:db:
                    9a:80:44:08:51:c7:29:2d:c7:8f:3e:99:5e:07:d6:
                    ac:1f:8f:04:df:31:06:31:84:7c:a9:09:38:6a:6c:
                    3f:8d:96:93:74:63:95:f5:ed:ec:a6:78:2d:79:ee:
                    30:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:F6:9C:15:E8:92:BD:B3:1A:31:90:FF:18:E4:80:18:00:0B:68:27
            X509v3 Authority Key Identifier:
                keyid:04:DE:DA:CB:DB:AF:A5:C1:C1:4F:92:81:7B:96:F7:F5:03:10:0A:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912DD36/7F4023F2253211EFBC93211AC4F9AE02/BN7ay9uvpcHBT5KBe5b39QMQCig.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BN7ay9uvpcHBT5KBe5b39QMQCig.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DD36/7F4023F2253211EFBC93211AC4F9AE02/BN7ay9uvpcHBT5KBe5b39QMQCig.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:66:49:13:e8:54:91:0d:00:38:fc:f1:09:d3:bd:9b:1c:91:
         57:2c:f8:c6:f0:30:d4:88:71:ac:17:8d:13:62:d9:85:9f:d2:
         3a:f4:12:9a:2e:25:5e:39:61:18:71:2a:9c:1f:22:f3:ff:5d:
         49:f2:89:5b:d5:7f:24:97:98:3c:7d:b2:4a:67:fd:c8:2c:ac:
         69:09:32:f7:21:20:34:42:05:a8:c5:d3:9e:dc:44:59:fe:55:
         35:c3:a6:37:22:cf:9c:f5:1d:aa:97:19:d4:17:5c:0c:bf:71:
         d8:73:d8:88:cb:60:f8:90:3e:a7:69:30:29:ee:9b:a3:86:6a:
         38:a3:92:b2:15:29:be:ca:6c:14:2c:97:68:fa:78:3a:ed:8f:
         58:04:d7:f3:c0:ab:55:b2:9d:b2:26:04:58:6e:78:e2:c7:21:
         37:ec:46:f2:bd:97:8c:82:08:e2:cc:71:75:59:7c:57:fa:93:
         fd:86:52:e8:40:6a:6b:d6:cb:ca:40:29:fc:94:52:6a:f3:6e:
         89:27:40:84:3a:4d:0e:55:bc:ee:03:56:c8:26:d7:a3:e5:ec:
         48:99:e3:61:78:09:f3:01:ed:49:8c:9b:e6:ac:d3:43:9d:2a:
         e5:f7:97:ae:9e:89:5f:12:65:23:b0:11:57:e9:22:66:f3:8b:
         ad:c6:1e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:52:58 2026 by rpki-client