Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/-bspsKvoSef-GA4znkscKCNoxSE.mft
File:                     -bspsKvoSef-GA4znkscKCNoxSE.mft (raw, json)
Hash identifier:          Qf42k4ucjjX1ugVs9JQh15CCZGDs+4dqlBRfQJH14pI=
Subject key identifier:   3A:8E:99:D2:84:ED:C6:9E:9B:21:A5:A0:18:D3:0A:C4:C2:70:62:60
Authority key identifier: F9:BB:29:B0:AB:E8:49:E7:FE:18:0E:33:9E:4B:1C:28:23:68:C5:21
Certificate issuer:       /CN=A913E8F3/serialNumber=F9BB29B0ABE849E7FE180E339E4B1C282368C521
Certificate serial:       1109
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-bspsKvoSef-GA4znkscKCNoxSE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/-bspsKvoSef-GA4znkscKCNoxSE.mft
Manifest number:          10EB
Signing time:             Mon 28 Sep 2026 17:24:03 +0000
Manifest this update:     Mon 28 Sep 2026 17:24:03 +0000
Manifest next update:     Mon 05 Oct 2026 17:24:03 +0000
Files and hashes:         1: -bspsKvoSef-GA4znkscKCNoxSE.crl (hash: ouD7gtO6vMEIZnn9Pmi6txK2vnUcu+8Jnq9X9YG5qz4=)
                          2: 06093D68DC1311F09341A9F45E6F56BC.roa (hash: j3Nn2rD47TD3zcYvMKT9rzy2XYP0c6frj7kn6Jpdzzo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/-bspsKvoSef-GA4znkscKCNoxSE.crl
                          rsync://rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/-bspsKvoSef-GA4znkscKCNoxSE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-bspsKvoSef-GA4znkscKCNoxSE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Oct 2026 17:24:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4361 (0x1109)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913E8F3, serialNumber=F9BB29B0ABE849E7FE180E339E4B1C282368C521
        Validity
            Not Before: Sep 28 17:24:03 2026 GMT
            Not After : Oct  5 17:24:03 2026 GMT
        Subject: CN=6abaa2b3-522e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:eb:9b:86:27:94:1c:1b:ec:ee:18:d6:7d:83:
                    ae:93:28:f5:dc:5d:fc:bb:f6:d8:36:f0:de:ce:99:
                    f9:7c:7c:c1:87:92:02:c3:74:b0:65:43:ef:e3:44:
                    89:00:03:cc:3a:08:87:5a:97:ea:80:9f:95:3f:5f:
                    c6:63:8a:97:29:2d:2a:f1:f0:f8:c6:72:8d:ad:9a:
                    f2:80:48:2e:00:f0:ce:f7:e6:c2:fa:8e:ef:eb:73:
                    e1:b1:04:72:d2:56:bc:11:bf:71:eb:6b:53:5a:e4:
                    4c:30:e2:9e:3d:46:09:f6:96:16:54:b4:64:a4:10:
                    d8:fe:23:51:8b:40:b5:20:12:ed:99:00:b2:39:a5:
                    85:14:fe:41:82:88:0c:db:8f:79:89:9a:04:9d:cb:
                    d7:ba:2a:f6:f1:e3:0a:27:3e:5c:53:62:f2:8a:57:
                    d4:07:21:d6:31:cb:88:8f:70:67:f5:eb:80:b0:db:
                    d8:78:1f:7a:da:00:57:47:57:2d:08:a6:4c:1f:f1:
                    4a:6a:1f:96:0e:24:2e:82:05:de:e1:cb:89:3d:80:
                    92:80:f0:cc:36:18:25:a8:82:ba:b3:76:ac:50:b6:
                    30:2a:cc:31:5a:e3:bd:6f:b2:11:bd:31:02:60:c4:
                    e0:72:33:d2:ee:9f:48:a3:a8:aa:98:6c:43:a4:24:
                    16:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:8E:99:D2:84:ED:C6:9E:9B:21:A5:A0:18:D3:0A:C4:C2:70:62:60
            X509v3 Authority Key Identifier:
                keyid:F9:BB:29:B0:AB:E8:49:E7:FE:18:0E:33:9E:4B:1C:28:23:68:C5:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/-bspsKvoSef-GA4znkscKCNoxSE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-bspsKvoSef-GA4znkscKCNoxSE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/-bspsKvoSef-GA4znkscKCNoxSE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:9a:b0:cf:13:af:2d:f1:c8:16:a9:49:d0:9c:64:96:d9:40:
         02:66:3d:14:c5:4d:4d:51:b9:c4:78:57:54:68:f1:fb:07:b0:
         d0:57:7c:f1:67:61:44:f2:7d:41:af:45:1f:a4:cd:75:dc:1f:
         b5:4f:5d:74:5b:4b:ce:62:8b:36:ac:e7:5d:69:76:7d:bc:bc:
         89:f3:79:2d:47:c1:0c:b8:0b:90:31:ea:c2:29:e8:67:9f:57:
         a1:54:d7:87:0c:e9:58:ce:c8:62:df:36:fa:f8:f4:ed:47:d4:
         f8:87:ef:90:07:dd:3b:71:55:cd:c3:85:4f:12:f6:47:63:89:
         ae:96:16:af:4f:6f:c3:b6:99:79:70:15:8e:38:22:87:af:70:
         7a:88:ad:b6:e0:47:16:48:22:ff:bf:77:19:35:55:06:b6:fd:
         84:2c:18:b9:5c:b6:fb:51:d7:23:41:af:96:66:f6:4a:2f:0d:
         e6:df:ba:4e:ec:1b:38:eb:6b:bd:f6:30:8d:84:76:cd:f0:f8:
         4c:9f:65:5b:34:a9:3d:f3:2a:e9:5c:26:da:b9:88:47:a6:19:
         ed:1f:5e:9e:9c:20:67:e1:6f:55:1d:96:c2:25:29:06:05:aa:
         6f:cb:48:d7:3d:41:2c:11:4c:36:23:e9:45:42:f9:71:03:d1:
         b7:c8:25:2c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0U4RjMxMTAvBgNVBAUTKEY5QkIyOUIwQUJFODQ5RTdGRTE4MEUzMzlFNEIxQzI4
MjM2OEM1MjEwHhcNMjYwOTI4MTcyNDAzWhcNMjYxMDA1MTcyNDAzWjAYMRYwFAYD
VQQDEw02YWJhYTJiMy01MjJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv+ubhieUHBvs7hjWfYOukyj13F38u/bYNvDezpn5fHzBh5ICw3SwZUPv40SJ
AAPMOgiHWpfqgJ+VP1/GY4qXKS0q8fD4xnKNrZrygEguAPDO9+bC+o7v63PhsQRy
0la8Eb9x62tTWuRMMOKePUYJ9pYWVLRkpBDY/iNRi0C1IBLtmQCyOaWFFP5BgogM
2495iZoEncvXuir28eMKJz5cU2LyilfUByHWMcuIj3Bn9euAsNvYeB962gBXR1ct
CKZMH/FKah+WDiQuggXe4cuJPYCSgPDMNhglqIK6s3asULYwKswxWuO9b7IRvTEC
YMTgcjPS7p9Io6iqmGxDpCQWQwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDqOmdKE
7caemyGloBjTCsTCcGJgMB8GA1UdIwQYMBaAFPm7KbCr6Enn/hgOM55LHCgjaMUh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRThGMy8wQTA0RjRFMjU0
OTQxMUU5QjU5N0U1NzFDNEY5QUUwMi8tYnNwc0t2b1NlZi1HQTR6bmtzY0tDTm94
U0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLy1ic3BzS3ZvU2VmLUdBNHpua3NjS0NOb3hTRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
RThGMy8wQTA0RjRFMjU0OTQxMUU5QjU5N0U1NzFDNEY5QUUwMi8tYnNwc0t2b1Nl
Zi1HQTR6bmtzY0tDTm94U0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQZqwzxOvLfHIFqlJ0JxkltlAAmY9FMVNTVG5xHhXVGjx+wew0Fd88WdhRPJ9
Qa9FH6TNddwftU9ddFtLzmKLNqznXWl2fby8ifN5LUfBDLgLkDHqwinoZ59XoVTX
hwzpWM7IYt82+vj07UfU+IfvkAfdO3FVzcOFTxL2R2OJrpYWr09vw7aZeXAVjjgi
h69weoittuBHFkgi/793GTVVBrb9hCwYuVy2+1HXI0Gvlmb2Si8N5t+6TuwbOOtr
vfYwjYR2zfD4TJ9lWzSpPfMq6Vwm2rmIR6YZ7R9enpwgZ+FvVR2WwiUpBgWqb8tI
1z1BLBFMNiPpRUL5cQPRt8glLA==
-----END CERTIFICATE-----
Generated at Tue Sep 29 02:51:46 2026 by rpki-client