Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/bKLPpoi9-eLWVhYIZ3owyRUkPQw.mft
File:                     bKLPpoi9-eLWVhYIZ3owyRUkPQw.mft (raw, json)
Hash identifier:          dyowCRNqz6saaWKFOXY8EvCKLnHSjVhRpsPpy8ZJW1Y=
Subject key identifier:   84:EA:23:35:AD:2C:FE:2B:C1:59:45:89:12:FC:89:65:B0:43:B7:C1
Authority key identifier: 6C:A2:CF:A6:88:BD:F9:E2:D6:56:16:08:67:7A:30:C9:15:24:3D:0C
Certificate issuer:       /CN=A9148F80/serialNumber=6CA2CFA688BDF9E2D6561608677A30C915243D0C
Certificate serial:       0764
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKLPpoi9-eLWVhYIZ3owyRUkPQw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/bKLPpoi9-eLWVhYIZ3owyRUkPQw.mft
Manifest number:          075B
Signing time:             Tue 28 Jul 2026 22:15:21 +0000
Manifest this update:     Tue 28 Jul 2026 22:15:21 +0000
Manifest next update:     Tue 04 Aug 2026 22:15:21 +0000
Files and hashes:         1: bKLPpoi9-eLWVhYIZ3owyRUkPQw.crl (hash: jREQ5iY8WCrumM8fhCT35eKdOnZQUyWHFy0UHtHjcvg=)
                          2: 1C93BF747CD011EB9F876E78C4F9AE02.roa (hash: Pjx2fk1ERBs14VqIaD9LJOxFbqs8w+2aRHPGV9fMHnc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/bKLPpoi9-eLWVhYIZ3owyRUkPQw.crl
                          rsync://rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/bKLPpoi9-eLWVhYIZ3owyRUkPQw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKLPpoi9-eLWVhYIZ3owyRUkPQw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 22:15:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1892 (0x764)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148F80, serialNumber=6CA2CFA688BDF9E2D6561608677A30C915243D0C
        Validity
            Not Before: Jul 28 22:15:21 2026 GMT
            Not After : Aug  4 22:15:21 2026 GMT
        Subject: CN=6a6929f9-d567
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:82:55:51:6a:da:8e:c5:8e:fd:d0:9c:f6:aa:
                    66:28:cc:e8:96:7f:b4:1c:59:ed:37:2d:75:32:5c:
                    21:aa:3b:a8:d9:6c:96:3a:e5:2d:98:d8:b0:68:fc:
                    65:9a:cd:d0:dd:af:78:f0:22:ed:07:4c:64:21:f2:
                    34:fc:a0:39:8e:d4:1b:bb:14:0e:f9:e4:54:b2:0d:
                    5d:c6:9f:43:30:93:92:e2:85:a6:0d:10:aa:55:ee:
                    42:bb:0e:9b:a2:aa:45:4c:bf:f7:a4:64:a1:18:3e:
                    c2:6e:6e:8d:5e:c1:dc:36:3c:5d:42:94:3e:5a:c7:
                    d9:11:b5:65:02:ee:34:00:73:bf:93:29:d3:21:ae:
                    86:99:66:bf:85:6a:8f:ca:a5:d5:20:53:bc:de:fa:
                    11:9f:53:f9:3c:ac:45:22:45:18:b5:0e:63:b2:ea:
                    83:04:3a:11:59:07:4e:c0:84:47:8a:3d:50:5e:70:
                    67:cd:88:91:ad:c7:67:03:a3:44:d6:10:50:e2:b9:
                    41:10:3b:e0:1d:81:86:85:fd:66:6d:5d:3d:81:69:
                    01:3a:97:6d:10:e3:85:c8:25:2a:01:d3:81:9d:c3:
                    e7:b2:c9:b8:6c:b0:f7:6c:90:8b:63:a5:22:06:3d:
                    ca:fa:20:a4:6c:ba:1c:c7:0e:32:9e:4e:94:2f:01:
                    e1:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:EA:23:35:AD:2C:FE:2B:C1:59:45:89:12:FC:89:65:B0:43:B7:C1
            X509v3 Authority Key Identifier:
                keyid:6C:A2:CF:A6:88:BD:F9:E2:D6:56:16:08:67:7A:30:C9:15:24:3D:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/bKLPpoi9-eLWVhYIZ3owyRUkPQw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKLPpoi9-eLWVhYIZ3owyRUkPQw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/bKLPpoi9-eLWVhYIZ3owyRUkPQw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:8c:be:dd:48:8a:7a:2c:82:aa:31:0a:c4:0c:f8:0d:d9:9c:
         02:9c:bb:7f:95:e2:86:fd:2a:d1:13:b7:58:5a:b1:24:5e:ee:
         25:0a:93:48:61:c9:20:59:87:c3:16:12:3f:32:1b:0e:ec:93:
         7b:14:f3:0f:9c:de:3f:d6:20:86:9e:10:aa:b8:b9:a9:db:94:
         96:68:d5:07:75:b1:dc:55:2d:7d:31:24:ad:b5:0b:55:f4:86:
         ed:c7:87:98:84:0e:18:6b:ac:dc:a6:08:ca:d7:cd:34:0b:db:
         c2:e4:c3:dd:68:34:e7:b8:c5:73:f5:f6:71:af:30:c8:46:3e:
         19:d4:f2:0c:50:3a:0c:ad:a2:ff:50:5d:26:0f:5b:29:9b:ac:
         58:d3:f1:69:bf:39:06:16:b1:ac:be:df:c3:7f:ec:bc:44:ad:
         68:1a:ff:9d:5c:09:94:58:29:83:c5:ac:69:e2:86:92:40:7a:
         38:4d:ae:90:23:60:ff:4d:37:23:00:78:d9:69:74:b9:e0:13:
         f3:ac:c2:2a:2d:bb:f6:f1:95:46:15:96:df:a5:a5:ce:12:02:
         46:25:70:0e:5b:8a:61:7a:33:ac:58:77:d1:8a:66:b5:25:5f:
         d6:b5:c8:be:8e:93:57:fe:65:c7:14:69:8f:2d:86:91:47:a8:
         b8:75:96:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:55:49 2026 by rpki-client