Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914949E/80785F50716911EEB51B380DC4F9AE02/bjRcAVVt4-2h2RNNSi1-pSOhSPk.mft
File:                     bjRcAVVt4-2h2RNNSi1-pSOhSPk.mft (raw, json)
Hash identifier:          X7i+dYOjNJbPs0OLBEmh94HKuzR98OvraMnNfwogz9Y=
Subject key identifier:   45:13:76:AE:81:AD:24:4E:02:4E:8B:9F:30:AD:2A:DE:81:66:3A:4E
Authority key identifier: 6E:34:5C:01:55:6D:E3:ED:A1:D9:13:4D:4A:2D:7E:A5:23:A1:48:F9
Certificate issuer:       /CN=A914949E/serialNumber=6E345C01556DE3EDA1D9134D4A2D7EA523A148F9
Certificate serial:       020D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bjRcAVVt4-2h2RNNSi1-pSOhSPk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914949E/80785F50716911EEB51B380DC4F9AE02/bjRcAVVt4-2h2RNNSi1-pSOhSPk.mft
Manifest number:          0208
Signing time:             Mon 27 Jul 2026 04:40:07 +0000
Manifest this update:     Mon 27 Jul 2026 04:40:06 +0000
Manifest next update:     Mon 03 Aug 2026 04:40:06 +0000
Files and hashes:         1: bjRcAVVt4-2h2RNNSi1-pSOhSPk.crl (hash: giIz2OBbWwlLMIgoZEATQG31hFKbq7w91aEqTDzSsaM=)
                          2: 52531292718111EEA2596A60C4F9AE02.roa (hash: 3Le6MD51w3Ax4rLu6Yil0NoWYWBuBDX4tlNeG65QTBY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914949E/80785F50716911EEB51B380DC4F9AE02/bjRcAVVt4-2h2RNNSi1-pSOhSPk.crl
                          rsync://rpki.apnic.net/member_repository/A914949E/80785F50716911EEB51B380DC4F9AE02/bjRcAVVt4-2h2RNNSi1-pSOhSPk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bjRcAVVt4-2h2RNNSi1-pSOhSPk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 04:40:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 525 (0x20d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914949E, serialNumber=6E345C01556DE3EDA1D9134D4A2D7EA523A148F9
        Validity
            Not Before: Jul 27 04:40:06 2026 GMT
            Not After : Aug  3 04:40:06 2026 GMT
        Subject: CN=6a66e127-3b1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:e7:17:26:21:0b:0e:fa:b1:9c:0f:dc:82:b8:
                    f6:be:cf:36:6b:c6:56:a9:db:52:ec:55:37:88:16:
                    a7:d7:10:5a:aa:7f:09:bf:06:32:bd:96:5e:74:19:
                    e6:25:da:12:c9:5b:cd:ff:35:59:0c:ca:b5:55:93:
                    99:ed:e3:95:50:27:f8:58:9f:ca:14:73:30:46:34:
                    44:21:12:ae:17:f8:da:cc:31:57:1d:08:55:db:3c:
                    cb:ee:f0:d2:d0:3f:48:c2:18:04:13:72:7d:b9:b6:
                    92:42:e2:7f:17:6e:08:2d:3d:fa:66:04:6c:1c:3f:
                    b3:9a:d4:f6:bf:1b:15:e8:76:b9:86:be:0d:cb:76:
                    5b:bd:97:b8:03:e0:78:51:fa:78:a7:7d:c0:a5:69:
                    ab:07:61:36:be:a9:c4:f9:9b:82:f2:d6:de:ab:e7:
                    29:74:84:ed:e4:c3:8b:9f:06:aa:c1:1c:c1:b6:ba:
                    79:3e:9c:8c:17:55:6f:2f:a3:1c:2e:18:02:5a:a0:
                    a7:08:f4:17:bb:ca:64:52:d8:82:b8:b8:4e:d2:89:
                    51:33:d5:16:d3:30:23:5e:cf:bc:4a:51:a0:df:5d:
                    db:d5:d9:d5:69:0f:0f:1a:81:5e:49:e6:f4:0d:45:
                    6f:44:98:8c:09:f1:a9:72:1c:64:50:65:b9:83:65:
                    fd:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:13:76:AE:81:AD:24:4E:02:4E:8B:9F:30:AD:2A:DE:81:66:3A:4E
            X509v3 Authority Key Identifier:
                keyid:6E:34:5C:01:55:6D:E3:ED:A1:D9:13:4D:4A:2D:7E:A5:23:A1:48:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914949E/80785F50716911EEB51B380DC4F9AE02/bjRcAVVt4-2h2RNNSi1-pSOhSPk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bjRcAVVt4-2h2RNNSi1-pSOhSPk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914949E/80785F50716911EEB51B380DC4F9AE02/bjRcAVVt4-2h2RNNSi1-pSOhSPk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:c7:3d:ba:7b:0e:51:33:a3:4c:87:0f:10:17:fe:ec:d5:bf:
         83:11:28:f8:ed:a4:11:ef:f9:cc:4e:bb:0d:5b:34:25:e2:d1:
         5f:f2:8e:39:25:b4:e4:76:60:8e:55:9f:ff:57:c1:2c:34:e4:
         f9:a2:69:77:99:3e:fe:38:24:02:8f:cc:c0:ef:ab:03:f3:eb:
         67:ef:4b:09:7a:7a:72:2a:c0:4d:e0:0f:38:a8:97:46:54:66:
         19:18:20:d9:b1:7a:a2:e4:28:a0:9a:2b:e9:1b:ae:ed:b7:fd:
         f0:4d:de:1f:a6:b6:be:2e:42:31:73:98:9d:ff:a7:3f:06:bd:
         e1:79:2e:92:d7:5f:3d:2c:4b:f6:55:45:9b:ef:94:04:4e:2d:
         da:bb:5e:f8:38:a2:dd:de:4c:36:1c:38:81:66:ec:b6:07:67:
         c2:40:ed:1b:df:8b:2d:08:db:c6:24:fe:c4:9a:cd:5d:40:92:
         c3:e6:b8:c2:77:43:c2:a0:08:fe:95:21:3d:df:ce:16:dc:cd:
         70:03:95:ae:16:85:20:34:68:29:cc:5d:a9:14:49:70:34:02:
         3f:ed:80:ae:a1:fe:02:04:52:6a:77:d6:14:3b:b4:8a:d9:f0:
         b0:34:4b:bf:cb:bd:c7:e4:53:b7:8d:a9:5c:f9:00:22:d0:d7:
         da:2c:39:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:01:38 2026 by rpki-client