Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.mft
File:                     BQIPvxAg_WO-V9oblwSwqoEDREo.mft (raw, json)
Hash identifier:          qZK+VBnyq7zB/U5+R+at+m9eNNig4yVwHw3CeMSMl3k=
Subject key identifier:   D9:59:02:D0:BD:E7:EF:16:D7:5C:B4:83:02:74:DD:7D:69:DB:2F:FF
Authority key identifier: 05:02:0F:BF:10:20:FD:63:BE:57:DA:1B:97:04:B0:AA:81:03:44:4A
Certificate issuer:       /CN=A914A140/serialNumber=05020FBF1020FD63BE57DA1B9704B0AA8103444A
Certificate serial:       1D7B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQIPvxAg_WO-V9oblwSwqoEDREo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.mft
Manifest number:          1D66
Signing time:             Mon 02 Mar 2026 00:42:34 +0000
Manifest this update:     Mon 02 Mar 2026 00:42:30 +0000
Manifest next update:     Mon 09 Mar 2026 00:42:30 +0000
Files and hashes:         1: BQIPvxAg_WO-V9oblwSwqoEDREo.crl (hash: Y5uW3pGTWUzCU4YWrsfPYLmBHO50fEiOYxFUkNBLvLo=)
                          2: 8E652A7AC77611E68B1CDE6AC4F9AE02.roa (hash: HRZCFiI8waPHBtIDiuVXCKRbNp4ZHUWwRgIvIZoEOO4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.crl
                          rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQIPvxAg_WO-V9oblwSwqoEDREo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:42:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7547 (0x1d7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A140, serialNumber=05020FBF1020FD63BE57DA1B9704B0AA8103444A
        Validity
            Not Before: Mar  2 00:42:30 2026 GMT
            Not After : Mar  9 00:42:30 2026 GMT
        Subject: CN=69a4dcf9-c6fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:1d:6f:de:d5:b9:4a:42:6e:c9:22:2f:bf:b5:
                    25:42:25:f6:b0:18:2b:b5:f3:38:d5:a1:c8:ea:99:
                    a0:f7:c6:0a:46:0a:06:6f:1e:9c:8b:72:39:7f:57:
                    0c:41:3f:ba:35:82:f9:40:11:51:0b:44:d9:e8:bf:
                    35:8c:14:1a:6b:5f:43:1e:7c:47:01:15:c0:b9:54:
                    7c:73:8c:37:ec:26:9b:d8:f2:d7:7a:be:2d:54:9d:
                    f9:35:50:88:ef:e2:c1:ac:cd:a4:fe:17:5b:a0:3d:
                    e7:a8:41:f0:a8:0f:b5:b7:c1:73:d3:98:9b:1d:88:
                    5a:52:2c:07:e2:85:6a:ff:2f:5e:a8:83:bd:c2:21:
                    42:ba:59:75:12:8b:26:a9:3e:64:44:cd:cb:25:63:
                    0b:a6:ad:9d:ed:2b:db:c1:d1:f9:40:24:aa:24:22:
                    04:d7:b2:32:80:db:f7:23:cf:a0:ec:e8:b9:a6:08:
                    5e:27:b0:9e:9a:dc:3b:33:d6:30:60:67:d9:cc:67:
                    34:38:ce:5e:95:ae:22:88:0c:65:27:fe:a5:47:8d:
                    17:f6:f7:7f:39:b0:e8:2c:49:04:e7:1d:2e:93:ba:
                    1d:33:01:19:6f:63:a1:8e:56:50:d1:2b:e0:96:5c:
                    c5:f7:0f:eb:bd:78:b9:8b:9d:dd:fd:6c:0d:ef:90:
                    6a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:59:02:D0:BD:E7:EF:16:D7:5C:B4:83:02:74:DD:7D:69:DB:2F:FF
            X509v3 Authority Key Identifier:
                keyid:05:02:0F:BF:10:20:FD:63:BE:57:DA:1B:97:04:B0:AA:81:03:44:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQIPvxAg_WO-V9oblwSwqoEDREo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:d5:cd:48:58:5b:49:f3:b8:81:ce:69:01:a5:71:c7:81:13:
         51:16:55:67:76:c7:96:72:69:00:3b:97:1c:d5:1f:00:82:aa:
         3a:02:a5:d9:a6:d7:c9:fd:60:c2:f4:57:4a:a5:bb:e8:2a:06:
         03:dd:9e:6f:c7:f3:e7:17:4a:8a:ce:a6:11:de:4d:6a:16:2e:
         62:8a:dc:b4:cc:7d:1d:05:e8:0f:24:39:16:12:4e:c2:da:95:
         a1:8b:da:f3:b6:c0:f2:fd:8b:46:47:c1:e7:98:28:a3:5a:07:
         26:b0:94:50:25:be:a5:70:44:ff:15:32:c0:34:59:13:3b:f2:
         99:2f:dc:6e:68:51:32:77:3a:6a:45:be:97:62:d6:0c:61:95:
         ef:d1:04:85:ca:b6:5f:ab:06:bb:38:44:10:23:4c:87:b7:bc:
         a6:6c:5a:93:ca:2b:87:0a:09:f6:e5:30:02:d6:d3:68:4a:50:
         1a:98:60:d7:24:89:06:73:7b:70:c8:d8:91:07:97:79:58:fd:
         fb:29:df:38:58:01:e2:18:ac:07:10:a3:33:0d:20:a5:16:3d:
         1d:65:8c:96:b1:31:15:c0:bc:cf:6d:bf:ce:fd:a9:6b:80:bf:
         df:bd:75:af:c8:de:ad:59:91:3d:0d:8a:4e:70:cc:84:90:3c:
         bd:39:bd:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:27:12 2026 by rpki-client