Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.mft
File:                     ByzfZRsxLK-9sEmjNWn-pu9slRc.mft (raw, json)
Hash identifier:          6dsiDt1rSUUDlRme6F6rtkHjkJwzwBOhMKPoxYOu6pE=
Subject key identifier:   68:F3:34:92:C1:AD:35:A2:4D:EA:BD:E6:CB:00:C0:D4:27:47:70:F6
Authority key identifier: 07:2C:DF:65:1B:31:2C:AF:BD:B0:49:A3:35:69:FE:A6:EF:6C:95:17
Certificate issuer:       /CN=A915BCB1/serialNumber=072CDF651B312CAFBDB049A33569FEA6EF6C9517
Certificate serial:       09D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByzfZRsxLK-9sEmjNWn-pu9slRc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.mft
Manifest number:          09A8
Signing time:             Tue 28 Jul 2026 20:24:35 +0000
Manifest this update:     Tue 28 Jul 2026 20:24:35 +0000
Manifest next update:     Tue 04 Aug 2026 20:24:35 +0000
Files and hashes:         1: ByzfZRsxLK-9sEmjNWn-pu9slRc.crl (hash: t02DRoisvaGF6OrW/LFoI5TY15oDlkCYJ67BEAe2JHo=)
                          2: 29BE072046FF11EF9A76C461C4F9AE02.roa (hash: m59icjETbPEsJARtE8RwhDRHt46zarweYBmDC8Z0f0c=)
                          3: 880C4DF80FE411EE90944D75C4F9AE02.roa (hash: Y0bI926X3CaUrT8/nR8ZBhkaoJ5AjGGl5LLomYvK2ug=)
                          4: 7A2B979E763011EFBA86FD49C4F9AE02.roa (hash: 8hJGe41GHn/nQb/Y3ash++TM6zmcpgNi96YBeazW6/I=)
                          5: DF5E7CB6ED9C11EE81EFD40BC4F9AE02.roa (hash: fjWgAJnqDT9NesXOUtIXnUStrD3jUP0xK+W90KMvE+0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.crl
                          rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByzfZRsxLK-9sEmjNWn-pu9slRc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 20:24:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2519 (0x9d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915BCB1, serialNumber=072CDF651B312CAFBDB049A33569FEA6EF6C9517
        Validity
            Not Before: Jul 28 20:24:35 2026 GMT
            Not After : Aug  4 20:24:35 2026 GMT
        Subject: CN=6a691003-3db7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:0d:2c:20:9e:85:ce:b9:fe:c2:0d:a4:3d:bd:
                    08:3a:ea:28:f5:6d:82:5a:fb:8e:6a:8b:ba:bc:1d:
                    51:33:99:97:ee:9f:69:08:4d:83:71:cd:f9:8e:9f:
                    13:ad:8a:54:81:41:64:0c:b4:2f:24:bd:30:d5:3b:
                    dd:0f:79:6c:57:3c:fc:69:7c:93:cc:b2:a4:37:da:
                    0b:67:dc:ab:10:3e:3e:07:ba:30:45:fb:d0:98:ef:
                    cb:28:9f:26:fe:81:47:c9:d6:38:90:8d:29:8c:34:
                    1b:10:cf:31:49:74:af:e4:03:f9:25:13:15:7a:09:
                    af:b2:4c:f8:b0:bd:f2:79:88:9c:67:f5:c3:20:fc:
                    c1:e1:73:46:6c:6f:04:21:30:1f:65:1e:6d:b7:8d:
                    69:75:bd:1f:ed:62:ee:c8:9f:2a:57:1e:cb:97:bd:
                    5f:74:b4:32:74:6c:91:d8:e0:da:9c:75:27:b0:9a:
                    11:48:ce:ae:58:d8:d1:5b:2f:69:ff:f4:6a:27:8f:
                    b2:25:0a:03:46:e4:37:40:56:26:aa:4d:c7:52:8e:
                    66:5f:be:3e:07:63:91:70:dc:8d:1d:ce:b2:0b:a5:
                    18:a0:c1:6c:e1:11:d4:8d:ea:a3:6f:e5:93:b9:4d:
                    80:f4:71:16:ec:cd:72:58:6c:cb:20:c5:a9:1a:c8:
                    32:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:F3:34:92:C1:AD:35:A2:4D:EA:BD:E6:CB:00:C0:D4:27:47:70:F6
            X509v3 Authority Key Identifier:
                keyid:07:2C:DF:65:1B:31:2C:AF:BD:B0:49:A3:35:69:FE:A6:EF:6C:95:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByzfZRsxLK-9sEmjNWn-pu9slRc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:ba:6e:cc:2a:5a:e4:d1:d7:ca:28:12:f6:26:ee:20:d9:2d:
         1d:37:03:c8:de:1d:36:4d:c9:9d:a3:da:45:35:0e:5e:b3:56:
         00:13:50:88:87:c4:54:59:22:14:63:15:25:1e:81:30:5b:7f:
         a3:71:cf:63:a8:fd:89:7e:62:8b:99:55:df:cd:b1:39:b1:d1:
         2b:94:ee:60:66:6a:24:18:41:88:38:b3:c1:63:b8:1f:72:58:
         d3:80:7e:88:ab:b0:96:aa:3c:8d:bf:f8:6e:e1:02:c2:51:ae:
         7e:b1:08:d1:c2:88:e8:b3:e2:09:a0:0c:7a:36:e0:8c:18:9a:
         5e:9a:19:c2:96:e3:b3:7b:ac:d1:07:d5:c5:d2:76:b8:2f:4e:
         1f:96:05:b8:a3:d4:d7:37:c7:08:c5:e9:bb:9a:b0:b6:35:c5:
         4d:b7:9d:7e:8f:3a:02:3e:7c:f1:7a:34:1c:13:ac:fa:cf:9b:
         13:d1:7a:70:c3:5c:c7:f1:b9:8d:48:8a:e4:d8:57:fc:bb:51:
         c3:1d:26:6a:e8:ff:f3:24:7c:8e:a5:9e:e5:e9:8f:f8:12:d3:
         3c:20:ff:ef:e0:4b:28:87:0a:d2:8f:39:90:3c:a0:2e:3a:1f:
         5c:80:1c:df:9f:eb:e3:ba:5d:6a:76:99:79:08:03:06:06:00:
         9c:8d:d9:2f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCdcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUJDQjExMTAvBgNVBAUTKDA3MkNERjY1MUIzMTJDQUZCREIwNDlBMzM1NjlGRUE2
RUY2Qzk1MTcwHhcNMjYwNzI4MjAyNDM1WhcNMjYwODA0MjAyNDM1WjAYMRYwFAYD
VQQDEw02YTY5MTAwMy0zZGI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApw0sIJ6Fzrn+wg2kPb0IOuoo9W2CWvuOaou6vB1RM5mX7p9pCE2Dcc35jp8T
rYpUgUFkDLQvJL0w1TvdD3lsVzz8aXyTzLKkN9oLZ9yrED4+B7owRfvQmO/LKJ8m
/oFHydY4kI0pjDQbEM8xSXSv5AP5JRMVegmvskz4sL3yeYicZ/XDIPzB4XNGbG8E
ITAfZR5tt41pdb0f7WLuyJ8qVx7Ll71fdLQydGyR2ODanHUnsJoRSM6uWNjRWy9p
//RqJ4+yJQoDRuQ3QFYmqk3HUo5mX74+B2ORcNyNHc6yC6UYoMFs4RHUjeqjb+WT
uU2A9HEW7M1yWGzLIMWpGsgycwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGjzNJLB
rTWiTeq95ssAwNQnR3D2MB8GA1UdIwQYMBaAFAcs32UbMSyvvbBJozVp/qbvbJUX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkNCMS9EMDBERDQ5OEJD
MDIxMUVBQjhDNzkwNDhDNEY5QUUwMi9CeXpmWlJzeExLLTlzRW1qTlduLXB1OXNs
UmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0J5emZaUnN4TEstOXNFbWpOV24tcHU5c2xSYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QkNCMS9EMDBERDQ5OEJDMDIxMUVBQjhDNzkwNDhDNEY5QUUwMi9CeXpmWlJzeExL
LTlzRW1qTlduLXB1OXNsUmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAH7puzCpa5NHXyigS9ibuINktHTcDyN4dNk3JnaPaRTUOXrNWABNQiIfEVFki
FGMVJR6BMFt/o3HPY6j9iX5ii5lV382xObHRK5TuYGZqJBhBiDizwWO4H3JY04B+
iKuwlqo8jb/4buECwlGufrEI0cKI6LPiCaAMejbgjBiaXpoZwpbjs3us0QfVxdJ2
uC9OH5YFuKPU1zfHCMXpu5qwtjXFTbedfo86Aj588Xo0HBOs+s+bE9F6cMNcx/G5
jUiK5NhX/LtRwx0mauj/8yR8jqWe5emP+BLTPCD/7+BLKIcK0o85kDygLjofXIAc
35/r47pdanaZeQgDBgYAnI3ZLw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 03:45:25 2026 by rpki-client