Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.mft
File:                     ByzfZRsxLK-9sEmjNWn-pu9slRc.mft (raw, json)
Hash identifier:          b7pYf1btez8EV9ywQLKAqxikgm7E9wHwMvGg62bSUFM=
Subject key identifier:   79:73:35:0D:79:FF:D0:C7:4A:3C:C3:1E:63:12:B0:C4:7C:D9:E6:5B
Authority key identifier: 07:2C:DF:65:1B:31:2C:AF:BD:B0:49:A3:35:69:FE:A6:EF:6C:95:17
Certificate issuer:       /CN=A915BCB1/serialNumber=072CDF651B312CAFBDB049A33569FEA6EF6C9517
Certificate serial:       09C0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByzfZRsxLK-9sEmjNWn-pu9slRc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.mft
Manifest number:          0991
Signing time:             Fri 12 Jun 2026 20:07:52 +0000
Manifest this update:     Fri 12 Jun 2026 20:07:51 +0000
Manifest next update:     Fri 19 Jun 2026 20:07:51 +0000
Files and hashes:         1: ByzfZRsxLK-9sEmjNWn-pu9slRc.crl (hash: TtbElMrReWP23g9VPk0Gq9d/zBOvJEUj3jMxmYstK8c=)
                          2: DF5E7CB6ED9C11EE81EFD40BC4F9AE02.roa (hash: fjWgAJnqDT9NesXOUtIXnUStrD3jUP0xK+W90KMvE+0=)
                          3: 7A2B979E763011EFBA86FD49C4F9AE02.roa (hash: 8hJGe41GHn/nQb/Y3ash++TM6zmcpgNi96YBeazW6/I=)
                          4: 29BE072046FF11EF9A76C461C4F9AE02.roa (hash: m59icjETbPEsJARtE8RwhDRHt46zarweYBmDC8Z0f0c=)
                          5: 880C4DF80FE411EE90944D75C4F9AE02.roa (hash: Y0bI926X3CaUrT8/nR8ZBhkaoJ5AjGGl5LLomYvK2ug=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.crl
                          rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByzfZRsxLK-9sEmjNWn-pu9slRc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 20:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2496 (0x9c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915BCB1, serialNumber=072CDF651B312CAFBDB049A33569FEA6EF6C9517
        Validity
            Not Before: Jun 12 20:07:51 2026 GMT
            Not After : Jun 19 20:07:51 2026 GMT
        Subject: CN=6a2c6717-1197
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:5e:20:e5:6c:bc:e7:4b:3b:2d:c2:1c:c7:73:
                    95:77:b0:3f:5b:8f:34:9c:3e:f2:b7:05:68:e7:d3:
                    57:2d:0f:f6:54:42:ec:06:ab:d5:60:2e:2d:48:09:
                    91:76:41:d8:a2:49:87:54:a9:16:4a:79:97:49:ad:
                    c4:20:21:5a:bf:04:9f:64:2e:fc:6e:39:0f:47:67:
                    d4:ba:51:d2:38:59:8c:63:1e:05:a9:53:1f:42:e9:
                    83:86:1c:65:18:3e:ba:80:c4:d6:ee:56:8f:17:7a:
                    e2:eb:3d:e0:82:ff:dd:a9:8f:76:9b:a4:27:12:6a:
                    05:b7:bb:85:7c:89:e2:e7:9b:87:27:6d:e9:c8:5d:
                    d5:34:98:3d:03:2b:8a:23:94:4c:8f:fc:b8:b7:b1:
                    50:93:f2:46:c4:02:74:3e:79:41:12:a9:ee:99:e9:
                    d5:c3:80:79:64:4d:ac:d3:43:51:fe:1c:83:00:da:
                    6a:f6:1d:8b:97:63:e2:aa:43:13:12:a1:cb:54:8f:
                    8d:fd:ef:f0:e2:34:41:41:8d:75:98:c8:6f:e8:f4:
                    0b:44:3a:77:fe:71:10:62:3a:27:af:a7:55:ef:bf:
                    35:74:b4:fc:76:0d:80:f8:a5:80:1b:a0:90:33:fd:
                    5b:30:f4:11:d6:4b:15:b3:26:30:ba:1e:c5:99:b9:
                    7f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:73:35:0D:79:FF:D0:C7:4A:3C:C3:1E:63:12:B0:C4:7C:D9:E6:5B
            X509v3 Authority Key Identifier:
                keyid:07:2C:DF:65:1B:31:2C:AF:BD:B0:49:A3:35:69:FE:A6:EF:6C:95:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByzfZRsxLK-9sEmjNWn-pu9slRc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:0a:a1:54:c0:6f:b2:b1:ae:28:91:39:0f:1f:ec:0b:15:e2:
         58:43:3b:79:fb:b1:84:36:81:1a:91:69:47:2d:71:b4:9a:fd:
         77:84:4b:7b:a4:31:33:27:a0:64:60:57:f7:ce:a3:fa:07:80:
         97:68:8c:d4:0b:71:8e:57:c7:22:0b:5a:a0:d6:af:e9:53:85:
         3c:f6:01:37:93:96:f2:63:65:d6:c9:4b:62:ed:79:3e:6d:b4:
         09:cf:32:ae:69:01:c6:fd:1f:5c:38:47:5b:97:0d:35:33:86:
         7d:b9:05:56:1f:7a:69:a1:cf:bc:85:86:f0:cd:74:a5:8a:b7:
         1b:9b:bf:6f:50:51:ab:e6:eb:f3:f0:c0:c6:ff:44:41:02:f3:
         60:f6:30:2a:39:2b:ca:be:23:76:3e:58:03:32:7a:80:6b:91:
         8b:fb:a5:02:99:e4:68:78:25:80:17:44:4e:3b:98:28:d7:2d:
         b5:ce:94:91:fc:b1:78:f9:5d:35:41:b0:2c:54:5f:0f:e8:2c:
         c3:7d:2b:d2:00:cd:ff:b2:53:eb:6c:ac:0a:76:7c:0c:ee:66:
         7d:07:75:88:e0:0f:14:6c:b1:c6:4e:80:70:d3:1b:ff:47:16:
         ac:65:8d:96:18:6c:4f:e3:f4:bf:7f:7f:61:3a:17:14:a7:2c:
         8c:e0:91:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:41:48 2026 by rpki-client