Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.mft
File:                     BCkMsk7u8KOnhxh8tP_HR96GFzE.mft (raw, json)
Hash identifier:          VzToYf/lqzsRC/EhbX2xoEaFfngcxf6NdGIZxdyKAr4=
Subject key identifier:   97:08:D9:F0:32:97:6C:F4:A3:85:BC:7C:02:23:32:0F:B4:8C:6D:03
Authority key identifier: 04:29:0C:B2:4E:EE:F0:A3:A7:87:18:7C:B4:FF:C7:47:DE:86:17:31
Certificate issuer:       /CN=A915F316/serialNumber=04290CB24EEEF0A3A787187CB4FFC747DE861731
Certificate serial:       086D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BCkMsk7u8KOnhxh8tP_HR96GFzE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.mft
Manifest number:          0859
Signing time:             Mon 02 Mar 2026 02:55:47 +0000
Manifest this update:     Mon 02 Mar 2026 02:55:46 +0000
Manifest next update:     Mon 09 Mar 2026 02:55:46 +0000
Files and hashes:         1: BCkMsk7u8KOnhxh8tP_HR96GFzE.crl (hash: bIADePacYDyFAsnm+oUqPPitE/RQt617YdeDy01ACc4=)
                          2: F72BF19CB4C711EE84AE602CC4F9AE02.roa (hash: NOqEaP7U/yGr1eMLYAeMdC9Ec160B/2VK+AAEC/VD28=)
                          3: 21A84DDAB4C811EE98BFC52CC4F9AE02.roa (hash: aKo7kU9VzRLVHM7TZXIM7HCq0FFfzX8NtTNUa7Z5tOk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.crl
                          rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BCkMsk7u8KOnhxh8tP_HR96GFzE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:55:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2157 (0x86d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915F316, serialNumber=04290CB24EEEF0A3A787187CB4FFC747DE861731
        Validity
            Not Before: Mar  2 02:55:46 2026 GMT
            Not After : Mar  9 02:55:46 2026 GMT
        Subject: CN=69a4fc33-5b46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e8:6b:63:1d:6d:32:61:e5:b0:0b:11:50:3a:
                    19:f1:ef:31:69:89:df:88:d6:e1:47:63:50:f2:fe:
                    c2:05:19:34:61:63:bd:a0:03:50:0b:53:a7:4d:f3:
                    59:c8:1b:83:23:3f:77:e9:e3:eb:5d:2a:73:86:41:
                    c7:9c:c1:b9:0b:30:ea:a8:b5:f0:77:c8:f0:97:a0:
                    3e:25:b1:f2:a9:a9:83:f4:a4:93:f8:5f:4e:d4:15:
                    19:34:bf:b8:30:1b:33:02:87:71:cf:8f:3d:a0:11:
                    10:4e:0b:76:8d:d8:85:9a:0b:ff:3d:15:24:a3:2a:
                    38:e5:7e:7b:48:05:64:82:a8:d1:de:00:3f:d8:73:
                    3a:56:ac:f4:4e:4f:35:5c:e3:27:bf:7d:c5:e1:32:
                    f4:72:4d:5c:5e:62:ba:85:6f:45:43:b3:da:69:8c:
                    a2:21:25:ba:21:c9:33:33:ed:61:23:59:be:01:58:
                    94:d7:22:ae:00:85:d7:b1:18:b6:ac:34:1c:11:87:
                    64:5e:3e:99:52:c3:d9:07:c2:a7:22:fe:81:70:80:
                    66:49:6c:b6:4b:30:ff:da:12:ab:b5:11:88:da:75:
                    fb:39:8a:43:b1:ff:ea:86:01:c4:63:38:86:90:db:
                    4f:d3:94:38:2f:60:ae:50:ee:9f:97:aa:87:89:96:
                    6f:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:08:D9:F0:32:97:6C:F4:A3:85:BC:7C:02:23:32:0F:B4:8C:6D:03
            X509v3 Authority Key Identifier:
                keyid:04:29:0C:B2:4E:EE:F0:A3:A7:87:18:7C:B4:FF:C7:47:DE:86:17:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BCkMsk7u8KOnhxh8tP_HR96GFzE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:91:e8:36:2d:c0:c2:4f:19:6f:ae:1e:18:56:b3:d9:f2:42:
         d0:bf:80:28:51:f2:9d:b6:60:7c:5e:45:93:49:05:87:85:0f:
         62:51:c5:8b:c1:cd:b7:80:ef:68:dd:b7:0a:97:dd:e8:1f:31:
         96:eb:6b:68:21:f2:63:8a:a8:16:5b:8e:0d:33:5f:d7:de:a7:
         e8:ee:63:51:1d:30:38:3d:ed:3a:6c:8f:4c:f6:37:4b:2e:5d:
         e0:b7:f5:34:9e:59:8b:80:79:ca:01:37:13:a9:bd:61:4f:b0:
         9b:77:e6:0f:28:2e:fc:53:a9:f5:4c:13:8e:3b:72:17:9c:25:
         70:a0:40:e6:84:fa:55:fe:a4:b5:1a:d2:75:69:77:73:48:04:
         d9:b2:80:17:09:cf:fb:cc:8c:39:66:2c:c2:f2:2b:cf:5c:17:
         47:93:9d:b0:33:21:4a:21:aa:db:e7:69:16:3f:bf:b6:99:51:
         0c:f8:e6:11:49:5f:ad:d4:56:de:75:79:d4:bf:3a:24:78:29:
         4b:63:3a:9d:cc:32:06:a6:95:70:b6:90:d4:ad:a4:6b:3a:04:
         11:ce:dd:ff:b4:e4:f1:42:ec:4a:9b:c9:fb:01:bd:66:41:89:
         11:8d:7a:c6:c1:ee:cd:3d:94:49:2f:85:42:e8:0d:bf:9e:cc:
         54:c2:c7:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:19:08 2026 by rpki-client