Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916103C/FA428F549A0711F081017E86C4F9AE02/bpqY2b1mOH9IPQa2gz2i3Ep_NoY.mft
File:                     bpqY2b1mOH9IPQa2gz2i3Ep_NoY.mft (raw, json)
Hash identifier:          zquoHv9VoyRXFXnO7fY2JKgN+adRbU/yJl59ecp/zbA=
Subject key identifier:   95:9C:C6:63:CD:A0:22:68:B6:BE:57:81:D1:07:E7:94:23:6F:F0:0A
Authority key identifier: 6E:9A:98:D9:BD:66:38:7F:48:3D:06:B6:83:3D:A2:DC:4A:7F:36:86
Certificate issuer:       /CN=A916103C/serialNumber=6E9A98D9BD66387F483D06B6833DA2DC4A7F3686
Certificate serial:       57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpqY2b1mOH9IPQa2gz2i3Ep_NoY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916103C/FA428F549A0711F081017E86C4F9AE02/bpqY2b1mOH9IPQa2gz2i3Ep_NoY.mft
Manifest number:          54
Signing time:             Sun 01 Mar 2026 09:37:07 +0000
Manifest this update:     Sun 01 Mar 2026 09:37:07 +0000
Manifest next update:     Sun 08 Mar 2026 09:37:07 +0000
Files and hashes:         1: bpqY2b1mOH9IPQa2gz2i3Ep_NoY.crl (hash: aXU9CMBpU1tvfUIeTzKbb1YMGk7PQMijpEkOgbUSalY=)
                          2: 6F8F75C49A0811F0AB023487C4F9AE02.roa (hash: /b5wosAPirzR7z8l8ddHa+xhWDIj0SNlWEAWkIZ6EwY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916103C/FA428F549A0711F081017E86C4F9AE02/bpqY2b1mOH9IPQa2gz2i3Ep_NoY.crl
                          rsync://rpki.apnic.net/member_repository/A916103C/FA428F549A0711F081017E86C4F9AE02/bpqY2b1mOH9IPQa2gz2i3Ep_NoY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpqY2b1mOH9IPQa2gz2i3Ep_NoY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:37:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 87 (0x57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916103C, serialNumber=6E9A98D9BD66387F483D06B6833DA2DC4A7F3686
        Validity
            Not Before: Mar  1 09:37:07 2026 GMT
            Not After : Mar  8 09:37:07 2026 GMT
        Subject: CN=69a408c3-eb87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:96:b4:6c:ef:2f:4e:0a:28:57:fc:d2:6b:2e:
                    a3:f4:25:8c:7d:83:22:70:47:52:17:85:e6:a0:0f:
                    e5:06:05:06:89:6c:19:44:c0:8d:5d:f2:f5:0a:21:
                    3e:b7:81:50:df:48:d5:66:13:6a:0a:a9:d1:90:7f:
                    ec:fd:87:39:c7:bf:f9:14:f1:26:b3:cf:1d:47:8c:
                    c1:f5:33:f9:9d:3d:57:9f:5e:ed:75:a9:a2:49:ac:
                    19:e4:e8:f7:80:6d:77:83:4b:8a:d1:d9:44:80:85:
                    a7:92:1c:41:cd:0d:e9:c3:38:15:4e:13:0d:4b:79:
                    ba:d9:64:99:00:ad:ff:12:b9:00:64:1e:2f:a4:16:
                    70:f0:2a:7e:71:a2:b3:2b:ee:c9:5e:1c:b9:51:33:
                    60:f4:74:34:50:1b:b3:ae:d4:3a:1c:00:00:3c:86:
                    56:9c:30:2c:c1:90:c5:a7:d7:35:6d:77:ed:06:4b:
                    f6:57:8e:78:d0:a1:fd:c4:ba:2b:80:ee:f0:71:98:
                    13:40:c0:cc:f9:e3:8d:9f:08:0f:96:16:85:a9:c1:
                    7a:a5:6a:e5:af:a0:14:b0:82:d6:78:67:36:e9:b9:
                    93:16:ee:cc:5c:21:a4:5f:ab:87:47:c5:39:87:46:
                    23:28:0e:ba:b9:29:6c:f5:3b:de:a2:b2:17:19:94:
                    43:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:9C:C6:63:CD:A0:22:68:B6:BE:57:81:D1:07:E7:94:23:6F:F0:0A
            X509v3 Authority Key Identifier:
                keyid:6E:9A:98:D9:BD:66:38:7F:48:3D:06:B6:83:3D:A2:DC:4A:7F:36:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916103C/FA428F549A0711F081017E86C4F9AE02/bpqY2b1mOH9IPQa2gz2i3Ep_NoY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpqY2b1mOH9IPQa2gz2i3Ep_NoY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916103C/FA428F549A0711F081017E86C4F9AE02/bpqY2b1mOH9IPQa2gz2i3Ep_NoY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:31:87:99:0d:70:21:45:f7:f3:d8:28:a4:72:9d:69:d9:83:
         fb:ad:a7:1c:4d:3b:a0:42:c2:2d:ac:d4:7c:81:7d:e5:3e:e0:
         e2:49:51:03:d8:a4:2d:06:32:7f:57:84:19:c0:49:e4:67:16:
         16:b7:c7:5c:a4:61:c7:62:68:5b:3d:c5:68:57:32:e8:a3:0f:
         e9:13:50:e6:41:50:e6:d6:6e:8e:65:d8:7d:d4:ab:4f:a3:8b:
         ad:2e:02:2f:e5:01:d4:f4:e0:aa:a2:0a:89:47:6c:d6:94:a9:
         0c:5b:cd:07:ec:4c:d3:8c:ab:e7:e5:c8:20:83:fb:48:43:7e:
         5b:91:b1:79:51:95:eb:9e:a2:b7:0a:01:db:45:14:5c:50:58:
         4c:77:12:7c:3e:c3:2f:e1:b6:0b:b6:c7:4f:8c:44:7e:03:58:
         46:00:06:25:e2:2c:37:c8:7c:65:06:ca:2a:ed:3f:cf:81:18:
         7b:32:e4:8f:c5:49:ba:70:7f:53:d8:1a:be:61:fb:49:60:81:
         c6:a3:66:4c:a7:e8:c7:e6:2c:78:33:4e:00:de:d4:6b:6a:0f:
         48:0b:c4:d9:80:5e:51:2f:cf:21:a1:36:02:4c:4b:94:88:93:
         a3:4f:01:4e:ef:e6:33:93:ce:b8:ac:46:c3:aa:f9:a5:a7:53:
         dc:6f:47:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:21:55 2026 by rpki-client