Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916103C/FA428F549A0711F081017E86C4F9AE02/bpqY2b1mOH9IPQa2gz2i3Ep_NoY.mft
File:                     bpqY2b1mOH9IPQa2gz2i3Ep_NoY.mft (raw, json)
Hash identifier:          1EvJJfWbeiQ8mxMtRJWE4Ab7raZeCTPiqXhCO6eCoH0=
Subject key identifier:   85:3B:E7:4B:91:95:41:B6:AC:0D:FF:41:0E:93:06:FF:D0:12:D9:E1
Authority key identifier: 6E:9A:98:D9:BD:66:38:7F:48:3D:06:B6:83:3D:A2:DC:4A:7F:36:86
Certificate issuer:       /CN=A916103C/serialNumber=6E9A98D9BD66387F483D06B6833DA2DC4A7F3686
Certificate serial:       6F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpqY2b1mOH9IPQa2gz2i3Ep_NoY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916103C/FA428F549A0711F081017E86C4F9AE02/bpqY2b1mOH9IPQa2gz2i3Ep_NoY.mft
Manifest number:          6C
Signing time:             Fri 17 Apr 2026 07:36:23 +0000
Manifest this update:     Fri 17 Apr 2026 07:36:22 +0000
Manifest next update:     Fri 24 Apr 2026 07:36:22 +0000
Files and hashes:         1: bpqY2b1mOH9IPQa2gz2i3Ep_NoY.crl (hash: mLHw++Yf3Jfl2n8IegjGDhE3zMXQN52ZkwklT5drSfU=)
                          2: 6F8F75C49A0811F0AB023487C4F9AE02.roa (hash: /b5wosAPirzR7z8l8ddHa+xhWDIj0SNlWEAWkIZ6EwY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916103C/FA428F549A0711F081017E86C4F9AE02/bpqY2b1mOH9IPQa2gz2i3Ep_NoY.crl
                          rsync://rpki.apnic.net/member_repository/A916103C/FA428F549A0711F081017E86C4F9AE02/bpqY2b1mOH9IPQa2gz2i3Ep_NoY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpqY2b1mOH9IPQa2gz2i3Ep_NoY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:36:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111 (0x6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916103C, serialNumber=6E9A98D9BD66387F483D06B6833DA2DC4A7F3686
        Validity
            Not Before: Apr 17 07:36:22 2026 GMT
            Not After : Apr 24 07:36:22 2026 GMT
        Subject: CN=69e1e2f7-762f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ee:b3:33:80:ae:50:19:34:47:83:6b:8f:f5:
                    f9:10:8f:58:61:1c:e6:d2:6c:42:2f:8c:7b:04:d3:
                    a5:bc:bc:ff:d5:c7:a6:b0:2e:e0:cd:4d:a4:60:b2:
                    6b:c7:26:bc:bd:69:56:a5:32:cb:7a:6d:aa:89:f3:
                    b3:18:89:b5:e0:b3:e0:20:df:68:55:a4:53:94:bd:
                    3b:28:49:24:ff:a5:a0:fc:a1:22:de:66:31:5d:fd:
                    b8:fa:de:31:07:f4:12:2f:de:15:e8:c6:8b:86:8a:
                    83:3a:7e:f1:d9:24:75:4c:5b:1c:39:de:8f:21:12:
                    0d:ba:19:0c:6a:0e:bf:c0:02:71:16:8a:a0:7c:c2:
                    09:aa:3b:07:13:65:56:db:9b:ba:a5:a6:8f:4a:5e:
                    0c:a9:a0:88:d7:be:f7:5e:9f:43:c1:1f:95:6d:e7:
                    a3:2c:4b:3c:3e:23:8b:77:21:29:da:7c:a4:fc:18:
                    c0:18:12:cd:7a:72:27:66:77:c9:98:87:6c:38:18:
                    a3:1b:d8:e3:24:3a:ac:ad:10:af:78:51:a6:1a:b8:
                    b7:cf:90:57:04:d8:f5:8e:8a:46:76:26:fb:4c:bd:
                    14:9c:0b:b1:8f:7c:88:ac:a9:a5:ba:94:0b:bf:41:
                    71:c5:a1:ce:e4:09:d3:d6:d5:5f:ea:e5:76:98:27:
                    8b:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:3B:E7:4B:91:95:41:B6:AC:0D:FF:41:0E:93:06:FF:D0:12:D9:E1
            X509v3 Authority Key Identifier:
                keyid:6E:9A:98:D9:BD:66:38:7F:48:3D:06:B6:83:3D:A2:DC:4A:7F:36:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916103C/FA428F549A0711F081017E86C4F9AE02/bpqY2b1mOH9IPQa2gz2i3Ep_NoY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpqY2b1mOH9IPQa2gz2i3Ep_NoY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916103C/FA428F549A0711F081017E86C4F9AE02/bpqY2b1mOH9IPQa2gz2i3Ep_NoY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:cf:de:0c:4b:b2:1e:eb:e0:ab:cc:c0:25:3b:47:7a:d4:01:
         06:7e:f8:79:8b:7d:91:08:53:65:27:39:28:d0:e1:7a:67:09:
         0d:94:be:cd:0b:b6:77:59:c0:fd:31:72:e9:b9:f6:b1:4d:a1:
         8c:8e:c4:2b:97:85:e9:33:af:96:5c:7c:e4:bd:0b:7d:8b:74:
         df:f6:f1:fb:63:e2:7c:73:7d:50:7d:b4:ec:a3:6a:5c:4a:f4:
         c1:27:11:1c:0c:8a:03:33:c6:65:97:b3:d8:ae:68:a4:14:5b:
         03:0d:d5:8b:d0:a9:dc:89:eb:33:5c:f5:d0:b5:16:5f:fb:db:
         d3:bd:e5:6b:4f:30:5f:2c:39:7a:ba:10:a3:41:47:9d:d8:61:
         c7:23:0d:04:6d:ea:6c:14:c9:5e:ae:f3:45:eb:10:da:9c:0f:
         e3:d9:5b:be:5c:2a:b0:b4:e7:a7:9d:78:f3:2a:46:8c:f0:87:
         a1:32:fc:98:6e:4e:c7:c7:4b:40:88:35:f9:c7:2b:45:4e:d0:
         96:73:84:a7:26:94:e6:c1:df:5f:e9:c9:fb:3d:67:1c:74:36:
         3a:18:23:8b:f9:02:c9:ed:2f:b8:92:a8:d0:92:35:a1:65:b3:
         0d:c5:d0:e4:ad:94:35:7a:00:18:a1:4a:22:47:11:f5:b6:47:
         81:d4:67:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:14:36 2026 by rpki-client