Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91626D2/AF20834E13F511EFA09D321BC4F9AE02/bDt_HBM9qcUdRE2oXmAqloRR_lQ.mft
File:                     bDt_HBM9qcUdRE2oXmAqloRR_lQ.mft (raw, json)
Hash identifier:          GZwFLT7C9vh7O3SxVAnbPg6aS7OHKjhg0vRRVYkMLjo=
Subject key identifier:   51:4F:A4:05:4C:EF:4E:04:AB:79:7E:C6:26:19:03:B1:DA:A4:93:3E
Authority key identifier: 6C:3B:7F:1C:13:3D:A9:C5:1D:44:4D:A8:5E:60:2A:96:84:51:FE:54
Certificate issuer:       /CN=A91626D2/serialNumber=6C3B7F1C133DA9C51D444DA85E602A968451FE54
Certificate serial:       01AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bDt_HBM9qcUdRE2oXmAqloRR_lQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91626D2/AF20834E13F511EFA09D321BC4F9AE02/bDt_HBM9qcUdRE2oXmAqloRR_lQ.mft
Manifest number:          01A3
Signing time:             Wed 29 Jul 2026 05:26:52 +0000
Manifest this update:     Wed 29 Jul 2026 05:26:51 +0000
Manifest next update:     Wed 05 Aug 2026 05:26:51 +0000
Files and hashes:         1: bDt_HBM9qcUdRE2oXmAqloRR_lQ.crl (hash: E0bwfLLptqqygHPwR5pkSIoRY5zbIaUE5IAOHFw86Vs=)
                          2: 8093CCBA13F611EF8ED7D71EC4F9AE02.roa (hash: xPyb9jdVPxFNqu7DjwvZN/gxmMuIyOp+jROsuWdv+So=)
                          3: B88A958007B611F1BF9DF7EA143D8C67.roa (hash: EzgQAPl/vUlyh5AjsIyBAeaJMqrmt2E1TV7jxVlr6ZU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91626D2/AF20834E13F511EFA09D321BC4F9AE02/bDt_HBM9qcUdRE2oXmAqloRR_lQ.crl
                          rsync://rpki.apnic.net/member_repository/A91626D2/AF20834E13F511EFA09D321BC4F9AE02/bDt_HBM9qcUdRE2oXmAqloRR_lQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bDt_HBM9qcUdRE2oXmAqloRR_lQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 05:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 427 (0x1ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91626D2, serialNumber=6C3B7F1C133DA9C51D444DA85E602A968451FE54
        Validity
            Not Before: Jul 29 05:26:51 2026 GMT
            Not After : Aug  5 05:26:51 2026 GMT
        Subject: CN=6a698f1b-4d2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:2e:7f:9f:3f:90:e6:64:54:9a:89:e4:8b:fd:
                    b7:52:a6:82:8e:aa:06:90:7e:c0:c3:e7:4d:e4:19:
                    6a:94:2e:61:66:c3:b7:72:29:84:10:ff:11:79:a4:
                    d8:97:89:f7:f0:0e:46:dc:1f:29:3b:50:01:3d:39:
                    e0:94:38:e7:72:30:a0:87:29:32:47:16:0c:4d:63:
                    30:ca:ff:9e:77:e6:64:5f:ac:7f:0f:c2:f1:c8:a1:
                    e8:38:39:f3:08:25:af:8a:9f:70:3c:58:3c:24:93:
                    54:e9:7c:da:d3:87:69:5c:27:e5:ea:85:46:69:c6:
                    1c:7d:11:66:cd:af:9b:84:57:66:e8:e7:ac:1b:f4:
                    45:76:10:3a:a2:57:01:f9:85:31:de:00:da:16:d9:
                    ab:06:9e:c3:5a:d0:55:1e:b2:f3:eb:fd:e6:d7:a2:
                    2f:ad:d5:f9:9a:1d:0d:72:b4:8d:58:94:a6:83:d1:
                    b4:41:e7:7c:f7:4e:e1:2e:5e:18:37:af:f3:5e:aa:
                    ee:6e:07:44:1b:fc:b9:7e:03:eb:d2:8a:c3:ee:eb:
                    98:b0:13:25:3c:ff:62:53:22:c0:ee:17:05:b9:56:
                    11:e4:c6:de:64:f2:7f:41:6a:44:58:87:0f:09:de:
                    5e:a6:d7:f2:62:d2:bf:1e:09:79:90:aa:aa:03:69:
                    29:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:4F:A4:05:4C:EF:4E:04:AB:79:7E:C6:26:19:03:B1:DA:A4:93:3E
            X509v3 Authority Key Identifier:
                keyid:6C:3B:7F:1C:13:3D:A9:C5:1D:44:4D:A8:5E:60:2A:96:84:51:FE:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91626D2/AF20834E13F511EFA09D321BC4F9AE02/bDt_HBM9qcUdRE2oXmAqloRR_lQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bDt_HBM9qcUdRE2oXmAqloRR_lQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91626D2/AF20834E13F511EFA09D321BC4F9AE02/bDt_HBM9qcUdRE2oXmAqloRR_lQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:a6:4e:da:ba:56:77:b0:f0:eb:ec:87:97:77:a1:79:3c:fd:
         48:71:73:5e:8f:c7:23:f8:d2:48:c4:03:c6:b1:6d:4e:05:99:
         1a:3a:8e:19:ba:37:4e:3e:b9:32:59:19:e9:48:66:5b:f6:43:
         9c:44:4c:dd:e5:cd:bd:bb:30:46:4e:9a:58:81:1f:3a:83:98:
         c4:8c:39:c6:48:6d:9f:2c:7a:fa:0f:62:4b:be:a9:9a:6e:62:
         c9:41:71:eb:ad:fb:2f:23:e4:0e:96:eb:e0:68:77:67:72:c6:
         e3:5c:df:96:61:10:31:53:f1:33:19:85:5f:61:7c:c0:f2:86:
         e8:c6:d8:b3:f2:97:a3:bb:ed:74:81:f5:f2:79:4d:f9:c9:8f:
         b8:da:b5:ac:2b:65:4a:37:cf:ee:a7:4c:85:5c:fc:a9:0b:d0:
         eb:61:3a:9e:42:c1:33:0c:f9:3b:35:cc:d2:f7:e4:b7:e3:2e:
         49:c3:b8:10:a9:cb:5b:12:ff:a2:1e:4f:c5:1d:43:57:86:33:
         28:a8:bd:86:e2:88:34:e2:33:9f:78:b7:d0:a3:a6:ed:ad:c1:
         03:74:0e:e4:b1:66:80:f8:e5:cb:ff:23:14:99:79:16:ad:99:
         f9:ca:8b:d7:b2:d0:ef:56:f2:fa:70:be:98:76:ed:66:4f:a6:
         b3:96:02:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 17:42:32 2026 by rpki-client