Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171882/B238A184F0B311EEA4C72F84C4F9AE02/BPDYqTArIrYOMPRlG4KumZ_3TJs.mft
File:                     BPDYqTArIrYOMPRlG4KumZ_3TJs.mft (raw, json)
Hash identifier:          qSTq9oDzl71VKKcva32laigWVYxXat8pYw6GPedfJHk=
Subject key identifier:   02:AA:72:1B:76:0B:C3:BF:37:BA:C7:CF:15:D9:57:B0:45:9E:9C:0A
Authority key identifier: 04:F0:D8:A9:30:2B:22:B6:0E:30:F4:65:1B:82:AE:99:9F:F7:4C:9B
Certificate issuer:       /CN=A9171882/serialNumber=04F0D8A9302B22B60E30F4651B82AE999FF74C9B
Certificate serial:       0166
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPDYqTArIrYOMPRlG4KumZ_3TJs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171882/B238A184F0B311EEA4C72F84C4F9AE02/BPDYqTArIrYOMPRlG4KumZ_3TJs.mft
Manifest number:          0164
Signing time:             Sun 01 Mar 2026 05:52:34 +0000
Manifest this update:     Sun 01 Mar 2026 05:52:33 +0000
Manifest next update:     Sun 08 Mar 2026 05:52:33 +0000
Files and hashes:         1: BPDYqTArIrYOMPRlG4KumZ_3TJs.crl (hash: ipKQ44rCQZdl706vLobE8Fu1S4nHwj+qQTgSnca9+B4=)
                          2: 08D1870EF0B411EE962EE784C4F9AE02.roa (hash: nrFzYe2K6I+fVS0WsJAv1h0mXVgQBFKENnTmsnUT3Jo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171882/B238A184F0B311EEA4C72F84C4F9AE02/BPDYqTArIrYOMPRlG4KumZ_3TJs.crl
                          rsync://rpki.apnic.net/member_repository/A9171882/B238A184F0B311EEA4C72F84C4F9AE02/BPDYqTArIrYOMPRlG4KumZ_3TJs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPDYqTArIrYOMPRlG4KumZ_3TJs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 05:52:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 358 (0x166)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171882, serialNumber=04F0D8A9302B22B60E30F4651B82AE999FF74C9B
        Validity
            Not Before: Mar  1 05:52:33 2026 GMT
            Not After : Mar  8 05:52:33 2026 GMT
        Subject: CN=69a3d422-f332
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:34:52:d4:e5:df:dc:13:97:cd:9b:bd:77:ba:
                    4e:a3:1d:09:9e:8f:89:38:39:83:80:19:f7:04:59:
                    86:86:f7:a4:04:1f:98:7d:fe:ab:ac:22:c5:c7:0e:
                    d9:34:cb:ca:13:11:6a:56:64:f6:32:1f:b0:3d:8e:
                    97:4e:4b:0e:92:8a:68:6e:05:2b:2e:74:c3:cb:17:
                    2a:a8:60:44:d8:85:aa:0f:94:fb:2c:88:ac:ab:c2:
                    56:05:ba:20:07:f2:b8:5b:35:72:ec:7e:7f:f5:35:
                    9e:4d:8d:99:ec:0e:79:83:bd:6f:62:82:48:47:d4:
                    76:ee:3c:9f:34:19:89:cb:a0:1a:03:ae:6c:a1:86:
                    84:3c:52:4e:d4:25:04:1d:76:03:68:93:b8:d8:11:
                    ab:4b:bc:89:cf:a6:cc:04:4c:84:8b:19:51:17:0d:
                    3c:96:a4:50:6f:cb:ef:6d:ff:cd:1c:ed:58:c1:55:
                    6a:5a:94:ea:30:94:da:cd:ea:eb:b0:8d:c6:59:d8:
                    f2:c5:cd:82:a4:31:c1:38:fa:06:1f:56:46:d7:85:
                    88:66:d2:fa:bb:b8:8c:e9:a9:7a:b2:7d:8d:c1:06:
                    9e:0b:e8:f1:78:79:9f:1b:b9:17:e0:be:e0:17:e8:
                    e6:94:38:9f:cc:5d:51:27:71:24:cc:4d:f2:ed:b9:
                    21:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:AA:72:1B:76:0B:C3:BF:37:BA:C7:CF:15:D9:57:B0:45:9E:9C:0A
            X509v3 Authority Key Identifier:
                keyid:04:F0:D8:A9:30:2B:22:B6:0E:30:F4:65:1B:82:AE:99:9F:F7:4C:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171882/B238A184F0B311EEA4C72F84C4F9AE02/BPDYqTArIrYOMPRlG4KumZ_3TJs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPDYqTArIrYOMPRlG4KumZ_3TJs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171882/B238A184F0B311EEA4C72F84C4F9AE02/BPDYqTArIrYOMPRlG4KumZ_3TJs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:66:aa:4f:81:03:8a:3a:d2:82:6b:7d:45:63:c5:1c:e8:dd:
         95:6b:cf:35:41:8d:5e:49:d7:7d:e9:ea:5b:16:99:a0:ad:41:
         2f:9f:23:a8:da:05:b1:0b:50:ac:41:83:fc:26:d0:83:67:c5:
         69:0c:30:a4:9f:04:88:29:40:54:4f:55:d7:be:51:ee:98:63:
         83:42:c6:91:ef:90:ec:15:f2:f6:78:a9:e1:3d:1a:2a:2e:7f:
         92:dd:de:bf:70:a8:9e:4f:cb:cb:9c:08:03:03:60:be:6c:1c:
         fa:e5:30:05:53:68:46:7a:86:78:da:da:2c:0e:d0:bc:70:fb:
         72:73:c2:a2:af:21:9b:7c:d6:2a:c8:c6:35:9a:0c:21:4d:ed:
         52:8e:f0:ad:2f:b0:62:d0:a1:61:60:c6:eb:07:e6:14:9c:3a:
         05:61:84:89:d1:b3:77:36:f0:0b:0e:c8:a9:8c:1d:40:d4:d9:
         45:c8:69:86:1d:70:c6:31:a9:b4:97:1b:24:b5:7e:f1:81:63:
         38:1e:03:a7:af:4e:de:2a:b2:6a:87:07:b0:1d:86:56:85:c0:
         09:81:f3:fd:d9:2f:b0:12:1c:25:60:9e:12:59:a8:f0:e5:d2:
         a4:d6:84:90:97:6e:58:68:6f:d7:86:df:68:ab:87:56:77:9b:
         8c:9f:17:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:00:35 2026 by rpki-client