Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917412F/D411414C6D5611E590D87472C4F9AE02/BFtcCGfeWB0rdIQv74BFwad76L0.mft
File:                     BFtcCGfeWB0rdIQv74BFwad76L0.mft (raw, json)
Hash identifier:          GD+Tb4jyWEJtYNC8r6QBVdftbCQco/fTQFzhdszRZ6A=
Subject key identifier:   33:5A:EB:43:25:0C:54:70:60:B6:67:D9:1F:D3:4A:7E:88:E3:EF:28
Authority key identifier: 04:5B:5C:08:67:DE:58:1D:2B:74:84:2F:EF:80:45:C1:A7:7B:E8:BD
Certificate issuer:       /CN=A917412F/serialNumber=045B5C0867DE581D2B74842FEF8045C1A77BE8BD
Certificate serial:       247D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BFtcCGfeWB0rdIQv74BFwad76L0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917412F/D411414C6D5611E590D87472C4F9AE02/BFtcCGfeWB0rdIQv74BFwad76L0.mft
Manifest number:          2443
Signing time:             Sat 28 Feb 2026 15:49:07 +0000
Manifest this update:     Sat 28 Feb 2026 15:49:07 +0000
Manifest next update:     Sat 07 Mar 2026 15:49:07 +0000
Files and hashes:         1: BFtcCGfeWB0rdIQv74BFwad76L0.crl (hash: EwwCyZap3I0FDfUzXvIaBh3sN59cUkhbhFWvaFidm/c=)
                          2: FCF0A580B10D11E5894F4D1CC4F9AE02.roa (hash: +2MMI4KCUim/55I1v/CcFFWM8c4do3z3Prc4iRx7/lQ=)
                          3: F9ED1B16B10D11E5894F4D1CC4F9AE02.roa (hash: fkO78SaWxLHL6UEeOmDkgAwdKa1QD3bVWVMip2dHju0=)
                          4: F8623718B10D11E5894F4D1CC4F9AE02.roa (hash: 2VqKtLp4I4n3i3xfxJ0a0zauep05yhz4m6vcbsayeiY=)
                          5: FB87E4C4B10D11E5894F4D1CC4F9AE02.roa (hash: Xr4axXAE5xhZlqvtubxZ2pb3RMbCF82Tss/A5eKchFs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917412F/D411414C6D5611E590D87472C4F9AE02/BFtcCGfeWB0rdIQv74BFwad76L0.crl
                          rsync://rpki.apnic.net/member_repository/A917412F/D411414C6D5611E590D87472C4F9AE02/BFtcCGfeWB0rdIQv74BFwad76L0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BFtcCGfeWB0rdIQv74BFwad76L0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 15:49:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9341 (0x247d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917412F, serialNumber=045B5C0867DE581D2B74842FEF8045C1A77BE8BD
        Validity
            Not Before: Feb 28 15:49:07 2026 GMT
            Not After : Mar  7 15:49:07 2026 GMT
        Subject: CN=69a30e73-2ed1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:aa:30:9c:d1:05:09:1b:de:d9:39:63:ec:08:
                    1d:25:bf:b1:4c:ef:29:d4:a0:d5:8f:40:b3:bf:df:
                    21:a4:db:57:57:76:55:2d:c4:6d:bf:ee:b1:da:b6:
                    c2:07:3e:49:12:3e:9e:fc:11:21:64:99:b4:ff:ec:
                    6b:58:67:05:60:c6:b3:9c:64:62:8a:c3:01:17:c3:
                    6e:13:f9:85:d7:14:fe:c4:ab:91:8b:dc:88:cc:76:
                    90:44:43:22:97:5d:e6:12:b3:27:eb:01:c0:f4:d7:
                    ae:be:c1:d6:0a:a1:39:bd:82:6a:a0:50:80:ff:d7:
                    46:20:91:ac:cf:71:35:47:8f:50:35:9e:e2:f0:f4:
                    2f:57:9e:6c:94:39:d7:f4:2c:3b:94:f6:ed:e8:91:
                    8b:0c:39:fb:51:18:a1:6b:9c:5e:a0:7d:c3:7c:c4:
                    d0:a6:16:f8:52:ba:b4:1f:63:f0:3a:fb:4f:d9:31:
                    8b:b2:7a:12:5c:f3:32:ff:b7:6a:90:61:55:e1:ce:
                    91:25:92:02:27:97:dc:53:37:78:fc:19:1e:57:8c:
                    e0:b7:60:9c:60:f6:80:03:50:02:21:b0:15:5a:24:
                    ed:48:0a:24:18:37:4e:49:98:14:2a:26:15:e2:cd:
                    37:7e:c2:8a:19:b3:bc:af:7f:0e:00:97:40:6b:5d:
                    58:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:5A:EB:43:25:0C:54:70:60:B6:67:D9:1F:D3:4A:7E:88:E3:EF:28
            X509v3 Authority Key Identifier:
                keyid:04:5B:5C:08:67:DE:58:1D:2B:74:84:2F:EF:80:45:C1:A7:7B:E8:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917412F/D411414C6D5611E590D87472C4F9AE02/BFtcCGfeWB0rdIQv74BFwad76L0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BFtcCGfeWB0rdIQv74BFwad76L0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917412F/D411414C6D5611E590D87472C4F9AE02/BFtcCGfeWB0rdIQv74BFwad76L0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:06:a8:ed:8b:92:ad:9b:b9:24:6f:51:2d:d5:27:78:13:a1:
         84:21:63:11:63:fb:0f:1b:2d:18:8b:87:8c:88:0a:f5:7b:ce:
         fa:61:3f:6b:f1:c5:36:12:bf:11:53:a2:2d:6b:ca:95:7f:c9:
         60:43:10:14:a7:b1:e6:a8:50:3a:bb:61:ea:ce:73:ae:74:e3:
         97:0c:ca:16:40:72:f3:f2:6a:6b:13:87:e9:32:79:95:f5:bf:
         ad:6c:67:2c:18:46:bd:51:da:fc:68:f0:2e:eb:f7:d0:67:68:
         49:e1:03:fc:22:0c:f4:4a:c4:f8:09:f0:f4:45:de:79:df:2c:
         c2:ac:60:74:88:21:3c:0f:46:bc:d7:81:24:68:a0:a1:73:ca:
         95:34:17:23:88:c3:2f:e9:c9:10:98:5f:9a:25:a9:99:63:71:
         4a:45:0f:74:5b:42:d8:e5:c4:ac:c9:55:15:33:4d:43:70:7e:
         ed:12:1e:f7:b3:94:bf:02:d1:b2:e9:2b:a9:3a:90:2b:bf:9b:
         c4:6d:a8:34:71:04:61:e4:54:1c:be:2d:e5:fd:ad:67:c1:48:
         5d:9b:ce:06:e2:ae:dc:42:4e:21:de:8b:49:59:91:53:e5:c7:
         e7:6a:fd:43:e1:26:c4:31:8e:4f:a3:52:34:e1:43:3b:6f:3d:
         da:48:97:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:33:35 2026 by rpki-client