Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C512/22DBFEFA12A311F1A20FC6383D3D8C67/BvzPtWLbIsed8IYyJBvx-uZ658E.mft
File:                     BvzPtWLbIsed8IYyJBvx-uZ658E.mft (raw, json)
Hash identifier:          cB3QUGM+jE0OGT6NnjaqQdCH95x/69+LCtQ0yzSbVhw=
Subject key identifier:   EF:67:B6:12:0A:EE:E9:D4:D6:98:33:43:32:E5:47:22:53:E7:22:7E
Authority key identifier: 06:FC:CF:B5:62:DB:22:C7:9D:F0:86:32:24:1B:F1:FA:E6:7A:E7:C1
Certificate issuer:       /CN=A917C512/serialNumber=06FCCFB562DB22C79DF08632241BF1FAE67AE7C1
Certificate serial:       41
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BvzPtWLbIsed8IYyJBvx-uZ658E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C512/22DBFEFA12A311F1A20FC6383D3D8C67/BvzPtWLbIsed8IYyJBvx-uZ658E.mft
Manifest number:          3D
Signing time:             Sat 13 Jun 2026 06:17:24 +0000
Manifest this update:     Sat 13 Jun 2026 06:17:23 +0000
Manifest next update:     Sat 20 Jun 2026 06:17:23 +0000
Files and hashes:         1: BvzPtWLbIsed8IYyJBvx-uZ658E.crl (hash: QQqxpCTCbK9hR2yePjNDk1Pv/yUSy1LNyGtQJQFBlUI=)
                          2: 41FAA4E813B711F1A73F531B083D8C67.roa (hash: W6ELAQH0h71efzCgT0f/rl+LgjPtcikkCOm3gmjC49M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C512/22DBFEFA12A311F1A20FC6383D3D8C67/BvzPtWLbIsed8IYyJBvx-uZ658E.crl
                          rsync://rpki.apnic.net/member_repository/A917C512/22DBFEFA12A311F1A20FC6383D3D8C67/BvzPtWLbIsed8IYyJBvx-uZ658E.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BvzPtWLbIsed8IYyJBvx-uZ658E.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:50:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65 (0x41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C512, serialNumber=06FCCFB562DB22C79DF08632241BF1FAE67AE7C1
        Validity
            Not Before: Jun 13 06:17:23 2026 GMT
            Not After : Jun 20 06:17:23 2026 GMT
        Subject: CN=6a2cf5f3-ddc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:cd:a0:8e:46:3b:20:0e:ba:88:bf:b4:88:2a:
                    fc:a7:a7:09:06:86:ec:b2:80:a1:c1:05:99:c4:93:
                    77:b2:a5:38:ca:86:6c:b3:c5:74:00:6d:1f:97:ff:
                    b5:cb:3b:4e:84:09:4f:eb:12:96:e5:1c:49:70:45:
                    96:4f:f0:4e:b4:2a:a3:23:73:ad:86:b0:1b:a0:f0:
                    8a:36:b4:8b:1f:96:bb:3a:ad:10:36:b2:00:2c:42:
                    b1:f2:30:da:45:5f:70:3f:d8:32:dd:72:0d:63:47:
                    89:e8:15:90:30:8e:75:f4:07:3d:65:2f:81:e5:b8:
                    5e:10:87:fc:de:3c:82:5a:56:39:ae:d8:23:f7:51:
                    d7:21:90:72:26:80:97:cc:66:d8:a2:7a:38:c4:79:
                    8f:f5:d1:20:25:54:90:ec:a2:fa:a1:df:ec:60:00:
                    33:08:7c:7b:04:f7:ce:c5:19:51:1f:07:bb:1e:19:
                    58:5e:94:ef:82:18:74:38:a7:a2:42:e3:38:34:9b:
                    69:08:67:bf:75:b5:b2:5e:83:20:f8:8d:58:f3:63:
                    30:81:33:49:5f:44:5e:c8:d4:a6:a7:c0:50:85:70:
                    e8:f1:26:28:53:b3:a5:c4:4c:ee:5f:db:32:83:13:
                    34:52:bd:21:de:a2:1b:b7:b7:7b:85:ba:c1:e9:54:
                    74:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:67:B6:12:0A:EE:E9:D4:D6:98:33:43:32:E5:47:22:53:E7:22:7E
            X509v3 Authority Key Identifier:
                keyid:06:FC:CF:B5:62:DB:22:C7:9D:F0:86:32:24:1B:F1:FA:E6:7A:E7:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C512/22DBFEFA12A311F1A20FC6383D3D8C67/BvzPtWLbIsed8IYyJBvx-uZ658E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BvzPtWLbIsed8IYyJBvx-uZ658E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C512/22DBFEFA12A311F1A20FC6383D3D8C67/BvzPtWLbIsed8IYyJBvx-uZ658E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:e5:a5:26:42:96:c4:b6:51:de:28:b3:6e:cf:90:78:0b:71:
         ce:70:4e:59:5c:67:8f:12:21:10:91:7d:d1:5d:0a:9f:04:34:
         cf:bf:50:84:1a:e2:08:61:e8:02:11:a2:c3:5a:71:13:a4:64:
         ce:3e:8b:6b:dd:0a:ef:75:98:18:00:d0:12:96:3f:b0:5d:77:
         e6:ef:1b:57:c1:73:dc:d7:09:1c:ab:20:93:17:0c:5c:7e:17:
         27:a3:bb:fb:1a:0d:09:6a:a4:b8:0f:75:d8:b7:89:36:7b:d9:
         a8:79:c2:50:72:32:f9:4a:97:24:df:16:31:c2:c7:89:bc:2f:
         14:6b:43:3b:8e:8e:89:6a:62:0e:03:19:ec:12:21:08:52:4e:
         9a:b4:05:49:ec:d5:75:a7:9d:11:67:87:31:22:ec:95:ef:a4:
         25:a9:f8:b8:f2:eb:89:42:42:4b:3f:ef:3b:75:49:84:f3:f0:
         8b:a7:b0:ec:48:98:44:c7:32:99:bc:9a:6d:e8:ce:d7:2f:f3:
         ac:0c:8e:74:25:37:e1:6a:f0:c1:29:28:b8:28:c6:3f:eb:c6:
         8d:ed:af:71:ce:18:63:97:d3:a0:dc:6c:97:f8:e3:85:e0:08:
         71:6e:09:77:c2:54:7f:57:23:1f:bc:32:a4:d0:f3:2f:66:26:
         d6:ae:78:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:46:21 2026 by rpki-client