Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C512/22DBFEFA12A311F1A20FC6383D3D8C67/BvzPtWLbIsed8IYyJBvx-uZ658E.mft
File:                     BvzPtWLbIsed8IYyJBvx-uZ658E.mft (raw, json)
Hash identifier:          OMEKbedP0peD35O9i6FMXqkgXiAnnBnT9+cMgqJyslo=
Subject key identifier:   5D:A9:DA:5E:44:26:90:0F:BA:FC:91:AB:74:F7:22:C9:C7:07:56:50
Authority key identifier: 06:FC:CF:B5:62:DB:22:C7:9D:F0:86:32:24:1B:F1:FA:E6:7A:E7:C1
Certificate issuer:       /CN=A917C512/serialNumber=06FCCFB562DB22C79DF08632241BF1FAE67AE7C1
Certificate serial:       57
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BvzPtWLbIsed8IYyJBvx-uZ658E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C512/22DBFEFA12A311F1A20FC6383D3D8C67/BvzPtWLbIsed8IYyJBvx-uZ658E.mft
Manifest number:          53
Signing time:             Mon 27 Jul 2026 07:57:35 +0000
Manifest this update:     Mon 27 Jul 2026 07:57:34 +0000
Manifest next update:     Mon 03 Aug 2026 07:57:34 +0000
Files and hashes:         1: BvzPtWLbIsed8IYyJBvx-uZ658E.crl (hash: +Ih6jY2o0SF2AL3RlqEtkqIGaKHBTNwMvIUv2IDA8uU=)
                          2: 41FAA4E813B711F1A73F531B083D8C67.roa (hash: W6ELAQH0h71efzCgT0f/rl+LgjPtcikkCOm3gmjC49M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C512/22DBFEFA12A311F1A20FC6383D3D8C67/BvzPtWLbIsed8IYyJBvx-uZ658E.crl
                          rsync://rpki.apnic.net/member_repository/A917C512/22DBFEFA12A311F1A20FC6383D3D8C67/BvzPtWLbIsed8IYyJBvx-uZ658E.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BvzPtWLbIsed8IYyJBvx-uZ658E.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 07:57:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 87 (0x57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C512, serialNumber=06FCCFB562DB22C79DF08632241BF1FAE67AE7C1
        Validity
            Not Before: Jul 27 07:57:34 2026 GMT
            Not After : Aug  3 07:57:34 2026 GMT
        Subject: CN=6a670f6f-ece9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:4c:28:8b:18:aa:e6:4e:c9:94:3b:b2:ab:e6:
                    83:47:56:69:07:e3:db:31:0d:f8:74:5a:bd:5f:87:
                    ab:96:cd:7e:0d:bc:36:46:eb:51:e4:e6:6d:24:12:
                    95:b2:a7:e7:f1:95:5d:c1:1c:ed:83:f6:8c:1e:86:
                    40:ae:6e:55:cb:cc:b4:4b:cc:fb:6b:a9:29:b7:87:
                    1f:99:9c:bc:30:f2:41:df:98:06:b0:34:14:88:3d:
                    93:a0:65:7b:e7:be:34:4c:95:e6:d3:7d:09:3f:fb:
                    63:3b:82:55:2e:ef:fe:99:99:83:44:15:21:c4:24:
                    53:c2:34:ca:ea:65:6a:37:53:e0:08:20:7b:5a:4d:
                    9f:ac:03:45:bf:f1:c0:1e:b1:1e:52:4f:55:22:7a:
                    a8:65:86:b5:7a:21:fb:57:a8:00:21:d1:23:12:59:
                    2a:e8:cb:29:67:f0:09:34:e5:0f:65:46:3d:b8:35:
                    6c:dd:1f:c3:ab:e6:72:71:23:b7:58:06:db:21:3f:
                    81:2d:e2:27:fa:45:e0:51:03:7a:c6:83:05:a1:2b:
                    af:05:61:e0:72:2b:e5:0e:6a:57:6d:9d:51:92:69:
                    fc:3e:43:71:4d:f3:ca:7a:15:f3:37:85:3c:8d:a6:
                    53:52:5e:6f:ec:e7:48:46:94:33:23:53:e9:9e:76:
                    d4:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:A9:DA:5E:44:26:90:0F:BA:FC:91:AB:74:F7:22:C9:C7:07:56:50
            X509v3 Authority Key Identifier:
                keyid:06:FC:CF:B5:62:DB:22:C7:9D:F0:86:32:24:1B:F1:FA:E6:7A:E7:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C512/22DBFEFA12A311F1A20FC6383D3D8C67/BvzPtWLbIsed8IYyJBvx-uZ658E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BvzPtWLbIsed8IYyJBvx-uZ658E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C512/22DBFEFA12A311F1A20FC6383D3D8C67/BvzPtWLbIsed8IYyJBvx-uZ658E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:8a:c4:23:97:b5:ed:81:21:1a:35:64:a8:f3:1e:47:2d:31:
         4a:5a:8a:2c:eb:44:31:46:0d:cd:c2:1f:20:98:8e:10:28:a0:
         15:b6:ba:32:a7:fb:28:71:7f:4f:38:4e:5f:53:85:fe:2c:b8:
         57:ed:35:0d:74:6a:4f:64:03:c0:06:71:59:b3:85:19:62:13:
         a1:77:90:ab:e2:8a:0a:d7:0b:24:0b:2e:07:3e:b0:e2:8e:66:
         db:f3:a7:58:f2:b1:c5:05:fd:bb:b5:ab:cb:95:d4:21:38:b1:
         1a:01:67:23:8b:8c:ad:40:2f:90:af:34:bd:70:9b:3b:20:48:
         3c:21:69:d9:43:8d:e2:09:98:c9:7e:11:62:f9:d8:27:a9:c1:
         e2:66:bf:69:8e:f8:0e:94:5c:9b:32:49:1f:fe:ab:cb:1b:7c:
         1f:65:c0:e4:d9:2d:67:71:71:0a:55:9f:7f:2c:be:20:ae:fe:
         82:e7:1c:40:01:10:4c:e6:12:11:6a:f2:61:53:3b:b7:81:d1:
         dc:8d:54:58:d9:26:2a:8d:83:d4:5f:b8:8a:2f:56:da:cb:71:
         1a:6f:79:f7:88:5d:c9:02:b3:7f:cf:f9:62:af:03:37:8c:11:
         72:a7:af:48:b8:02:0d:45:bb:99:06:1e:bb:aa:f0:eb:ab:fe:
         4f:58:53:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:53:15 2026 by rpki-client