Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/BhgYSeLF-TE-pgozl9xhRyrBGw0.mft
File:                     BhgYSeLF-TE-pgozl9xhRyrBGw0.mft (raw, json)
Hash identifier:          AIAQ9ooSnzjqFfNNUbl04il34X5Z5fEoH+P7ZSdt3KE=
Subject key identifier:   01:41:AF:FE:FF:94:90:31:20:28:DE:30:01:8B:C7:66:08:CD:E4:BE
Authority key identifier: 06:18:18:49:E2:C5:F9:31:3E:A6:0A:33:97:DC:61:47:2A:C1:1B:0D
Certificate issuer:       /CN=A9183BBC/serialNumber=06181849E2C5F9313EA60A3397DC61472AC11B0D
Certificate serial:       070B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BhgYSeLF-TE-pgozl9xhRyrBGw0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/BhgYSeLF-TE-pgozl9xhRyrBGw0.mft
Manifest number:          06F0
Signing time:             Mon 02 Mar 2026 01:25:57 +0000
Manifest this update:     Mon 02 Mar 2026 01:25:56 +0000
Manifest next update:     Mon 09 Mar 2026 01:25:56 +0000
Files and hashes:         1: BhgYSeLF-TE-pgozl9xhRyrBGw0.crl (hash: fcq5k7D8XLHpmI8DaKa9VKRdgKSmUhHnYGwU0dz6krg=)
                          2: E4205416B2F111EFBB14DE0FC4F9AE02.roa (hash: VFye1Dmoq1BwB6EiBXuSTI6+JgFfT1fZg/CcpOjt6ZM=)
                          3: C18726F486D711EBA06B0E64C4F9AE02.roa (hash: GyALuDHToHrHzVvWuUIXCDTOPrYATDjL1eGhC/dCRwY=)
                          4: 4F1694B4C87B11ED981CC523C4F9AE02.roa (hash: Z4GMryMw3HLfh78F49vUfH5AisNPN7v/Lh1b+aK9Cdg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/BhgYSeLF-TE-pgozl9xhRyrBGw0.crl
                          rsync://rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/BhgYSeLF-TE-pgozl9xhRyrBGw0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BhgYSeLF-TE-pgozl9xhRyrBGw0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:25:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1803 (0x70b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183BBC, serialNumber=06181849E2C5F9313EA60A3397DC61472AC11B0D
        Validity
            Not Before: Mar  2 01:25:56 2026 GMT
            Not After : Mar  9 01:25:56 2026 GMT
        Subject: CN=69a4e725-9994
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:58:85:ea:de:7f:f4:29:5b:1c:58:20:e6:55:
                    79:65:df:a8:f6:fb:89:fa:55:d6:12:fb:04:a4:6f:
                    48:9d:80:a8:b3:45:9b:6b:19:b0:ac:d5:7f:31:c1:
                    66:fb:1c:9b:82:ba:a2:f8:7b:38:e4:3f:69:17:ba:
                    83:91:d5:34:fb:66:b2:d0:6c:be:cd:44:48:e5:73:
                    04:15:bf:7e:4b:bb:a4:a4:8f:50:0e:81:bb:fb:d5:
                    44:02:5b:c6:51:86:d5:2b:c2:2c:d6:a2:6d:ce:2d:
                    15:70:97:18:cb:16:17:de:6e:f7:d7:0b:39:6e:da:
                    d0:3d:38:86:05:e3:25:4d:2c:25:cb:9d:fd:c3:f5:
                    1e:3a:d1:84:c8:8b:e1:3c:3e:96:83:86:4f:ee:24:
                    a4:44:ec:5e:1c:70:ac:49:67:2b:4b:c3:94:5e:34:
                    fd:8a:b8:d4:89:d3:27:05:c4:01:95:49:86:e2:b4:
                    22:86:c2:05:21:1e:d1:9d:45:4e:d9:c9:19:5e:e4:
                    64:8a:93:cb:56:47:ed:8c:73:c6:19:7f:4c:9a:da:
                    be:70:45:18:82:d2:f2:59:c9:74:4a:79:f6:33:15:
                    dd:c0:5b:1a:47:8a:54:30:e2:61:70:dd:eb:02:8a:
                    1f:07:25:9b:e2:da:b4:0d:3f:c3:7a:7f:de:f0:b8:
                    15:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:41:AF:FE:FF:94:90:31:20:28:DE:30:01:8B:C7:66:08:CD:E4:BE
            X509v3 Authority Key Identifier:
                keyid:06:18:18:49:E2:C5:F9:31:3E:A6:0A:33:97:DC:61:47:2A:C1:1B:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/BhgYSeLF-TE-pgozl9xhRyrBGw0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BhgYSeLF-TE-pgozl9xhRyrBGw0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/BhgYSeLF-TE-pgozl9xhRyrBGw0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:84:f9:64:f5:99:48:84:ed:23:a8:4d:39:0c:18:03:74:2c:
         f8:0b:f3:09:04:85:0a:c1:26:38:4c:c5:7b:98:35:ac:c3:88:
         73:86:b5:1d:51:19:85:62:4b:2b:ea:4c:bd:71:01:de:81:53:
         03:ef:02:4a:a9:78:65:a4:82:87:52:f2:41:de:b7:a0:86:77:
         ef:a7:37:ed:33:26:96:33:0e:be:ad:63:7a:4a:d1:2b:cf:6c:
         79:eb:b5:e0:05:23:27:85:91:e3:5f:31:34:a8:0b:f8:e0:36:
         45:49:2b:34:be:cf:4d:c3:a1:8f:9b:b4:eb:4e:30:4b:0f:a4:
         87:4b:23:4f:63:b2:c3:6a:52:73:7f:e8:33:03:4f:ba:49:8e:
         c3:57:37:c3:24:a0:a2:de:91:4e:e1:ce:0e:6d:85:2d:9b:f3:
         cb:0f:a9:d8:82:1e:2d:e6:71:43:83:3b:67:41:ed:a7:44:7b:
         a2:81:8f:8e:be:37:04:06:7b:7d:c0:c8:20:3e:8a:3f:7d:82:
         cc:fe:97:a5:c7:b3:48:19:5b:1b:15:3c:5e:2e:84:a3:5a:c0:
         85:0a:89:4d:20:5f:84:55:7a:75:94:7d:7b:92:8d:5e:a9:bf:
         ad:24:3d:a8:6a:51:f1:f9:6d:35:85:5e:b1:af:86:0c:dc:da:
         9e:e6:b4:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:35:40 2026 by rpki-client