Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918C255/BE62DC9E232F11E7A54B4266C4F9AE02/C7BDH1UIA338kvd-BrSK7JVR9ls.mft
File:                     C7BDH1UIA338kvd-BrSK7JVR9ls.mft (raw, json)
Hash identifier:          ZTt/Tn9/Ra72i4vPieoNx0AYDA3+4FxPgPxdTWYxpyg=
Subject key identifier:   CF:3B:62:04:85:C7:2D:0B:39:20:0E:6C:04:52:12:2D:C0:4C:97:52
Authority key identifier: 0B:B0:43:1F:55:08:03:7D:FC:92:F7:7E:06:B4:8A:EC:95:51:F6:5B
Certificate issuer:       /CN=A918C255/serialNumber=0BB0431F5508037DFC92F77E06B48AEC9551F65B
Certificate serial:       1BBC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7BDH1UIA338kvd-BrSK7JVR9ls.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918C255/BE62DC9E232F11E7A54B4266C4F9AE02/C7BDH1UIA338kvd-BrSK7JVR9ls.mft
Manifest number:          1BB2
Signing time:             Fri 12 Jun 2026 16:12:40 +0000
Manifest this update:     Fri 12 Jun 2026 16:12:40 +0000
Manifest next update:     Fri 19 Jun 2026 16:12:40 +0000
Files and hashes:         1: C7BDH1UIA338kvd-BrSK7JVR9ls.crl (hash: GtLNrJZ920QmcvthenyDjr9FzBZoscRECuDBzl0RPug=)
                          2: 8E810FBCD46E11E9B37C0539C4F9AE02.roa (hash: N8G4/01RtsnK/5wYFg/W/SRO8tkHccnmITaVaX2WxsA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918C255/BE62DC9E232F11E7A54B4266C4F9AE02/C7BDH1UIA338kvd-BrSK7JVR9ls.crl
                          rsync://rpki.apnic.net/member_repository/A918C255/BE62DC9E232F11E7A54B4266C4F9AE02/C7BDH1UIA338kvd-BrSK7JVR9ls.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7BDH1UIA338kvd-BrSK7JVR9ls.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 16:12:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7100 (0x1bbc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C255, serialNumber=0BB0431F5508037DFC92F77E06B48AEC9551F65B
        Validity
            Not Before: Jun 12 16:12:40 2026 GMT
            Not After : Jun 19 16:12:40 2026 GMT
        Subject: CN=6a2c2ff8-a6f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:1c:e9:36:55:a5:cb:8b:42:98:6b:00:29:77:
                    3e:09:34:7e:7e:62:63:bc:f7:ae:37:f8:60:33:43:
                    22:14:bb:a3:bf:ee:53:b5:ff:bd:77:91:cf:19:c4:
                    f4:34:6a:5f:54:53:3d:70:da:18:8a:2a:66:ac:2d:
                    db:51:5f:9c:ec:33:a1:26:e0:35:4c:67:21:b9:bb:
                    49:5f:b6:c1:d2:75:3e:94:fa:97:38:46:43:b1:7a:
                    a7:c0:66:6b:10:aa:09:6d:0b:77:e1:92:1e:f0:a7:
                    88:a2:06:4b:b7:a9:12:82:16:1a:9a:1e:4f:11:c4:
                    f6:e6:9c:23:cf:fb:0f:6a:83:ce:0c:62:e0:28:58:
                    6e:80:e4:7e:29:07:b5:42:a0:18:c0:b9:00:8d:13:
                    fd:04:f5:2b:34:8b:da:e7:fa:b1:78:09:6d:e6:ad:
                    32:de:e7:90:d0:29:b2:01:ab:11:df:e3:03:2e:d5:
                    a0:51:45:c0:80:9b:50:25:66:52:82:87:c3:32:8d:
                    51:39:d1:d3:e7:85:b7:95:9c:8e:9a:4d:3c:fb:58:
                    c9:45:47:ec:23:e2:86:c2:ad:c4:02:90:18:92:77:
                    a9:a0:f8:a8:3b:21:29:61:56:b4:10:c7:66:6e:8b:
                    21:e8:8f:84:14:b4:ac:0b:65:94:ee:71:ef:3c:57:
                    ba:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:3B:62:04:85:C7:2D:0B:39:20:0E:6C:04:52:12:2D:C0:4C:97:52
            X509v3 Authority Key Identifier:
                keyid:0B:B0:43:1F:55:08:03:7D:FC:92:F7:7E:06:B4:8A:EC:95:51:F6:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918C255/BE62DC9E232F11E7A54B4266C4F9AE02/C7BDH1UIA338kvd-BrSK7JVR9ls.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7BDH1UIA338kvd-BrSK7JVR9ls.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C255/BE62DC9E232F11E7A54B4266C4F9AE02/C7BDH1UIA338kvd-BrSK7JVR9ls.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:7a:2a:a7:99:40:18:cd:4e:62:8a:09:36:88:bc:27:1d:1c:
         a7:5a:cc:fd:6f:38:62:32:c1:02:e9:c5:41:e0:f4:15:1f:bd:
         52:63:6c:60:31:2b:69:1a:d9:66:3f:5c:89:9a:3c:b0:a1:c6:
         55:cb:2c:ca:37:97:25:19:4f:60:7d:10:e1:e3:ff:95:41:88:
         93:b8:d1:8c:6b:5b:df:91:2b:b1:5e:de:fd:7f:bd:19:36:fa:
         94:eb:92:9e:b3:19:12:00:ef:95:03:3c:46:87:46:1e:be:60:
         ca:c0:fc:89:d5:49:c7:c2:dd:e8:bc:21:55:7c:dd:22:07:f1:
         43:04:ab:60:35:58:ad:d0:a7:65:c0:17:10:5f:a8:86:76:99:
         c8:13:4b:5b:e6:92:11:4a:62:ae:fd:57:65:20:6a:4b:d2:d0:
         7e:5c:e6:4b:80:b0:7d:11:9c:90:ee:61:c3:4c:36:d9:b0:6b:
         ac:ea:4c:47:3a:64:1f:99:07:a4:3c:0e:38:32:e4:b6:77:e9:
         b7:00:da:4b:c7:c4:0f:1c:f6:2a:17:7a:c5:3a:68:e8:fa:3e:
         db:23:0f:1c:89:32:f6:2b:3a:3e:3d:a8:15:89:fa:01:1d:24:
         54:65:16:00:0e:05:29:3f:91:17:ba:96:b1:1d:f3:cc:88:54:
         1a:8c:7f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:30:53 2026 by rpki-client