Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91992FA/FA46E0D2EE0311EF9C2B8A49C4F9AE02/BXtTd0A4JnigePW_KExyZ5S50TQ.mft
File:                     BXtTd0A4JnigePW_KExyZ5S50TQ.mft (raw, json)
Hash identifier:          N2tzwc+TPPAb6K144JTyemoi/y9rDaJ0RWw5yb+HUis=
Subject key identifier:   9E:49:02:45:C9:40:8E:17:D8:32:24:64:C6:D1:0F:76:F1:23:30:72
Authority key identifier: 05:7B:53:77:40:38:26:78:A0:78:F5:BF:28:4C:72:67:94:B9:D1:34
Certificate issuer:       /CN=A91992FA/serialNumber=057B537740382678A078F5BF284C726794B9D134
Certificate serial:       0100
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXtTd0A4JnigePW_KExyZ5S50TQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91992FA/FA46E0D2EE0311EF9C2B8A49C4F9AE02/BXtTd0A4JnigePW_KExyZ5S50TQ.mft
Manifest number:          FA
Signing time:             Sat 13 Jun 2026 06:22:56 +0000
Manifest this update:     Sat 13 Jun 2026 06:22:55 +0000
Manifest next update:     Sat 20 Jun 2026 06:22:55 +0000
Files and hashes:         1: BXtTd0A4JnigePW_KExyZ5S50TQ.crl (hash: tkMnlYkiz+SLHgvLcR71289kLLU5nEuMOCo4kzF2pM8=)
                          2: CF5EEDA6894411F0BE628977C4F9AE02.roa (hash: AS33QEsrO+w5pzGcSkE9nvQ2nEiXdY1kLZjsdA1rM78=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91992FA/FA46E0D2EE0311EF9C2B8A49C4F9AE02/BXtTd0A4JnigePW_KExyZ5S50TQ.crl
                          rsync://rpki.apnic.net/member_repository/A91992FA/FA46E0D2EE0311EF9C2B8A49C4F9AE02/BXtTd0A4JnigePW_KExyZ5S50TQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXtTd0A4JnigePW_KExyZ5S50TQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 256 (0x100)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91992FA, serialNumber=057B537740382678A078F5BF284C726794B9D134
        Validity
            Not Before: Jun 13 06:22:55 2026 GMT
            Not After : Jun 20 06:22:55 2026 GMT
        Subject: CN=6a2cf740-6314
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:0b:d3:48:4a:59:fc:8c:68:5c:14:1f:13:84:
                    c0:11:1a:d4:0b:6b:a8:3f:95:0b:16:2c:73:54:eb:
                    93:9b:c7:91:57:4f:df:d7:11:78:19:c7:a9:e9:45:
                    88:8e:93:2c:dd:9d:2e:ef:53:ee:68:d8:1d:16:dd:
                    d1:7a:4f:44:fa:08:7e:ad:05:7e:ac:d1:17:63:12:
                    e1:70:5f:10:86:78:2f:92:81:53:67:e3:f0:72:3b:
                    6f:59:87:e3:81:2a:2f:12:96:3c:84:8a:f3:ba:0e:
                    6b:51:f1:ad:cb:21:e7:63:8b:b7:5f:43:d0:80:93:
                    98:22:bc:0c:05:08:d5:09:81:d4:6e:1b:5f:f3:47:
                    2f:4f:cd:11:0d:36:b1:7b:2a:a3:28:de:b4:55:0f:
                    59:28:08:50:8e:8a:69:e5:a6:00:7b:04:e9:6e:20:
                    be:ce:fb:a1:c6:9f:c5:ab:bf:9f:01:71:17:73:0a:
                    78:7b:be:c3:92:8c:ba:e0:db:2a:28:c5:8a:61:e8:
                    c1:5d:ae:48:0d:fa:a6:fb:03:61:ff:ad:ae:75:97:
                    fd:fb:81:c8:0f:d1:aa:0b:1e:ff:1e:40:bb:30:df:
                    3d:77:d5:f1:da:f9:2a:49:68:1d:b1:54:19:73:ee:
                    36:f5:14:63:f0:28:a9:0c:18:94:59:4e:39:7f:d8:
                    ee:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:49:02:45:C9:40:8E:17:D8:32:24:64:C6:D1:0F:76:F1:23:30:72
            X509v3 Authority Key Identifier:
                keyid:05:7B:53:77:40:38:26:78:A0:78:F5:BF:28:4C:72:67:94:B9:D1:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91992FA/FA46E0D2EE0311EF9C2B8A49C4F9AE02/BXtTd0A4JnigePW_KExyZ5S50TQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXtTd0A4JnigePW_KExyZ5S50TQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91992FA/FA46E0D2EE0311EF9C2B8A49C4F9AE02/BXtTd0A4JnigePW_KExyZ5S50TQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:0f:6b:72:aa:a2:86:bf:41:90:c7:6c:b4:ba:e3:fb:f7:70:
         01:b0:29:99:49:95:eb:72:73:0e:4d:99:16:41:3a:c9:ec:c4:
         f3:44:49:55:d8:fe:dc:3a:b7:d5:8e:c0:bc:94:04:0d:ed:bd:
         34:77:c3:72:0a:bc:41:cd:c7:e3:c2:b7:22:92:61:52:d0:d9:
         6d:07:1f:df:77:a7:e7:d4:68:51:0d:5d:89:2e:9b:2a:0d:7d:
         32:2c:88:6a:a4:fb:8a:c6:d5:c4:1c:b6:8c:89:95:76:2d:f1:
         cd:c2:72:76:25:92:d7:bb:4e:f7:22:2b:de:70:da:b4:75:64:
         89:4f:ef:d7:a4:dd:4a:ad:0b:a0:3d:48:d2:00:f6:df:b4:23:
         5f:87:89:93:cc:39:e5:5e:e4:68:bb:be:ee:e5:1f:67:c6:ca:
         4a:16:c4:67:9a:1e:44:d9:9d:8c:38:e0:06:ff:26:db:1f:70:
         1d:45:de:2c:00:9d:b1:26:7a:54:da:ce:57:03:6b:b7:80:17:
         c2:77:d9:6d:6b:62:00:90:d9:df:71:8b:e3:85:2a:db:c4:56:
         7e:c2:37:d9:99:7d:d9:99:a5:b7:49:96:04:f3:43:1b:af:76:
         4b:4d:b6:07:e6:dd:a2:ed:ac:8a:25:7d:26:3f:73:fa:ca:65:
         01:85:24:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:00:12 2026 by rpki-client