Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.mft
File:                     BcMvXW_ZVny3AAWx10pBqFtb5xI.mft (raw, json)
Hash identifier:          JRNpjX5cpxKU/GFP6aCceKMRxBFBv7rdDswK0YZgB7Y=
Subject key identifier:   2C:FF:82:4E:69:13:ED:AD:B8:EF:50:77:BB:03:6F:C7:7B:40:17:A8
Authority key identifier: 05:C3:2F:5D:6F:D9:56:7C:B7:00:05:B1:D7:4A:41:A8:5B:5B:E7:12
Certificate issuer:       /CN=A91BB5D3/serialNumber=05C32F5D6FD9567CB70005B1D74A41A85B5BE712
Certificate serial:       0709
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BcMvXW_ZVny3AAWx10pBqFtb5xI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.mft
Manifest number:          06F9
Signing time:             Sun 26 Jul 2026 23:00:43 +0000
Manifest this update:     Sun 26 Jul 2026 23:00:42 +0000
Manifest next update:     Sun 02 Aug 2026 23:00:42 +0000
Files and hashes:         1: BcMvXW_ZVny3AAWx10pBqFtb5xI.crl (hash: 5xhw+FySc08CibhGaGcxQR7+yu4eJdRbPrii2c9Dd2U=)
                          2: 27B648124C9C11ECACB77370C4F9AE02.roa (hash: K7MZ3T0dMRToMyp98c/Q67E9wIW0vsuQeli/CjrwVoo=)
                          3: F164038CBBE211ED8685DC61C4F9AE02.roa (hash: tT9i1DbRbJsGaFhFIKWc3hF5z1oqGKKoTGSshBbumJ8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.crl
                          rsync://rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BcMvXW_ZVny3AAWx10pBqFtb5xI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 23:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1801 (0x709)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB5D3, serialNumber=05C32F5D6FD9567CB70005B1D74A41A85B5BE712
        Validity
            Not Before: Jul 26 23:00:42 2026 GMT
            Not After : Aug  2 23:00:42 2026 GMT
        Subject: CN=6a66919b-cf4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:9e:b7:46:d5:91:04:2c:31:ef:34:12:ce:d9:
                    b8:16:8a:34:4f:f7:14:e4:f0:15:91:4f:48:95:6b:
                    5e:79:72:cb:12:ce:12:bb:63:c0:6d:90:a6:3f:41:
                    fb:2a:34:3d:3c:40:44:f8:46:f8:95:b6:dd:55:b0:
                    fb:7c:39:b1:32:3b:27:48:2c:6e:3e:2f:c7:41:a5:
                    84:fc:f2:74:cd:c1:af:ec:3e:4b:7b:6f:75:02:71:
                    ad:21:2a:13:d5:49:6e:dd:0d:f3:54:56:8b:e1:60:
                    01:e7:00:59:0e:c8:0f:05:07:9d:75:1a:23:b2:99:
                    92:ee:72:c2:f6:98:25:e9:ab:a3:26:e3:56:8a:b7:
                    5d:07:ac:05:5b:22:55:ca:08:a6:ce:2f:b2:7d:33:
                    7f:a5:01:3e:3a:6a:a1:21:e6:0c:a1:0f:32:b8:48:
                    a7:d5:3c:22:2f:fc:d9:0e:8c:18:bf:3f:a3:c4:0f:
                    04:ba:3d:a6:4d:b4:42:a3:37:ff:ff:f3:aa:97:fe:
                    85:28:eb:6d:d0:91:75:f7:a4:7c:fc:68:19:06:d5:
                    90:c8:47:74:fe:00:4a:3c:75:06:1c:df:00:a2:17:
                    31:6f:e6:13:c0:95:14:5b:aa:5a:02:ac:e9:67:55:
                    2e:86:35:58:2a:a4:5c:01:08:81:bf:23:07:ad:d0:
                    20:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:FF:82:4E:69:13:ED:AD:B8:EF:50:77:BB:03:6F:C7:7B:40:17:A8
            X509v3 Authority Key Identifier:
                keyid:05:C3:2F:5D:6F:D9:56:7C:B7:00:05:B1:D7:4A:41:A8:5B:5B:E7:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BcMvXW_ZVny3AAWx10pBqFtb5xI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:f2:ab:38:47:11:11:22:e7:47:19:bd:aa:88:f4:e5:fc:ed:
         c9:d7:d6:2d:24:ef:0b:1c:ca:94:fd:0b:72:8e:7f:1f:c9:94:
         6e:f9:f5:73:ca:fc:10:e8:65:2d:35:11:d0:0b:f2:ae:b3:f1:
         0e:bb:02:96:82:50:74:c9:4c:72:ac:65:fe:c9:f3:f4:ba:e7:
         c2:7c:1c:a4:10:84:a9:fc:9a:18:16:ca:a0:58:03:11:3c:62:
         0d:99:0b:8b:8e:95:49:8e:81:82:e7:9c:65:42:87:ca:a0:a9:
         4e:60:57:db:ef:e6:37:4d:4c:9b:7b:82:4d:1c:e8:c8:88:03:
         90:20:8b:d3:c4:72:44:9c:b9:c0:a2:4e:9a:ae:f9:75:a3:9a:
         c8:40:f2:17:69:49:11:b3:52:df:52:8b:65:fb:a5:cf:22:4f:
         f7:99:37:cc:d0:c7:00:66:45:b9:03:c1:bd:42:f2:37:47:58:
         8c:9c:73:50:33:4a:79:f6:20:3e:c8:f5:18:03:e7:8b:b0:5e:
         8c:e8:7a:7c:64:3d:1a:6d:06:e0:7e:0d:21:97:4f:03:2a:5b:
         08:d6:7b:6a:38:69:5f:74:85:16:c9:1b:de:15:ee:c5:e8:86:
         62:b2:78:b0:d9:0d:88:26:6a:4d:c5:a1:17:87:31:66:dd:9c:
         44:3d:9b:96
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBwkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkI1RDMxMTAvBgNVBAUTKDA1QzMyRjVENkZEOTU2N0NCNzAwMDVCMUQ3NEE0MUE4
NUI1QkU3MTIwHhcNMjYwNzI2MjMwMDQyWhcNMjYwODAyMjMwMDQyWjAYMRYwFAYD
VQQDEw02YTY2OTE5Yi1jZjRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjZ63RtWRBCwx7zQSztm4Foo0T/cU5PAVkU9IlWteeXLLEs4Su2PAbZCmP0H7
KjQ9PEBE+Eb4lbbdVbD7fDmxMjsnSCxuPi/HQaWE/PJ0zcGv7D5Le291AnGtISoT
1Ulu3Q3zVFaL4WAB5wBZDsgPBQeddRojspmS7nLC9pgl6aujJuNWirddB6wFWyJV
ygimzi+yfTN/pQE+OmqhIeYMoQ8yuEin1TwiL/zZDowYvz+jxA8Euj2mTbRCozf/
//Oql/6FKOtt0JF196R8/GgZBtWQyEd0/gBKPHUGHN8Aohcxb+YTwJUUW6paAqzp
Z1UuhjVYKqRcAQiBvyMHrdAgAQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCz/gk5p
E+2tuO9Qd7sDb8d7QBeoMB8GA1UdIwQYMBaAFAXDL11v2VZ8twAFsddKQahbW+cS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjVEMy82Q0E5RDY5MEEx
QTgxMUVCODMyMTRDNzRDNEY5QUUwMi9CY012WFdfWlZueTNBQVd4MTBwQnFGdGI1
eEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0JjTXZYV19aVm55M0FBV3gxMHBCcUZ0YjV4SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QjVEMy82Q0E5RDY5MEExQTgxMUVCODMyMTRDNzRDNEY5QUUwMi9CY012WFdfWlZu
eTNBQVd4MTBwQnFGdGI1eEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbPKrOEcRESLnRxm9qoj05fztydfWLSTvCxzKlP0Lco5/H8mUbvn1c8r8EOhl
LTUR0AvyrrPxDrsCloJQdMlMcqxl/snz9LrnwnwcpBCEqfyaGBbKoFgDETxiDZkL
i46VSY6BguecZUKHyqCpTmBX2+/mN01Mm3uCTRzoyIgDkCCL08RyRJy5wKJOmq75
daOayEDyF2lJEbNS31KLZfulzyJP95k3zNDHAGZFuQPBvULyN0dYjJxzUDNKefYg
Psj1GAPni7BejOh6fGQ9Gm0G4H4NIZdPAypbCNZ7ajhpX3SFFskb3hXuxeiGYrJ4
sNkNiCZqTcWhF4cxZt2cRD2blg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:30:53 2026 by rpki-client