Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.mft
File:                     BIqpjz7FSpBg5bwwBZ1cQiDXwvc.mft (raw, json)
Hash identifier:          ssgp+B/yTQAcoY5GeB3Ik2lXDsXZVwE07z0hmcR1u9U=
Subject key identifier:   E6:D0:CF:A9:A7:B6:34:2A:F2:CC:0F:80:77:7F:09:53:E8:3B:96:EF
Authority key identifier: 04:8A:A9:8F:3E:C5:4A:90:60:E5:BC:30:05:9D:5C:42:20:D7:C2:F7
Certificate issuer:       /CN=A91D425A/serialNumber=048AA98F3EC54A9060E5BC30059D5C4220D7C2F7
Certificate serial:       0BFC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.mft
Manifest number:          0BF0
Signing time:             Tue 28 Jul 2026 19:08:27 +0000
Manifest this update:     Tue 28 Jul 2026 19:08:27 +0000
Manifest next update:     Tue 04 Aug 2026 19:08:27 +0000
Files and hashes:         1: BIqpjz7FSpBg5bwwBZ1cQiDXwvc.crl (hash: 5OSSaO/soUTG2+odAOpv4w0uOMekrVKLEvOkzJxFd7A=)
                          2: CF5422842CB111F19655F1BDC9833773.roa (hash: 8ZwBOZ7hrFX3NuDI+RJpwp5MuhVPjE9cVYyKjGDrr3I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.crl
                          rsync://rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 19:08:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3068 (0xbfc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D425A, serialNumber=048AA98F3EC54A9060E5BC30059D5C4220D7C2F7
        Validity
            Not Before: Jul 28 19:08:27 2026 GMT
            Not After : Aug  4 19:08:27 2026 GMT
        Subject: CN=6a68fe2b-7a57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:db:8a:d5:31:c3:b9:82:5d:4d:77:fb:e0:74:
                    9d:3f:e4:2b:71:84:0d:8f:e4:46:58:5c:33:53:fb:
                    b4:12:7e:8d:62:45:b1:07:ab:fd:7e:8c:8c:4d:91:
                    e7:33:f1:4d:6c:70:40:23:27:24:ef:88:23:ea:b3:
                    ff:93:b8:22:61:d1:c5:bb:df:08:51:01:0b:90:fe:
                    6c:d5:06:a4:4c:1a:92:7e:55:52:b7:de:8b:ac:22:
                    86:0d:c7:59:f2:03:24:92:1f:0d:13:85:33:a6:8d:
                    0c:8e:a8:a6:a0:c4:4d:8e:9e:9f:c3:d4:7f:74:8c:
                    f5:3c:c0:85:4c:e3:bf:2c:ed:91:da:f7:30:de:cd:
                    a0:71:1f:ef:e8:71:77:17:a0:15:89:46:6f:97:f8:
                    48:17:62:c8:02:0a:97:54:ba:b7:43:64:73:24:0e:
                    6c:ad:a7:81:f6:0d:fd:e1:95:c9:1f:94:f2:98:c0:
                    cd:cf:a6:2b:2e:3e:e9:03:0e:80:15:7b:e3:2d:de:
                    13:69:e5:9d:a4:b8:1d:06:2c:67:d3:d0:23:bf:79:
                    82:c2:c0:84:55:5b:e2:1f:50:6c:12:d1:be:0b:95:
                    c4:a9:2f:af:e5:4f:17:ff:46:97:c7:f2:f8:fc:6f:
                    1d:d1:97:95:ff:91:32:5f:ac:be:de:30:91:98:52:
                    08:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:D0:CF:A9:A7:B6:34:2A:F2:CC:0F:80:77:7F:09:53:E8:3B:96:EF
            X509v3 Authority Key Identifier:
                keyid:04:8A:A9:8F:3E:C5:4A:90:60:E5:BC:30:05:9D:5C:42:20:D7:C2:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:a2:c5:f9:a5:47:bd:04:43:1a:96:81:15:14:2a:d5:0b:e2:
         d8:b2:92:e8:f7:5a:86:5c:36:08:bb:b5:a1:2a:1c:17:fb:60:
         a3:d5:af:39:21:ca:e3:bd:22:f7:5a:f7:ae:70:2c:9e:1f:65:
         48:62:18:53:8a:38:13:91:30:7b:9c:b6:e1:bc:f1:61:64:aa:
         c7:65:22:29:f8:ea:92:44:72:b1:30:9b:22:8f:8e:b3:aa:30:
         a4:60:67:7d:2e:24:ab:be:b9:92:7a:8e:c1:47:e1:8f:49:0a:
         ac:a0:64:79:ab:14:38:52:71:80:a6:c1:65:b5:cf:39:11:a6:
         e1:2c:9e:47:51:33:8f:10:dd:fa:b4:ef:bb:d6:07:73:85:44:
         a1:fe:af:88:7e:a5:6b:83:54:f5:de:e9:24:6d:b7:1d:eb:01:
         46:c0:92:b0:fc:2a:b5:72:3c:29:bd:cc:09:a0:0a:40:b4:f7:
         f7:13:9a:6a:c7:29:fa:32:7a:bf:3f:52:77:f7:19:17:16:42:
         bf:72:d4:0b:bb:5a:d7:56:0e:70:dc:06:ed:01:f1:05:a1:2c:
         59:58:6d:9b:22:32:d2:51:21:48:37:44:17:26:ed:8a:12:56:
         a5:87:02:6e:d6:85:59:e9:a0:e2:f6:2a:ae:2f:9b:44:80:fd:
         31:62:2c:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:58:47 2026 by rpki-client