Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D9E8/DAA477E4174C11F1A119F4D8163D8C67/BmIVgepjVqm4tbC9s26io0KBciU.mft
File:                     BmIVgepjVqm4tbC9s26io0KBciU.mft (raw, json)
Hash identifier:          IBnmOGgs70i9XJsGZfhsQAqihx3lPVllwiL6Yat+074=
Subject key identifier:   B0:9F:99:A2:32:1C:1C:25:0A:6D:D1:01:84:4B:60:B4:C6:69:0E:28
Authority key identifier: 06:62:15:81:EA:63:56:A9:B8:B5:B0:BD:B3:6E:A2:A3:42:81:72:25
Certificate issuer:       /CN=A918D9E8/serialNumber=06621581EA6356A9B8B5B0BDB36EA2A342817225
Certificate serial:       4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BmIVgepjVqm4tbC9s26io0KBciU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D9E8/DAA477E4174C11F1A119F4D8163D8C67/BmIVgepjVqm4tbC9s26io0KBciU.mft
Manifest number:          49
Signing time:             Tue 21 Jul 2026 10:13:50 +0000
Manifest this update:     Tue 21 Jul 2026 10:13:49 +0000
Manifest next update:     Tue 28 Jul 2026 10:13:49 +0000
Files and hashes:         1: BmIVgepjVqm4tbC9s26io0KBciU.crl (hash: dT0YiNj98kDBAxtN3INmm7B37UI1xAehXguH9Jmio7Y=)
                          2: 0EEDB772174D11F193D7AA7E173D8C67.roa (hash: y6pgs+n3x+EaANPspWEoZC1ehkpn8O/za+IreRLvylU=)
                          3: 3829F376174D11F19A004491173D8C67.roa (hash: 0k0rXsYRdBQmrsruCwfnV2JmIIADeibhHxkfkqZPiGk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D9E8/DAA477E4174C11F1A119F4D8163D8C67/BmIVgepjVqm4tbC9s26io0KBciU.crl
                          rsync://rpki.apnic.net/member_repository/A918D9E8/DAA477E4174C11F1A119F4D8163D8C67/BmIVgepjVqm4tbC9s26io0KBciU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BmIVgepjVqm4tbC9s26io0KBciU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 10:13:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 75 (0x4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D9E8, serialNumber=06621581EA6356A9B8B5B0BDB36EA2A342817225
        Validity
            Not Before: Jul 21 10:13:49 2026 GMT
            Not After : Jul 28 10:13:49 2026 GMT
        Subject: CN=6a5f465e-5fcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:13:cc:98:51:4b:d0:4b:e7:a9:3b:d3:62:cd:
                    83:fc:1c:12:7a:e0:35:a2:f9:dd:fb:d3:78:6e:d8:
                    6e:3e:94:96:4e:9d:62:ca:c9:95:22:0a:ad:80:6d:
                    25:40:7d:97:ba:b6:2b:aa:9f:af:c0:54:b7:73:b1:
                    31:2b:86:fa:18:2d:0e:27:8e:e7:40:52:9e:95:3b:
                    74:b3:04:dd:a4:40:1d:14:7d:89:66:59:1f:d8:71:
                    17:38:2b:56:b2:5e:1c:2b:c6:95:d1:9d:86:e1:62:
                    7d:1a:96:ae:5a:4c:30:f6:a2:3b:b0:24:04:8e:5f:
                    24:bc:46:47:b3:f4:76:dd:b3:93:84:5d:d8:ae:30:
                    c8:08:bc:de:de:4e:e1:7f:d2:c2:1d:19:00:35:3c:
                    b4:b5:d9:0b:1d:12:cf:c0:a0:ca:6b:f1:be:c4:44:
                    75:7f:61:0d:95:87:6a:fe:51:50:5b:1f:15:51:f4:
                    b8:6d:b2:96:ec:d0:b4:cf:9b:bf:89:ff:77:81:4f:
                    88:74:66:73:f0:8d:b2:ed:9a:94:2c:ff:46:a5:fe:
                    e0:16:41:52:0e:0d:d1:eb:7f:54:18:1b:6f:84:2a:
                    fb:18:8a:43:fd:84:34:b5:f0:5f:00:ec:21:54:a1:
                    07:f4:9f:48:77:93:fc:18:84:76:e4:af:8a:72:f7:
                    0d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:9F:99:A2:32:1C:1C:25:0A:6D:D1:01:84:4B:60:B4:C6:69:0E:28
            X509v3 Authority Key Identifier:
                keyid:06:62:15:81:EA:63:56:A9:B8:B5:B0:BD:B3:6E:A2:A3:42:81:72:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D9E8/DAA477E4174C11F1A119F4D8163D8C67/BmIVgepjVqm4tbC9s26io0KBciU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BmIVgepjVqm4tbC9s26io0KBciU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D9E8/DAA477E4174C11F1A119F4D8163D8C67/BmIVgepjVqm4tbC9s26io0KBciU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:15:81:d7:02:a1:61:97:18:51:8b:98:ff:76:5b:7e:a4:93:
         ae:17:dc:ee:d5:20:89:91:8a:7f:39:58:cd:fb:0b:e3:b0:58:
         e9:d2:80:62:00:54:b4:c9:5b:53:e9:2f:c6:34:b0:6c:3e:dc:
         2e:bb:a2:67:6a:88:3a:e2:80:b2:35:3d:f4:f3:8d:1b:37:46:
         5d:9d:b2:0a:ec:b7:f6:8f:17:89:ba:ae:34:fd:35:55:f7:7e:
         1e:e6:f4:b3:9b:f0:42:09:60:b3:08:b8:9d:3f:d8:85:8e:60:
         5d:05:b9:d5:c2:d7:07:7c:e0:20:54:80:c4:9a:90:5e:bf:9f:
         c7:ac:12:c7:44:1b:3c:a8:4d:1c:86:ea:8e:d4:19:32:ef:fa:
         70:f8:f4:ef:4f:27:64:b8:e3:90:81:ce:44:4d:75:93:bd:ba:
         23:32:d6:95:37:ef:b2:6a:0e:42:82:ba:12:7a:bb:02:72:c0:
         33:4d:d8:01:53:f2:30:56:b0:6c:a4:be:7b:19:c1:bb:cc:7f:
         40:6b:50:51:89:0f:58:02:b5:d5:8f:90:68:02:85:1a:45:b7:
         c7:ec:40:ac:eb:52:8c:47:3c:57:5e:48:37:41:e9:80:8a:51:
         2f:51:74:6c:14:5e:65:8b:75:ad:c2:85:46:e9:15:54:90:9f:
         d0:de:4a:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 04:40:22 2026 by rpki-client