Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912781D/2766763EA36411F0BD13673CC4F9AE02/bCKX-C4hg3SUE5JlLJyLMFXIY6I.mft
File:                     bCKX-C4hg3SUE5JlLJyLMFXIY6I.mft (raw, json)
Hash identifier:          HGD57h7Bn2oiMr3va0vUAqP8miRwyPq8UVBmH9t1qL8=
Subject key identifier:   C0:E9:DA:4E:12:B0:74:AD:CF:D3:63:99:2E:AD:76:EB:9E:B9:C8:52
Authority key identifier: 6C:22:97:F8:2E:21:83:74:94:13:92:65:2C:9C:8B:30:55:C8:63:A2
Certificate issuer:       /CN=A912781D/serialNumber=6C2297F82E218374941392652C9C8B3055C863A2
Certificate serial:       BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bCKX-C4hg3SUE5JlLJyLMFXIY6I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912781D/2766763EA36411F0BD13673CC4F9AE02/bCKX-C4hg3SUE5JlLJyLMFXIY6I.mft
Manifest number:          BA
Signing time:             Sat 03 Oct 2026 07:37:25 +0000
Manifest this update:     Sat 03 Oct 2026 07:37:24 +0000
Manifest next update:     Sat 10 Oct 2026 07:37:24 +0000
Files and hashes:         1: bCKX-C4hg3SUE5JlLJyLMFXIY6I.crl (hash: Rwu+0qymDgYz2DKEp41M9XmxHfiCbwjkaJW+RGbU1hw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912781D/2766763EA36411F0BD13673CC4F9AE02/bCKX-C4hg3SUE5JlLJyLMFXIY6I.crl
                          rsync://rpki.apnic.net/member_repository/A912781D/2766763EA36411F0BD13673CC4F9AE02/bCKX-C4hg3SUE5JlLJyLMFXIY6I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bCKX-C4hg3SUE5JlLJyLMFXIY6I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 07:37:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 186 (0xba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912781D, serialNumber=6C2297F82E218374941392652C9C8B3055C863A2
        Validity
            Not Before: Oct  3 07:37:24 2026 GMT
            Not After : Oct 10 07:37:24 2026 GMT
        Subject: CN=6ac0b0b5-e40f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ce:ec:f7:7e:55:13:42:d1:e9:b1:f2:c5:1a:
                    38:b4:af:c0:cb:cb:c7:ee:5d:0f:64:a7:66:8b:7b:
                    a2:ba:89:8c:39:ed:e9:a4:72:c0:f3:c6:45:52:e7:
                    de:20:e9:bf:a6:60:f4:a5:33:ff:f1:68:9c:92:fd:
                    b8:98:c8:b4:ec:6e:95:78:96:7a:ff:e2:9e:67:5f:
                    b3:1b:ca:28:2e:c0:04:05:37:98:c6:af:1f:68:f6:
                    d1:50:13:55:39:7b:24:df:25:75:d0:6e:0d:4a:2c:
                    64:36:fb:cc:ef:5e:c8:39:c7:e6:99:66:18:40:99:
                    bf:0f:15:f5:5d:80:3f:91:d3:e3:13:e1:f4:f4:f4:
                    8f:d1:d7:ea:20:83:7a:9a:ee:bb:a6:c8:85:ab:6e:
                    ee:23:1c:e2:a7:fc:2a:56:57:f4:13:50:3c:a4:62:
                    08:a9:da:94:0c:f8:20:7d:0d:88:39:48:21:37:0c:
                    39:08:cc:f8:da:10:54:f3:b4:04:4c:3a:69:39:57:
                    9d:38:10:69:89:19:84:b0:61:af:59:cb:34:5b:5e:
                    6c:05:3c:4b:5b:f8:8d:d6:fa:6d:40:c2:10:5a:41:
                    41:94:93:c3:9d:20:5d:6f:4a:98:eb:4d:6b:21:87:
                    7f:62:4d:7b:57:1b:a7:c7:f4:21:d4:ce:d9:9c:3a:
                    cf:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:E9:DA:4E:12:B0:74:AD:CF:D3:63:99:2E:AD:76:EB:9E:B9:C8:52
            X509v3 Authority Key Identifier:
                keyid:6C:22:97:F8:2E:21:83:74:94:13:92:65:2C:9C:8B:30:55:C8:63:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912781D/2766763EA36411F0BD13673CC4F9AE02/bCKX-C4hg3SUE5JlLJyLMFXIY6I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bCKX-C4hg3SUE5JlLJyLMFXIY6I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912781D/2766763EA36411F0BD13673CC4F9AE02/bCKX-C4hg3SUE5JlLJyLMFXIY6I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:92:d9:c5:e0:b8:12:61:69:6e:13:7a:56:37:86:73:0b:92:
         79:18:9b:9d:7e:75:19:50:45:d1:51:69:8d:43:23:e6:57:cf:
         86:7d:52:e2:55:4b:52:d6:e2:fb:32:7f:8e:ce:4a:2f:42:a3:
         e4:f1:a7:cd:dc:4e:c3:fb:bd:57:c2:d6:2e:68:26:1b:e8:e8:
         42:5c:2c:50:8e:f9:28:76:b9:12:85:02:f7:96:06:e1:1d:63:
         0a:f5:22:0a:e2:19:89:6e:68:51:b3:54:b6:e5:7e:14:6f:ef:
         42:1f:09:ad:e5:b8:32:c5:9f:44:7e:2e:58:97:74:27:a6:14:
         e1:84:c0:d6:af:cd:fb:67:e7:b7:02:00:f1:98:98:83:75:a0:
         1b:8a:cc:4e:bb:64:79:6d:ae:38:be:7b:ec:11:0f:08:40:f0:
         b7:65:f4:56:bf:af:07:e2:22:1b:73:d9:4a:24:82:65:7f:15:
         4e:73:be:05:af:67:2e:a5:db:1a:fa:38:3a:0e:2c:ea:a5:b9:
         27:20:b7:39:23:74:0b:6d:72:c5:e9:f5:3b:a8:ae:c2:0c:b5:
         02:1f:71:ff:b9:22:2a:c4:07:d1:56:d3:a2:d1:44:35:5b:8e:
         46:2d:01:d1:a8:d1:e7:21:8f:fa:8c:65:10:b6:17:40:d2:fd:
         3e:59:21:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:04:11 2026 by rpki-client