Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.mft
File:                     4BCvLhFKSp_VCFvkRmBSE5D7EzE.mft (raw, json)
Hash identifier:          Pjkb/4P8ffqECDk/sTZkMVKJWEO+NTxV+1vLlmvESQ0=
Subject key identifier:   1B:11:33:D5:FD:54:BB:A5:9A:0F:2F:02:4F:EA:F8:F9:CF:7D:37:9F
Authority key identifier: E0:10:AF:2E:11:4A:4A:9F:D5:08:5B:E4:46:60:52:13:90:FB:13:31
Certificate issuer:       /CN=A91278D5/serialNumber=E010AF2E114A4A9FD5085BE44660521390FB1331
Certificate serial:       0BBF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BCvLhFKSp_VCFvkRmBSE5D7EzE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.mft
Manifest number:          0B9A
Signing time:             Tue 18 Aug 2026 19:24:53 +0000
Manifest this update:     Tue 18 Aug 2026 19:24:52 +0000
Manifest next update:     Tue 25 Aug 2026 19:24:52 +0000
Files and hashes:         1: 4BCvLhFKSp_VCFvkRmBSE5D7EzE.crl (hash: zITu8iuhKDf8AlWl9vRygYLC6n3foFwd6kGpx1gIsrg=)
                          2: 76D38708D64611EE98C44371C4F9AE02.roa (hash: yMUFH8jfhcAN9l90UhmXr90e/hIZIMZpvn+Gq7qj/bY=)
                          3: 19D0C9444D6A11EFB5578F3AC4F9AE02.roa (hash: BPfB/XTTgtvHGk3VIxBnFhEcnL04DxqHE/nHRVwjG7s=)
                          4: 2BACE2284D6B11EF9595843FC4F9AE02.roa (hash: mmuNJzdQc+EMG4vi6YI8GL1XWoSarik/6NrUTgT3yPQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.crl
                          rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BCvLhFKSp_VCFvkRmBSE5D7EzE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 19:24:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3007 (0xbbf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91278D5, serialNumber=E010AF2E114A4A9FD5085BE44660521390FB1331
        Validity
            Not Before: Aug 18 19:24:52 2026 GMT
            Not After : Aug 25 19:24:52 2026 GMT
        Subject: CN=6a84b185-02a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e8:6d:2a:8d:0e:9f:09:59:08:f2:90:89:e4:
                    60:0f:c4:28:3e:95:bc:02:e0:18:ad:f8:d6:97:84:
                    4e:24:72:28:69:bb:b7:32:f9:11:b6:13:98:76:4e:
                    7a:22:37:3e:cb:c1:c6:1e:b0:f0:7c:75:15:d8:a6:
                    34:09:90:bc:46:cd:5c:22:06:92:fb:89:7e:04:11:
                    1c:41:aa:53:95:18:84:05:a8:2c:42:3a:30:81:ca:
                    42:94:56:8b:5c:57:53:0a:19:c8:c4:82:bd:43:2a:
                    cc:b9:60:a6:e0:13:99:9d:8d:0f:87:74:77:ec:20:
                    5e:29:59:3c:52:ad:a3:39:e0:0f:3f:9d:3e:b7:6d:
                    06:3d:4d:21:27:40:f6:95:27:bb:74:7b:b6:8e:f6:
                    0e:cd:83:ed:af:11:5d:a8:44:04:3a:c3:2d:0f:bb:
                    24:bb:3f:60:02:64:05:88:83:5b:11:01:19:f3:fe:
                    45:23:9e:8e:d4:5b:9e:30:3d:a4:bf:2d:4e:22:bb:
                    8f:67:b2:2b:1b:df:ac:73:f8:ac:7d:af:f9:05:ae:
                    88:42:b0:94:7d:06:ca:e7:0f:06:aa:f1:e0:9f:d5:
                    e9:cc:cc:89:64:5d:57:8c:13:9d:ab:15:47:6a:75:
                    e6:c9:92:a5:95:74:8a:f6:70:37:22:30:b0:7c:61:
                    6e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:11:33:D5:FD:54:BB:A5:9A:0F:2F:02:4F:EA:F8:F9:CF:7D:37:9F
            X509v3 Authority Key Identifier:
                keyid:E0:10:AF:2E:11:4A:4A:9F:D5:08:5B:E4:46:60:52:13:90:FB:13:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BCvLhFKSp_VCFvkRmBSE5D7EzE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:47:fd:25:29:cf:db:4f:df:e8:c2:b0:8d:21:fd:aa:11:53:
         6b:71:96:4d:41:f6:5a:16:57:21:a5:fb:d3:8d:b6:ad:e8:10:
         fc:7a:83:da:8f:58:e2:51:92:9c:47:d8:86:4f:39:c3:33:cf:
         d7:90:40:88:39:66:08:1e:5d:e5:1f:08:cc:e9:c3:ee:3b:17:
         d9:6e:35:40:8f:59:0b:fb:64:87:34:82:e9:5b:18:03:0d:51:
         28:0e:0c:c6:3f:83:09:0e:cb:9e:01:94:26:df:5c:c7:86:db:
         8e:e4:34:77:a4:40:02:3d:c0:dd:6d:e4:fb:b1:96:37:91:6c:
         e6:0d:6c:6a:7e:15:46:f4:12:ec:b8:92:26:3a:34:62:59:ad:
         e5:9c:02:eb:72:8d:7d:96:60:91:f9:52:3e:f3:e5:bb:13:41:
         8f:ff:9e:f6:33:f2:2c:d6:b9:4c:7e:c1:ca:0a:3b:65:70:ec:
         69:5e:c8:46:64:a2:f3:eb:52:8e:f4:e2:06:c9:03:72:e3:7e:
         6c:49:e9:ce:66:f1:dd:d5:3d:17:d0:7d:89:cc:59:21:0c:91:
         7a:01:bf:e3:c1:d7:57:f0:9b:47:77:c0:65:7a:ed:82:e6:b3:
         5c:c0:cc:51:5f:f3:52:c2:8c:2c:87:7e:2a:5b:9c:39:4e:48:
         5b:e8:14:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:54:10 2026 by rpki-client