Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912978E/D5AE7FAC53CA11EE8049935EC4F9AE02/bfCTVmC1JNKoCAZDaLCvxWU4ppo.mft
File:                     bfCTVmC1JNKoCAZDaLCvxWU4ppo.mft (raw, json)
Hash identifier:          5Nd7NlfanGqt8iEvcos/sMzncvsV0x9TKgd6XFKuyQ0=
Subject key identifier:   7B:7C:81:F4:F2:29:07:A9:5F:13:E1:C3:36:18:A9:B6:02:01:24:1D
Authority key identifier: 6D:F0:93:56:60:B5:24:D2:A8:08:06:43:68:B0:AF:C5:65:38:A6:9A
Certificate issuer:       /CN=A912978E/serialNumber=6DF0935660B524D2A808064368B0AFC56538A69A
Certificate serial:       0231
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bfCTVmC1JNKoCAZDaLCvxWU4ppo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912978E/D5AE7FAC53CA11EE8049935EC4F9AE02/bfCTVmC1JNKoCAZDaLCvxWU4ppo.mft
Manifest number:          0229
Signing time:             Wed 19 Aug 2026 03:19:30 +0000
Manifest this update:     Wed 19 Aug 2026 03:19:30 +0000
Manifest next update:     Wed 26 Aug 2026 03:19:30 +0000
Files and hashes:         1: bfCTVmC1JNKoCAZDaLCvxWU4ppo.crl (hash: AKv7yiz1iBajhDJA12hbwSWOnRqeTyLC4SbkBcfeoNo=)
                          2: 59923F2CA72011EEA63ABF4AC4F9AE02.roa (hash: jTw+k2qXsMBUja+xPqB6A7knrLM1Ewwr/1IeQgLz3tU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912978E/D5AE7FAC53CA11EE8049935EC4F9AE02/bfCTVmC1JNKoCAZDaLCvxWU4ppo.crl
                          rsync://rpki.apnic.net/member_repository/A912978E/D5AE7FAC53CA11EE8049935EC4F9AE02/bfCTVmC1JNKoCAZDaLCvxWU4ppo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bfCTVmC1JNKoCAZDaLCvxWU4ppo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 03:19:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 561 (0x231)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912978E, serialNumber=6DF0935660B524D2A808064368B0AFC56538A69A
        Validity
            Not Before: Aug 19 03:19:30 2026 GMT
            Not After : Aug 26 03:19:30 2026 GMT
        Subject: CN=6a8520c2-4118
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a8:3f:4a:cb:8d:f1:aa:75:e4:f2:c1:19:c6:
                    d2:0a:82:11:fc:d7:aa:ed:fd:0d:79:c6:fd:ae:63:
                    b4:bf:f4:e4:04:5b:ca:a9:33:cc:47:21:27:ea:ce:
                    62:16:00:66:33:de:9b:5a:de:b1:2c:72:d0:2f:0b:
                    93:67:09:85:99:fb:68:f0:2f:8a:5e:0e:71:49:86:
                    fe:b8:c5:dc:32:26:85:b6:28:82:50:1b:4e:53:b8:
                    0c:48:78:21:6e:e3:fc:d6:c3:f6:8a:25:5d:8f:00:
                    01:a5:13:67:b2:c1:0a:8f:6b:5b:8b:10:14:43:cd:
                    34:79:e4:a0:1b:0b:49:99:b5:b9:60:92:ab:b8:11:
                    6d:54:f1:8e:c5:72:ae:c2:9f:b5:20:e3:40:7b:72:
                    ec:4e:47:41:9c:cc:90:9f:94:da:48:16:4d:f6:f0:
                    36:c5:30:d0:69:5d:40:03:29:d9:68:17:bb:ac:19:
                    44:d2:b2:ce:0f:ea:4a:cd:cf:bb:13:47:55:e8:de:
                    e2:59:1e:fa:e5:6c:f9:c6:1d:e0:65:a1:9b:b5:91:
                    b3:02:2c:e2:77:c9:85:8a:6c:38:6d:88:06:0f:cd:
                    06:03:cd:0e:39:13:a1:ec:f2:50:03:c0:a8:78:b0:
                    13:16:1f:37:7f:70:6f:9f:2b:2f:0b:75:85:7a:43:
                    92:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:7C:81:F4:F2:29:07:A9:5F:13:E1:C3:36:18:A9:B6:02:01:24:1D
            X509v3 Authority Key Identifier:
                keyid:6D:F0:93:56:60:B5:24:D2:A8:08:06:43:68:B0:AF:C5:65:38:A6:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912978E/D5AE7FAC53CA11EE8049935EC4F9AE02/bfCTVmC1JNKoCAZDaLCvxWU4ppo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bfCTVmC1JNKoCAZDaLCvxWU4ppo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912978E/D5AE7FAC53CA11EE8049935EC4F9AE02/bfCTVmC1JNKoCAZDaLCvxWU4ppo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:4f:d2:f1:29:f0:85:f4:fe:6d:8a:48:93:23:56:89:69:93:
         bd:ad:8e:6c:4b:c6:48:59:51:85:d3:f3:33:8f:40:4f:67:1b:
         a1:bf:74:81:87:ab:ae:da:a4:22:5d:6c:b7:bd:b6:f2:9a:b7:
         f4:ec:c4:c9:cd:dc:d6:4e:84:a7:f4:7f:fb:28:23:09:ee:e7:
         fb:b8:44:ca:66:5b:78:0e:34:20:5d:ba:b4:eb:7e:f0:0a:60:
         66:ec:48:43:9d:49:a3:cb:b3:f6:80:8d:d3:ab:c5:31:8d:9c:
         0a:7d:75:91:4b:2c:db:ff:e2:76:97:03:00:7e:62:aa:e3:a3:
         01:e4:5c:0d:e0:49:d8:1c:a8:2c:d0:fd:ba:2c:ce:44:42:f6:
         ac:9c:8f:7c:e5:38:ce:e8:1e:4c:11:49:78:77:21:ef:b8:15:
         1d:6e:96:11:2e:41:06:64:68:cb:8e:9b:b2:c3:da:94:e9:c5:
         d6:7b:91:49:fc:14:39:d2:38:37:b1:93:91:f1:4d:28:69:8b:
         5c:e6:99:b3:aa:24:61:8e:d8:71:3d:92:06:57:0a:f6:2d:69:
         69:3d:96:77:5a:95:02:a0:bb:9e:c9:7b:1a:38:9a:be:55:8d:
         ec:94:73:8c:aa:e1:08:9b:06:a1:93:9c:c3:04:a9:54:5f:68:
         58:e7:7e:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:47:50 2026 by rpki-client