Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134FAF/8AC41794449711F0A9757362C4F9AE02/Bmy1pxYud36-c45cu4Dn9JRwzCE.mft
File:                     Bmy1pxYud36-c45cu4Dn9JRwzCE.mft (raw, json)
Hash identifier:          aFT9K9OybjiBRqoRpDqjJFiXGi2wj3dsavdn4SS/lHo=
Subject key identifier:   DF:D7:D8:C3:8E:31:3B:48:2C:F0:07:43:AF:38:11:B4:B1:5A:59:DC
Authority key identifier: 06:6C:B5:A7:16:2E:77:7E:BE:73:8E:5C:BB:80:E7:F4:94:70:CC:21
Certificate issuer:       /CN=A9134FAF/serialNumber=066CB5A7162E777EBE738E5CBB80E7F49470CC21
Certificate serial:       9D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bmy1pxYud36-c45cu4Dn9JRwzCE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134FAF/8AC41794449711F0A9757362C4F9AE02/Bmy1pxYud36-c45cu4Dn9JRwzCE.mft
Manifest number:          9D
Signing time:             Sun 05 Apr 2026 06:43:57 +0000
Manifest this update:     Sun 05 Apr 2026 06:43:57 +0000
Manifest next update:     Sun 12 Apr 2026 06:43:57 +0000
Files and hashes:         1: Bmy1pxYud36-c45cu4Dn9JRwzCE.crl (hash: MVfH31CpJrdrPQw1fQ0q7IN0TmcR7HeslwgB3gA+A3k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134FAF/8AC41794449711F0A9757362C4F9AE02/Bmy1pxYud36-c45cu4Dn9JRwzCE.crl
                          rsync://rpki.apnic.net/member_repository/A9134FAF/8AC41794449711F0A9757362C4F9AE02/Bmy1pxYud36-c45cu4Dn9JRwzCE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bmy1pxYud36-c45cu4Dn9JRwzCE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 06:43:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 157 (0x9d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134FAF, serialNumber=066CB5A7162E777EBE738E5CBB80E7F49470CC21
        Validity
            Not Before: Apr  5 06:43:57 2026 GMT
            Not After : Apr 12 06:43:57 2026 GMT
        Subject: CN=69d204ad-3f8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c1:f9:9c:fd:18:b4:4d:0e:a7:7d:e2:98:d1:
                    fd:7b:cf:19:12:36:65:15:4c:71:a3:fb:04:63:49:
                    3e:54:8c:d2:ad:c9:93:b2:fa:2c:36:bc:bb:3a:42:
                    b3:06:fb:e0:3d:37:48:18:49:48:f9:c2:5b:06:10:
                    3f:8a:42:b4:84:a0:0b:10:e4:37:40:01:73:c7:1c:
                    0e:df:2b:43:69:53:c7:36:fd:a7:c8:fb:0a:78:e0:
                    23:b2:fb:e4:9b:b3:1f:9c:bf:61:9a:46:17:9f:fd:
                    a1:e5:94:d9:ae:31:1f:17:13:d4:6e:ac:61:1a:42:
                    92:c1:06:0c:d6:db:3d:34:43:94:c5:e4:94:4b:0b:
                    29:b8:a4:b1:de:8a:3b:34:ad:49:d5:9c:5c:dd:0a:
                    4e:51:8e:a0:29:18:d9:36:30:0f:5b:90:f8:20:d1:
                    e0:ec:0b:ee:05:00:de:20:51:b0:f4:ae:d5:b5:dd:
                    2f:f2:a0:f0:81:20:ce:b5:32:61:33:f2:d7:aa:f1:
                    5c:61:93:14:d9:73:65:7e:e5:0a:72:ac:ce:31:70:
                    e2:38:18:4e:54:2f:ee:74:7e:2c:38:e8:8e:fd:8e:
                    06:97:a0:ef:d0:b0:a2:75:19:02:be:61:e8:08:c5:
                    43:4e:71:b5:4c:93:6c:b1:39:e7:3b:5e:1c:fc:55:
                    c9:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:D7:D8:C3:8E:31:3B:48:2C:F0:07:43:AF:38:11:B4:B1:5A:59:DC
            X509v3 Authority Key Identifier:
                keyid:06:6C:B5:A7:16:2E:77:7E:BE:73:8E:5C:BB:80:E7:F4:94:70:CC:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134FAF/8AC41794449711F0A9757362C4F9AE02/Bmy1pxYud36-c45cu4Dn9JRwzCE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bmy1pxYud36-c45cu4Dn9JRwzCE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134FAF/8AC41794449711F0A9757362C4F9AE02/Bmy1pxYud36-c45cu4Dn9JRwzCE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:49:40:6d:e3:93:f9:18:59:a1:30:19:48:a4:32:00:7f:a5:
         f6:f1:1f:3e:c5:74:ab:80:ae:c5:cb:97:07:69:fc:71:d0:5d:
         2a:70:ad:12:07:f4:bf:37:2b:fc:4a:29:21:c4:f2:b5:4b:c6:
         ad:2c:fb:ac:04:24:6c:76:32:b3:14:96:de:cf:df:82:db:dc:
         95:a4:7a:dc:68:20:a9:ab:c8:78:4e:7e:14:6b:59:67:16:98:
         f4:b4:db:3a:79:4b:62:4b:fd:72:20:90:6e:50:ce:59:fa:02:
         26:a8:a8:89:de:c2:6d:e3:8c:09:29:90:50:d7:0b:0a:29:b3:
         ac:bf:4e:d4:62:38:43:2f:7b:23:7d:27:ec:48:b1:91:81:ac:
         0e:d4:0e:49:b7:b1:a6:b8:41:a0:05:ea:0c:6a:c7:9a:f6:22:
         77:73:d3:73:4f:0e:0f:34:87:59:11:ca:5c:74:6f:a3:e3:ab:
         41:55:5d:84:2d:16:d9:dc:7f:48:1b:b4:ca:e3:9f:37:54:d5:
         cc:5a:83:e7:23:eb:31:38:67:d9:09:10:5a:c4:64:e9:d5:5d:
         e9:58:28:4b:01:1a:e0:0a:5f:4b:e2:28:38:a6:15:c6:20:d6:
         15:76:80:ee:03:d7:30:af:46:61:be:7a:56:4d:0d:ce:ec:16:
         f7:3a:5c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 11:34:57 2026 by rpki-client