Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91490F7/D8D3B4F235A911EE94B48D57C4F9AE02/BgI9tGNNXG41YYCoL7vPgLlHir4.mft
File:                     BgI9tGNNXG41YYCoL7vPgLlHir4.mft (raw, json)
Hash identifier:          /Y2gBZE+APNZFwC5wOHjfkj04wTSmQ7L2DB79y+hRpM=
Subject key identifier:   A6:53:A0:5F:FF:93:19:3A:4D:80:0F:85:E8:AA:A3:AD:B7:BD:57:3C
Authority key identifier: 06:02:3D:B4:63:4D:5C:6E:35:61:80:A8:2F:BB:CF:80:B9:47:8A:BE
Certificate issuer:       /CN=A91490F7/serialNumber=06023DB4634D5C6E356180A82FBBCF80B9478ABE
Certificate serial:       020D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BgI9tGNNXG41YYCoL7vPgLlHir4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91490F7/D8D3B4F235A911EE94B48D57C4F9AE02/BgI9tGNNXG41YYCoL7vPgLlHir4.mft
Manifest number:          020D
Signing time:             Thu 21 May 2026 03:02:32 +0000
Manifest this update:     Thu 21 May 2026 03:02:32 +0000
Manifest next update:     Thu 28 May 2026 03:02:32 +0000
Files and hashes:         1: BgI9tGNNXG41YYCoL7vPgLlHir4.crl (hash: qGTVrdTHqEcNbVj/Tppd/qqSjVT18/0lXWOgPDu2KEM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91490F7/D8D3B4F235A911EE94B48D57C4F9AE02/BgI9tGNNXG41YYCoL7vPgLlHir4.crl
                          rsync://rpki.apnic.net/member_repository/A91490F7/D8D3B4F235A911EE94B48D57C4F9AE02/BgI9tGNNXG41YYCoL7vPgLlHir4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BgI9tGNNXG41YYCoL7vPgLlHir4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 03:02:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 525 (0x20d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91490F7, serialNumber=06023DB4634D5C6E356180A82FBBCF80B9478ABE
        Validity
            Not Before: May 21 03:02:32 2026 GMT
            Not After : May 28 03:02:32 2026 GMT
        Subject: CN=6a0e75c8-4c46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:3f:72:b5:78:14:bd:3b:ac:08:c8:88:dc:55:
                    a5:e6:a7:94:5b:77:55:cb:5c:20:06:83:84:05:2a:
                    8a:df:08:e0:41:a9:1e:41:49:95:e3:68:52:4f:35:
                    f2:e8:e4:32:32:70:73:b5:5e:1d:82:80:27:5b:12:
                    a3:d3:26:1c:d3:df:e2:76:a4:17:2b:8a:6e:b6:53:
                    9d:59:95:30:8e:91:4e:fd:21:0a:30:3a:ae:9c:63:
                    ca:68:d8:21:05:6e:d4:8d:b0:92:f0:27:b6:51:c0:
                    37:af:aa:85:ec:55:d9:96:82:ca:a9:2f:9f:8a:4c:
                    6f:29:3d:a6:b0:42:93:9e:01:a0:52:fd:a5:6f:04:
                    a1:9d:fc:e5:ba:8a:ea:61:f7:b1:37:65:e7:be:b5:
                    39:e3:db:bc:c7:df:5d:97:92:61:84:92:20:29:ca:
                    4e:7c:19:d6:9d:c2:f1:30:fe:40:dc:5c:a4:55:0f:
                    f3:6e:87:25:bd:bb:41:5d:b9:bb:90:7f:4d:aa:6d:
                    a8:f0:87:8a:c1:83:4f:2f:84:4b:c7:0c:3c:6d:72:
                    2e:1b:24:ad:a0:db:dc:d3:ea:3c:10:ba:e9:28:fc:
                    23:68:f4:c7:66:9a:ce:b7:32:8d:e6:36:29:96:ad:
                    5b:d5:0c:eb:8a:18:bd:85:08:2d:61:91:0d:c6:24:
                    e2:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:53:A0:5F:FF:93:19:3A:4D:80:0F:85:E8:AA:A3:AD:B7:BD:57:3C
            X509v3 Authority Key Identifier:
                keyid:06:02:3D:B4:63:4D:5C:6E:35:61:80:A8:2F:BB:CF:80:B9:47:8A:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91490F7/D8D3B4F235A911EE94B48D57C4F9AE02/BgI9tGNNXG41YYCoL7vPgLlHir4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BgI9tGNNXG41YYCoL7vPgLlHir4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91490F7/D8D3B4F235A911EE94B48D57C4F9AE02/BgI9tGNNXG41YYCoL7vPgLlHir4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:7a:c4:6d:2c:cf:1c:d2:27:ae:97:8c:bb:07:16:b6:b7:ea:
         20:fb:64:5f:c9:df:a0:ea:6a:83:7a:0c:9f:a7:40:dc:df:f1:
         7c:bf:cd:20:5a:72:d0:d4:69:16:17:38:cc:7b:5b:be:cf:aa:
         8c:38:24:2e:95:7a:ed:0e:8e:93:dc:89:39:14:7f:d8:cb:8a:
         c4:de:6e:f0:8f:15:9e:ad:ee:7c:bb:da:ee:c9:c2:e6:b3:7b:
         e1:46:28:84:6b:f9:f1:b4:ad:96:dd:0f:0b:92:fa:72:d0:44:
         c9:6c:d2:7f:7b:86:3b:9d:ce:7d:c9:b5:ae:0f:fe:f5:33:ad:
         47:71:bd:51:03:89:3f:04:43:01:34:96:91:76:a9:93:80:92:
         11:d9:27:bf:3f:b7:67:f0:40:70:8c:98:d8:92:d7:06:af:a5:
         45:fe:01:8f:af:00:e0:72:62:39:50:1c:06:c7:e9:f2:90:e1:
         bf:c6:8d:82:88:7f:e9:4b:89:79:2e:7e:34:eb:76:51:3b:fd:
         9e:83:90:35:68:e1:a3:34:c8:66:0a:54:9c:e5:11:e6:e0:05:
         45:23:a8:ea:84:95:16:2e:9e:0d:93:e7:d9:1b:fd:29:e7:c8:
         32:f1:29:d8:26:c2:03:82:3c:33:4b:8c:b4:db:6a:e8:c9:25:
         ee:21:25:29
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAg0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDkwRjcxMTAvBgNVBAUTKDA2MDIzREI0NjM0RDVDNkUzNTYxODBBODJGQkJDRjgw
Qjk0NzhBQkUwHhcNMjYwNTIxMDMwMjMyWhcNMjYwNTI4MDMwMjMyWjAYMRYwFAYD
VQQDEw02YTBlNzVjOC00YzQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwD9ytXgUvTusCMiI3FWl5qeUW3dVy1wgBoOEBSqK3wjgQakeQUmV42hSTzXy
6OQyMnBztV4dgoAnWxKj0yYc09/idqQXK4putlOdWZUwjpFO/SEKMDqunGPKaNgh
BW7UjbCS8Ce2UcA3r6qF7FXZloLKqS+fikxvKT2msEKTngGgUv2lbwShnfzluorq
YfexN2XnvrU549u8x99dl5JhhJIgKcpOfBnWncLxMP5A3FykVQ/zboclvbtBXbm7
kH9Nqm2o8IeKwYNPL4RLxww8bXIuGyStoNvc0+o8ELrpKPwjaPTHZprOtzKN5jYp
lq1b1Qzrihi9hQgtYZENxiTiQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKZToF//
kxk6TYAPheiqo623vVc8MB8GA1UdIwQYMBaAFAYCPbRjTVxuNWGAqC+7z4C5R4q+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTBGNy9EOEQzQjRGMjM1
QTkxMUVFOTRCNDhENTdDNEY5QUUwMi9CZ0k5dEdOTlhHNDFZWUNvTDd2UGdMbEhp
cjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0JnSTl0R05OWEc0MVlZQ29MN3ZQZ0xsSGlyNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
OTBGNy9EOEQzQjRGMjM1QTkxMUVFOTRCNDhENTdDNEY5QUUwMi9CZ0k5dEdOTlhH
NDFZWUNvTDd2UGdMbEhpcjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIXrEbSzPHNInrpeMuwcWtrfqIPtkX8nfoOpqg3oMn6dA3N/xfL/NIFpy0NRp
Fhc4zHtbvs+qjDgkLpV67Q6Ok9yJORR/2MuKxN5u8I8Vnq3ufLva7snC5rN74UYo
hGv58bStlt0PC5L6ctBEyWzSf3uGO53Ofcm1rg/+9TOtR3G9UQOJPwRDATSWkXap
k4CSEdknvz+3Z/BAcIyY2JLXBq+lRf4Bj68A4HJiOVAcBsfp8pDhv8aNgoh/6UuJ
eS5+NOt2UTv9noOQNWjhozTIZgpUnOUR5uAFRSOo6oSVFi6eDZPn2Rv9KefIMvEp
2CbCA4I8M0uMtNtq6Mkl7iElKQ==
-----END CERTIFICATE-----
Generated at Thu May 21 10:15:59 2026 by rpki-client