Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91490F7/D8D3B4F235A911EE94B48D57C4F9AE02/BgI9tGNNXG41YYCoL7vPgLlHir4.mft
File:                     BgI9tGNNXG41YYCoL7vPgLlHir4.mft (raw, json)
Hash identifier:          OWXDzBHKhtRVlf3+6i4JOgmCgrA5Oq5itXqWDRbmf4Y=
Subject key identifier:   7E:D1:29:37:CB:5F:F2:F1:7B:C3:57:7F:32:D8:5F:4E:98:09:C4:E6
Authority key identifier: 06:02:3D:B4:63:4D:5C:6E:35:61:80:A8:2F:BB:CF:80:B9:47:8A:BE
Certificate issuer:       /CN=A91490F7/serialNumber=06023DB4634D5C6E356180A82FBBCF80B9478ABE
Certificate serial:       023A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BgI9tGNNXG41YYCoL7vPgLlHir4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91490F7/D8D3B4F235A911EE94B48D57C4F9AE02/BgI9tGNNXG41YYCoL7vPgLlHir4.mft
Manifest number:          023A
Signing time:             Wed 19 Aug 2026 03:06:43 +0000
Manifest this update:     Wed 19 Aug 2026 03:06:42 +0000
Manifest next update:     Wed 26 Aug 2026 03:06:42 +0000
Files and hashes:         1: BgI9tGNNXG41YYCoL7vPgLlHir4.crl (hash: GvC1+KcMzaQ9+VZkIoNeatJKO/xn+DRxyThg0Hb5qV4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91490F7/D8D3B4F235A911EE94B48D57C4F9AE02/BgI9tGNNXG41YYCoL7vPgLlHir4.crl
                          rsync://rpki.apnic.net/member_repository/A91490F7/D8D3B4F235A911EE94B48D57C4F9AE02/BgI9tGNNXG41YYCoL7vPgLlHir4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BgI9tGNNXG41YYCoL7vPgLlHir4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 03:06:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 570 (0x23a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91490F7, serialNumber=06023DB4634D5C6E356180A82FBBCF80B9478ABE
        Validity
            Not Before: Aug 19 03:06:42 2026 GMT
            Not After : Aug 26 03:06:42 2026 GMT
        Subject: CN=6a851dc3-3ad1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:2f:88:a0:71:8f:14:ea:1a:2f:7d:d0:20:79:
                    39:b0:ca:95:47:42:44:8a:b3:5b:6d:ed:72:66:d7:
                    bf:10:49:13:4b:d7:8f:c4:9e:f8:2b:79:39:27:0d:
                    e3:86:5a:4c:c2:ea:24:11:db:3a:59:67:42:7d:7d:
                    76:44:4b:20:a0:97:83:f9:59:60:58:6f:8b:8e:4d:
                    ba:60:74:a8:ff:b1:05:18:9f:d3:8d:8f:ce:fd:97:
                    bf:50:81:94:97:69:eb:4f:83:79:39:5e:9f:ed:7c:
                    92:52:ed:98:74:07:c4:14:0b:4d:df:41:7f:d9:42:
                    1d:6b:6a:9f:8f:d8:52:4b:eb:81:de:98:47:2f:29:
                    01:e0:08:d0:43:d5:01:5f:56:a6:de:a4:2c:93:e0:
                    1c:c2:1f:0f:0d:53:fc:86:1c:e6:7d:70:be:cb:a0:
                    1b:8b:2e:0a:d0:12:44:1b:8e:a1:f8:5f:c3:0e:f4:
                    9b:b1:fb:33:a5:1b:ec:9f:e1:4c:60:25:5b:0f:6f:
                    8c:10:2c:28:e6:98:79:79:75:1e:ea:b7:1b:1c:43:
                    a8:71:4d:b2:1e:70:eb:a4:5f:7d:16:13:88:1a:8f:
                    f9:03:f6:f9:58:8c:9b:57:80:42:98:32:c9:99:82:
                    b2:95:b9:0a:bf:bf:21:a2:aa:ac:b2:d1:3c:53:1d:
                    87:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:D1:29:37:CB:5F:F2:F1:7B:C3:57:7F:32:D8:5F:4E:98:09:C4:E6
            X509v3 Authority Key Identifier:
                keyid:06:02:3D:B4:63:4D:5C:6E:35:61:80:A8:2F:BB:CF:80:B9:47:8A:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91490F7/D8D3B4F235A911EE94B48D57C4F9AE02/BgI9tGNNXG41YYCoL7vPgLlHir4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BgI9tGNNXG41YYCoL7vPgLlHir4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91490F7/D8D3B4F235A911EE94B48D57C4F9AE02/BgI9tGNNXG41YYCoL7vPgLlHir4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:1c:69:ee:1d:4d:09:8d:c5:5f:98:c0:ff:38:d0:07:9b:3c:
         68:41:99:1f:80:02:c9:0d:5a:5e:3d:b6:34:91:54:e3:24:d5:
         08:ac:99:de:f4:20:3d:75:38:59:7a:1b:7e:18:ea:5c:7f:e8:
         aa:91:49:ab:40:d0:5f:ef:3e:df:3d:ee:88:ae:91:90:0e:6c:
         08:d1:49:ad:de:a9:19:71:f4:b1:49:81:ca:3f:f9:cc:60:6c:
         c8:1b:dd:5c:90:e6:ee:63:38:1c:48:e3:d9:4e:6a:5e:5e:d9:
         21:f2:2f:ec:8a:01:76:68:57:f0:7e:e5:d9:80:03:fe:44:61:
         ec:25:85:cf:84:f2:9d:14:99:53:e4:55:12:7b:5e:23:7b:67:
         97:80:e1:7e:27:aa:30:c1:fd:00:78:b3:4d:56:58:36:08:bb:
         cc:74:34:4a:7b:4c:45:81:09:5e:10:f4:76:f4:f8:e7:7d:0a:
         25:ac:45:7a:db:83:f4:e6:8b:d5:13:e3:0f:6d:cb:b4:e2:55:
         1d:7e:56:3c:d9:1c:c0:ab:19:32:d0:cb:f7:87:c0:a3:46:4a:
         20:31:a6:e8:f9:07:38:0e:c9:13:bc:d6:e1:fd:7b:78:a4:24:
         ab:81:20:4b:89:e3:e6:a0:9b:0c:ce:de:c5:6c:8d:0c:30:c4:
         05:cd:c9:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:44:45 2026 by rpki-client