Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.mft
File:                     0ba-fNUVRYE-wxdmgHrN2YepD98.mft (raw, json)
Hash identifier:          81FO4DeMjmbAKJr+x78oR5wMwTcuTJtr01oNK26KHLg=
Subject key identifier:   46:2D:A0:7B:A9:DC:FB:2F:CE:3C:3D:D3:13:B5:FC:8C:5E:D4:6C:5D
Authority key identifier: D1:B6:BE:7C:D5:15:45:81:3E:C3:17:66:80:7A:CD:D9:87:A9:0F:DF
Certificate issuer:       /CN=A915418F/serialNumber=D1B6BE7CD51545813EC31766807ACDD987A90FDF
Certificate serial:       09CD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ba-fNUVRYE-wxdmgHrN2YepD98.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.mft
Manifest number:          09BC
Signing time:             Sun 26 Jul 2026 20:27:35 +0000
Manifest this update:     Sun 26 Jul 2026 20:27:34 +0000
Manifest next update:     Sun 02 Aug 2026 20:27:34 +0000
Files and hashes:         1: 0ba-fNUVRYE-wxdmgHrN2YepD98.crl (hash: NVFBwlB81rvmmIANwLz4IjSE0JOANkB/DFNE1mmGBDc=)
                          2: 3BEF1820AFBA11EA8449B980C4F9AE02.roa (hash: CYtTamBw2WXxPcIM3rrSk3dBYaMWIxNwfk91+jxjXp8=)
                          3: F4757B1018C811EB94A5327AC4F9AE02.roa (hash: F7WyOekFgI8ivePs6ZQwLbNz0QkuTR1HhVS0Z6YFZWs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.crl
                          rsync://rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ba-fNUVRYE-wxdmgHrN2YepD98.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 20:27:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2509 (0x9cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915418F, serialNumber=D1B6BE7CD51545813EC31766807ACDD987A90FDF
        Validity
            Not Before: Jul 26 20:27:34 2026 GMT
            Not After : Aug  2 20:27:34 2026 GMT
        Subject: CN=6a666db6-b684
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:da:59:71:b9:ee:3f:0e:a1:ae:ba:ae:0c:41:
                    b9:27:09:7b:d9:ee:48:37:39:e5:73:ce:d9:d8:e1:
                    0a:6d:81:8a:dc:c3:0d:4c:d1:a6:0d:11:c9:d1:cf:
                    df:f3:9c:f8:c4:12:0a:2a:e6:08:3f:a9:de:ff:a0:
                    47:ae:8d:98:e2:09:6e:21:e0:1f:e6:96:e4:4b:23:
                    41:8d:92:1e:c6:79:0f:6f:36:f6:7f:97:4e:05:41:
                    67:56:1f:02:28:8e:c7:71:b9:d4:57:de:43:9c:ac:
                    a6:3c:3d:9c:ba:d2:84:4b:69:9a:6f:30:8a:b0:8f:
                    95:86:6f:f3:5d:c2:6d:f4:48:b0:f1:60:35:e1:f4:
                    86:7e:c7:2f:b4:36:23:90:ab:c8:97:10:51:d3:af:
                    e5:40:a7:d8:34:35:79:e5:dd:4f:94:c4:66:d5:0a:
                    0c:ac:a4:94:13:86:75:7f:b9:1e:3f:26:a3:26:82:
                    28:68:22:44:04:ce:58:08:ae:42:17:b0:f6:e9:cf:
                    fc:33:7d:7e:d8:5f:44:e8:8b:76:52:ca:2f:a6:07:
                    30:a8:74:2f:94:ce:47:e8:34:6b:46:62:eb:f7:69:
                    89:c8:21:41:9a:9e:2c:b5:f1:23:74:aa:cb:26:94:
                    5b:5d:44:01:b5:a8:38:27:a3:bd:9f:d8:08:13:63:
                    69:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:2D:A0:7B:A9:DC:FB:2F:CE:3C:3D:D3:13:B5:FC:8C:5E:D4:6C:5D
            X509v3 Authority Key Identifier:
                keyid:D1:B6:BE:7C:D5:15:45:81:3E:C3:17:66:80:7A:CD:D9:87:A9:0F:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ba-fNUVRYE-wxdmgHrN2YepD98.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:27:3d:66:2f:0c:26:42:ed:17:be:1f:cc:c9:c0:a7:28:e7:
         8b:af:0b:ac:ae:ae:9a:68:12:e2:17:5e:d8:59:65:bd:a2:12:
         65:fd:32:6f:b5:01:e5:5b:a0:9d:1f:28:ed:99:50:c8:c2:70:
         40:2a:0a:87:5c:f9:68:b8:f5:54:95:76:bd:4f:81:6a:60:15:
         3b:44:8a:e2:c3:a9:f1:08:60:4c:d0:a2:26:ee:b7:7a:a2:bb:
         84:23:a7:ee:bd:24:95:ac:b1:d8:12:d1:9f:8d:06:ea:69:8c:
         3f:3d:f6:00:47:a1:87:00:8c:9c:0c:97:ed:ea:c7:a6:7d:54:
         a0:57:cc:ce:ea:2e:8f:31:9e:bd:7f:c6:0a:cf:28:51:50:00:
         59:da:c2:d7:1a:fa:2b:78:40:61:ff:64:a3:3c:e2:97:5d:64:
         ba:1d:2c:51:24:35:d5:d6:d7:71:24:23:6e:e3:87:57:ab:45:
         21:90:40:e2:04:69:39:75:41:f6:c0:ba:17:5c:59:c1:1d:8e:
         dd:7f:94:9a:f1:c9:2a:ca:c6:0d:00:98:c6:c0:ba:8f:86:4d:
         37:ee:47:e7:37:f9:a5:db:fc:8f:46:78:29:ca:28:d8:15:53:
         de:4e:a1:78:44:63:38:0a:f5:65:9b:bd:a3:37:f5:9b:8c:0f:
         f5:06:87:2d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCc0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTQxOEYxMTAvBgNVBAUTKEQxQjZCRTdDRDUxNTQ1ODEzRUMzMTc2NjgwN0FDREQ5
ODdBOTBGREYwHhcNMjYwNzI2MjAyNzM0WhcNMjYwODAyMjAyNzM0WjAYMRYwFAYD
VQQDEw02YTY2NmRiNi1iNjg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAidpZcbnuPw6hrrquDEG5Jwl72e5INznlc87Z2OEKbYGK3MMNTNGmDRHJ0c/f
85z4xBIKKuYIP6ne/6BHro2Y4gluIeAf5pbkSyNBjZIexnkPbzb2f5dOBUFnVh8C
KI7HcbnUV95DnKymPD2cutKES2mabzCKsI+Vhm/zXcJt9Eiw8WA14fSGfscvtDYj
kKvIlxBR06/lQKfYNDV55d1PlMRm1QoMrKSUE4Z1f7kePyajJoIoaCJEBM5YCK5C
F7D26c/8M31+2F9E6It2UsovpgcwqHQvlM5H6DRrRmLr92mJyCFBmp4stfEjdKrL
JpRbXUQBtag4J6O9n9gIE2NpDwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEYtoHup
3Psvzjw90xO1/Ixe1GxdMB8GA1UdIwQYMBaAFNG2vnzVFUWBPsMXZoB6zdmHqQ/f
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDE4Ri83NUI5MEQyNEFG
QjgxMUVBQTc2RTVFN0JDNEY5QUUwMi8wYmEtZk5VVlJZRS13eGRtZ0hyTjJZZXBE
OTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBiYS1mTlVWUllFLXd4ZG1nSHJOMlllcEQ5OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NDE4Ri83NUI5MEQyNEFGQjgxMUVBQTc2RTVFN0JDNEY5QUUwMi8wYmEtZk5VVlJZ
RS13eGRtZ0hyTjJZZXBEOTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAoCc9Zi8MJkLtF74fzMnApyjni68LrK6ummgS4hde2FllvaISZf0yb7UB5Vug
nR8o7ZlQyMJwQCoKh1z5aLj1VJV2vU+BamAVO0SK4sOp8QhgTNCiJu63eqK7hCOn
7r0klayx2BLRn40G6mmMPz32AEehhwCMnAyX7erHpn1UoFfMzuoujzGevX/GCs8o
UVAAWdrC1xr6K3hAYf9kozzil11kuh0sUSQ11dbXcSQjbuOHV6tFIZBA4gRpOXVB
9sC6F1xZwR2O3X+UmvHJKsrGDQCYxsC6j4ZNN+5H5zf5pdv8j0Z4Kcoo2BVT3k6h
eERjOAr1ZZu9ozf1m4wP9QaHLQ==
-----END CERTIFICATE-----
Generated at Mon Jul 27 04:15:27 2026 by rpki-client