Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.mft
File:                     ByzfZRsxLK-9sEmjNWn-pu9slRc.mft (raw, json)
Hash identifier:          UxsSntX6ooNfEkZkgX0R1+llxgZI0qdOUaGWAQ9n2x4=
Subject key identifier:   7F:E4:99:49:96:C1:EB:11:DC:71:6F:8C:CE:4C:AF:8D:04:6E:B5:5F
Authority key identifier: 07:2C:DF:65:1B:31:2C:AF:BD:B0:49:A3:35:69:FE:A6:EF:6C:95:17
Certificate issuer:       /CN=A915BCB1/serialNumber=072CDF651B312CAFBDB049A33569FEA6EF6C9517
Certificate serial:       0999
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByzfZRsxLK-9sEmjNWn-pu9slRc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.mft
Manifest number:          096A
Signing time:             Sat 28 Mar 2026 20:04:29 +0000
Manifest this update:     Sat 28 Mar 2026 20:04:29 +0000
Manifest next update:     Sat 04 Apr 2026 20:04:29 +0000
Files and hashes:         1: ByzfZRsxLK-9sEmjNWn-pu9slRc.crl (hash: TBo1zGk5wlqaGLntx6NjAbj/cdoB1uzmDE0pFAOp5SY=)
                          2: 880C4DF80FE411EE90944D75C4F9AE02.roa (hash: Y0bI926X3CaUrT8/nR8ZBhkaoJ5AjGGl5LLomYvK2ug=)
                          3: DF5E7CB6ED9C11EE81EFD40BC4F9AE02.roa (hash: fjWgAJnqDT9NesXOUtIXnUStrD3jUP0xK+W90KMvE+0=)
                          4: 29BE072046FF11EF9A76C461C4F9AE02.roa (hash: m59icjETbPEsJARtE8RwhDRHt46zarweYBmDC8Z0f0c=)
                          5: 7A2B979E763011EFBA86FD49C4F9AE02.roa (hash: 8hJGe41GHn/nQb/Y3ash++TM6zmcpgNi96YBeazW6/I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.crl
                          rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByzfZRsxLK-9sEmjNWn-pu9slRc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 04 Apr 2026 20:04:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2457 (0x999)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915BCB1, serialNumber=072CDF651B312CAFBDB049A33569FEA6EF6C9517
        Validity
            Not Before: Mar 28 20:04:29 2026 GMT
            Not After : Apr  4 20:04:29 2026 GMT
        Subject: CN=69c8344d-37f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:36:2f:94:27:1b:b0:ad:db:f7:e9:29:05:1d:
                    88:ff:fb:59:1b:6a:32:d7:0f:64:53:0f:69:49:1a:
                    24:70:f8:7e:54:bc:53:e0:76:43:b5:3b:73:6e:fa:
                    87:33:d2:e6:1a:28:f5:8d:6e:d7:4e:56:a6:38:bb:
                    68:67:71:e0:47:f0:e1:4f:ce:43:98:aa:fb:d5:43:
                    66:dc:a0:ea:60:55:40:3e:c2:15:a4:58:f4:47:b4:
                    1f:38:c2:7c:a8:53:ce:54:ea:56:40:7a:c0:21:8a:
                    7a:ae:f9:56:13:a8:9f:f2:c2:f6:1a:6b:3c:34:9f:
                    05:81:c3:54:ef:1f:67:56:39:84:ea:d4:54:fe:cf:
                    30:23:b0:ab:10:49:ef:c4:aa:1f:3a:c3:47:2b:ec:
                    57:83:84:05:e4:ef:c8:06:35:d6:ad:78:12:8e:6c:
                    0d:ff:d6:4d:f0:34:58:b1:d1:eb:dc:bf:44:6e:57:
                    0f:78:c7:3c:03:1e:76:c4:ea:22:f3:c9:db:11:9a:
                    54:9a:9c:ff:7e:e9:44:ee:54:cd:41:0b:eb:28:83:
                    39:f4:e1:17:23:c5:08:b3:56:1e:54:26:cf:8b:c9:
                    79:94:ca:0a:eb:84:b8:7f:af:fc:5c:90:97:cb:08:
                    3f:3a:23:30:ca:94:77:3b:a0:56:e2:df:7f:f2:4a:
                    56:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:E4:99:49:96:C1:EB:11:DC:71:6F:8C:CE:4C:AF:8D:04:6E:B5:5F
            X509v3 Authority Key Identifier:
                keyid:07:2C:DF:65:1B:31:2C:AF:BD:B0:49:A3:35:69:FE:A6:EF:6C:95:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByzfZRsxLK-9sEmjNWn-pu9slRc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:66:6f:e7:d2:91:81:05:f9:ac:23:71:89:aa:55:62:42:d4:
         75:bd:47:5f:32:f4:e3:08:f8:f4:7a:d6:de:03:e7:00:0a:dd:
         49:08:5b:dd:43:61:ba:c7:02:5f:40:98:ba:4f:2b:02:42:cc:
         10:97:40:61:b0:31:a2:9e:c0:8b:23:5d:0e:ca:16:c6:35:c0:
         22:2a:22:4d:2d:03:1f:a4:64:62:05:df:ed:0b:89:50:74:89:
         4e:b3:8d:c3:1a:98:83:38:30:cd:87:f9:09:f2:6b:42:ce:a9:
         e9:69:ed:28:4c:57:d1:09:0c:1e:33:54:02:79:cb:e5:ae:7a:
         06:c3:f9:ca:81:ce:d1:8a:3d:70:f9:fa:e2:9c:56:2c:c3:34:
         a5:76:60:ef:69:46:61:45:09:8a:f3:1d:7b:b4:be:be:b4:60:
         c0:1b:aa:e9:e0:73:8f:86:81:44:b8:b2:e7:72:d0:08:d6:a8:
         81:89:0e:86:22:a4:33:4f:b8:f1:0a:b3:c6:1f:c1:8d:e0:cb:
         85:3a:9f:81:ed:fd:f7:fa:dc:43:a0:0b:5e:f7:91:d8:fd:54:
         49:db:4c:2d:82:9f:18:3f:5d:e4:55:c5:09:ed:48:89:30:b8:
         0e:de:35:b5:f4:a7:b0:b9:fb:00:1b:f8:1b:30:a1:96:36:df:
         27:32:ae:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 30 06:02:26 2026 by rpki-client