Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.mft
File:                     ByzfZRsxLK-9sEmjNWn-pu9slRc.mft (raw, json)
Hash identifier:          +3x6imreSF/bWdWhoRqblwzUjXqlNDAeJN0ZjiYuQe8=
Subject key identifier:   0F:F5:77:B4:5E:FF:76:F2:40:C6:B6:34:04:67:57:09:68:DB:EC:35
Authority key identifier: 07:2C:DF:65:1B:31:2C:AF:BD:B0:49:A3:35:69:FE:A6:EF:6C:95:17
Certificate issuer:       /CN=A915BCB1/serialNumber=072CDF651B312CAFBDB049A33569FEA6EF6C9517
Certificate serial:       0A00
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByzfZRsxLK-9sEmjNWn-pu9slRc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.mft
Manifest number:          09CD
Signing time:             Sun 04 Oct 2026 20:02:00 +0000
Manifest this update:     Sun 04 Oct 2026 20:01:59 +0000
Manifest next update:     Sun 11 Oct 2026 20:01:59 +0000
Files and hashes:         1: ByzfZRsxLK-9sEmjNWn-pu9slRc.crl (hash: ABnKgR1K9siw7bLX6Vogi5JswBGM4gAi/s0FGBuXY5c=)
                          2: 29BE072046FF11EF9A76C461C4F9AE02.roa (hash: wv1tyKuy/cicAUFUJJPD31RZZ+1M78UqwWGMEmbqF+4=)
                          3: 880C4DF80FE411EE90944D75C4F9AE02.roa (hash: r/f1AMBqitLgnuUPfNZ2ujWwgFWoS2KyRr8RZEAi5pw=)
                          4: 7A2B979E763011EFBA86FD49C4F9AE02.roa (hash: 8QvXdh0bfE5eVkyVDHMIAaN7n/VnRAKQbjvOmRAZQCU=)
                          5: DF5E7CB6ED9C11EE81EFD40BC4F9AE02.roa (hash: oZVj2IRQ0g25jkjfw9yqdEyGLFvpHEVoEcKCtB0wjZs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.crl
                          rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByzfZRsxLK-9sEmjNWn-pu9slRc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 20:01:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2560 (0xa00)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915BCB1, serialNumber=072CDF651B312CAFBDB049A33569FEA6EF6C9517
        Validity
            Not Before: Oct  4 20:01:59 2026 GMT
            Not After : Oct 11 20:01:59 2026 GMT
        Subject: CN=6ac2b0b7-8154
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:52:82:e5:92:b5:97:11:9c:cc:f3:66:67:3c:
                    7a:12:f2:1b:3a:fa:2f:97:48:eb:1f:27:16:3b:50:
                    7c:a5:e3:ad:7f:7f:5a:96:1f:cf:1e:ea:94:7a:b4:
                    d6:81:da:50:98:a7:9c:50:a7:c1:80:56:ec:6d:85:
                    eb:39:3b:16:4e:a3:c2:cd:6d:dc:a7:d0:8c:bd:21:
                    3a:78:04:7e:70:f7:b8:bc:31:c2:54:f2:d8:8f:96:
                    33:81:9a:f6:93:f1:54:ed:96:fe:12:90:ce:03:17:
                    35:d0:37:3c:4c:9c:2a:14:c4:36:b1:b3:c5:25:c4:
                    55:26:1f:7e:e9:e6:00:88:de:e6:7f:6a:24:1c:8b:
                    c1:86:46:36:84:e6:48:f5:3a:32:17:5a:65:13:0d:
                    10:04:76:f7:80:be:77:cf:c5:72:a5:cf:82:a4:8b:
                    d5:7d:a5:40:f6:30:70:81:2c:de:60:a9:54:c1:e9:
                    7c:56:83:9a:80:c5:c9:a8:ee:e5:45:29:fa:db:f3:
                    74:47:5a:c3:b6:a8:14:1a:9a:15:68:8f:67:e9:0d:
                    b9:b7:e2:9a:5b:c9:b4:11:92:9c:1f:d7:20:9f:5f:
                    e0:ad:c7:75:0b:1e:05:a0:94:de:45:56:e5:50:57:
                    79:01:b8:97:76:52:b4:5a:40:bd:5b:42:ef:21:6c:
                    73:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:F5:77:B4:5E:FF:76:F2:40:C6:B6:34:04:67:57:09:68:DB:EC:35
            X509v3 Authority Key Identifier:
                keyid:07:2C:DF:65:1B:31:2C:AF:BD:B0:49:A3:35:69:FE:A6:EF:6C:95:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByzfZRsxLK-9sEmjNWn-pu9slRc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:7f:ff:f9:84:a0:64:a8:8a:84:aa:20:51:82:9a:1f:91:1b:
         16:88:45:64:35:0f:ff:5a:94:b1:b1:52:33:65:ab:2c:80:1f:
         58:d0:1d:12:f4:61:de:8d:ce:c3:8b:57:f6:53:78:f6:e5:4f:
         93:0c:50:3a:e7:14:7d:66:59:6b:f2:6f:d3:a7:bd:23:45:97:
         0a:fb:0e:02:a3:67:a6:36:9b:49:70:b5:3c:e0:04:8f:85:83:
         2e:83:46:93:18:24:a5:07:d6:41:1a:30:e9:10:93:50:3b:77:
         f0:a2:cd:3f:b8:53:08:81:ba:f9:29:f7:62:24:63:1f:c5:6f:
         06:b5:e9:3d:41:80:09:89:55:cb:95:c9:69:2e:e1:05:5e:6a:
         73:6f:9a:5b:5e:de:8a:5f:93:09:43:e0:89:80:72:1f:da:3d:
         e0:c7:bd:1f:d9:59:33:8a:94:85:74:b0:c9:5b:98:1d:f7:e9:
         ff:ee:11:d2:41:83:04:ae:4a:29:09:6a:08:55:2d:35:86:6a:
         3e:ed:42:5b:44:ac:f0:dd:e3:4f:0c:f1:b2:51:b8:45:4e:67:
         5c:2d:79:9d:d7:12:10:69:69:92:9b:a8:de:97:b0:15:e3:5f:
         2d:78:30:6e:fb:68:2d:a8:f7:6b:85:83:f8:3c:c3:86:0d:5f:
         ba:18:fd:78
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCgAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUJDQjExMTAvBgNVBAUTKDA3MkNERjY1MUIzMTJDQUZCREIwNDlBMzM1NjlGRUE2
RUY2Qzk1MTcwHhcNMjYxMDA0MjAwMTU5WhcNMjYxMDExMjAwMTU5WjAYMRYwFAYD
VQQDEw02YWMyYjBiNy04MTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAslKC5ZK1lxGczPNmZzx6EvIbOvovl0jrHycWO1B8peOtf39alh/PHuqUerTW
gdpQmKecUKfBgFbsbYXrOTsWTqPCzW3cp9CMvSE6eAR+cPe4vDHCVPLYj5YzgZr2
k/FU7Zb+EpDOAxc10Dc8TJwqFMQ2sbPFJcRVJh9+6eYAiN7mf2okHIvBhkY2hOZI
9ToyF1plEw0QBHb3gL53z8Vypc+CpIvVfaVA9jBwgSzeYKlUwel8VoOagMXJqO7l
RSn62/N0R1rDtqgUGpoVaI9n6Q25t+KaW8m0EZKcH9cgn1/grcd1Cx4FoJTeRVbl
UFd5AbiXdlK0WkC9W0LvIWxzjwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA/1d7Re
/3byQMa2NARnVwlo2+w1MB8GA1UdIwQYMBaAFAcs32UbMSyvvbBJozVp/qbvbJUX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkNCMS9EMDBERDQ5OEJD
MDIxMUVBQjhDNzkwNDhDNEY5QUUwMi9CeXpmWlJzeExLLTlzRW1qTlduLXB1OXNs
UmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0J5emZaUnN4TEstOXNFbWpOV24tcHU5c2xSYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QkNCMS9EMDBERDQ5OEJDMDIxMUVBQjhDNzkwNDhDNEY5QUUwMi9CeXpmWlJzeExL
LTlzRW1qTlduLXB1OXNsUmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOX//+YSgZKiKhKogUYKaH5EbFohFZDUP/1qUsbFSM2WrLIAfWNAdEvRh3o3O
w4tX9lN49uVPkwxQOucUfWZZa/Jv06e9I0WXCvsOAqNnpjabSXC1POAEj4WDLoNG
kxgkpQfWQRow6RCTUDt38KLNP7hTCIG6+Sn3YiRjH8VvBrXpPUGACYlVy5XJaS7h
BV5qc2+aW17eil+TCUPgiYByH9o94Me9H9lZM4qUhXSwyVuYHffp/+4R0kGDBK5K
KQlqCFUtNYZqPu1CW0Ss8N3jTwzxslG4RU5nXC15ndcSEGlpkpuo3pewFeNfLXgw
bvtoLaj3a4WD+DzDhg1fuhj9eA==
-----END CERTIFICATE-----
Generated at Tue Oct 6 14:49:49 2026 by rpki-client