Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9160244/7EAFECB03C0711E5B16CEF63C4F9AE02/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.mft
File:                     BDQBcYbbhMqJR3Vw3aEK1zFZf_E.mft (raw, json)
Hash identifier:          blrtrLfjYdpdGFDFJ2oWsd1EZckZSpHT0eReAmT3SrE=
Subject key identifier:   F3:D1:86:AA:B3:D1:A8:DA:C4:C1:F5:8B:51:13:29:49:91:67:9A:D7
Authority key identifier: 04:34:01:71:86:DB:84:CA:89:47:75:70:DD:A1:0A:D7:31:59:7F:F1
Certificate issuer:       /CN=A9160244/serialNumber=0434017186DB84CA89477570DDA10AD731597FF1
Certificate serial:       2562
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9160244/7EAFECB03C0711E5B16CEF63C4F9AE02/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.mft
Manifest number:          2552
Signing time:             Sat 04 Apr 2026 15:41:33 +0000
Manifest this update:     Sat 04 Apr 2026 15:41:33 +0000
Manifest next update:     Sat 11 Apr 2026 15:41:33 +0000
Files and hashes:         1: BDQBcYbbhMqJR3Vw3aEK1zFZf_E.crl (hash: Yb81kq+rCBU1VqMaZOxsKJl1b6cn+XCWu4jVyoNEgSA=)
                          2: E1FACBC0B10D11E5894F4D1CC4F9AE02.roa (hash: xPwsKwL7UMt7l1oT80YMCI87GVus5Det22vCaaPYrAE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9160244/7EAFECB03C0711E5B16CEF63C4F9AE02/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.crl
                          rsync://rpki.apnic.net/member_repository/A9160244/7EAFECB03C0711E5B16CEF63C4F9AE02/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 15:41:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9570 (0x2562)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9160244, serialNumber=0434017186DB84CA89477570DDA10AD731597FF1
        Validity
            Not Before: Apr  4 15:41:33 2026 GMT
            Not After : Apr 11 15:41:33 2026 GMT
        Subject: CN=69d1312d-c34d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c6:db:6d:4a:f7:d7:06:64:34:d0:97:c0:fa:
                    08:d2:7e:4a:63:e0:3e:df:4f:d5:13:88:2f:ab:99:
                    7c:6e:b2:8b:29:b4:cd:3e:4e:81:ad:76:ac:71:f0:
                    c7:65:51:84:b5:5b:f7:9b:94:83:28:e5:3f:d6:09:
                    de:6a:5b:36:a8:0a:ca:ff:96:e9:ca:12:c0:d1:6c:
                    6d:1f:e8:b6:fa:8d:50:28:b7:32:8a:6f:62:a5:4b:
                    6e:0c:11:15:69:c5:37:33:a2:33:7c:28:5e:4d:57:
                    40:15:da:84:ab:ec:03:ac:7a:cb:12:1f:e7:7d:1c:
                    74:50:5b:1c:db:7f:1e:b5:6e:71:cc:aa:68:f4:1d:
                    1e:9a:72:9f:77:4f:bb:a7:4f:20:a3:dc:97:70:93:
                    0a:81:ea:ec:eb:5a:d6:58:86:ea:04:93:49:67:96:
                    1d:9c:66:61:b3:ac:e1:4d:a3:f8:66:a0:95:0b:5e:
                    a7:98:42:82:c5:34:a1:99:df:40:e1:d1:1c:c9:17:
                    8e:66:6c:a7:44:b2:0c:55:7a:59:78:bb:cb:de:05:
                    f1:3f:ff:c0:e5:26:49:13:8d:fc:8a:43:61:6c:98:
                    bf:af:c6:6f:59:9d:1c:82:d8:8c:70:44:70:3c:11:
                    fa:5f:c1:7d:c7:8d:21:4f:f3:0f:20:05:10:a8:6f:
                    b3:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:D1:86:AA:B3:D1:A8:DA:C4:C1:F5:8B:51:13:29:49:91:67:9A:D7
            X509v3 Authority Key Identifier:
                keyid:04:34:01:71:86:DB:84:CA:89:47:75:70:DD:A1:0A:D7:31:59:7F:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9160244/7EAFECB03C0711E5B16CEF63C4F9AE02/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160244/7EAFECB03C0711E5B16CEF63C4F9AE02/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:34:fe:bd:86:2b:73:5b:75:94:ca:b1:4b:35:f1:4b:92:41:
         03:3b:e5:36:28:48:af:1a:ba:32:72:e3:2a:4b:14:59:bd:b9:
         ed:a4:83:95:c9:4e:51:33:cf:c2:6a:2a:ae:8f:b6:10:09:f5:
         00:f1:18:4c:e2:6b:d4:5d:2b:1a:44:42:09:a2:07:ab:f1:07:
         51:89:7a:39:a7:b8:63:41:43:de:5b:fb:af:eb:ea:29:e6:fc:
         5f:e2:05:06:44:eb:d9:13:e3:78:1e:e1:3e:95:c6:55:db:33:
         e9:89:fe:34:66:9d:e3:3c:9e:d9:98:a8:1e:39:61:03:b2:04:
         fb:37:c6:b5:43:9d:04:2f:59:26:0f:02:21:de:68:11:54:3a:
         80:d5:37:84:94:de:c3:e6:66:20:70:20:5d:b1:fb:9e:98:ef:
         2b:ab:2b:e7:6a:18:d6:9f:53:bf:92:1a:f3:f0:d1:6c:1b:28:
         d6:da:07:9b:72:f0:72:de:96:a0:e7:10:f3:47:2a:e7:e1:e3:
         e3:16:43:1e:fb:fd:35:f5:d2:8c:b0:35:25:da:2f:17:39:65:
         eb:19:b4:8a:1d:8a:27:43:40:98:b6:9f:a9:89:80:81:00:e6:
         f7:80:ca:61:92:ba:44:38:ad:5f:89:00:77:99:f0:47:13:db:
         26:4e:60:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 10:09:36 2026 by rpki-client