Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91643F8/F790CC5A7C6A11EF9A688857C4F9AE02/bbZgfaaV3QngKYA6L_JiWtiDguM.mft
File:                     bbZgfaaV3QngKYA6L_JiWtiDguM.mft (raw, json)
Hash identifier:          2sRmeveJMBCcvdcZzZEEjlrvpLX0yPWjvgtBp+rQpHY=
Subject key identifier:   CA:F9:E6:A3:32:14:98:78:99:E2:5F:AC:8C:22:56:1A:63:51:09:F3
Authority key identifier: 6D:B6:60:7D:A6:95:DD:09:E0:29:80:3A:2F:F2:62:5A:D8:83:82:E3
Certificate issuer:       /CN=A91643F8/serialNumber=6DB6607DA695DD09E029803A2FF2625AD88382E3
Certificate serial:       0155
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bbZgfaaV3QngKYA6L_JiWtiDguM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91643F8/F790CC5A7C6A11EF9A688857C4F9AE02/bbZgfaaV3QngKYA6L_JiWtiDguM.mft
Manifest number:          0150
Signing time:             Sun 05 Jul 2026 05:50:48 +0000
Manifest this update:     Sun 05 Jul 2026 05:50:48 +0000
Manifest next update:     Sun 12 Jul 2026 05:50:48 +0000
Files and hashes:         1: bbZgfaaV3QngKYA6L_JiWtiDguM.crl (hash: u04kkIQokBzuC3x8W3fwUowD3GpvxtP+QgZtXQXJMWc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91643F8/F790CC5A7C6A11EF9A688857C4F9AE02/bbZgfaaV3QngKYA6L_JiWtiDguM.crl
                          rsync://rpki.apnic.net/member_repository/A91643F8/F790CC5A7C6A11EF9A688857C4F9AE02/bbZgfaaV3QngKYA6L_JiWtiDguM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bbZgfaaV3QngKYA6L_JiWtiDguM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Jul 2026 05:50:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 341 (0x155)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91643F8, serialNumber=6DB6607DA695DD09E029803A2FF2625AD88382E3
        Validity
            Not Before: Jul  5 05:50:48 2026 GMT
            Not After : Jul 12 05:50:48 2026 GMT
        Subject: CN=6a49f0b8-1016
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:0d:4b:e0:79:5b:a4:b7:37:c9:99:2a:38:d7:
                    a2:13:d0:10:8b:a6:03:d1:2d:d3:b3:ac:a3:fe:2e:
                    9c:dc:21:f2:bd:e7:d9:41:06:99:42:ae:c4:7e:3e:
                    d0:0c:af:fb:73:6c:3f:d9:21:59:b3:5b:81:be:f7:
                    78:5b:be:0d:82:b3:09:a3:73:be:ac:71:03:85:76:
                    8c:46:8a:d9:ff:3f:41:c8:bc:c9:c3:db:0e:d2:b6:
                    31:fe:20:02:ba:44:13:18:52:fa:a7:e1:e7:aa:8e:
                    3a:92:67:a7:f6:f8:80:53:47:2d:59:51:3e:e5:27:
                    fa:7d:17:73:56:e0:ce:19:21:3f:66:d9:26:98:fa:
                    86:d7:64:39:7e:a1:7b:99:df:4b:a3:53:dd:4a:85:
                    e8:d1:15:bd:9b:6a:21:bc:23:04:f5:39:25:90:56:
                    dc:46:88:f7:2e:15:55:75:6e:44:70:33:c5:0e:cb:
                    35:49:f5:2a:4b:df:1b:19:d4:37:79:68:7b:df:80:
                    e5:15:fd:af:92:1f:e4:dc:01:b2:6d:ac:02:e9:c3:
                    8e:5e:6a:c2:a3:8f:c5:9a:fc:0d:1c:a7:a6:1e:e8:
                    4f:9c:56:ba:07:8d:9d:51:b4:b7:a0:57:60:a6:db:
                    47:d8:d0:61:c4:eb:98:28:22:e6:86:cb:89:6d:ad:
                    31:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:F9:E6:A3:32:14:98:78:99:E2:5F:AC:8C:22:56:1A:63:51:09:F3
            X509v3 Authority Key Identifier:
                keyid:6D:B6:60:7D:A6:95:DD:09:E0:29:80:3A:2F:F2:62:5A:D8:83:82:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91643F8/F790CC5A7C6A11EF9A688857C4F9AE02/bbZgfaaV3QngKYA6L_JiWtiDguM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bbZgfaaV3QngKYA6L_JiWtiDguM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91643F8/F790CC5A7C6A11EF9A688857C4F9AE02/bbZgfaaV3QngKYA6L_JiWtiDguM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:4c:f6:55:6c:93:cd:b0:83:6f:92:f0:02:d0:42:27:31:c6:
         c6:89:c8:61:e5:a2:76:bd:54:8b:4b:b1:0b:38:b8:0e:b2:1b:
         ac:60:54:ce:3b:74:9c:44:e7:36:04:b7:67:fe:af:fd:36:89:
         c8:c7:c3:56:33:32:0e:72:b0:16:65:a3:96:02:47:44:23:21:
         5b:60:ad:6a:c5:6e:15:2a:58:5c:a4:4a:73:24:b2:ee:59:d0:
         25:99:2d:e5:72:fa:37:83:87:27:27:dd:a4:ef:9b:5f:c2:49:
         65:20:bd:55:19:e3:cf:90:95:7c:99:a0:00:b0:7d:9a:de:96:
         e2:cd:66:64:67:40:c3:17:1d:8c:ae:ca:eb:89:2c:ba:81:12:
         e4:0c:5a:dc:8b:2b:ff:bb:aa:e4:e2:70:9b:f3:5f:a1:63:a2:
         77:71:16:c7:60:ce:5e:50:f5:34:6f:a6:1c:ce:0c:e1:c3:c2:
         ee:5c:0c:06:1b:34:cc:2c:22:80:1d:71:fc:74:e6:e3:61:a3:
         de:67:0f:2c:ee:b1:b7:f5:85:dc:a2:a8:80:eb:2b:e8:51:fa:
         da:88:45:5c:7a:8c:85:f9:e2:e4:5d:57:05:91:fc:79:3d:dc:
         ad:2d:0b:e2:8a:87:f4:a2:5e:d4:fa:da:86:e8:fb:7b:f5:e7:
         a7:be:d0:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 08:40:29 2026 by rpki-client