Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171882/B238A184F0B311EEA4C72F84C4F9AE02/BPDYqTArIrYOMPRlG4KumZ_3TJs.mft
File:                     BPDYqTArIrYOMPRlG4KumZ_3TJs.mft (raw, json)
Hash identifier:          tSQ/X/ewqNtijcK9vm+8C+CJks4O07grOFm8TRzAjh0=
Subject key identifier:   A1:33:93:29:80:92:8C:7C:1C:72:EF:40:53:74:BC:FA:EC:42:F6:B2
Authority key identifier: 04:F0:D8:A9:30:2B:22:B6:0E:30:F4:65:1B:82:AE:99:9F:F7:4C:9B
Certificate issuer:       /CN=A9171882/serialNumber=04F0D8A9302B22B60E30F4651B82AE999FF74C9B
Certificate serial:       01C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPDYqTArIrYOMPRlG4KumZ_3TJs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171882/B238A184F0B311EEA4C72F84C4F9AE02/BPDYqTArIrYOMPRlG4KumZ_3TJs.mft
Manifest number:          01C1
Signing time:             Wed 19 Aug 2026 04:30:15 +0000
Manifest this update:     Wed 19 Aug 2026 04:30:15 +0000
Manifest next update:     Wed 26 Aug 2026 04:30:15 +0000
Files and hashes:         1: BPDYqTArIrYOMPRlG4KumZ_3TJs.crl (hash: cyqywvvV7PkeCqgxcaH/qZFPISHhHPI++11fs2y62QI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171882/B238A184F0B311EEA4C72F84C4F9AE02/BPDYqTArIrYOMPRlG4KumZ_3TJs.crl
                          rsync://rpki.apnic.net/member_repository/A9171882/B238A184F0B311EEA4C72F84C4F9AE02/BPDYqTArIrYOMPRlG4KumZ_3TJs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPDYqTArIrYOMPRlG4KumZ_3TJs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 04:30:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 452 (0x1c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171882, serialNumber=04F0D8A9302B22B60E30F4651B82AE999FF74C9B
        Validity
            Not Before: Aug 19 04:30:15 2026 GMT
            Not After : Aug 26 04:30:15 2026 GMT
        Subject: CN=6a853157-1b33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:55:f5:c7:8f:df:ca:fd:e7:ff:45:70:58:2d:
                    01:8d:cf:f2:7e:ab:20:20:11:d4:99:08:51:1f:28:
                    f1:e6:66:c5:a2:78:2f:ac:67:5d:32:dd:cb:a7:27:
                    1f:e3:27:3d:4d:aa:f2:f3:35:76:ba:82:77:3c:9d:
                    d2:9f:fa:61:ac:66:83:95:c9:a7:23:3a:47:7c:b1:
                    a3:b5:a3:0c:aa:06:40:79:1f:38:15:2a:ac:2a:9a:
                    ad:6d:85:81:b2:1d:dc:f5:8c:eb:7e:41:24:b5:81:
                    86:c3:2a:98:2e:ff:25:cf:bd:cf:72:4d:f3:69:0f:
                    f1:4f:6c:da:44:a5:3e:03:f9:8d:a4:69:d7:ca:94:
                    f4:13:44:04:41:3b:b0:ea:f3:ff:c8:ff:14:f2:9b:
                    12:ed:3a:5d:d3:24:aa:7c:7f:3d:eb:cf:ee:02:41:
                    61:2f:4e:9f:61:b3:ed:f7:ae:fc:46:8b:54:5c:74:
                    69:49:bb:60:20:0c:e0:6a:40:b9:98:ef:e0:30:cb:
                    88:66:23:54:8c:d7:85:4d:a1:72:57:12:ca:e0:6e:
                    f3:d8:b7:3b:b5:48:db:f2:62:a2:40:cd:2d:0c:cf:
                    fb:55:41:32:40:8d:21:f3:46:18:c3:35:bd:32:ac:
                    4b:8e:b0:85:5e:ab:ce:41:26:5b:83:1c:51:20:5d:
                    12:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:33:93:29:80:92:8C:7C:1C:72:EF:40:53:74:BC:FA:EC:42:F6:B2
            X509v3 Authority Key Identifier:
                keyid:04:F0:D8:A9:30:2B:22:B6:0E:30:F4:65:1B:82:AE:99:9F:F7:4C:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171882/B238A184F0B311EEA4C72F84C4F9AE02/BPDYqTArIrYOMPRlG4KumZ_3TJs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPDYqTArIrYOMPRlG4KumZ_3TJs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171882/B238A184F0B311EEA4C72F84C4F9AE02/BPDYqTArIrYOMPRlG4KumZ_3TJs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:65:18:0c:fa:4d:1d:bf:80:6d:1f:d1:21:06:f0:76:6a:d4:
         77:b1:9e:19:a6:44:81:58:cd:78:d4:7e:78:8a:6b:e7:47:ef:
         98:3f:71:0d:79:56:c6:3a:09:79:d4:c3:b6:39:fa:94:56:3b:
         8a:51:db:33:fd:d2:40:23:6e:b3:76:26:da:a6:be:db:b4:2f:
         cf:3a:3f:3b:64:bb:38:35:f0:e4:31:cf:ae:96:7e:6c:7c:89:
         b1:08:e9:9c:93:2d:38:3f:51:91:c6:c3:8c:62:f2:fa:13:91:
         d7:2b:a6:30:60:f8:19:67:98:e9:ba:e5:dc:64:5e:6e:86:7e:
         c6:a4:6f:66:93:b4:b4:9d:60:e0:39:0b:22:95:0a:31:3f:bd:
         27:34:f9:aa:e2:66:c3:f2:2c:25:18:d0:72:50:25:78:49:e1:
         79:7e:6d:57:23:24:ce:56:dc:21:01:ad:18:ca:e5:cd:7e:03:
         7d:b6:02:7b:4e:dc:da:96:fd:cb:17:c0:a7:d7:60:a4:eb:65:
         05:6f:09:4c:40:6f:69:7e:8b:20:f3:41:29:53:3f:50:76:26:
         57:b8:4f:34:31:9b:ea:eb:01:43:70:f6:84:c0:12:5d:1d:8f:
         3b:de:43:89:95:51:8c:5e:d7:d7:5f:11:54:2c:ee:fe:af:1b:
         1a:2f:58:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:51:13 2026 by rpki-client