Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917877E/389A62D25D5D11F0B49A7847C4F9AE02/bYq2_eUh3BBvlIKStQL9Wgc0g3w.mft
File:                     bYq2_eUh3BBvlIKStQL9Wgc0g3w.mft (raw, json)
Hash identifier:          Wtwpiq2aAiCMSF0zuWvLSMYz5rlGKGBVcXZShIMxDzU=
Subject key identifier:   21:D1:19:30:BE:D9:6A:85:4D:BA:D8:70:B4:C3:C1:D6:84:3C:AB:29
Authority key identifier: 6D:8A:B6:FD:E5:21:DC:10:6F:94:82:92:B5:02:FD:5A:07:34:83:7C
Certificate issuer:       /CN=A917877E/serialNumber=6D8AB6FDE521DC106F948292B502FD5A0734837C
Certificate serial:       7E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bYq2_eUh3BBvlIKStQL9Wgc0g3w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917877E/389A62D25D5D11F0B49A7847C4F9AE02/bYq2_eUh3BBvlIKStQL9Wgc0g3w.mft
Manifest number:          7C
Signing time:             Tue 03 Mar 2026 07:21:02 +0000
Manifest this update:     Tue 03 Mar 2026 07:21:01 +0000
Manifest next update:     Tue 10 Mar 2026 07:21:01 +0000
Files and hashes:         1: bYq2_eUh3BBvlIKStQL9Wgc0g3w.crl (hash: MXB/7HOPOf55l7vh3a+opQ+0gjnKK8xWKP87yFPbqsc=)
                          2: 9EA96DF25D5D11F08A574048C4F9AE02.roa (hash: j5dVLv6OLKywzj6nsoTlfZRGOA0pKSPRrtwDldvzxCc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917877E/389A62D25D5D11F0B49A7847C4F9AE02/bYq2_eUh3BBvlIKStQL9Wgc0g3w.crl
                          rsync://rpki.apnic.net/member_repository/A917877E/389A62D25D5D11F0B49A7847C4F9AE02/bYq2_eUh3BBvlIKStQL9Wgc0g3w.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bYq2_eUh3BBvlIKStQL9Wgc0g3w.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 07:21:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126 (0x7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917877E, serialNumber=6D8AB6FDE521DC106F948292B502FD5A0734837C
        Validity
            Not Before: Mar  3 07:21:01 2026 GMT
            Not After : Mar 10 07:21:01 2026 GMT
        Subject: CN=69a68bde-bd4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f4:1e:93:e4:31:24:f4:09:bd:04:c3:94:fe:
                    d2:7b:d3:b1:25:90:9a:eb:4e:d3:46:a2:a9:4e:85:
                    e2:9a:b5:98:fb:61:70:59:a1:58:94:a8:6d:a2:5c:
                    a5:32:db:0a:96:fb:86:68:d7:db:0e:09:fe:27:a7:
                    40:d9:13:58:4c:68:d9:52:30:0d:ca:a1:17:82:67:
                    d0:8b:d7:c5:2c:f8:31:7c:8d:95:bc:64:e7:f8:c7:
                    3d:e1:3f:3e:4d:b7:79:5e:65:82:e4:76:e9:c8:bb:
                    f7:1f:ae:be:c5:73:cf:ad:7c:b6:85:a8:9d:75:ce:
                    36:53:82:ac:e6:ca:a5:f4:98:9e:e4:b4:88:08:74:
                    f3:78:f4:5b:2c:f3:ea:dd:42:cc:b5:02:c2:ae:cb:
                    28:2f:7c:6c:d5:55:51:a0:c5:13:68:6a:14:8f:8f:
                    58:c6:1a:47:d1:71:ce:ed:f9:b4:ed:17:ab:24:d1:
                    2a:77:17:fd:79:74:3d:f8:cc:6d:56:e9:1d:86:89:
                    88:85:38:cb:13:19:ae:9f:ce:8e:b7:0f:2e:5d:38:
                    d7:9a:6d:ab:cb:60:15:34:ce:9e:0f:a9:42:25:ba:
                    41:a8:7a:e0:e7:d0:2c:91:ae:3e:3d:eb:20:58:a3:
                    13:9c:ea:5b:c7:e9:03:ac:bf:bd:49:f2:fc:2b:b3:
                    03:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:D1:19:30:BE:D9:6A:85:4D:BA:D8:70:B4:C3:C1:D6:84:3C:AB:29
            X509v3 Authority Key Identifier:
                keyid:6D:8A:B6:FD:E5:21:DC:10:6F:94:82:92:B5:02:FD:5A:07:34:83:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917877E/389A62D25D5D11F0B49A7847C4F9AE02/bYq2_eUh3BBvlIKStQL9Wgc0g3w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bYq2_eUh3BBvlIKStQL9Wgc0g3w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917877E/389A62D25D5D11F0B49A7847C4F9AE02/bYq2_eUh3BBvlIKStQL9Wgc0g3w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:cd:9b:04:7e:43:3a:15:09:8f:29:b7:45:6e:26:2c:69:73:
         52:89:3b:e8:85:08:13:67:1f:48:3d:a6:e1:33:b8:f6:1c:8e:
         4d:2a:53:40:c7:5a:f0:0f:eb:37:cf:ed:fb:a3:08:78:79:bd:
         da:01:67:1d:d6:6f:8d:03:bb:05:dc:23:3f:11:69:d0:6f:db:
         ba:cd:f3:86:33:05:02:77:b6:54:2e:ca:91:05:89:0d:50:cc:
         7d:f0:36:ac:f7:df:74:17:70:28:22:a0:87:3f:01:fd:2a:81:
         0e:0d:3a:2b:2a:2d:0e:e8:78:ee:cc:1a:14:32:a9:d4:37:96:
         26:4b:b8:c8:c4:86:ff:b2:65:ac:52:8b:3a:5d:67:90:e4:4c:
         9a:33:00:20:30:57:d4:66:85:52:f6:44:77:11:fc:d5:8a:35:
         69:70:a9:57:d4:09:3a:97:9c:69:c2:31:0e:1b:da:8d:1c:43:
         46:ca:5c:cb:be:e7:fe:1d:fe:d9:a1:17:af:51:b3:41:37:90:
         cb:f1:c3:7d:50:3f:6e:41:a0:ae:e2:b5:db:a1:43:a5:75:d7:
         c0:74:54:df:61:ce:58:e9:9e:89:7d:26:a4:2f:47:76:f9:27:
         fd:39:03:35:53:eb:b7:2f:b3:bf:7d:2f:64:6a:ec:c9:c0:7e:
         11:2b:9b:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:41:20 2026 by rpki-client