Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C512/22DBFEFA12A311F1A20FC6383D3D8C67/BvzPtWLbIsed8IYyJBvx-uZ658E.mft
File:                     BvzPtWLbIsed8IYyJBvx-uZ658E.mft (raw, json)
Hash identifier:          60nfkJLawxYTyQ+9ULftQ4VPjwEsj1vSm/BYSP02Yg4=
Subject key identifier:   70:CC:93:7F:76:F2:3D:C8:35:A5:53:F5:75:BC:7E:07:C0:DA:94:7C
Authority key identifier: 06:FC:CF:B5:62:DB:22:C7:9D:F0:86:32:24:1B:F1:FA:E6:7A:E7:C1
Certificate issuer:       /CN=A917C512/serialNumber=06FCCFB562DB22C79DF08632241BF1FAE67AE7C1
Certificate serial:       54
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BvzPtWLbIsed8IYyJBvx-uZ658E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C512/22DBFEFA12A311F1A20FC6383D3D8C67/BvzPtWLbIsed8IYyJBvx-uZ658E.mft
Manifest number:          50
Signing time:             Tue 21 Jul 2026 07:33:45 +0000
Manifest this update:     Tue 21 Jul 2026 07:33:45 +0000
Manifest next update:     Tue 28 Jul 2026 07:33:45 +0000
Files and hashes:         1: BvzPtWLbIsed8IYyJBvx-uZ658E.crl (hash: xoTyB4cAK9xpT6QWnwkgsc1nPi7wgm+F4bYGbPs7Xnc=)
                          2: 41FAA4E813B711F1A73F531B083D8C67.roa (hash: W6ELAQH0h71efzCgT0f/rl+LgjPtcikkCOm3gmjC49M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C512/22DBFEFA12A311F1A20FC6383D3D8C67/BvzPtWLbIsed8IYyJBvx-uZ658E.crl
                          rsync://rpki.apnic.net/member_repository/A917C512/22DBFEFA12A311F1A20FC6383D3D8C67/BvzPtWLbIsed8IYyJBvx-uZ658E.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BvzPtWLbIsed8IYyJBvx-uZ658E.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 07:33:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 84 (0x54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C512, serialNumber=06FCCFB562DB22C79DF08632241BF1FAE67AE7C1
        Validity
            Not Before: Jul 21 07:33:45 2026 GMT
            Not After : Jul 28 07:33:45 2026 GMT
        Subject: CN=6a5f20d9-cefe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:94:72:2f:25:bd:49:27:ba:fb:57:49:c3:a5:
                    ab:f2:5a:4b:e4:50:65:fd:4d:e8:99:c7:f1:9a:a3:
                    27:f8:fb:7c:37:d1:50:f9:f7:9a:52:c4:82:a2:0a:
                    25:2b:df:af:a3:0e:a9:9b:36:15:16:74:98:02:55:
                    49:8a:96:fb:b9:1e:df:75:a0:35:8a:7a:6c:17:bf:
                    27:5a:23:97:eb:6c:dc:54:59:08:29:4b:9b:16:f8:
                    e1:6f:b0:49:a0:84:9c:3a:a3:21:d0:f9:3b:95:14:
                    c2:c9:29:44:08:e0:99:6a:8a:22:0f:0d:d2:08:e1:
                    d9:99:5a:d9:8d:1d:a1:77:e4:2c:9f:d2:90:bf:f7:
                    b6:90:1a:53:13:5c:3e:98:c7:2a:71:6e:d2:c2:4e:
                    ee:1e:2d:a8:ef:74:7e:c0:f9:cb:db:73:5f:8a:eb:
                    ae:3f:eb:a0:35:3e:3d:0c:2a:c4:d0:da:b3:c5:26:
                    1a:55:02:fa:9d:70:05:5b:c4:70:d5:a4:9f:43:78:
                    bf:e5:be:83:4b:f4:a3:18:6d:13:80:6b:42:85:46:
                    b7:c6:0f:76:8e:fc:fc:a6:45:39:67:d2:3f:3d:5e:
                    44:67:df:aa:e5:20:11:24:c1:8d:12:9a:a3:02:f1:
                    78:0f:18:8a:30:be:55:21:4b:e7:1d:5a:a5:34:62:
                    e1:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:CC:93:7F:76:F2:3D:C8:35:A5:53:F5:75:BC:7E:07:C0:DA:94:7C
            X509v3 Authority Key Identifier:
                keyid:06:FC:CF:B5:62:DB:22:C7:9D:F0:86:32:24:1B:F1:FA:E6:7A:E7:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C512/22DBFEFA12A311F1A20FC6383D3D8C67/BvzPtWLbIsed8IYyJBvx-uZ658E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BvzPtWLbIsed8IYyJBvx-uZ658E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C512/22DBFEFA12A311F1A20FC6383D3D8C67/BvzPtWLbIsed8IYyJBvx-uZ658E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:09:d3:d7:59:06:67:ca:46:3b:a5:91:d5:0c:56:a2:7d:ef:
         b2:92:fa:59:3a:ec:a0:aa:0e:4a:1f:df:61:f9:8e:c7:02:d4:
         d9:33:60:45:bf:df:5c:88:93:35:0f:5c:e8:e8:0f:79:a7:59:
         18:2a:14:c2:1e:e0:65:15:95:1a:51:26:af:0d:90:53:c8:6b:
         fe:36:d4:89:ed:6b:af:0f:17:ab:5f:b2:a8:26:50:25:d1:69:
         26:5c:46:24:60:31:66:f9:a2:a7:16:b8:cc:54:17:33:37:03:
         60:1b:53:1e:ac:0b:95:11:cf:9f:a6:5c:36:ea:2d:4b:9e:11:
         ea:d1:70:72:9e:11:56:37:d1:f2:0c:2a:7c:32:49:19:1f:e5:
         8f:ec:ca:ee:68:e6:2a:6e:d3:61:c1:f4:a3:e1:20:c8:ec:09:
         2e:f9:02:c1:d3:ad:7a:91:40:3f:6d:cf:73:2a:60:a7:b0:20:
         2b:b2:b0:3a:27:67:e2:1b:25:77:81:e3:a1:43:b2:38:ba:46:
         85:d9:51:3b:17:5c:1d:3b:3b:c1:07:66:46:9e:10:16:3d:75:
         58:65:73:d1:62:8a:32:ea:9d:a2:23:b1:31:80:e6:c0:5f:1b:
         e7:f5:c0:c6:10:2e:d3:32:3e:43:0a:df:d8:52:12:f8:58:1d:
         13:61:5a:a5
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBVDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
QzUxMjExMC8GA1UEBRMoMDZGQ0NGQjU2MkRCMjJDNzlERjA4NjMyMjQxQkYxRkFF
NjdBRTdDMTAeFw0yNjA3MjEwNzMzNDVaFw0yNjA3MjgwNzMzNDVaMBgxFjAUBgNV
BAMTDTZhNWYyMGQ5LWNlZmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDIlHIvJb1JJ7r7V0nDpavyWkvkUGX9TeiZx/Gaoyf4+3w30VD595pSxIKiCiUr
36+jDqmbNhUWdJgCVUmKlvu5Ht91oDWKemwXvydaI5frbNxUWQgpS5sW+OFvsEmg
hJw6oyHQ+TuVFMLJKUQI4JlqiiIPDdII4dmZWtmNHaF35Cyf0pC/97aQGlMTXD6Y
xypxbtLCTu4eLajvdH7A+cvbc1+K664/66A1Pj0MKsTQ2rPFJhpVAvqdcAVbxHDV
pJ9DeL/lvoNL9KMYbROAa0KFRrfGD3aO/PymRTln0j89XkRn36rlIBEkwY0SmqMC
8XgPGIowvlUhS+cdWqU0YuFJAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUcMyTf3by
Pcg1pVP1dbx+B8DalHwwHwYDVR0jBBgwFoAUBvzPtWLbIsed8IYyJBvx+uZ658Ew
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdDNTEyLzIyREJGRUZBMTJB
MzExRjFBMjBGQzYzODNEM0Q4QzY3L0J2elB0V0xiSXNlZDhJWXlKQnZ4LXVaNjU4
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG
RDFGRjIvQnZ6UHRXTGJJc2VkOElZeUpCdngtdVo2NThFLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdD
NTEyLzIyREJGRUZBMTJBMzExRjFBMjBGQzYzODNEM0Q4QzY3L0J2elB0V0xiSXNl
ZDhJWXlKQnZ4LXVaNjU4RS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAaCdPXWQZnykY7pZHVDFaife+ykvpZOuygqg5KH99h+Y7HAtTZM2BFv99ciJM1
D1zo6A95p1kYKhTCHuBlFZUaUSavDZBTyGv+NtSJ7WuvDxerX7KoJlAl0WkmXEYk
YDFm+aKnFrjMVBczNwNgG1MerAuVEc+fplw26i1LnhHq0XBynhFWN9HyDCp8MkkZ
H+WP7MruaOYqbtNhwfSj4SDI7Aku+QLB0616kUA/bc9zKmCnsCArsrA6J2fiGyV3
geOhQ7I4ukaF2VE7F1wdOzvBB2ZGnhAWPXVYZXPRYooy6p2iI7ExgObAXxvn9cDG
EC7TMj5DCt/YUhL4WB0TYVql
-----END CERTIFICATE-----
Generated at Tue Jul 21 17:58:45 2026 by rpki-client