Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917C512/22DBFEFA12A311F1A20FC6383D3D8C67/BvzPtWLbIsed8IYyJBvx-uZ658E.mft
File:                     BvzPtWLbIsed8IYyJBvx-uZ658E.mft (raw, json)
Hash identifier:          +bJbUenV3KqyvbgxXEG70UmcTA9DmFJ5GICwjpdLo9E=
Subject key identifier:   E3:FF:71:40:D5:8F:FE:1C:B7:DC:7E:D4:35:24:76:C1:FC:71:59:9E
Authority key identifier: 06:FC:CF:B5:62:DB:22:C7:9D:F0:86:32:24:1B:F1:FA:E6:7A:E7:C1
Certificate issuer:       /CN=A917C512/serialNumber=06FCCFB562DB22C79DF08632241BF1FAE67AE7C1
Certificate serial:       6B
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BvzPtWLbIsed8IYyJBvx-uZ658E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C512/22DBFEFA12A311F1A20FC6383D3D8C67/BvzPtWLbIsed8IYyJBvx-uZ658E.mft
Manifest number:          67
Signing time:             Thu 03 Sep 2026 05:52:55 +0000
Manifest this update:     Thu 03 Sep 2026 05:52:55 +0000
Manifest next update:     Thu 10 Sep 2026 05:52:55 +0000
Files and hashes:         1: BvzPtWLbIsed8IYyJBvx-uZ658E.crl (hash: 0vyvkzMtGmgaDX3AnxivlJ6NE9e7PRIYkcSey5zV0WQ=)
                          2: 41FAA4E813B711F1A73F531B083D8C67.roa (hash: W6ELAQH0h71efzCgT0f/rl+LgjPtcikkCOm3gmjC49M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C512/22DBFEFA12A311F1A20FC6383D3D8C67/BvzPtWLbIsed8IYyJBvx-uZ658E.crl
                          rsync://rpki.apnic.net/member_repository/A917C512/22DBFEFA12A311F1A20FC6383D3D8C67/BvzPtWLbIsed8IYyJBvx-uZ658E.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BvzPtWLbIsed8IYyJBvx-uZ658E.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 05:52:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 107 (0x6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C512, serialNumber=06FCCFB562DB22C79DF08632241BF1FAE67AE7C1
        Validity
            Not Before: Sep  3 05:52:55 2026 GMT
            Not After : Sep 10 05:52:55 2026 GMT
        Subject: CN=6a990b37-d845
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:07:5c:0b:20:2b:1a:de:66:94:cc:d1:25:7f:
                    b1:d5:e4:dc:0a:f9:30:67:19:8b:52:b6:95:71:b1:
                    06:14:18:fb:43:2c:77:c9:1c:0b:67:93:dd:8a:9e:
                    87:99:76:66:f8:61:88:a3:d4:27:f3:18:1e:2c:16:
                    7d:97:13:a2:84:54:5c:05:4b:8f:b3:b1:a6:b3:1b:
                    36:da:72:94:b7:8b:da:e9:75:4b:38:d8:19:c0:89:
                    fa:95:70:a3:04:ad:d7:0d:1b:97:79:6b:c9:58:e9:
                    63:cc:0d:d3:3b:ae:8d:59:1f:b0:ac:73:ca:48:cf:
                    6b:f7:ca:5f:6c:20:a3:34:0a:4d:65:63:65:24:8d:
                    4d:76:89:4a:7d:b0:a8:86:cb:e5:3c:8b:eb:52:ea:
                    53:13:94:39:c3:b4:b9:5e:a3:5a:f0:d0:7d:d3:2d:
                    1d:8c:a0:58:be:00:33:0f:b7:08:c9:7f:1d:00:6b:
                    ff:43:b3:08:cd:d5:d8:18:c2:9c:5c:7a:89:69:e6:
                    86:8b:60:0c:68:0b:b1:cc:e3:7b:4c:2d:2e:ec:e8:
                    4e:0e:96:fe:1f:6c:6a:eb:d7:7f:7d:85:97:64:d1:
                    a4:01:25:4c:c6:b0:2d:13:1b:89:4e:91:e1:2b:46:
                    bf:84:e9:2e:c9:b6:e1:fb:cf:73:4b:79:2f:5d:c7:
                    95:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:FF:71:40:D5:8F:FE:1C:B7:DC:7E:D4:35:24:76:C1:FC:71:59:9E
            X509v3 Authority Key Identifier:
                keyid:06:FC:CF:B5:62:DB:22:C7:9D:F0:86:32:24:1B:F1:FA:E6:7A:E7:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C512/22DBFEFA12A311F1A20FC6383D3D8C67/BvzPtWLbIsed8IYyJBvx-uZ658E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BvzPtWLbIsed8IYyJBvx-uZ658E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C512/22DBFEFA12A311F1A20FC6383D3D8C67/BvzPtWLbIsed8IYyJBvx-uZ658E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:8f:c5:7c:75:b8:fb:a1:e4:bb:ec:35:a0:51:16:ba:07:cc:
         f7:8d:da:c5:e3:dc:d3:64:31:b6:47:2b:7e:50:ce:48:5b:7d:
         e5:ba:f7:d6:b3:79:71:5d:4e:7a:de:e2:4a:59:28:a1:81:5d:
         e0:90:17:0d:1a:45:71:e2:06:67:f9:f9:b6:59:b3:b7:cb:d6:
         bf:73:92:46:73:5f:07:60:74:0c:22:9f:ea:56:aa:5c:da:77:
         f4:16:6f:27:fc:01:cd:a3:ec:59:98:1f:c5:48:f0:40:76:7e:
         a8:9f:a3:cc:c0:de:84:10:6b:14:0e:13:32:dc:33:b2:78:eb:
         80:b1:f6:18:9c:f8:e7:46:2c:03:5f:e1:a4:84:00:09:46:d2:
         65:03:8c:13:ad:93:99:05:c8:55:29:f5:67:c6:a5:d2:cd:55:
         30:30:c5:f4:46:79:ce:25:41:82:aa:cf:ba:73:76:9f:57:f6:
         fb:44:8a:1f:2e:53:8c:21:14:95:13:55:41:bd:2f:59:77:fa:
         0d:5c:45:1d:6b:de:04:40:e2:89:db:79:b5:8b:dc:c0:40:0d:
         12:72:0a:58:7f:e0:89:c6:7b:0f:f0:f2:f0:dc:f5:1c:6f:4c:
         65:a6:f5:58:73:4f:f6:7a:dd:8b:45:3e:c7:94:e0:ba:df:da:
         d7:68:94:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:46:43 2026 by rpki-client