Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918B909/64CA7B08EBC911F0936EDB83676F56BC/bpbq_I_Ooaf_MezeClBm17HDxHo.mft
File:                     bpbq_I_Ooaf_MezeClBm17HDxHo.mft (raw, json)
Hash identifier:          TyfSt8B3TglaN76nUVFRKmz2m19+uz2Y7gowpm3LjR8=
Subject key identifier:   91:5C:D2:C8:4E:90:D3:94:B0:AE:8A:D7:3D:2E:7C:B7:30:A0:31:48
Authority key identifier: 6E:96:EA:FC:8F:CE:A1:A7:FF:31:EC:DE:0A:50:66:D7:B1:C3:C4:7A
Certificate issuer:       /CN=A918B909/serialNumber=6E96EAFC8FCEA1A7FF31ECDE0A5066D7B1C3C47A
Certificate serial:       70
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpbq_I_Ooaf_MezeClBm17HDxHo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918B909/64CA7B08EBC911F0936EDB83676F56BC/bpbq_I_Ooaf_MezeClBm17HDxHo.mft
Manifest number:          6C
Signing time:             Mon 27 Jul 2026 10:13:28 +0000
Manifest this update:     Mon 27 Jul 2026 10:13:28 +0000
Manifest next update:     Mon 03 Aug 2026 10:13:28 +0000
Files and hashes:         1: bpbq_I_Ooaf_MezeClBm17HDxHo.crl (hash: BYZHLO0i4A7uCkur3RDTKeuJmQF3C+hvfetKxTldpRU=)
                          2: EEE9D096FB5911F0B335DD54496F56BC.roa (hash: 6OTjANbCsH7alVj8xUPBjTt3S0ForgUt8vNg7J7WznU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918B909/64CA7B08EBC911F0936EDB83676F56BC/bpbq_I_Ooaf_MezeClBm17HDxHo.crl
                          rsync://rpki.apnic.net/member_repository/A918B909/64CA7B08EBC911F0936EDB83676F56BC/bpbq_I_Ooaf_MezeClBm17HDxHo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpbq_I_Ooaf_MezeClBm17HDxHo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 10:13:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112 (0x70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918B909, serialNumber=6E96EAFC8FCEA1A7FF31ECDE0A5066D7B1C3C47A
        Validity
            Not Before: Jul 27 10:13:28 2026 GMT
            Not After : Aug  3 10:13:28 2026 GMT
        Subject: CN=6a672f48-8542
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:47:73:f2:43:14:22:a9:24:00:d9:71:44:c5:
                    ce:a9:05:a0:a7:14:0e:3e:ce:23:01:92:85:e2:81:
                    1b:22:c5:8f:a9:d1:b6:52:62:ef:fb:bb:c4:dd:ed:
                    54:d3:d4:0a:11:cc:d2:94:eb:41:e6:9f:8d:de:f9:
                    4a:ba:72:c4:68:c1:29:42:fc:bd:b7:f8:b2:d4:51:
                    ea:ef:c0:8d:7b:94:46:11:56:dd:c4:da:0a:24:04:
                    02:ea:c1:23:9f:c2:40:63:f9:7a:af:21:d4:72:ce:
                    7a:30:bf:63:98:bc:76:be:d2:56:fe:46:8a:73:19:
                    07:a3:fd:1c:89:3d:1e:88:bd:e9:57:55:19:ff:2f:
                    3e:80:cb:e6:14:f8:8e:42:d4:c1:44:c0:72:79:9a:
                    6b:ab:c2:9e:e9:9a:60:b0:82:b8:8c:dd:5b:d2:a0:
                    7d:1c:b1:bf:c1:27:ba:45:99:44:53:8d:19:1a:cb:
                    e6:ff:3e:4f:38:11:79:4e:02:8b:11:eb:1c:9b:33:
                    1b:44:12:71:73:ca:20:fa:7c:88:94:28:68:e0:eb:
                    0b:ca:d6:1c:e4:c1:ae:86:a7:82:a6:ed:49:3d:11:
                    79:25:b8:49:31:92:39:05:36:c1:22:7a:a9:0e:5f:
                    4a:40:7b:f9:78:98:fa:b0:2d:aa:c8:b6:cc:28:7f:
                    b8:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:5C:D2:C8:4E:90:D3:94:B0:AE:8A:D7:3D:2E:7C:B7:30:A0:31:48
            X509v3 Authority Key Identifier:
                keyid:6E:96:EA:FC:8F:CE:A1:A7:FF:31:EC:DE:0A:50:66:D7:B1:C3:C4:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918B909/64CA7B08EBC911F0936EDB83676F56BC/bpbq_I_Ooaf_MezeClBm17HDxHo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpbq_I_Ooaf_MezeClBm17HDxHo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B909/64CA7B08EBC911F0936EDB83676F56BC/bpbq_I_Ooaf_MezeClBm17HDxHo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:e4:fb:35:b8:55:16:d2:cd:a3:1a:f3:49:a2:b3:59:28:5c:
         e5:77:c0:19:b4:86:e4:15:91:1b:63:48:7c:70:05:6b:5a:82:
         92:a6:cd:1c:64:da:d1:83:ae:f5:b1:0b:dc:cd:55:8d:9a:67:
         e8:82:fe:50:6a:f4:42:e5:39:5e:b8:31:81:ec:1e:7a:c4:b6:
         6b:24:98:db:3c:ad:1b:20:f8:40:63:e1:90:96:0b:89:ab:44:
         1e:2d:de:33:3e:39:e8:d8:e5:75:88:3a:16:b3:78:10:e3:c7:
         63:78:ef:57:8a:68:fc:4f:8b:38:90:05:fe:3b:96:cd:8d:48:
         66:88:9b:39:34:4d:99:b4:97:be:fd:f6:63:e5:e0:ea:cf:c5:
         ae:fe:90:d0:8c:a4:c1:84:0f:91:98:2c:0c:60:40:98:b6:03:
         ad:4a:86:99:6b:98:b4:6a:9e:58:7d:6e:74:2a:80:74:43:0c:
         a7:0e:40:ca:ff:ea:96:4f:9a:9f:d6:c2:10:45:a9:9e:1e:4f:
         63:89:85:df:82:7d:61:4c:ef:01:04:55:61:81:03:08:76:3c:
         95:f2:51:a2:2c:b1:86:c6:1e:f9:ab:27:cc:f0:81:94:f8:0b:
         f9:73:7e:86:fb:01:2f:85:1c:7b:91:b0:ae:70:7c:7e:ee:a6:
         8f:08:4f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 04:23:50 2026 by rpki-client