Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918B909/64CA7B08EBC911F0936EDB83676F56BC/bpbq_I_Ooaf_MezeClBm17HDxHo.mft
File:                     bpbq_I_Ooaf_MezeClBm17HDxHo.mft (raw, json)
Hash identifier:          fHFijXlAIn7gl3Y3ZM4IXRwCpfB8DN3VhLkHv/uTQNA=
Subject key identifier:   7D:D7:47:05:D3:88:EE:04:15:01:E3:4E:75:FC:AB:62:1F:87:03:2A
Authority key identifier: 6E:96:EA:FC:8F:CE:A1:A7:FF:31:EC:DE:0A:50:66:D7:B1:C3:C4:7A
Certificate issuer:       /CN=A918B909/serialNumber=6E96EAFC8FCEA1A7FF31ECDE0A5066D7B1C3C47A
Certificate serial:       A1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpbq_I_Ooaf_MezeClBm17HDxHo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918B909/64CA7B08EBC911F0936EDB83676F56BC/bpbq_I_Ooaf_MezeClBm17HDxHo.mft
Manifest number:          9C
Signing time:             Tue 27 Oct 2026 07:41:43 +0000
Manifest this update:     Tue 27 Oct 2026 07:41:43 +0000
Manifest next update:     Tue 03 Nov 2026 07:41:43 +0000
Files and hashes:         1: bpbq_I_Ooaf_MezeClBm17HDxHo.crl (hash: NzKG56ED9Ccr3MxXzG3dq8fv//Nz39xKiOwnhJM3qPQ=)
                          2: 2tmHxIUiSQ-35Rba71M2fmHgKIY.asa (hash: QR/muQfN3wFXM038UwSUPSQw1cF2Ro2o8/hTCLgrj2c=)
                          3: EEE9D096FB5911F0B335DD54496F56BC.roa (hash: 6OTjANbCsH7alVj8xUPBjTt3S0ForgUt8vNg7J7WznU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918B909/64CA7B08EBC911F0936EDB83676F56BC/bpbq_I_Ooaf_MezeClBm17HDxHo.crl
                          rsync://rpki.apnic.net/member_repository/A918B909/64CA7B08EBC911F0936EDB83676F56BC/bpbq_I_Ooaf_MezeClBm17HDxHo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpbq_I_Ooaf_MezeClBm17HDxHo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Nov 2026 07:41:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 161 (0xa1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918B909, serialNumber=6E96EAFC8FCEA1A7FF31ECDE0A5066D7B1C3C47A
        Validity
            Not Before: Oct 27 07:41:43 2026 GMT
            Not After : Nov  3 07:41:43 2026 GMT
        Subject: CN=6ae055b7-a218
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3c:cc:0e:2b:0a:07:83:23:33:95:a4:4b:f9:
                    a5:f7:18:fa:db:2d:98:84:0d:4b:3d:de:6b:1b:dc:
                    2e:e0:30:50:91:4c:a1:93:53:60:ec:da:62:e9:d9:
                    d8:07:75:86:28:c1:b6:db:8d:4e:1f:fc:e6:d7:e5:
                    b4:d0:23:a3:3f:3f:08:51:55:73:de:cb:c8:27:e9:
                    43:f0:bb:23:66:5e:0b:4b:4c:d5:c5:fa:3f:b9:06:
                    35:8f:1f:eb:ea:5c:b2:b3:29:7a:0f:dc:e0:5d:c4:
                    71:52:fe:1e:51:21:8c:bc:82:75:fa:82:01:b9:66:
                    0e:86:cc:c2:c4:a0:ec:19:4d:54:9c:92:ca:76:c7:
                    72:4a:e9:13:4a:d3:90:04:83:75:06:24:e1:1a:3a:
                    53:13:de:40:57:f5:1b:6a:c0:43:58:70:37:13:d1:
                    e8:04:d5:75:16:02:ca:4b:26:eb:77:e3:39:af:3f:
                    5d:a5:af:4a:cd:f6:4c:b4:28:18:55:7b:30:96:fe:
                    8a:44:66:30:6c:a0:b1:55:a4:34:20:6e:27:6c:c8:
                    5f:d8:84:9d:c3:dd:d6:ad:a9:32:c5:50:66:93:00:
                    33:c8:ef:f0:87:59:f4:22:d1:90:eb:00:bd:c9:07:
                    5d:97:7f:a6:b0:4b:ec:73:1f:ae:f7:7d:05:10:66:
                    80:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:D7:47:05:D3:88:EE:04:15:01:E3:4E:75:FC:AB:62:1F:87:03:2A
            X509v3 Authority Key Identifier:
                keyid:6E:96:EA:FC:8F:CE:A1:A7:FF:31:EC:DE:0A:50:66:D7:B1:C3:C4:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918B909/64CA7B08EBC911F0936EDB83676F56BC/bpbq_I_Ooaf_MezeClBm17HDxHo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpbq_I_Ooaf_MezeClBm17HDxHo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B909/64CA7B08EBC911F0936EDB83676F56BC/bpbq_I_Ooaf_MezeClBm17HDxHo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:2d:53:c0:d9:23:4a:3e:b5:00:25:41:8b:24:b4:11:ba:56:
         77:f0:cf:50:e4:7e:7f:25:cd:51:e4:b3:7d:8d:c2:14:08:6a:
         fe:da:b2:d4:db:1f:e2:af:07:68:c7:70:9f:c3:1f:0e:8e:0e:
         c1:20:c1:96:bd:04:34:07:ca:7d:dd:12:54:ad:dd:f9:72:98:
         43:af:33:46:d6:2d:8b:7c:05:86:43:27:3d:4b:12:af:9b:4b:
         3c:72:bb:27:f0:73:e1:14:a9:a5:a5:72:72:b8:7a:14:89:15:
         31:c5:eb:c1:e3:aa:4c:af:f1:7f:38:20:64:28:e4:65:04:ee:
         1c:61:c3:80:e4:80:ba:77:be:85:d0:46:c1:71:12:fe:f5:3e:
         70:9c:ba:df:0a:59:04:0e:2d:c0:a5:08:ee:f5:26:d3:ac:a2:
         e5:bf:ab:a0:8f:32:44:4c:71:c4:11:16:dc:4b:22:f2:69:6b:
         c3:e7:ec:0d:bb:ce:79:9a:cc:cf:2f:98:f9:81:13:cf:e7:77:
         75:a8:ab:0d:dd:11:83:93:2d:b6:2c:70:e2:67:05:d8:a6:46:
         1a:ec:89:19:0d:45:eb:90:a8:b6:f0:de:ae:f8:8c:8d:59:83:
         8b:8e:41:47:82:0f:6b:b0:65:19:d9:45:7b:fe:a6:2b:9c:29:
         f2:48:26:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 10:23:11 2026 by rpki-client