Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.mft
File:                     BPB0oLqHgFxQ_HmT1AQQuEoR0vY.mft (raw, json)
Hash identifier:          rfSsB4H9zBYixRIblSu4FgpS6EzmiFpk8YKOfbROtYM=
Subject key identifier:   14:4F:A6:5C:86:5D:A0:19:3C:A1:70:42:E5:6E:82:B1:FB:1D:43:23
Authority key identifier: 04:F0:74:A0:BA:87:80:5C:50:FC:79:93:D4:04:10:B8:4A:11:D2:F6
Certificate issuer:       /CN=A9126B7C/serialNumber=04F074A0BA87805C50FC7993D40410B84A11D2F6
Certificate serial:       0232
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.mft
Manifest number:          0226
Signing time:             Wed 25 Mar 2026 02:06:23 +0000
Manifest this update:     Wed 25 Mar 2026 02:06:23 +0000
Manifest next update:     Wed 01 Apr 2026 02:06:23 +0000
Files and hashes:         1: BPB0oLqHgFxQ_HmT1AQQuEoR0vY.crl (hash: AH9aYUa4Kj7qcKWSFJLOiHchndb3Idezq06NLQgDKJ0=)
                          2: F607A6C8DF8C11ED9EAE5884C4F9AE02.roa (hash: /jnNf6yhC1u/KapU+QnPIqPvCzJZYcUOSV+8kDzVszA=)
                          3: F57CB8F6DF8C11ED9EAE5884C4F9AE02.roa (hash: yifIUTqbn7Wd/uULyvr6BJeOjGF176Fhn2BVhJf8YA0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.crl
                          rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 02:06:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 562 (0x232)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9126B7C, serialNumber=04F074A0BA87805C50FC7993D40410B84A11D2F6
        Validity
            Not Before: Mar 25 02:06:23 2026 GMT
            Not After : Apr  1 02:06:23 2026 GMT
        Subject: CN=69c3431f-6143
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:49:9a:96:fa:97:69:ef:22:a4:dc:4f:f6:5e:
                    70:1c:68:1a:6c:3c:7a:ae:94:c4:d2:79:e0:26:02:
                    37:a6:fc:4a:85:dc:73:61:3a:17:7e:7b:14:b3:8e:
                    2e:49:7f:3d:60:4c:e4:02:cf:35:b8:ca:b4:07:36:
                    71:3f:52:97:6c:00:72:a2:ca:53:07:a0:b2:74:09:
                    e4:a5:7a:7b:3c:44:72:c5:17:7a:d2:63:73:10:8e:
                    64:59:b8:6d:7e:e8:19:ce:43:31:5b:3b:c1:4f:ae:
                    9a:16:42:13:3e:f7:a5:fe:01:37:93:a2:c4:60:23:
                    83:5f:a7:d5:b9:23:af:fb:b3:dc:cd:e1:ec:e9:dd:
                    06:b6:cc:25:8e:5b:f4:81:b2:79:2b:71:62:4f:43:
                    f7:6a:ba:b2:96:0b:ba:a6:1a:3b:1e:7b:00:f3:25:
                    48:0c:4f:fb:9a:7b:61:5f:f2:62:3a:7c:2f:45:4e:
                    56:79:d3:ea:fb:04:a8:0b:f5:2f:3c:c4:86:8a:10:
                    b4:81:a9:78:c7:d8:05:f3:1e:ec:5f:34:25:d2:4e:
                    88:81:8f:17:94:e3:5a:2f:ac:78:7c:e7:5f:32:cd:
                    f3:0f:50:10:2c:40:cc:8f:9b:14:45:7f:62:e9:be:
                    44:05:1f:45:8a:52:75:90:a1:72:2f:46:37:7d:cd:
                    0a:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:4F:A6:5C:86:5D:A0:19:3C:A1:70:42:E5:6E:82:B1:FB:1D:43:23
            X509v3 Authority Key Identifier:
                keyid:04:F0:74:A0:BA:87:80:5C:50:FC:79:93:D4:04:10:B8:4A:11:D2:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:85:f1:3a:5b:c6:32:f6:ca:38:16:05:54:0b:22:f1:91:28:
         85:83:bb:4c:86:49:b1:a8:81:3d:bb:26:c2:4e:39:43:2b:9a:
         6a:10:65:9d:a2:12:db:f1:a0:f3:9f:0e:61:37:6a:dd:ed:22:
         a9:d1:8c:11:8e:1f:f7:90:a7:d4:22:1b:e7:17:cc:4f:92:44:
         29:d6:8a:eb:00:5e:ae:59:c9:1a:80:4a:1f:ec:b3:e7:45:8c:
         f8:20:2e:c9:64:e3:cd:e5:63:05:19:42:4c:c1:db:78:ba:95:
         d0:2a:56:d6:ca:48:0b:1a:58:83:b1:4e:a1:27:da:64:08:0b:
         d8:ec:62:61:54:7d:bb:1b:2d:cd:cd:1f:4d:07:85:a5:75:2e:
         89:56:f3:fe:27:de:64:33:07:02:a5:02:35:97:96:1a:72:ae:
         e2:bc:d2:bf:63:f3:69:91:b7:1e:87:18:0b:88:16:d9:d1:dc:
         f4:fd:c2:38:04:7b:8f:f4:5e:d5:06:c6:2d:b2:f5:fd:0b:c3:
         c3:44:99:83:59:1a:09:6f:b0:46:4b:3f:92:08:35:89:46:39:
         89:05:ee:f3:e4:29:0a:fa:1e:00:2d:c2:f2:50:34:09:8e:09:
         48:b4:a9:6f:7b:8f:66:04:82:42:49:70:9b:29:54:f4:a3:04:
         b3:5b:a1:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:26:06 2026 by rpki-client