Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.mft
File:                     bJoSIRV5G44VBIAXqXV-WHq1b4A.mft (raw, json)
Hash identifier:          r3zV0EwDQa/ZVt85JCoLqiGWCavJuN9fS9LI8AiIVfg=
Subject key identifier:   05:C0:7E:19:9F:2E:86:CD:F2:0B:CF:27:74:9D:F5:74:94:A7:6B:73
Authority key identifier: 6C:9A:12:21:15:79:1B:8E:15:04:80:17:A9:75:7E:58:7A:B5:6F:80
Certificate issuer:       /CN=A9133239/serialNumber=6C9A122115791B8E15048017A9757E587AB56F80
Certificate serial:       014D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJoSIRV5G44VBIAXqXV-WHq1b4A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.mft
Manifest number:          014A
Signing time:             Wed 25 Mar 2026 04:23:20 +0000
Manifest this update:     Wed 25 Mar 2026 04:23:20 +0000
Manifest next update:     Wed 01 Apr 2026 04:23:20 +0000
Files and hashes:         1: bJoSIRV5G44VBIAXqXV-WHq1b4A.crl (hash: H1Gdd2lrjpUTNhXREaNG0wShli7L7zV2ceQ5fvngp9A=)
                          2: CA2855CC2F0211EFB28E0271C4F9AE02.roa (hash: eFqoSUC3CBG2LpBUw/aigLIa86LE66amw5wsVo9Bfuc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.crl
                          rsync://rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJoSIRV5G44VBIAXqXV-WHq1b4A.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:23:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 333 (0x14d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9133239, serialNumber=6C9A122115791B8E15048017A9757E587AB56F80
        Validity
            Not Before: Mar 25 04:23:20 2026 GMT
            Not After : Apr  1 04:23:20 2026 GMT
        Subject: CN=69c36338-997d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:90:d1:21:a5:1c:f7:bf:6a:7e:11:57:d3:16:
                    2e:32:49:6d:71:1e:30:83:c0:cf:e4:9a:bb:f1:cb:
                    b5:c2:86:28:d6:43:f2:47:70:9e:4a:b5:49:cc:13:
                    63:07:3d:f3:8c:28:ee:10:45:19:0e:29:15:03:05:
                    ee:43:d7:8b:5c:be:4e:9b:9b:51:1a:a8:21:85:b8:
                    19:19:14:d8:62:ee:77:ec:3e:08:33:6a:8c:00:1f:
                    6c:06:26:64:e7:fc:3c:87:96:46:2a:4b:0a:a3:c9:
                    07:24:d3:d8:39:56:c1:8d:54:b8:45:71:f1:9d:71:
                    ce:ac:dd:31:38:54:ae:7a:19:15:f9:26:0f:f9:02:
                    3e:7c:75:60:4f:5c:cd:dc:74:66:df:d6:6d:23:56:
                    7d:ac:a3:18:e6:2a:30:ec:eb:1c:52:19:72:71:db:
                    57:8a:00:67:45:b5:c4:d1:a4:88:c4:35:e1:01:ab:
                    de:8e:8a:56:13:80:a7:b7:69:93:0d:c6:a5:bd:8c:
                    c3:34:36:8f:3a:41:5a:c7:e1:5b:1d:72:42:52:1d:
                    ec:6f:87:1f:a9:b7:d7:30:70:75:c1:30:60:8f:46:
                    8c:6c:24:0e:4c:fd:22:58:a7:8d:e6:e1:6a:a8:2c:
                    dc:10:aa:fb:7a:e2:e1:00:16:0b:6c:f1:ee:65:ab:
                    bc:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:C0:7E:19:9F:2E:86:CD:F2:0B:CF:27:74:9D:F5:74:94:A7:6B:73
            X509v3 Authority Key Identifier:
                keyid:6C:9A:12:21:15:79:1B:8E:15:04:80:17:A9:75:7E:58:7A:B5:6F:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJoSIRV5G44VBIAXqXV-WHq1b4A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:1d:95:5d:ee:26:75:6b:94:20:78:77:25:6b:0e:66:1a:57:
         1e:5b:fa:91:a9:57:2b:b3:b7:f5:4a:cd:fb:be:ca:12:c1:f7:
         69:0c:33:87:89:0a:99:4e:cf:2d:8a:61:fa:40:6e:b2:5d:1e:
         fd:49:e9:be:e0:a1:d9:09:48:dc:34:d0:04:c0:f8:92:e5:4d:
         ad:9a:f5:c9:44:d0:02:27:f2:d9:26:e1:b0:5e:bc:43:de:2a:
         3c:8c:bf:c1:ed:d0:6a:2e:d7:67:a6:ed:5b:6a:f1:e6:ec:5d:
         b7:fc:29:5b:20:38:0e:21:6c:41:b4:b2:43:63:bc:e8:96:d1:
         99:97:cd:dd:ab:e8:4e:af:ac:8f:24:b3:ee:25:39:9f:2d:45:
         19:c6:b1:f3:1b:1c:d0:e1:33:c9:93:9e:eb:ff:8c:c9:d9:33:
         bd:d4:c8:e3:d6:7a:96:13:18:0e:08:53:fc:69:f7:8b:1b:bc:
         66:9a:ff:8f:a7:1e:c3:96:f3:35:0b:7a:34:91:95:9d:a0:30:
         74:28:78:ce:5c:ba:53:cf:fa:da:59:da:97:37:8b:25:7e:97:
         52:f4:45:07:e5:b1:c0:7f:78:6c:df:a8:8b:ab:c0:16:ea:a0:
         63:a1:e0:fe:01:b7:f6:d6:93:fc:3a:97:50:bb:e6:36:e6:e7:
         58:5a:09:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:43:03 2026 by rpki-client