Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E084/0E54445695EE11F0B8693148C4F9AE02/b1bqmzoTdrDxragZkqO5YQgM4jI.mft
File:                     b1bqmzoTdrDxragZkqO5YQgM4jI.mft (raw, json)
Hash identifier:          Cr73u4wqZ75Ua4tdyfEtsmjC64FzUtn0e2BhfjeqWwg=
Subject key identifier:   EB:A3:AE:61:2C:B8:AD:C2:25:3E:95:96:1E:62:72:1B:EE:D8:4A:9C
Authority key identifier: 6F:56:EA:9B:3A:13:76:B0:F1:AD:A8:19:92:A3:B9:61:08:0C:E2:32
Certificate issuer:       /CN=A915E084/serialNumber=6F56EA9B3A1376B0F1ADA81992A3B961080CE232
Certificate serial:       62
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b1bqmzoTdrDxragZkqO5YQgM4jI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E084/0E54445695EE11F0B8693148C4F9AE02/b1bqmzoTdrDxragZkqO5YQgM4jI.mft
Manifest number:          60
Signing time:             Wed 25 Mar 2026 07:13:15 +0000
Manifest this update:     Wed 25 Mar 2026 07:13:15 +0000
Manifest next update:     Wed 01 Apr 2026 07:13:15 +0000
Files and hashes:         1: b1bqmzoTdrDxragZkqO5YQgM4jI.crl (hash: XgrZHP2H5ZFUX0NDN6hTt81/B49mGbY2eAhRvrh2G6A=)
                          2: C838C2CA95EE11F0BC1A5A49C4F9AE02.roa (hash: OrZ97G6SNx6GCNHJTQuX+by4lZgt38aqC7dBpX4QoPg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E084/0E54445695EE11F0B8693148C4F9AE02/b1bqmzoTdrDxragZkqO5YQgM4jI.crl
                          rsync://rpki.apnic.net/member_repository/A915E084/0E54445695EE11F0B8693148C4F9AE02/b1bqmzoTdrDxragZkqO5YQgM4jI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b1bqmzoTdrDxragZkqO5YQgM4jI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 07:13:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 98 (0x62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E084, serialNumber=6F56EA9B3A1376B0F1ADA81992A3B961080CE232
        Validity
            Not Before: Mar 25 07:13:15 2026 GMT
            Not After : Apr  1 07:13:15 2026 GMT
        Subject: CN=69c38b0b-1982
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:eb:d0:4d:bb:9a:db:1b:1f:5b:b8:b1:2b:2b:
                    da:b3:24:ad:a0:6c:65:ee:3f:f8:52:b0:f4:75:89:
                    3c:cb:16:9e:65:a4:8a:d1:a6:83:49:a2:83:ae:b0:
                    48:44:85:5f:a9:39:54:11:1c:de:33:c5:b6:8d:0b:
                    cd:4f:0e:1d:f4:fc:27:30:e1:79:fe:fb:1a:9f:dd:
                    1d:e1:33:50:aa:24:58:aa:91:6c:4b:dc:50:4c:3f:
                    ff:85:9a:18:c2:2f:85:c2:fc:4f:4a:e0:71:89:87:
                    50:3a:30:7f:af:fe:bd:4d:06:20:cc:45:c0:3e:2c:
                    3f:fb:3f:99:55:9a:2b:55:29:6a:ef:b8:79:ef:2a:
                    2f:9d:eb:b1:76:e5:4f:e5:2d:2a:30:18:2a:4a:22:
                    a1:95:2d:24:df:9f:38:66:d7:e0:08:62:c0:cd:3e:
                    c5:88:5a:0e:2d:7e:5b:bb:64:ec:f9:0b:dc:dd:af:
                    b4:2f:44:b2:ee:37:3c:9a:06:97:66:23:fc:37:b2:
                    03:06:47:44:3f:e1:8e:66:7b:79:4d:00:77:6d:17:
                    73:57:6d:b9:9b:64:0f:17:eb:28:90:57:95:53:5f:
                    fd:52:ad:b9:fd:9b:67:df:d3:3f:9b:e4:98:6f:fc:
                    a8:23:a2:35:aa:e7:f5:9a:72:0a:02:2e:d3:57:1c:
                    8c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:A3:AE:61:2C:B8:AD:C2:25:3E:95:96:1E:62:72:1B:EE:D8:4A:9C
            X509v3 Authority Key Identifier:
                keyid:6F:56:EA:9B:3A:13:76:B0:F1:AD:A8:19:92:A3:B9:61:08:0C:E2:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E084/0E54445695EE11F0B8693148C4F9AE02/b1bqmzoTdrDxragZkqO5YQgM4jI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b1bqmzoTdrDxragZkqO5YQgM4jI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E084/0E54445695EE11F0B8693148C4F9AE02/b1bqmzoTdrDxragZkqO5YQgM4jI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:c3:38:3a:08:b2:77:19:d7:98:bc:a4:f0:b0:02:fe:fc:e5:
         e1:51:6e:cc:99:dc:96:5e:99:1d:fa:e4:da:f7:b1:4a:83:98:
         78:f6:85:fe:9f:f3:36:f4:0c:2f:8d:6c:76:f3:bf:98:ed:12:
         54:75:d2:e1:1c:d9:60:00:28:0f:a4:19:9a:70:67:b3:9f:bc:
         ef:49:f9:f2:8b:8d:6d:d4:6f:77:f9:9c:ec:c1:71:9b:46:26:
         86:d7:b8:3a:6c:ea:3f:02:50:46:2a:a6:1c:af:e6:c7:a3:9d:
         01:2a:6f:da:ed:12:8b:02:89:a7:ab:42:0c:d6:bd:f7:ae:2a:
         ff:0b:1e:77:77:41:26:34:6b:3e:79:8a:37:bb:d5:4f:ff:96:
         b8:6c:d9:72:5b:d0:c1:13:5e:ef:b2:de:90:08:29:97:00:60:
         43:ad:5c:f8:84:f8:c4:a8:d9:38:5c:3f:64:9c:59:05:4e:1c:
         01:8f:49:d6:08:13:02:65:b9:cf:55:e7:3e:91:cd:2e:b3:e0:
         07:c4:86:5f:f8:34:de:82:08:63:13:0e:e5:de:8d:7d:9e:2c:
         2e:65:0e:1e:e0:08:27:09:8f:7d:53:32:14:b2:ec:b9:3e:1c:
         3a:0c:b5:73:d6:6b:91:7e:53:02:cc:8a:b6:cb:53:f9:ae:72:
         00:a4:7b:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:28:04 2026 by rpki-client