Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91626D2/AF20834E13F511EFA09D321BC4F9AE02/bDt_HBM9qcUdRE2oXmAqloRR_lQ.mft
File:                     bDt_HBM9qcUdRE2oXmAqloRR_lQ.mft (raw, json)
Hash identifier:          udngxcr2XdIpIAlf+JYG8RizHOOWNyDN/n9R6ZnX5iw=
Subject key identifier:   D7:71:65:A5:B5:3D:2A:54:0F:89:2D:03:F9:68:10:19:55:FE:D0:7C
Authority key identifier: 6C:3B:7F:1C:13:3D:A9:C5:1D:44:4D:A8:5E:60:2A:96:84:51:FE:54
Certificate issuer:       /CN=A91626D2/serialNumber=6C3B7F1C133DA9C51D444DA85E602A968451FE54
Certificate serial:       016C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bDt_HBM9qcUdRE2oXmAqloRR_lQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91626D2/AF20834E13F511EFA09D321BC4F9AE02/bDt_HBM9qcUdRE2oXmAqloRR_lQ.mft
Manifest number:          0164
Signing time:             Wed 25 Mar 2026 04:12:10 +0000
Manifest this update:     Wed 25 Mar 2026 04:12:09 +0000
Manifest next update:     Wed 01 Apr 2026 04:12:09 +0000
Files and hashes:         1: bDt_HBM9qcUdRE2oXmAqloRR_lQ.crl (hash: ky6PWGHuEizses17alWD46lTX44bEi+h/HOBsPedbMU=)
                          2: 8093CCBA13F611EF8ED7D71EC4F9AE02.roa (hash: xPyb9jdVPxFNqu7DjwvZN/gxmMuIyOp+jROsuWdv+So=)
                          3: B88A958007B611F1BF9DF7EA143D8C67.roa (hash: EzgQAPl/vUlyh5AjsIyBAeaJMqrmt2E1TV7jxVlr6ZU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91626D2/AF20834E13F511EFA09D321BC4F9AE02/bDt_HBM9qcUdRE2oXmAqloRR_lQ.crl
                          rsync://rpki.apnic.net/member_repository/A91626D2/AF20834E13F511EFA09D321BC4F9AE02/bDt_HBM9qcUdRE2oXmAqloRR_lQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bDt_HBM9qcUdRE2oXmAqloRR_lQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:12:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 364 (0x16c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91626D2, serialNumber=6C3B7F1C133DA9C51D444DA85E602A968451FE54
        Validity
            Not Before: Mar 25 04:12:09 2026 GMT
            Not After : Apr  1 04:12:09 2026 GMT
        Subject: CN=69c3609a-e9da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:fb:74:9d:fe:49:68:44:8b:bd:f5:e7:d9:72:
                    4f:f8:86:b2:fb:66:6a:68:c1:93:66:5f:f5:04:72:
                    41:69:a7:64:55:52:7f:5d:ae:48:9c:0b:62:28:ad:
                    7e:10:08:31:d0:f0:a7:15:b4:7d:31:ad:d9:d8:fe:
                    ed:1a:d8:42:ca:9b:6c:70:f7:14:ce:ec:13:1b:10:
                    84:9d:d1:f4:bf:7e:ad:44:3c:b2:d0:13:2d:ac:89:
                    17:44:3c:a0:f8:fa:82:b1:23:29:79:3f:94:2a:51:
                    b7:be:91:d4:8d:51:10:77:98:35:69:bc:47:6d:59:
                    b1:a6:b8:88:77:e4:7b:48:cf:4a:af:bd:59:f7:05:
                    f4:45:9c:38:66:07:38:42:53:0d:fc:f7:55:4f:24:
                    3d:2e:b0:ce:75:5f:66:dd:94:ec:83:7b:b5:be:e7:
                    28:d3:4a:af:6f:38:3c:eb:4d:d7:a2:1d:dc:99:e7:
                    09:6e:e2:be:9d:4c:47:d5:0d:3c:c1:f9:2f:dc:43:
                    46:44:e3:af:4c:3a:7d:7b:26:d2:86:a6:f3:31:ff:
                    f5:ef:3f:d5:cc:70:4e:b0:9a:f9:bf:bf:a7:01:89:
                    51:ae:35:c0:9c:7d:58:46:a0:07:13:d8:35:16:50:
                    85:15:2f:2c:e0:f5:a0:86:d6:4a:b5:fe:90:01:ab:
                    bf:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:71:65:A5:B5:3D:2A:54:0F:89:2D:03:F9:68:10:19:55:FE:D0:7C
            X509v3 Authority Key Identifier:
                keyid:6C:3B:7F:1C:13:3D:A9:C5:1D:44:4D:A8:5E:60:2A:96:84:51:FE:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91626D2/AF20834E13F511EFA09D321BC4F9AE02/bDt_HBM9qcUdRE2oXmAqloRR_lQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bDt_HBM9qcUdRE2oXmAqloRR_lQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91626D2/AF20834E13F511EFA09D321BC4F9AE02/bDt_HBM9qcUdRE2oXmAqloRR_lQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:88:93:48:e1:f7:89:0d:d8:b2:30:b7:00:c9:27:5f:4c:a6:
         96:45:2f:31:9d:d7:6d:83:f9:f5:65:a7:d4:8c:0e:7b:3a:0f:
         c9:a4:05:ac:a1:6c:48:41:03:4e:e0:30:e9:80:bd:86:3b:bd:
         6f:e9:17:79:73:ca:89:05:88:4d:70:66:3c:21:6b:50:fa:8d:
         92:a6:40:94:97:d4:bc:05:e7:2b:90:65:f5:6d:c9:6f:5f:1b:
         b5:a7:5e:48:57:c1:d0:05:8f:5f:05:9f:55:94:8a:58:98:fb:
         53:73:51:8b:22:48:03:cb:17:ec:b5:74:74:ba:b0:6c:62:eb:
         4d:ca:92:b5:93:02:11:56:8a:f7:9d:d2:d3:40:63:d8:95:ef:
         fd:29:8c:30:96:af:c8:8c:6c:2c:c0:08:0d:1c:ae:42:ec:de:
         0a:7a:f9:a3:1a:ae:91:a0:df:83:a0:32:e7:82:bd:ae:5e:54:
         d9:e5:f7:70:1f:6a:18:cc:aa:b9:14:bb:b5:9b:d4:d2:82:c4:
         b0:95:c3:75:e7:f3:96:72:06:f2:ac:06:c6:2c:48:a7:9e:cd:
         ff:99:d3:10:3a:52:13:88:e4:08:f4:8f:26:a3:c3:a1:c1:1e:
         82:40:ff:7c:7a:2c:89:f8:7d:76:4d:d9:9e:c0:7e:dc:86:67:
         fb:61:21:c8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAWwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjI2RDIxMTAvBgNVBAUTKDZDM0I3RjFDMTMzREE5QzUxRDQ0NERBODVFNjAyQTk2
ODQ1MUZFNTQwHhcNMjYwMzI1MDQxMjA5WhcNMjYwNDAxMDQxMjA5WjAYMRYwFAYD
VQQDEw02OWMzNjA5YS1lOWRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0ft0nf5JaESLvfXn2XJP+Iay+2ZqaMGTZl/1BHJBaadkVVJ/Xa5InAtiKK1+
EAgx0PCnFbR9Ma3Z2P7tGthCyptscPcUzuwTGxCEndH0v36tRDyy0BMtrIkXRDyg
+PqCsSMpeT+UKlG3vpHUjVEQd5g1abxHbVmxpriId+R7SM9Kr71Z9wX0RZw4Zgc4
QlMN/PdVTyQ9LrDOdV9m3ZTsg3u1vuco00qvbzg8603Xoh3cmecJbuK+nUxH1Q08
wfkv3ENGROOvTDp9eybShqbzMf/17z/VzHBOsJr5v7+nAYlRrjXAnH1YRqAHE9g1
FlCFFS8s4PWghtZKtf6QAau/uwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNdxZaW1
PSpUD4ktA/loEBlV/tB8MB8GA1UdIwQYMBaAFGw7fxwTPanFHURNqF5gKpaEUf5U
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjZEMi9BRjIwODM0RTEz
RjUxMUVGQTA5RDMyMUJDNEY5QUUwMi9iRHRfSEJNOXFjVWRSRTJvWG1BcWxvUlJf
bFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JEdF9IQk05cWNVZFJFMm9YbUFxbG9SUl9sUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MjZEMi9BRjIwODM0RTEzRjUxMUVGQTA5RDMyMUJDNEY5QUUwMi9iRHRfSEJNOXFj
VWRSRTJvWG1BcWxvUlJfbFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAToiTSOH3iQ3YsjC3AMknX0ymlkUvMZ3XbYP59WWn1IwOezoPyaQFrKFsSEED
TuAw6YC9hju9b+kXeXPKiQWITXBmPCFrUPqNkqZAlJfUvAXnK5Bl9W3Jb18btade
SFfB0AWPXwWfVZSKWJj7U3NRiyJIA8sX7LV0dLqwbGLrTcqStZMCEVaK953S00Bj
2JXv/SmMMJavyIxsLMAIDRyuQuzeCnr5oxqukaDfg6Ay54K9rl5U2eX3cB9qGMyq
uRS7tZvU0oLEsJXDdefzlnIG8qwGxixIp57N/5nTEDpSE4jkCPSPJqPDocEegkD/
fHosifh9dk3ZnsB+3IZn+2EhyA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:31:08 2026 by rpki-client