Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917983D/4162F44CF69A11ECA7853B59C4F9AE02/bwAkaoWIhIw6FydS8yrk6jDGgKQ.mft
File:                     bwAkaoWIhIw6FydS8yrk6jDGgKQ.mft (raw, json)
Hash identifier:          uWdGYbf8RmwMJ7vID3QggE6pfaAjpCAp4TrUc66ien0=
Subject key identifier:   BE:5C:8C:CB:4F:17:B6:41:7E:41:A5:85:05:85:43:56:73:BF:FF:BD
Authority key identifier: 6F:00:24:6A:85:88:84:8C:3A:17:27:52:F3:2A:E4:EA:30:C6:80:A4
Certificate issuer:       /CN=A917983D/serialNumber=6F00246A8588848C3A172752F32AE4EA30C680A4
Certificate serial:       0352
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bwAkaoWIhIw6FydS8yrk6jDGgKQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917983D/4162F44CF69A11ECA7853B59C4F9AE02/bwAkaoWIhIw6FydS8yrk6jDGgKQ.mft
Manifest number:          034B
Signing time:             Wed 25 Mar 2026 00:36:05 +0000
Manifest this update:     Wed 25 Mar 2026 00:36:04 +0000
Manifest next update:     Wed 01 Apr 2026 00:36:04 +0000
Files and hashes:         1: bwAkaoWIhIw6FydS8yrk6jDGgKQ.crl (hash: 395jIzyEsolliCUFJ1QOdBXoljeEZS9Gg/Wuz53EAR4=)
                          2: 1F59A248F69E11EC947BBC5EC4F9AE02.roa (hash: KC4FexlexjRXq5lyOPd7yXPhSCmSDo/9sSF69OZy7iE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917983D/4162F44CF69A11ECA7853B59C4F9AE02/bwAkaoWIhIw6FydS8yrk6jDGgKQ.crl
                          rsync://rpki.apnic.net/member_repository/A917983D/4162F44CF69A11ECA7853B59C4F9AE02/bwAkaoWIhIw6FydS8yrk6jDGgKQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bwAkaoWIhIw6FydS8yrk6jDGgKQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 00:36:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 850 (0x352)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917983D, serialNumber=6F00246A8588848C3A172752F32AE4EA30C680A4
        Validity
            Not Before: Mar 25 00:36:04 2026 GMT
            Not After : Apr  1 00:36:04 2026 GMT
        Subject: CN=69c32df4-49a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:70:25:b2:77:43:2a:28:b0:f6:a6:c5:d5:34:
                    a1:b1:d2:3d:fe:19:c2:87:2f:0b:26:ac:5e:aa:ef:
                    f0:15:86:a9:da:06:25:07:29:c6:0b:79:5a:56:f0:
                    da:14:a1:00:70:cc:c7:09:a2:72:96:96:d7:8c:f8:
                    55:ff:52:09:1d:9d:a7:7a:64:bb:13:01:24:9b:f3:
                    ba:47:65:f0:eb:45:20:a6:41:f4:9e:67:17:b8:99:
                    68:77:68:d6:4c:4a:b3:26:03:a2:9b:85:83:b2:5a:
                    97:1b:41:90:81:9a:8d:55:68:cd:d4:df:d8:26:15:
                    4b:e9:55:1d:4e:fc:fe:81:68:ad:f5:d0:85:92:08:
                    51:16:13:1b:2c:2b:13:10:91:5e:3c:0f:7e:d2:5e:
                    bf:65:12:3a:a0:c7:59:61:99:d0:b7:0e:37:b4:45:
                    c9:4d:24:df:be:67:96:7f:8e:bf:f3:62:fd:7b:88:
                    e8:12:78:b8:6d:b8:c6:e4:ee:f2:28:08:aa:18:b8:
                    c0:53:7c:13:67:3d:9b:ec:d3:94:e3:a6:56:6e:19:
                    fb:30:88:b2:f9:1f:e2:8b:1b:bc:5e:af:9a:fc:d6:
                    30:3f:5d:7e:55:79:cf:60:84:23:59:31:fa:17:21:
                    f2:a5:61:be:88:10:08:ed:c7:8a:59:84:08:e2:84:
                    6f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:5C:8C:CB:4F:17:B6:41:7E:41:A5:85:05:85:43:56:73:BF:FF:BD
            X509v3 Authority Key Identifier:
                keyid:6F:00:24:6A:85:88:84:8C:3A:17:27:52:F3:2A:E4:EA:30:C6:80:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917983D/4162F44CF69A11ECA7853B59C4F9AE02/bwAkaoWIhIw6FydS8yrk6jDGgKQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bwAkaoWIhIw6FydS8yrk6jDGgKQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917983D/4162F44CF69A11ECA7853B59C4F9AE02/bwAkaoWIhIw6FydS8yrk6jDGgKQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:cd:1c:8c:52:ff:2a:04:17:67:61:2c:b6:81:94:1e:4b:6c:
         ef:5e:a7:e4:71:01:49:e0:12:be:00:1a:6f:39:64:8e:45:64:
         34:29:74:2f:eb:1a:0e:05:f9:76:f7:26:e8:3a:b7:a7:26:91:
         89:08:c9:53:6b:55:e5:e3:38:46:f0:c2:1c:b5:4c:31:c4:df:
         c3:2e:09:14:c4:b0:74:dd:0f:af:b0:09:0a:d4:2e:ce:e8:69:
         f6:db:e9:8d:ed:97:6d:35:96:ac:6d:3a:67:1a:43:59:84:da:
         6e:61:62:75:d7:a8:29:91:0b:8e:0e:f0:bf:80:f3:75:a8:c5:
         6f:ac:a0:48:fb:36:a6:47:54:7c:df:5a:4c:ce:e2:c7:62:e7:
         b8:6b:d9:3c:b5:b2:88:ff:87:fa:62:0a:df:46:4a:5f:db:d6:
         37:ad:9b:ae:58:e1:1c:ea:0e:e4:85:d3:65:62:34:fe:b9:19:
         9e:9f:98:cd:a5:e3:a9:9f:26:ac:da:67:1b:6b:51:b5:29:ec:
         22:2a:d1:a3:f0:bb:63:c6:c2:c4:ab:b2:cf:68:7e:ab:94:22:
         e1:2d:5d:6e:5c:d6:25:1a:c3:37:95:27:5a:75:29:c8:95:f3:
         2b:5d:07:10:f7:72:b9:71:d7:98:78:4d:75:c2:29:a8:59:3e:
         08:79:6c:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:52:54 2026 by rpki-client