Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91907D3/38FB215C6C5911F0A3884E7AC4F9AE02/1bTWxIC76WuryHIkhQJdTEX-x4o.mft
File:                     1bTWxIC76WuryHIkhQJdTEX-x4o.mft (raw, json)
Hash identifier:          otDbaBPslYJT9Bw++n5FtQ1dhRImXHJ7r0YWU1WS/gE=
Subject key identifier:   78:65:61:87:8F:27:F0:02:51:3F:10:E3:79:9B:34:1A:68:5A:75:B6
Authority key identifier: D5:B4:D6:C4:80:BB:E9:6B:AB:C8:72:24:85:02:5D:4C:45:FE:C7:8A
Certificate issuer:       /CN=A91907D3/serialNumber=D5B4D6C480BBE96BABC8722485025D4C45FEC78A
Certificate serial:       89
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1bTWxIC76WuryHIkhQJdTEX-x4o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91907D3/38FB215C6C5911F0A3884E7AC4F9AE02/1bTWxIC76WuryHIkhQJdTEX-x4o.mft
Manifest number:          82
Signing time:             Wed 25 Mar 2026 06:57:57 +0000
Manifest this update:     Wed 25 Mar 2026 06:57:56 +0000
Manifest next update:     Wed 01 Apr 2026 06:57:56 +0000
Files and hashes:         1: 1bTWxIC76WuryHIkhQJdTEX-x4o.crl (hash: 0ynHhcO8dJKlFG1KSPImnXvsMqHHNK3H3hhDGoGQ8UQ=)
                          2: 38361A086DD311F08BB89272C4F9AE02.roa (hash: 2lrhUXtKBWBWGt7uGRm4aZdQcxwMjfeEEWsYi96Nx0s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91907D3/38FB215C6C5911F0A3884E7AC4F9AE02/1bTWxIC76WuryHIkhQJdTEX-x4o.crl
                          rsync://rpki.apnic.net/member_repository/A91907D3/38FB215C6C5911F0A3884E7AC4F9AE02/1bTWxIC76WuryHIkhQJdTEX-x4o.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1bTWxIC76WuryHIkhQJdTEX-x4o.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:57:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 137 (0x89)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91907D3, serialNumber=D5B4D6C480BBE96BABC8722485025D4C45FEC78A
        Validity
            Not Before: Mar 25 06:57:56 2026 GMT
            Not After : Apr  1 06:57:56 2026 GMT
        Subject: CN=69c38775-fc60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:90:ea:ae:78:d5:34:54:62:45:da:67:01:56:
                    fe:2a:dd:6c:f7:80:3b:f4:d1:62:ae:61:cb:66:04:
                    02:b8:a8:f8:a6:e8:ef:fc:6f:dc:e2:6d:b9:f8:8b:
                    21:96:02:4e:36:28:c1:a2:d5:f6:3b:66:b7:5c:e8:
                    b1:13:14:7f:38:be:8e:b7:ed:a1:b4:71:ef:8b:69:
                    b3:80:cb:e9:be:be:5e:7f:be:51:8f:6d:10:ab:c1:
                    37:78:c3:0a:14:b2:8b:f0:6a:70:8a:0b:4f:21:cf:
                    73:03:77:9b:40:c5:51:67:8a:0f:68:20:f6:1a:84:
                    70:98:71:1b:ce:81:8c:08:b8:2c:4c:63:15:f9:77:
                    a5:b5:a7:d1:ac:cb:ac:ba:0c:7c:73:d4:01:9c:b1:
                    91:53:6c:89:01:a3:7b:da:c7:42:52:42:2b:cf:79:
                    68:f8:1c:57:49:6d:13:29:34:92:8a:48:23:6b:e9:
                    2e:a9:91:e4:fb:b1:ff:95:1c:9d:d4:e9:d7:28:c7:
                    05:67:42:5e:09:22:92:8a:45:2f:0b:86:9a:bd:ca:
                    e1:f9:49:41:00:88:a8:a8:78:ba:3c:f6:57:5e:4e:
                    77:31:64:29:ef:18:06:17:a1:9a:46:a3:45:f5:f4:
                    72:50:ab:85:f2:1f:e3:4e:d7:8c:f3:2f:ab:18:c7:
                    84:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:65:61:87:8F:27:F0:02:51:3F:10:E3:79:9B:34:1A:68:5A:75:B6
            X509v3 Authority Key Identifier:
                keyid:D5:B4:D6:C4:80:BB:E9:6B:AB:C8:72:24:85:02:5D:4C:45:FE:C7:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91907D3/38FB215C6C5911F0A3884E7AC4F9AE02/1bTWxIC76WuryHIkhQJdTEX-x4o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1bTWxIC76WuryHIkhQJdTEX-x4o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91907D3/38FB215C6C5911F0A3884E7AC4F9AE02/1bTWxIC76WuryHIkhQJdTEX-x4o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:19:46:55:f1:60:47:c9:0c:91:9d:ae:41:af:12:1b:12:22:
         89:4e:c9:6f:30:29:37:e4:42:df:d7:93:65:2b:c3:d9:d5:42:
         41:85:66:f5:50:f1:e7:df:c5:03:15:47:c9:50:9c:3e:36:09:
         b0:e4:15:3f:f6:45:63:42:79:5d:29:d3:37:9b:74:af:54:c5:
         c6:34:95:c0:79:6e:b0:15:af:0a:b6:a1:8a:f1:89:b6:e6:be:
         81:f5:27:63:36:be:49:93:5a:07:e9:2e:e0:af:b2:0d:e5:5b:
         5a:82:95:1c:8c:fb:27:a0:ae:d7:27:1e:13:60:37:6f:e1:7a:
         a3:7b:31:0e:d8:d5:1e:30:cd:e5:06:93:b1:3c:e9:62:c6:d8:
         d2:bc:c3:03:09:cf:cc:1c:c1:46:be:53:ca:09:8a:b8:df:7d:
         cf:d8:f4:da:93:d2:f5:4a:6b:36:db:29:ac:3e:ca:c4:6f:e3:
         7c:5b:fc:7e:9c:37:84:32:96:06:92:7e:d5:91:b9:60:86:1e:
         93:3f:39:c1:84:57:85:5a:f7:9b:d0:69:fe:ea:29:98:68:48:
         33:2b:3e:46:a3:5d:5c:ee:eb:03:d3:45:00:f5:d0:b3:fb:34:
         31:da:d7:e6:29:2d:36:0a:07:18:f4:ec:4b:f4:cc:bb:6a:2c:
         38:e5:65:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:27:04 2026 by rpki-client