Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199B85/7D86A238C61511EEA718E338C4F9AE02/BaM29kbGgzeJtq58kgcrf5TZ3Ck.mft
File:                     BaM29kbGgzeJtq58kgcrf5TZ3Ck.mft (raw, json)
Hash identifier:          iIjPn88zob57WIHpNdFrvhT5yeTx4YW3F1NjTbZ0R40=
Subject key identifier:   E9:44:14:71:AE:E7:F0:ED:11:12:73:23:68:EF:A7:96:20:82:BF:25
Authority key identifier: 05:A3:36:F6:46:C6:83:37:89:B6:AE:7C:92:07:2B:7F:94:D9:DC:29
Certificate issuer:       /CN=A9199B85/serialNumber=05A336F646C6833789B6AE7C92072B7F94D9DC29
Certificate serial:       0190
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BaM29kbGgzeJtq58kgcrf5TZ3Ck.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199B85/7D86A238C61511EEA718E338C4F9AE02/BaM29kbGgzeJtq58kgcrf5TZ3Ck.mft
Manifest number:          0190
Signing time:             Wed 25 Mar 2026 00:37:33 +0000
Manifest this update:     Wed 25 Mar 2026 00:37:33 +0000
Manifest next update:     Wed 01 Apr 2026 00:37:33 +0000
Files and hashes:         1: BaM29kbGgzeJtq58kgcrf5TZ3Ck.crl (hash: hc5L80hnxogOraRqL2eXvXM6q6audIBXMHPb5jHyehI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199B85/7D86A238C61511EEA718E338C4F9AE02/BaM29kbGgzeJtq58kgcrf5TZ3Ck.crl
                          rsync://rpki.apnic.net/member_repository/A9199B85/7D86A238C61511EEA718E338C4F9AE02/BaM29kbGgzeJtq58kgcrf5TZ3Ck.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BaM29kbGgzeJtq58kgcrf5TZ3Ck.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 00:37:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 400 (0x190)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199B85, serialNumber=05A336F646C6833789B6AE7C92072B7F94D9DC29
        Validity
            Not Before: Mar 25 00:37:33 2026 GMT
            Not After : Apr  1 00:37:33 2026 GMT
        Subject: CN=69c32e4d-ecc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d8:07:fb:6c:57:43:a1:0a:28:5c:6c:cd:60:
                    28:36:9a:39:f4:f4:d0:f3:66:d2:17:b9:6f:40:cf:
                    f4:34:90:12:16:9c:6c:32:4e:9e:4e:4a:57:b7:cc:
                    55:3f:fb:65:a1:a7:c7:97:3f:db:de:f0:3f:f2:ce:
                    65:fb:9e:df:78:cc:71:b2:1b:b8:f7:68:8a:ae:f0:
                    c0:e6:20:33:32:31:e5:ca:fd:ff:e2:1c:50:22:49:
                    61:88:b2:d7:c6:b8:88:71:ca:bc:62:cf:a7:c1:3e:
                    19:b3:72:4b:05:a1:f7:eb:22:77:ee:d1:78:30:2e:
                    36:d4:f6:b3:35:0f:8f:f5:6f:4e:8d:ec:f3:7b:68:
                    d2:ef:d5:35:8c:70:93:d2:3c:57:cd:03:bc:a7:19:
                    3b:b7:64:c3:7c:24:a0:7d:16:7e:05:b9:04:44:53:
                    c3:58:3e:4a:a4:64:b4:80:10:f4:8d:09:fb:47:3f:
                    63:c2:b8:53:83:7b:df:07:ed:6a:22:5b:73:81:a5:
                    0a:a2:3a:22:59:36:9a:8c:61:b0:3b:8f:c5:3a:dc:
                    65:0f:b9:a5:0e:0f:6c:aa:ea:01:45:b7:c4:67:ee:
                    0c:02:8a:35:41:da:8c:32:ad:a9:65:88:bd:69:df:
                    9d:5f:82:d6:a6:d4:e6:8a:8d:cb:81:b3:08:7a:4f:
                    e6:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:44:14:71:AE:E7:F0:ED:11:12:73:23:68:EF:A7:96:20:82:BF:25
            X509v3 Authority Key Identifier:
                keyid:05:A3:36:F6:46:C6:83:37:89:B6:AE:7C:92:07:2B:7F:94:D9:DC:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199B85/7D86A238C61511EEA718E338C4F9AE02/BaM29kbGgzeJtq58kgcrf5TZ3Ck.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BaM29kbGgzeJtq58kgcrf5TZ3Ck.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199B85/7D86A238C61511EEA718E338C4F9AE02/BaM29kbGgzeJtq58kgcrf5TZ3Ck.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:a9:69:c6:9a:9c:e3:85:97:18:5e:54:a0:84:d0:4c:cc:d1:
         0f:5c:a7:c4:76:71:90:92:f9:e4:87:b4:49:c4:20:56:7d:c3:
         71:2f:ce:6e:f2:c2:23:a2:99:f6:27:7c:3f:fa:65:9a:99:62:
         56:b2:d9:b8:fd:32:c6:f3:4f:31:20:b1:92:aa:f6:9f:a7:c9:
         3d:a8:71:84:55:cf:43:6d:9e:d3:5f:6c:35:bb:1c:a7:54:43:
         be:d1:10:bb:28:9c:a9:92:f9:70:bb:89:51:3b:9a:7d:6a:0e:
         c7:c9:83:d4:36:0f:30:00:1a:82:4e:f8:4c:99:04:69:c2:d1:
         ca:15:75:9f:a4:f5:90:87:6d:d0:d7:0f:bc:1d:0c:ad:e0:04:
         ca:11:53:04:23:54:e7:40:9b:ff:f9:b9:34:12:e3:77:e9:e0:
         d2:7b:bd:db:32:86:07:e8:06:37:f1:a9:1a:34:f3:72:98:71:
         a2:4a:e4:75:a5:04:a9:8e:e2:32:fe:2b:32:98:d2:df:00:5b:
         4f:4b:cf:ae:2a:9f:4c:dc:f6:22:50:dc:e7:d2:02:6e:e9:50:
         ae:07:88:5b:b7:67:fa:76:2d:c6:3f:b7:96:09:60:42:ce:8d:
         1f:0a:05:e0:3b:a3:95:7f:b2:34:37:0b:41:a3:a5:77:ae:ea:
         43:2e:8a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:50:34 2026 by rpki-client