Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.mft
File:                     bpJrzmGeT1AKv6Qk_bB2TSWMq1M.mft (raw, json)
Hash identifier:          0v2j2n2TpUR5Ne7ci4dykUE9SY9xLfFisFodjnPxzwg=
Subject key identifier:   7E:15:FE:B5:46:61:CD:52:52:54:C2:2D:03:B0:2F:15:7C:22:A5:1B
Authority key identifier: 6E:92:6B:CE:61:9E:4F:50:0A:BF:A4:24:FD:B0:76:4D:25:8C:AB:53
Certificate issuer:       /CN=A91A91A2/serialNumber=6E926BCE619E4F500ABFA424FDB0764D258CAB53
Certificate serial:       0A94
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.mft
Manifest number:          0A88
Signing time:             Thu 26 Mar 2026 19:27:42 +0000
Manifest this update:     Thu 26 Mar 2026 19:27:41 +0000
Manifest next update:     Thu 02 Apr 2026 19:27:41 +0000
Files and hashes:         1: bpJrzmGeT1AKv6Qk_bB2TSWMq1M.crl (hash: DUMw1a/gbDoboLqazIZZt0HLfAlJqnlnVCcFtAmwl+E=)
                          2: 10238C387B1411EA8C690465C4F9AE02.roa (hash: m5UdZTMNwaZFwTDBoDRDyeRLNEDiCfRGSGKD+SqgFdU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.crl
                          rsync://rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 19:27:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2708 (0xa94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A91A2, serialNumber=6E926BCE619E4F500ABFA424FDB0764D258CAB53
        Validity
            Not Before: Mar 26 19:27:41 2026 GMT
            Not After : Apr  2 19:27:41 2026 GMT
        Subject: CN=69c588ae-535d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:34:49:17:d5:2f:e1:2b:68:0f:67:b4:0d:8b:
                    7b:b5:c8:ba:46:16:7b:a5:97:0c:23:ed:72:a5:4e:
                    27:8a:5d:a4:98:68:4e:4d:58:de:82:bb:3f:e9:9e:
                    76:29:26:05:6d:1e:9f:74:e7:0b:17:9d:ef:5b:f3:
                    29:1e:d7:0e:9c:a8:c4:6c:f9:bd:6d:4b:f4:70:2c:
                    cc:2c:73:bb:c9:08:42:30:0e:e3:af:f6:44:3f:a9:
                    6d:0b:37:02:9e:7e:b4:93:65:f9:49:c1:63:7e:fb:
                    47:82:6f:08:a8:2c:68:74:a9:33:c6:55:ec:73:df:
                    35:b9:5a:40:e4:33:11:25:6b:dd:7b:80:be:c3:a6:
                    61:17:21:90:01:0a:1a:c9:e3:2f:6b:e1:52:78:3c:
                    44:8a:81:06:f1:1c:30:d5:ea:7f:f5:ad:1e:91:1c:
                    a4:0b:f0:98:25:cc:9a:40:be:24:51:87:19:cc:cb:
                    0e:ef:b9:f3:6e:22:54:09:ec:fd:41:b3:f2:90:42:
                    bd:7b:e6:f8:8c:e1:c7:71:36:2f:39:6b:3b:d6:0a:
                    64:36:33:f0:4c:72:40:59:14:05:49:f7:6f:c0:51:
                    6e:65:aa:8e:7d:62:f2:b9:14:cb:b5:d0:1e:d9:fe:
                    c8:0b:58:8a:1b:ba:e0:84:19:a9:d5:3e:4c:83:8c:
                    10:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:15:FE:B5:46:61:CD:52:52:54:C2:2D:03:B0:2F:15:7C:22:A5:1B
            X509v3 Authority Key Identifier:
                keyid:6E:92:6B:CE:61:9E:4F:50:0A:BF:A4:24:FD:B0:76:4D:25:8C:AB:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:d0:92:19:d1:39:cb:fa:eb:3d:9f:8b:cb:60:db:97:98:b0:
         5d:bd:71:05:bc:e1:2b:63:cc:bf:98:d3:05:6a:2d:38:fc:4d:
         03:6c:6e:6e:dc:bc:50:ce:87:b1:fa:6e:30:80:c2:37:8f:ca:
         82:c4:06:17:17:d1:db:5b:fc:4b:ea:46:a1:e4:78:03:1e:7a:
         cc:e4:39:6b:e4:d1:d3:92:e2:ca:a2:68:07:0e:4d:fa:fb:22:
         e3:68:dd:59:eb:b7:9f:a8:22:42:cc:0e:46:84:9c:70:f5:dc:
         ab:2f:23:5f:d2:fa:1d:d7:6c:67:28:18:f3:cf:69:ef:dd:79:
         c3:b3:12:27:b6:eb:e3:53:24:3b:1b:d6:58:9b:39:40:4c:d8:
         ca:48:a1:8d:eb:40:0d:94:2d:88:18:d7:26:29:ba:c7:02:72:
         a6:7c:bb:07:0d:67:e7:b9:5e:f3:d1:d5:1f:48:0e:03:4c:ba:
         0f:99:dc:4c:d1:12:17:29:4b:f6:1a:5a:8a:c1:d9:af:4c:93:
         63:53:f8:b2:4d:7c:81:f1:82:22:cc:13:28:2e:1e:39:8b:8a:
         84:9b:45:93:f2:9a:15:85:d4:ee:41:00:12:93:85:3e:b3:23:
         8c:14:df:51:0f:29:61:01:09:39:ce:57:c1:41:28:03:e3:b2:
         61:73:81:f1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCpQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTkxQTIxMTAvBgNVBAUTKDZFOTI2QkNFNjE5RTRGNTAwQUJGQTQyNEZEQjA3NjRE
MjU4Q0FCNTMwHhcNMjYwMzI2MTkyNzQxWhcNMjYwNDAyMTkyNzQxWjAYMRYwFAYD
VQQDEw02OWM1ODhhZS01MzVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlDRJF9Uv4StoD2e0DYt7tci6RhZ7pZcMI+1ypU4nil2kmGhOTVjegrs/6Z52
KSYFbR6fdOcLF53vW/MpHtcOnKjEbPm9bUv0cCzMLHO7yQhCMA7jr/ZEP6ltCzcC
nn60k2X5ScFjfvtHgm8IqCxodKkzxlXsc981uVpA5DMRJWvde4C+w6ZhFyGQAQoa
yeMva+FSeDxEioEG8Rww1ep/9a0ekRykC/CYJcyaQL4kUYcZzMsO77nzbiJUCez9
QbPykEK9e+b4jOHHcTYvOWs71gpkNjPwTHJAWRQFSfdvwFFuZaqOfWLyuRTLtdAe
2f7IC1iKG7rghBmp1T5Mg4wQTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH4V/rVG
Yc1SUlTCLQOwLxV8IqUbMB8GA1UdIwQYMBaAFG6Sa85hnk9QCr+kJP2wdk0ljKtT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTFBMi84OTcxMzA5QzdC
MTIxMUVBQTkyMTBGNjBDNEY5QUUwMi9icEpyem1HZVQxQUt2NlFrX2JCMlRTV01x
MU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JwSnJ6bUdlVDFBS3Y2UWtfYkIyVFNXTXExTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
OTFBMi84OTcxMzA5QzdCMTIxMUVBQTkyMTBGNjBDNEY5QUUwMi9icEpyem1HZVQx
QUt2NlFrX2JCMlRTV01xMU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASdCSGdE5y/rrPZ+Ly2Dbl5iwXb1xBbzhK2PMv5jTBWotOPxNA2xubty8UM6H
sfpuMIDCN4/KgsQGFxfR21v8S+pGoeR4Ax56zOQ5a+TR05LiyqJoBw5N+vsi42jd
Weu3n6giQswORoSccPXcqy8jX9L6HddsZygY889p7915w7MSJ7br41MkOxvWWJs5
QEzYykihjetADZQtiBjXJim6xwJypny7Bw1n57le89HVH0gOA0y6D5ncTNESFylL
9hpaisHZr0yTY1P4sk18gfGCIswTKC4eOYuKhJtFk/KaFYXU7kEAEpOFPrMjjBTf
UQ8pYQEJOc5XwUEoA+OyYXOB8Q==
-----END CERTIFICATE-----
Generated at Sat Mar 28 11:47:39 2026 by rpki-client