Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.mft
File:                     b5rATOWscafCt6-xpVcnoQ5bBu4.mft (raw, json)
Hash identifier:          XGeXFHUhxYTSOZJx176gekeHEddEw8jfuip68VPV2jQ=
Subject key identifier:   3D:D4:38:1F:30:A5:6A:4D:FF:7E:E6:13:B4:2C:D3:E8:84:7E:3C:C8
Authority key identifier: 6F:9A:C0:4C:E5:AC:71:A7:C2:B7:AF:B1:A5:57:27:A1:0E:5B:06:EE
Certificate issuer:       /CN=A91BD9C2/serialNumber=6F9AC04CE5AC71A7C2B7AFB1A55727A10E5B06EE
Certificate serial:       0BD8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5rATOWscafCt6-xpVcnoQ5bBu4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.mft
Manifest number:          0BCC
Signing time:             Tue 24 Mar 2026 18:44:41 +0000
Manifest this update:     Tue 24 Mar 2026 18:44:41 +0000
Manifest next update:     Tue 31 Mar 2026 18:44:41 +0000
Files and hashes:         1: b5rATOWscafCt6-xpVcnoQ5bBu4.crl (hash: DqO/lRgxs5NI9QbjxDdPzsxBBfN5gF+jcFs2fk/TkwE=)
                          2: 1A0B540E3AA711EA83682876C4F9AE02.roa (hash: j3+FqbIbEZA5ldhomHT9hdMFU4oqErbqw6qxTyWi9S0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.crl
                          rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5rATOWscafCt6-xpVcnoQ5bBu4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 18:44:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3032 (0xbd8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BD9C2, serialNumber=6F9AC04CE5AC71A7C2B7AFB1A55727A10E5B06EE
        Validity
            Not Before: Mar 24 18:44:41 2026 GMT
            Not After : Mar 31 18:44:41 2026 GMT
        Subject: CN=69c2db99-b0ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:60:70:ec:42:34:1f:64:bf:21:bc:45:46:58:
                    0f:98:d4:41:1c:e4:61:03:ae:ea:ea:83:f0:d6:ac:
                    6e:fe:6c:62:e8:dc:11:36:d7:3e:57:78:e8:5b:e0:
                    e3:9c:29:3c:9b:30:e6:12:8c:54:39:ec:42:0c:72:
                    8f:6a:7c:12:e9:69:29:ee:12:e4:4e:fb:e1:c1:0d:
                    f3:46:f1:89:eb:1b:39:77:fa:c2:d3:1c:aa:ab:77:
                    f4:29:1b:55:98:33:d0:a2:d2:19:2b:3a:cb:7a:37:
                    da:5c:63:bb:ff:fc:3d:cb:1c:cc:9f:b3:73:ab:5d:
                    c0:55:12:b3:8f:49:8e:02:4d:33:be:58:52:03:33:
                    5f:f5:c1:da:03:f2:0f:d5:9c:b1:d6:f8:46:19:66:
                    c1:4e:38:59:ad:c8:75:fe:e6:7e:a8:7b:53:12:54:
                    9f:14:b9:bd:35:3e:86:b5:68:4f:a0:fc:73:93:88:
                    dd:48:c7:58:5d:5b:6e:14:c1:d0:4d:3d:42:47:2b:
                    00:35:db:14:43:1b:44:a2:8a:e6:89:b9:80:be:30:
                    97:2f:fb:cd:eb:b4:b6:6b:07:03:fb:79:2d:1c:2e:
                    29:9e:49:34:0c:d1:3e:be:f6:8d:25:07:17:04:68:
                    b7:c1:b5:4f:19:c6:bd:84:52:d9:ef:45:64:5c:fa:
                    cc:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:D4:38:1F:30:A5:6A:4D:FF:7E:E6:13:B4:2C:D3:E8:84:7E:3C:C8
            X509v3 Authority Key Identifier:
                keyid:6F:9A:C0:4C:E5:AC:71:A7:C2:B7:AF:B1:A5:57:27:A1:0E:5B:06:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5rATOWscafCt6-xpVcnoQ5bBu4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:d9:92:08:48:06:4d:20:c1:fe:36:c9:a8:44:45:14:6c:92:
         90:f8:71:43:e7:19:03:1e:e1:ed:6b:1c:55:f9:48:1c:39:9a:
         a0:5a:17:8c:df:89:da:cb:ad:e3:82:18:c0:fd:e2:c6:d9:5a:
         7b:6a:ae:9d:01:2f:b8:3c:ee:62:db:05:95:16:62:4c:e0:09:
         6f:47:e3:68:74:43:09:5a:62:f8:c4:a7:41:c9:3f:ba:0f:3c:
         85:24:2f:2a:74:2b:8e:e4:8f:3e:0d:d2:5f:f1:00:bb:3b:3c:
         b5:ff:e1:85:4b:69:a0:8e:b2:c9:9a:51:c2:24:87:0c:bb:53:
         91:05:16:ab:43:5e:1b:2e:50:1b:9b:df:79:d2:2a:5f:a4:c7:
         d5:86:cb:98:7d:ad:50:42:08:51:2b:95:4b:c1:34:a1:77:a5:
         e2:d4:85:bb:06:ef:54:27:6d:83:7c:e1:6d:4a:17:a9:d5:4a:
         54:a2:c4:d9:6e:de:06:50:2a:c7:7e:22:3e:f9:df:ee:87:63:
         64:0d:96:39:4c:29:3d:03:79:b9:e2:1f:e7:b6:30:70:cc:31:
         03:79:05:90:c8:05:e7:4c:5e:bb:29:d1:2d:96:ab:33:4c:08:
         48:2f:dc:3a:a4:1b:e3:cf:c6:a8:63:36:b0:4b:25:3a:bb:4b:
         f0:60:fb:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:27:34 2026 by rpki-client