Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8DD1/25DD59F8E1C911EEBE1F5068C4F9AE02/BtYseoQHbhxklAQGJYkZ1n0Vq-E.mft
File:                     BtYseoQHbhxklAQGJYkZ1n0Vq-E.mft (raw, json)
Hash identifier:          N3LxYj5rIz0LTVz7BQn6q7w99+sDBpdsRQHOd2m0Z5Y=
Subject key identifier:   27:4B:3B:57:59:89:2E:61:64:24:E5:9A:22:C1:BB:3F:03:EE:DB:97
Authority key identifier: 06:D6:2C:7A:84:07:6E:1C:64:94:04:06:25:89:19:D6:7D:15:AB:E1
Certificate issuer:       /CN=A91C8DD1/serialNumber=06D62C7A84076E1C64940406258919D67D15ABE1
Certificate serial:       019E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtYseoQHbhxklAQGJYkZ1n0Vq-E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C8DD1/25DD59F8E1C911EEBE1F5068C4F9AE02/BtYseoQHbhxklAQGJYkZ1n0Vq-E.mft
Manifest number:          0187
Signing time:             Wed 25 Mar 2026 03:52:10 +0000
Manifest this update:     Wed 25 Mar 2026 03:52:10 +0000
Manifest next update:     Wed 01 Apr 2026 03:52:10 +0000
Files and hashes:         1: BtYseoQHbhxklAQGJYkZ1n0Vq-E.crl (hash: Ow4Yk8QQwVC+EXF8AqVQNIUYx6DApnmkfhPuX3u2zfc=)
                          2: 81D7045C0F5511EFA55FC44EC4F9AE02.roa (hash: egVmZ2H94hu8vcvSceGyMVkrFhLT7V50En5me3B7hr0=)
                          3: 1484B210B52A11F0ADCFA344C4F9AE02.roa (hash: MKjBFfIwwsUZhOrEicgK8GPN5QBvwjACpzMNiRXDLMI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C8DD1/25DD59F8E1C911EEBE1F5068C4F9AE02/BtYseoQHbhxklAQGJYkZ1n0Vq-E.crl
                          rsync://rpki.apnic.net/member_repository/A91C8DD1/25DD59F8E1C911EEBE1F5068C4F9AE02/BtYseoQHbhxklAQGJYkZ1n0Vq-E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtYseoQHbhxklAQGJYkZ1n0Vq-E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:52:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 414 (0x19e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C8DD1, serialNumber=06D62C7A84076E1C64940406258919D67D15ABE1
        Validity
            Not Before: Mar 25 03:52:10 2026 GMT
            Not After : Apr  1 03:52:10 2026 GMT
        Subject: CN=69c35bea-41f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:fa:ff:57:7b:ea:1b:e9:8d:50:4e:ba:ad:6e:
                    e7:26:4c:cc:1b:6e:93:c8:e8:e6:d3:07:c4:c4:52:
                    1d:6f:f6:b8:32:ce:bc:13:66:c0:d3:af:83:00:ce:
                    c7:03:61:a3:4a:a8:a8:fd:c1:20:48:55:fa:54:82:
                    e3:81:03:6f:a6:b6:c1:27:d5:86:5b:2a:b8:89:f6:
                    c1:34:70:cf:c2:98:87:7c:79:f0:46:d9:b7:0c:74:
                    0b:ac:08:ae:0d:d5:42:6e:11:bd:56:c8:1c:ea:d0:
                    81:1e:32:fe:ce:97:33:1e:f7:45:10:33:21:83:c7:
                    15:39:35:6c:cf:70:60:3a:fb:99:81:4f:1e:85:66:
                    5d:d5:ed:e4:71:10:ca:22:67:18:76:a4:6f:eb:ec:
                    d0:df:77:9a:fe:a4:2a:11:3d:f7:37:76:48:e8:93:
                    be:a4:f1:26:2c:5c:32:db:2b:92:04:a2:e2:23:14:
                    0c:e8:3f:de:3e:9b:e5:95:af:b1:65:24:94:c1:5e:
                    f9:8c:0c:d9:05:93:c1:59:71:ba:d6:9e:b4:02:df:
                    ec:1d:a9:40:24:33:ef:b8:70:a6:67:6a:1b:88:13:
                    ee:9b:1a:8a:f3:45:8c:a0:14:52:93:26:83:9c:48:
                    02:0d:4c:0d:72:a7:98:b0:e9:a5:bc:d5:dd:f7:66:
                    f6:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:4B:3B:57:59:89:2E:61:64:24:E5:9A:22:C1:BB:3F:03:EE:DB:97
            X509v3 Authority Key Identifier:
                keyid:06:D6:2C:7A:84:07:6E:1C:64:94:04:06:25:89:19:D6:7D:15:AB:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C8DD1/25DD59F8E1C911EEBE1F5068C4F9AE02/BtYseoQHbhxklAQGJYkZ1n0Vq-E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtYseoQHbhxklAQGJYkZ1n0Vq-E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8DD1/25DD59F8E1C911EEBE1F5068C4F9AE02/BtYseoQHbhxklAQGJYkZ1n0Vq-E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:64:58:00:f4:b3:f7:30:08:5c:ad:95:ba:2a:52:bf:93:3d:
         f2:79:b8:2d:6c:e9:be:4d:87:e4:57:45:13:0e:71:47:36:6e:
         0f:64:9f:4b:30:9e:73:dc:e6:3a:73:d2:ab:2e:ee:f4:7c:8b:
         17:1d:32:74:49:78:ff:56:14:9f:ae:1e:a5:df:af:3d:9a:48:
         c4:39:3c:5d:b0:97:65:ca:5a:52:7e:07:fe:d1:cd:07:6c:d4:
         68:da:ee:bb:ad:a1:07:a6:dc:f1:6d:62:78:85:b7:db:ae:31:
         11:72:a5:9c:10:9c:4c:42:6b:f2:13:2b:53:02:d5:e9:f3:f2:
         67:fd:5a:54:94:78:9f:bb:3f:93:86:42:09:8c:ea:e3:36:cb:
         26:c9:b0:03:ba:ff:0d:68:cd:3c:7e:15:03:60:4d:d3:58:c0:
         b0:15:00:bf:3c:34:df:a9:b8:c1:e7:c6:cb:e2:95:7b:3f:26:
         2d:c1:f9:52:23:60:eb:4b:91:5d:45:8a:24:a7:e4:cd:bd:a7:
         d8:47:b6:91:58:e5:6d:da:85:cc:b4:5f:64:e0:ca:7f:56:3e:
         7e:6d:3c:5c:4e:c7:b4:9f:49:d6:8f:58:e1:11:63:d7:54:6f:
         bc:4b:6b:36:d8:67:df:96:e5:db:53:0d:44:41:7b:e0:db:08:
         12:c5:e7:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:45:52 2026 by rpki-client