Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.mft
File:                     bb1cTQEh_LMY54xFG29WcyCYYAI.mft (raw, json)
Hash identifier:          496hEkOJtWU1rUoGFaYc4yHL4kgiWEZwXVKk4v5wREI=
Subject key identifier:   83:8E:7D:50:1C:1D:E4:2A:AB:25:62:DB:44:0F:B3:B5:D3:02:15:BA
Authority key identifier: 6D:BD:5C:4D:01:21:FC:B3:18:E7:8C:45:1B:6F:56:73:20:98:60:02
Certificate issuer:       /CN=A91D1216/serialNumber=6DBD5C4D0121FCB318E78C451B6F567320986002
Certificate serial:       0465
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bb1cTQEh_LMY54xFG29WcyCYYAI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.mft
Manifest number:          0425
Signing time:             Wed 25 Mar 2026 00:10:27 +0000
Manifest this update:     Wed 25 Mar 2026 00:10:26 +0000
Manifest next update:     Wed 01 Apr 2026 00:10:26 +0000
Files and hashes:         1: bb1cTQEh_LMY54xFG29WcyCYYAI.crl (hash: IGZi1taL1ZuGbSRAhwkj1ng65Wg7zhoJ6r2AL4iuaDA=)
                          2: 943D15902D1011EFBBEBA67BC4F9AE02.roa (hash: dPxIUNEqYuFtJskM6HAN9FGSFnQOEAtn06dnZBLnvG8=)
                          3: AEE9F9E6326011ED9031BC4FC4F9AE02.roa (hash: r+lrx7WpAI1BilPAcnEksEUaCu2KnCEQLhymAPB2i1s=)
                          4: AD17704445F611EE97DF317CC4F9AE02.roa (hash: /vhmP+Y6Yb84j9vhzg0Zbk6HCi7aZS+Km8vmqSzsrmM=)
                          5: 9B0C244C73B611EEB18A0385C4F9AE02.roa (hash: tBey+DH64+Kn32UVWimcmMh2WoGFqT18gD06i2GEZsU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.crl
                          rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bb1cTQEh_LMY54xFG29WcyCYYAI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 00:10:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1125 (0x465)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D1216, serialNumber=6DBD5C4D0121FCB318E78C451B6F567320986002
        Validity
            Not Before: Mar 25 00:10:26 2026 GMT
            Not After : Apr  1 00:10:26 2026 GMT
        Subject: CN=69c327f3-1192
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:9b:c1:04:7f:a0:70:18:96:65:e8:09:a1:6d:
                    2b:58:89:33:02:5f:ba:a2:23:0b:2d:3d:7e:03:33:
                    75:c0:28:1a:ec:75:46:15:8d:17:ba:66:b8:22:3f:
                    3e:9e:b7:44:56:40:f4:b7:c4:37:85:c2:21:0f:a9:
                    91:71:71:09:3b:a5:71:76:f3:55:3b:1f:11:c3:6d:
                    02:46:75:e9:8a:71:17:47:2a:da:6d:3e:00:bc:ee:
                    41:c9:23:6c:e7:03:72:60:3b:51:31:23:85:cd:1d:
                    d4:09:ad:aa:56:90:6d:d0:7c:16:39:28:ce:af:76:
                    3b:34:85:86:91:0f:6b:14:28:1b:de:35:c9:88:e0:
                    52:bc:08:9f:39:b9:b0:1e:bf:4a:25:f8:19:64:95:
                    98:cd:a6:e2:93:9b:d4:09:92:b6:03:98:ef:b1:18:
                    f0:32:10:66:8c:ab:2a:b7:b3:0e:57:d5:1b:5f:8d:
                    ce:9a:96:2f:88:60:2d:38:a1:6b:5a:a3:c7:e9:ee:
                    2b:6e:3c:86:1a:25:74:7d:db:5c:09:40:6a:90:7b:
                    76:66:31:65:3b:a1:7e:f1:4a:6d:2e:ba:08:18:14:
                    31:09:60:bc:1c:5f:6c:2f:fd:bc:96:a3:bc:e4:5c:
                    44:20:e3:34:16:a3:c2:85:2d:a4:83:68:8e:7b:a1:
                    e2:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:8E:7D:50:1C:1D:E4:2A:AB:25:62:DB:44:0F:B3:B5:D3:02:15:BA
            X509v3 Authority Key Identifier:
                keyid:6D:BD:5C:4D:01:21:FC:B3:18:E7:8C:45:1B:6F:56:73:20:98:60:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bb1cTQEh_LMY54xFG29WcyCYYAI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:27:fe:b6:47:f5:e8:7e:82:3c:a7:82:71:06:9e:58:7b:15:
         6a:a6:7b:4f:28:b7:0f:38:66:a6:8c:25:79:86:9c:0b:2d:43:
         32:35:e6:d0:12:4a:55:2b:73:4f:3d:19:62:32:31:92:77:11:
         07:08:d8:ca:6e:7c:88:94:fe:25:49:c6:1e:91:50:92:52:ed:
         d3:4f:b5:fd:09:03:b1:90:e5:70:8d:eb:b4:a7:ab:ca:a7:21:
         bc:32:0b:db:03:07:53:ef:e5:4a:8f:bc:12:49:2e:24:9e:09:
         b8:fc:78:d6:be:87:07:ba:43:a5:b3:54:8f:7e:25:78:8b:41:
         94:8f:8d:40:16:39:52:87:cb:2b:97:96:1b:1a:e0:3c:c7:8e:
         09:bb:85:8a:f0:dd:d3:6d:2f:db:cc:81:bb:1e:db:65:44:df:
         80:5a:1d:3e:c3:b9:54:fd:79:54:a9:89:86:0d:8a:64:83:00:
         2e:19:cd:3c:f9:73:58:f4:d8:8b:6c:33:c4:4c:c1:10:b7:df:
         1a:3a:43:63:2d:1f:5f:66:bd:8c:b2:7d:98:01:ea:cc:1c:85:
         9a:56:a6:ae:b1:e2:6b:c2:3a:42:15:39:78:9e:f4:69:66:65:
         83:8a:e1:c6:c1:97:e6:c7:3c:c0:f2:5a:28:ac:08:2f:c8:d7:
         c8:ab:c1:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:39:54 2026 by rpki-client