Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC84C/F35B305EBF3111EEA79C8E3DC4F9AE02/bCTOJGStN3HjLDMIGNG32gFMaQk.mft
File:                     bCTOJGStN3HjLDMIGNG32gFMaQk.mft (raw, json)
Hash identifier:          +Dmc7BQJpMIwi/r0sAs/uINBrd1yXHyZ6xuPfk9WowU=
Subject key identifier:   27:64:DB:C1:65:67:28:95:71:0C:D8:5E:C3:75:25:DD:1F:79:AD:43
Authority key identifier: 6C:24:CE:24:64:AD:37:71:E3:2C:33:08:18:D1:B7:DA:01:4C:69:09
Certificate issuer:       /CN=A91DC84C/serialNumber=6C24CE2464AD3771E32C330818D1B7DA014C6909
Certificate serial:       0196
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bCTOJGStN3HjLDMIGNG32gFMaQk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC84C/F35B305EBF3111EEA79C8E3DC4F9AE02/bCTOJGStN3HjLDMIGNG32gFMaQk.mft
Manifest number:          0196
Signing time:             Fri 27 Mar 2026 03:48:56 +0000
Manifest this update:     Fri 27 Mar 2026 03:48:56 +0000
Manifest next update:     Fri 03 Apr 2026 03:48:56 +0000
Files and hashes:         1: bCTOJGStN3HjLDMIGNG32gFMaQk.crl (hash: T638uue16zpRvzHz8e8z/a2w17Uz5SfCqhQ+cGiU/i8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC84C/F35B305EBF3111EEA79C8E3DC4F9AE02/bCTOJGStN3HjLDMIGNG32gFMaQk.crl
                          rsync://rpki.apnic.net/member_repository/A91DC84C/F35B305EBF3111EEA79C8E3DC4F9AE02/bCTOJGStN3HjLDMIGNG32gFMaQk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bCTOJGStN3HjLDMIGNG32gFMaQk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 03:48:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 406 (0x196)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC84C, serialNumber=6C24CE2464AD3771E32C330818D1B7DA014C6909
        Validity
            Not Before: Mar 27 03:48:56 2026 GMT
            Not After : Apr  3 03:48:56 2026 GMT
        Subject: CN=69c5fe28-9195
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:95:3a:43:e3:72:d0:c6:d7:93:8f:58:06:2c:
                    08:5e:8b:01:ef:fc:87:4a:be:04:e3:28:ef:7f:2b:
                    8a:f1:4a:20:a4:b3:97:b7:59:89:2d:18:6f:db:12:
                    88:69:68:f1:98:10:d4:eb:40:56:53:e9:b9:88:d4:
                    2c:34:51:ad:e9:e2:41:01:c6:40:5a:31:8f:f9:0a:
                    be:cd:0d:1f:e9:ca:eb:97:17:ca:a7:d7:be:58:dc:
                    11:93:6c:29:44:68:2f:35:2b:b1:65:79:61:4a:f4:
                    82:cd:f7:35:6d:d0:3f:35:75:10:1d:55:44:10:9f:
                    ed:f9:3b:cc:bb:06:0a:9d:55:f2:52:59:4a:61:56:
                    4d:bf:5c:ba:96:94:38:43:01:f2:20:20:97:e7:36:
                    d0:f7:0a:07:ff:bd:50:ac:02:d8:27:18:7c:ab:4f:
                    fc:2b:3e:a6:a4:ac:90:c1:88:d2:30:a7:fd:24:9a:
                    4e:4f:1b:c2:47:20:99:be:92:da:55:8b:0b:41:64:
                    a2:36:72:14:85:30:14:7a:de:3c:7b:ea:40:12:5a:
                    9a:1a:b5:19:7d:e1:f6:b6:b0:05:8d:15:b9:73:fe:
                    e9:aa:46:86:70:cd:86:b8:b0:4e:c1:c9:1c:17:50:
                    93:1a:ca:55:37:b2:9d:5b:bb:9d:06:91:e4:4c:80:
                    b5:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:64:DB:C1:65:67:28:95:71:0C:D8:5E:C3:75:25:DD:1F:79:AD:43
            X509v3 Authority Key Identifier:
                keyid:6C:24:CE:24:64:AD:37:71:E3:2C:33:08:18:D1:B7:DA:01:4C:69:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC84C/F35B305EBF3111EEA79C8E3DC4F9AE02/bCTOJGStN3HjLDMIGNG32gFMaQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bCTOJGStN3HjLDMIGNG32gFMaQk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC84C/F35B305EBF3111EEA79C8E3DC4F9AE02/bCTOJGStN3HjLDMIGNG32gFMaQk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:c0:22:f8:52:b0:db:3b:2d:c4:ae:56:8a:52:7e:6b:ce:d0:
         08:ca:c4:fa:66:bb:f0:0f:db:a1:a5:6b:f4:9a:da:e2:c2:c7:
         b1:7d:b1:b4:9d:14:7a:57:ce:bf:9d:c9:ed:c0:ed:53:61:b1:
         18:1c:0b:6e:73:e4:55:06:52:88:6c:b6:b9:1e:28:5b:96:41:
         c2:f3:7f:16:68:9e:1c:da:1b:74:06:d4:33:89:34:e1:5e:d9:
         ac:e7:77:74:85:f7:84:3d:5a:09:95:1c:18:c4:2b:e4:7a:8f:
         14:90:2d:0d:5f:83:e8:ef:1b:37:b4:f4:fc:e1:71:0d:f7:cf:
         cb:f2:3f:cd:23:47:7c:33:98:91:5d:c9:76:73:37:a6:a4:50:
         54:54:d5:93:89:3d:bf:57:6c:38:07:34:c8:28:ac:ce:7a:ed:
         a6:ac:a3:ba:78:82:f7:80:cd:06:75:71:63:cb:72:23:37:d8:
         6d:03:d4:c4:62:4f:68:a4:a0:55:1b:d2:80:09:b8:3c:2b:36:
         48:cc:94:aa:32:d5:0e:88:09:45:fd:2d:79:a2:c8:23:5d:95:
         f7:9a:48:12:d1:c6:1e:27:c0:93:04:22:62:c3:6c:3b:3e:ab:
         79:cf:7a:09:73:64:da:35:55:f8:b9:41:6f:0b:00:be:5e:f4:
         f6:22:38:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:46:51 2026 by rpki-client