Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.mft
File:                     9_BjaTmdmTX1-1n9WFcVQaWBzGM.mft (raw, json)
Hash identifier:          Jqg9Z0O5a6Xvm7vO77Q4aDgxIRT+FYxW0slEM6nfO8g=
Subject key identifier:   81:E0:B2:D3:7D:18:E4:B2:03:C5:E3:B7:0B:FF:FA:94:98:59:99:32
Authority key identifier: F7:F0:63:69:39:9D:99:35:F5:FB:59:FD:58:57:15:41:A5:81:CC:63
Certificate issuer:       /CN=A91E57A9/serialNumber=F7F06369399D9935F5FB59FD58571541A581CC63
Certificate serial:       0159
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9_BjaTmdmTX1-1n9WFcVQaWBzGM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.mft
Manifest number:          0154
Signing time:             Wed 25 Mar 2026 04:17:44 +0000
Manifest this update:     Wed 25 Mar 2026 04:17:43 +0000
Manifest next update:     Wed 01 Apr 2026 04:17:43 +0000
Files and hashes:         1: 9_BjaTmdmTX1-1n9WFcVQaWBzGM.crl (hash: FXRj3H8V+kqNk2gcSnS5hKJYCfr/tFHBOPxpuiidUxA=)
                          2: F6668BF41FF311EFB0A97A82C4F9AE02.roa (hash: eZb19K4Y/DQ/sNU4ZXv4s8zJTek1JXBNOEh4fBR+KDU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.crl
                          rsync://rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9_BjaTmdmTX1-1n9WFcVQaWBzGM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:17:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 345 (0x159)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E57A9, serialNumber=F7F06369399D9935F5FB59FD58571541A581CC63
        Validity
            Not Before: Mar 25 04:17:43 2026 GMT
            Not After : Apr  1 04:17:43 2026 GMT
        Subject: CN=69c361e8-410f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:aa:60:13:ec:84:3b:cf:96:a5:2e:c3:67:b0:
                    c0:e4:16:7a:fa:12:84:53:37:67:0c:b1:25:10:57:
                    f9:ca:35:26:1c:e5:06:ee:3f:dd:4d:d6:98:6c:51:
                    62:25:b7:7f:55:5a:2b:ba:03:f0:2c:c5:56:f0:ed:
                    73:86:d7:5a:40:b6:94:25:4c:ca:09:91:03:b0:02:
                    80:b5:f2:fe:33:80:35:c1:ae:69:e2:0e:f8:0b:73:
                    04:89:88:5a:2a:c7:f8:b3:73:72:b6:fc:c2:15:35:
                    9b:20:87:ce:78:32:4a:aa:9b:e9:3a:99:c2:3f:7c:
                    a4:d8:9c:a5:53:76:24:b4:bd:ab:49:8f:76:43:ee:
                    49:72:92:a0:fc:51:04:e4:1f:06:70:b7:bd:d0:4c:
                    ff:49:6b:ec:25:6b:9a:3a:2d:c9:a8:cc:43:be:0d:
                    e6:22:c4:d3:9c:cf:55:7e:f5:71:ef:fc:47:79:c0:
                    b8:1c:5a:7a:08:b8:42:17:8a:de:6e:aa:4a:1f:bb:
                    b3:73:c7:57:4a:a2:6a:aa:0f:02:a7:81:57:57:43:
                    a3:99:c9:7d:c0:ef:a1:9a:a9:f1:68:5e:3c:1a:da:
                    05:61:1b:fd:24:61:0b:17:7c:5d:ff:a5:6c:99:c5:
                    fd:1e:d3:39:29:a5:5e:f0:69:86:c9:c2:9b:00:99:
                    3e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:E0:B2:D3:7D:18:E4:B2:03:C5:E3:B7:0B:FF:FA:94:98:59:99:32
            X509v3 Authority Key Identifier:
                keyid:F7:F0:63:69:39:9D:99:35:F5:FB:59:FD:58:57:15:41:A5:81:CC:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9_BjaTmdmTX1-1n9WFcVQaWBzGM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:62:55:21:31:48:ed:bc:31:38:d1:24:1c:b1:01:ff:7f:46:
         1d:db:43:3c:fa:b6:f6:35:f6:c7:17:30:08:b1:fb:c0:e6:65:
         1c:bb:7f:6f:3f:71:31:01:f3:4a:7f:19:b4:a5:34:b0:ef:bc:
         cd:dc:e3:64:3f:16:59:4e:78:3f:39:19:5a:2c:c3:d6:8f:12:
         d0:53:88:6d:57:b8:41:ea:97:d0:68:5a:ed:ef:3d:f8:2b:bd:
         a6:00:91:64:7d:79:a8:7d:d6:34:45:0f:e4:01:ae:ce:27:19:
         d5:6c:0b:a3:ac:42:d2:c5:45:27:48:a5:0b:02:34:c0:61:66:
         e7:de:7c:e5:6e:54:08:11:3a:46:bd:93:00:22:e4:2a:57:8d:
         19:5b:13:9c:63:84:93:a6:65:89:3a:a8:08:19:2e:bb:30:17:
         fe:4e:73:1a:3c:c7:9b:df:fc:bb:08:a1:93:33:a7:ac:09:73:
         a1:b9:8d:fb:6b:6f:90:29:88:ef:60:20:32:e2:dc:ba:7f:77:
         83:72:2e:46:0f:8f:67:ca:2b:e8:4a:ca:00:3c:59:02:62:4c:
         66:35:80:37:1e:cf:79:8d:a3:4d:9e:6c:85:f8:43:2c:20:3f:
         95:cb:af:14:0b:8a:b2:1a:62:5d:cd:c5:68:63:7d:e2:b8:f7:
         2b:f9:ac:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:56:47 2026 by rpki-client