Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F63DC/043152E2665311EE9C68EE2BC4F9AE02/BmZq7NeMCl7RN5Cl6apAw0kPvPE.mft
File:                     BmZq7NeMCl7RN5Cl6apAw0kPvPE.mft (raw, json)
Hash identifier:          0Lky4TUN1nZLUlNwWxKKyP+uuKq1B5touT+eVIgqFfE=
Subject key identifier:   AB:3B:03:42:FF:B7:B6:29:72:58:D9:71:86:49:2E:58:D5:11:EE:CE
Authority key identifier: 06:66:6A:EC:D7:8C:0A:5E:D1:37:90:A5:E9:AA:40:C3:49:0F:BC:F1
Certificate issuer:       /CN=A91F63DC/serialNumber=06666AECD78C0A5ED13790A5E9AA40C3490FBCF1
Certificate serial:       01D1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BmZq7NeMCl7RN5Cl6apAw0kPvPE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F63DC/043152E2665311EE9C68EE2BC4F9AE02/BmZq7NeMCl7RN5Cl6apAw0kPvPE.mft
Manifest number:          01CF
Signing time:             Wed 25 Mar 2026 02:57:48 +0000
Manifest this update:     Wed 25 Mar 2026 02:57:48 +0000
Manifest next update:     Wed 01 Apr 2026 02:57:48 +0000
Files and hashes:         1: BmZq7NeMCl7RN5Cl6apAw0kPvPE.crl (hash: E9AtuIuRxydDTnrwwLuYIDN2dnm4cvv5WIN4muiJ4NU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F63DC/043152E2665311EE9C68EE2BC4F9AE02/BmZq7NeMCl7RN5Cl6apAw0kPvPE.crl
                          rsync://rpki.apnic.net/member_repository/A91F63DC/043152E2665311EE9C68EE2BC4F9AE02/BmZq7NeMCl7RN5Cl6apAw0kPvPE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BmZq7NeMCl7RN5Cl6apAw0kPvPE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 02:57:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 465 (0x1d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F63DC, serialNumber=06666AECD78C0A5ED13790A5E9AA40C3490FBCF1
        Validity
            Not Before: Mar 25 02:57:48 2026 GMT
            Not After : Apr  1 02:57:48 2026 GMT
        Subject: CN=69c34f2c-d7fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:70:c7:2a:ed:b3:f0:ab:d7:26:d4:2c:ec:8d:
                    c3:62:56:28:99:f7:7c:b3:0f:95:61:de:c8:67:86:
                    ae:8e:5f:2d:b6:f3:12:58:bc:9f:d4:e5:82:e5:1b:
                    4e:dd:66:19:80:d7:13:d6:5e:95:c7:6f:32:3a:f0:
                    db:de:07:0f:80:12:12:07:8d:f0:15:6e:8d:79:a1:
                    bb:5a:c6:9a:ad:65:01:3a:5d:2e:5f:0c:75:ca:ed:
                    f6:54:c2:4f:b0:07:2b:95:1e:b0:15:dd:b0:e7:08:
                    3a:e2:28:da:f6:fb:ce:9c:d3:15:f3:5a:66:48:c4:
                    9d:7f:6d:d4:ae:df:aa:7e:03:33:0b:b7:bc:c7:ad:
                    c1:a1:9d:a3:dc:91:35:09:72:01:16:32:a9:ab:55:
                    e4:36:8e:66:6a:db:30:d0:0d:d7:44:e4:76:5a:fb:
                    41:2a:71:ba:1b:41:14:32:4e:70:c8:ce:96:d4:0a:
                    50:0a:49:ac:0c:4f:09:50:d5:ca:b7:13:e8:a2:b6:
                    66:d2:a5:44:b3:a4:eb:10:3f:84:17:d6:6e:81:4f:
                    f3:e6:2e:70:d2:57:f1:91:a0:d6:79:14:76:d7:30:
                    3e:f8:74:10:c0:59:3d:3a:82:3c:83:dc:35:aa:d1:
                    58:42:a6:c3:31:d1:b3:d8:39:89:a6:58:c9:02:aa:
                    d9:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:3B:03:42:FF:B7:B6:29:72:58:D9:71:86:49:2E:58:D5:11:EE:CE
            X509v3 Authority Key Identifier:
                keyid:06:66:6A:EC:D7:8C:0A:5E:D1:37:90:A5:E9:AA:40:C3:49:0F:BC:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F63DC/043152E2665311EE9C68EE2BC4F9AE02/BmZq7NeMCl7RN5Cl6apAw0kPvPE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BmZq7NeMCl7RN5Cl6apAw0kPvPE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F63DC/043152E2665311EE9C68EE2BC4F9AE02/BmZq7NeMCl7RN5Cl6apAw0kPvPE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:bc:78:ff:02:fc:7a:c5:32:51:ef:4b:d3:1a:7e:19:9f:ba:
         0a:bb:f9:07:2e:aa:56:43:1a:4b:89:8b:e8:09:4b:dc:cf:18:
         c2:e8:57:20:ed:fb:6d:ae:82:9e:ad:8f:36:16:0d:b8:f3:89:
         56:a3:e0:fe:cf:d9:64:5b:58:1e:4c:32:aa:20:d9:1d:23:4d:
         90:2f:f1:35:81:3f:9a:03:67:14:52:9d:2f:53:31:04:1d:5b:
         78:0b:e5:2a:85:b2:5e:67:c9:ee:9d:b2:58:43:66:5d:b7:a4:
         f5:b0:14:2b:03:b2:dc:87:dd:1f:67:14:27:42:77:bc:82:a7:
         fa:90:5d:5c:a5:a0:8e:41:63:a8:6c:5c:0e:0b:e1:3c:4c:b5:
         79:60:6a:b5:04:5c:99:b2:5d:60:89:9e:b6:6c:47:d5:98:80:
         75:d9:90:36:4b:53:58:b3:98:19:8f:3c:9c:d2:8e:05:0b:61:
         66:ba:ec:fe:8a:26:5d:95:d6:fd:14:fc:05:08:f0:d9:e4:e7:
         5d:69:71:6e:bb:e5:5b:cc:83:f4:03:52:4a:0a:99:11:1a:ca:
         47:8a:43:1c:30:01:7a:cc:d4:57:05:d1:e2:61:93:93:65:c5:
         49:ab:2d:5b:db:75:8e:7e:fe:0c:9c:60:8c:cf:6f:a2:ff:3d:
         5f:73:85:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:16:21 2026 by rpki-client