Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF74B/61A3384A782C11EBAC04F672C4F9AE02/BZ5vA652dqnQ8J1fbL25CGGFWlc.mft
File:                     BZ5vA652dqnQ8J1fbL25CGGFWlc.mft (raw, json)
Hash identifier:          GXOShNTaco5BcLgq35q3X6mEMnmXtNMl2CG5l4zLT3E=
Subject key identifier:   23:4D:6E:E8:48:5B:10:C2:8A:5F:97:74:DE:14:37:42:CD:2E:BD:2B
Authority key identifier: 05:9E:6F:03:AE:76:76:A9:D0:F0:9D:5F:6C:BD:B9:08:61:85:5A:57
Certificate issuer:       /CN=A91FF74B/serialNumber=059E6F03AE7676A9D0F09D5F6CBDB90861855A57
Certificate serial:       076F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BZ5vA652dqnQ8J1fbL25CGGFWlc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FF74B/61A3384A782C11EBAC04F672C4F9AE02/BZ5vA652dqnQ8J1fbL25CGGFWlc.mft
Manifest number:          0750
Signing time:             Thu 26 Mar 2026 21:14:16 +0000
Manifest this update:     Thu 26 Mar 2026 21:14:15 +0000
Manifest next update:     Thu 02 Apr 2026 21:14:15 +0000
Files and hashes:         1: BZ5vA652dqnQ8J1fbL25CGGFWlc.crl (hash: gYMygdr9/j89HOhbK1vnoj4liuPINjUdCwrN1WdMm1g=)
                          2: 7E0AB01C782C11EBB0B71971C4F9AE02.roa (hash: NnGURNoUAZdQU/G3kAMwVkQfb/MVBNx9fBriFhbULUk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FF74B/61A3384A782C11EBAC04F672C4F9AE02/BZ5vA652dqnQ8J1fbL25CGGFWlc.crl
                          rsync://rpki.apnic.net/member_repository/A91FF74B/61A3384A782C11EBAC04F672C4F9AE02/BZ5vA652dqnQ8J1fbL25CGGFWlc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BZ5vA652dqnQ8J1fbL25CGGFWlc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 19:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1903 (0x76f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FF74B, serialNumber=059E6F03AE7676A9D0F09D5F6CBDB90861855A57
        Validity
            Not Before: Mar 26 21:14:15 2026 GMT
            Not After : Apr  2 21:14:15 2026 GMT
        Subject: CN=69c5a1a7-c484
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:4b:b5:ef:b7:4b:5b:37:8e:7d:35:30:da:8c:
                    2b:6c:19:0b:81:81:31:fb:15:4f:a6:bc:0e:44:21:
                    04:b3:fb:94:d3:8e:67:14:7f:8f:9e:a7:cc:0f:c5:
                    cc:08:c7:55:20:ec:c0:63:68:b1:ee:13:5b:5e:ff:
                    5a:98:8e:55:88:e5:d6:41:e3:94:72:a1:f8:f4:79:
                    74:4d:2b:b5:26:2b:71:2f:d5:41:a6:39:ca:1f:c7:
                    97:7b:22:13:24:5a:93:70:cc:11:f4:6b:44:33:84:
                    fe:fa:3d:f4:f9:2f:4c:56:08:a4:74:ff:33:b2:63:
                    a6:d7:a7:ee:0a:40:7c:df:1c:46:4d:fb:d0:ea:7b:
                    92:0e:b6:c3:56:7c:39:1b:65:0b:c0:9c:87:fa:ff:
                    8a:80:cd:9c:fd:51:e3:ba:c8:19:47:c3:3d:d3:6f:
                    6b:11:a0:0d:9d:3b:0b:48:52:60:ed:c0:fb:8a:3f:
                    1f:6a:1c:8d:dd:5e:73:6f:44:ba:58:e3:df:6b:75:
                    ed:2b:50:79:96:94:6c:74:9f:93:0e:0f:e8:72:f1:
                    1f:ac:f0:16:0d:f5:37:99:61:2a:f4:49:56:71:40:
                    4f:70:9f:c4:79:7f:54:89:8b:9a:4f:c4:cf:39:f3:
                    bc:2c:08:f3:37:b4:48:d0:fe:53:c1:ab:4a:8e:82:
                    11:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:4D:6E:E8:48:5B:10:C2:8A:5F:97:74:DE:14:37:42:CD:2E:BD:2B
            X509v3 Authority Key Identifier:
                keyid:05:9E:6F:03:AE:76:76:A9:D0:F0:9D:5F:6C:BD:B9:08:61:85:5A:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FF74B/61A3384A782C11EBAC04F672C4F9AE02/BZ5vA652dqnQ8J1fbL25CGGFWlc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BZ5vA652dqnQ8J1fbL25CGGFWlc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF74B/61A3384A782C11EBAC04F672C4F9AE02/BZ5vA652dqnQ8J1fbL25CGGFWlc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:df:4e:5a:d9:67:0c:ba:2d:74:1b:be:91:f5:00:34:fd:95:
         bc:c5:5e:bc:bd:71:61:5b:68:08:83:4b:f7:54:a1:6c:85:4f:
         e9:a1:cf:42:82:7d:8d:80:6b:9f:31:14:e0:f5:fc:34:f1:1e:
         e3:fe:32:ae:f2:4e:b3:13:eb:14:dc:f3:13:24:15:99:cb:76:
         a2:d4:93:fe:ab:12:84:44:3f:ee:47:e0:9a:ad:89:1b:a4:ce:
         9c:3d:78:3d:ae:4d:e5:7a:ef:ec:df:a2:2b:3b:66:cd:63:a5:
         37:ff:d6:10:67:64:34:cf:7d:19:af:17:d3:8c:a9:85:f6:01:
         3a:f9:55:fb:cc:3a:21:c1:a9:9e:7a:2a:1b:36:5a:02:8f:02:
         98:0b:d0:55:31:67:8b:2f:17:cd:e7:3d:c7:31:f9:cb:48:55:
         79:bf:49:86:a7:96:9d:9b:4e:72:c8:3f:ef:7f:64:92:ac:8f:
         d3:57:73:a8:85:57:51:05:5c:41:4a:b9:95:7c:c9:25:b9:b0:
         44:05:45:06:a4:36:8f:23:68:31:ae:da:41:09:e6:ff:6f:8a:
         51:8f:75:0d:dd:76:11:4e:5b:5a:be:c9:c3:76:75:1b:d9:18:
         4c:22:e1:0f:d5:1e:87:68:f3:1e:ad:be:26:71:ea:12:04:b2:
         b3:32:7f:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:09:46 2026 by rpki-client