Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912B751/72D7D8B4FDD711EC90CAEF4CC4F9AE02/6BH2N9bdhj5cdPMuKbziePqyWPc.mft
File:                     6BH2N9bdhj5cdPMuKbziePqyWPc.mft (raw, json)
Hash identifier:          c/k6SPYIu2GPUXTlSvoldmQI5ao4yeGGiencUQPr3Yw=
Subject key identifier:   55:0E:E5:BA:90:84:10:8C:64:6E:08:AF:42:74:22:C6:87:59:8C:41
Authority key identifier: E8:11:F6:37:D6:DD:86:3E:5C:74:F3:2E:29:BC:E2:78:FA:B2:58:F7
Certificate issuer:       /CN=A912B751/serialNumber=E811F637D6DD863E5C74F32E29BCE278FAB258F7
Certificate serial:       0338
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6BH2N9bdhj5cdPMuKbziePqyWPc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B751/72D7D8B4FDD711EC90CAEF4CC4F9AE02/6BH2N9bdhj5cdPMuKbziePqyWPc.mft
Manifest number:          0331
Signing time:             Sun 01 Mar 2026 01:53:30 +0000
Manifest this update:     Sun 01 Mar 2026 01:53:30 +0000
Manifest next update:     Sun 08 Mar 2026 01:53:30 +0000
Files and hashes:         1: 6BH2N9bdhj5cdPMuKbziePqyWPc.crl (hash: WN11wZ11G44HwVd/n/OLwefnCcAc8MbU/xLaiuvPD3g=)
                          2: 96BC85E8145711EF8ED9C174C4F9AE02.roa (hash: 4GDdy9q4wSFCaH7TyIGJPMZ9fzgci85d7rldFyKz8WA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B751/72D7D8B4FDD711EC90CAEF4CC4F9AE02/6BH2N9bdhj5cdPMuKbziePqyWPc.crl
                          rsync://rpki.apnic.net/member_repository/A912B751/72D7D8B4FDD711EC90CAEF4CC4F9AE02/6BH2N9bdhj5cdPMuKbziePqyWPc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6BH2N9bdhj5cdPMuKbziePqyWPc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 01:53:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 824 (0x338)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B751, serialNumber=E811F637D6DD863E5C74F32E29BCE278FAB258F7
        Validity
            Not Before: Mar  1 01:53:30 2026 GMT
            Not After : Mar  8 01:53:30 2026 GMT
        Subject: CN=69a39c1a-775c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:28:23:65:27:14:42:f4:93:0f:57:0d:87:1d:
                    83:01:16:56:ec:fe:f6:cb:21:4a:9d:84:0f:d0:18:
                    bb:4e:e9:9a:32:c4:34:97:9a:08:3d:6b:88:04:99:
                    cf:01:38:b2:6f:74:04:3a:78:fe:50:10:64:2d:84:
                    2b:6a:ff:80:26:88:92:79:7f:83:7b:28:56:18:fd:
                    fd:73:a2:b0:e8:67:0c:90:4b:4c:19:3e:d8:d4:83:
                    dc:a0:da:e4:c1:9b:38:28:35:97:49:04:84:3c:a7:
                    82:ff:1d:9d:56:d2:17:45:5b:1d:56:25:92:e7:4c:
                    4e:57:89:e5:59:11:d4:9d:21:b2:16:cb:76:e6:85:
                    c0:22:af:bf:81:36:a0:60:39:34:c3:28:60:e5:7e:
                    47:c0:39:82:d1:17:9c:ef:2d:86:9a:65:ed:30:13:
                    59:62:61:9a:3a:dd:57:0f:c4:19:1c:11:7f:07:9d:
                    44:73:1c:83:cb:ae:1c:b1:69:fd:34:a7:c7:16:91:
                    d4:59:a0:2b:7e:ad:ac:fc:c9:4b:d2:22:9c:8f:3b:
                    ea:c5:04:aa:de:56:9d:a3:21:7c:13:9d:c8:7a:13:
                    1e:79:7f:9e:1d:a3:0f:45:66:32:f1:c4:64:27:71:
                    6d:95:e9:39:b9:16:b0:ca:7a:d6:4d:50:c6:ce:43:
                    b7:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:0E:E5:BA:90:84:10:8C:64:6E:08:AF:42:74:22:C6:87:59:8C:41
            X509v3 Authority Key Identifier:
                keyid:E8:11:F6:37:D6:DD:86:3E:5C:74:F3:2E:29:BC:E2:78:FA:B2:58:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B751/72D7D8B4FDD711EC90CAEF4CC4F9AE02/6BH2N9bdhj5cdPMuKbziePqyWPc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6BH2N9bdhj5cdPMuKbziePqyWPc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B751/72D7D8B4FDD711EC90CAEF4CC4F9AE02/6BH2N9bdhj5cdPMuKbziePqyWPc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:68:29:96:ea:f9:db:84:b2:ee:b4:4b:45:7e:eb:35:2b:69:
         0a:ce:d7:c6:af:d2:84:58:bd:8b:57:28:86:4d:1d:b1:9a:51:
         13:e1:64:82:b8:47:3f:4b:e7:d0:66:a4:b7:c7:4b:65:f2:52:
         47:60:2f:4f:2e:39:44:f6:2c:f1:c8:10:fe:2c:bd:95:7e:2e:
         7e:cb:88:fb:92:b0:8e:91:28:18:7f:5c:b4:29:16:ed:e9:69:
         0f:1c:4c:01:27:29:1b:d6:24:93:a5:20:75:3b:77:38:1d:42:
         89:91:34:73:98:a0:87:6e:52:1e:1e:b8:f1:da:44:bd:0f:bc:
         72:f0:f7:cf:9c:f7:3f:c2:c0:44:53:57:25:6c:4f:3a:88:77:
         59:bd:8c:b0:97:b7:50:99:af:a4:77:7e:dc:5e:42:9c:cf:78:
         d3:a9:2b:64:82:dd:c3:58:5a:7a:44:e3:85:c3:93:3e:8f:d9:
         68:18:62:7e:ca:f6:2c:d9:6e:d3:af:19:3e:8b:89:d4:3f:66:
         b2:df:36:c4:09:b8:19:d2:c0:14:37:7d:09:55:1b:2e:f3:be:
         50:3e:93:33:cb:08:aa:9b:5d:fe:a2:40:ff:7b:5b:33:ab:90:
         c9:79:7d:40:6e:60:bc:87:1b:38:0f:b3:6e:fc:01:e2:87:f6:
         c2:c8:81:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:12:50 2026 by rpki-client