Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914247C/8A1C4616430A11EA858CDC76C4F9AE02/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.mft
File:                     1aAlBjTfwD3Jz8q6l5UYD_BRWPw.mft (raw, json)
Hash identifier:          VAxG76hb8y6zMPvknCHSjgaA/p0nUSWBaEuYM21x3sI=
Subject key identifier:   F1:A3:BF:C9:C5:BC:19:20:22:F5:DF:A5:18:3F:71:E0:9B:A4:C7:DD
Authority key identifier: D5:A0:25:06:34:DF:C0:3D:C9:CF:CA:BA:97:95:18:0F:F0:51:58:FC
Certificate issuer:       /CN=A914247C/serialNumber=D5A0250634DFC03DC9CFCABA9795180FF05158FC
Certificate serial:       0BB1
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914247C/8A1C4616430A11EA858CDC76C4F9AE02/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.mft
Manifest number:          0BA0
Signing time:             Sun 01 Mar 2026 23:38:25 +0000
Manifest this update:     Sun 01 Mar 2026 23:38:22 +0000
Manifest next update:     Sun 08 Mar 2026 23:38:22 +0000
Files and hashes:         1: 1aAlBjTfwD3Jz8q6l5UYD_BRWPw.crl (hash: uSiYEHcYcfBk3VuBZ9yA62my6aqh++JnXE+VRZXcjPg=)
                          2: 9156042083EB11ECB7EC3B76C4F9AE02.roa (hash: EP70FT9vYILp9XYrmWiAL3jLqbW9+S8BdvaaLqMxnTg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914247C/8A1C4616430A11EA858CDC76C4F9AE02/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.crl
                          rsync://rpki.apnic.net/member_repository/A914247C/8A1C4616430A11EA858CDC76C4F9AE02/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:38:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2993 (0xbb1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914247C, serialNumber=D5A0250634DFC03DC9CFCABA9795180FF05158FC
        Validity
            Not Before: Mar  1 23:38:22 2026 GMT
            Not After : Mar  8 23:38:22 2026 GMT
        Subject: CN=69a4cdf1-ff08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e7:89:63:df:58:af:7a:c4:1c:65:76:03:0e:
                    f5:9a:98:24:2a:ea:41:70:69:4d:ab:46:17:2c:4a:
                    87:d3:4e:53:2f:6f:f6:42:f4:c4:57:35:cf:d0:1b:
                    34:f9:18:b2:f7:d7:aa:bf:16:20:83:86:78:42:00:
                    19:23:90:99:97:e9:26:14:67:6a:83:db:3a:40:d7:
                    f0:3d:2f:6b:86:43:0b:40:ab:dc:9b:fe:91:fd:ff:
                    22:30:d5:f2:b4:cc:8c:b8:cb:f4:12:d7:a3:e4:34:
                    f0:1f:2f:02:4b:20:a7:e3:06:73:ef:23:d2:98:1f:
                    7a:f1:bd:d4:7f:68:ae:41:18:d6:7b:09:c9:1c:85:
                    e2:d6:e9:e8:07:be:b0:0a:d4:17:d3:75:75:68:a7:
                    4e:79:a0:bb:1a:c5:30:f0:38:7d:cd:2f:db:b7:34:
                    15:b9:c5:52:82:15:3e:c9:4a:d4:14:cf:41:07:ab:
                    10:9d:58:f6:bd:2b:56:b5:a2:2a:8f:b4:50:92:d4:
                    1b:ca:d5:08:08:ee:fa:e5:1a:61:e9:ff:5f:7e:8f:
                    c5:2a:2a:06:eb:af:75:f8:b9:e0:2f:4d:c6:dc:a9:
                    50:77:43:76:09:21:91:5b:ee:5a:5d:2c:27:ed:8d:
                    8f:2b:49:b0:41:37:47:ef:3d:48:a9:f1:23:86:56:
                    0e:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:A3:BF:C9:C5:BC:19:20:22:F5:DF:A5:18:3F:71:E0:9B:A4:C7:DD
            X509v3 Authority Key Identifier:
                keyid:D5:A0:25:06:34:DF:C0:3D:C9:CF:CA:BA:97:95:18:0F:F0:51:58:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914247C/8A1C4616430A11EA858CDC76C4F9AE02/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914247C/8A1C4616430A11EA858CDC76C4F9AE02/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:d3:c0:0c:95:fb:82:ab:1c:d0:29:40:1a:4d:6a:84:57:26:
         16:96:76:05:63:62:33:fe:fb:6b:b7:98:64:f9:ad:dc:d9:fc:
         9b:cc:ce:4e:f1:84:83:f1:8f:bd:80:33:d4:68:6e:d4:75:24:
         7a:12:10:c8:94:d5:de:2c:65:4a:c2:c5:82:59:5f:59:c4:80:
         ed:ec:80:18:9d:06:08:e1:bd:c1:c5:5c:63:2b:65:48:38:5f:
         3b:a4:44:a2:98:08:6a:76:44:33:86:8f:6f:27:38:50:2c:26:
         2c:0e:22:54:fc:ad:12:b5:4d:b2:97:53:e3:3c:3b:97:7b:c1:
         85:86:8f:e0:dd:bd:b5:cc:f3:54:02:a1:3b:7f:d8:45:c7:d2:
         18:51:87:5d:b8:a5:cd:0e:d9:f2:a5:f2:2b:d8:8c:7a:64:00:
         e3:d4:31:09:bc:db:e9:5f:09:ee:2b:6c:79:76:0b:18:60:d4:
         e3:cb:75:5b:fb:03:e6:7a:85:7a:73:d0:22:16:e0:13:61:80:
         a7:0a:b9:51:5e:83:86:d4:e0:47:85:9d:78:07:61:3d:ee:47:
         59:88:01:2b:d2:90:7c:34:ff:45:9d:f8:ef:1c:6c:bc:90:17:
         f0:4f:20:c4:cf:3b:e6:30:af:f8:63:36:96:19:95:10:2d:82:
         50:28:09:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:44:01 2026 by rpki-client