Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.mft
File:                     bw3LHOJgwKE4iU38RIrdySQTaYE.mft (raw, json)
Hash identifier:          olke6dA+D03KmVNs+YugWLjGfpn0vZUrembA6octtTc=
Subject key identifier:   1B:6A:26:E3:07:E1:65:21:4F:C1:74:B2:8F:76:14:7A:9F:55:57:B5
Authority key identifier: 6F:0D:CB:1C:E2:60:C0:A1:38:89:4D:FC:44:8A:DD:C9:24:13:69:81
Certificate issuer:       /CN=A9142747/serialNumber=6F0DCB1CE260C0A138894DFC448ADDC924136981
Certificate serial:       0892
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bw3LHOJgwKE4iU38RIrdySQTaYE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.mft
Manifest number:          088B
Signing time:             Sat 28 Feb 2026 20:54:01 +0000
Manifest this update:     Sat 28 Feb 2026 20:54:01 +0000
Manifest next update:     Sat 07 Mar 2026 20:54:01 +0000
Files and hashes:         1: bw3LHOJgwKE4iU38RIrdySQTaYE.crl (hash: B2ERQvK8Lk2YgvH1c8aOIZI7fVxmFo6A2Nv5kIi9Y2U=)
                          2: A15F9276E2A911EAADD4CF7AC4F9AE02.roa (hash: JfWtXQ7v0q/Bf9DtelFrM/qXaMYsqrJqCz9UQNMv2Pc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.crl
                          rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bw3LHOJgwKE4iU38RIrdySQTaYE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 20:54:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2194 (0x892)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142747, serialNumber=6F0DCB1CE260C0A138894DFC448ADDC924136981
        Validity
            Not Before: Feb 28 20:54:01 2026 GMT
            Not After : Mar  7 20:54:01 2026 GMT
        Subject: CN=69a355e9-70b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:4d:7b:5f:c5:a0:ae:f2:f0:c4:f8:a3:c8:58:
                    7a:83:6e:64:66:fa:70:6f:82:1d:92:11:df:2b:d6:
                    7d:0d:9b:54:0e:1b:99:bb:99:b4:e3:6b:50:c9:6f:
                    82:c7:54:5a:20:83:38:f0:d2:1e:c9:0b:a9:f4:ae:
                    d1:b1:28:0e:1b:87:ca:16:9f:a7:29:2e:74:05:d9:
                    8e:08:0f:93:45:f3:86:21:04:0d:57:a8:29:b2:24:
                    87:92:70:b7:95:77:ce:47:95:1d:06:21:df:7c:af:
                    da:18:1c:5c:3f:41:df:bf:c3:d2:df:6a:8b:d8:af:
                    57:85:43:ae:e4:88:46:e5:28:34:c8:fb:93:ee:b4:
                    88:af:91:4e:0d:c7:40:bb:c6:b0:a4:76:3c:ac:da:
                    26:44:5d:6c:b3:47:ba:9a:b0:2b:85:59:f7:df:9c:
                    05:e0:3f:e8:7d:76:73:60:5d:56:ae:32:af:77:7d:
                    03:5d:14:cc:50:f7:b6:b2:70:33:5a:8b:1c:fa:6f:
                    af:b4:9b:8e:9d:8d:3d:6a:1c:2e:aa:ea:2a:ba:3d:
                    57:30:f7:a4:f3:4b:1c:62:b3:f1:49:d5:5b:42:45:
                    7c:0f:f3:d6:ae:4e:57:22:2c:92:9c:4d:e2:45:df:
                    7d:aa:81:e7:40:2f:62:14:17:a1:e0:03:b8:c5:cf:
                    54:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:6A:26:E3:07:E1:65:21:4F:C1:74:B2:8F:76:14:7A:9F:55:57:B5
            X509v3 Authority Key Identifier:
                keyid:6F:0D:CB:1C:E2:60:C0:A1:38:89:4D:FC:44:8A:DD:C9:24:13:69:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bw3LHOJgwKE4iU38RIrdySQTaYE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:d1:6c:75:05:1c:90:14:a0:00:d2:9f:ba:d5:59:e7:8e:c5:
         12:a1:ea:50:d8:c4:ab:1d:29:07:fe:2e:43:a9:77:08:4c:fc:
         1b:5a:36:a1:eb:c9:e6:37:90:57:9d:70:21:d1:87:d0:e6:73:
         c9:62:7b:a6:4c:08:0c:6f:5e:26:0e:e6:46:cf:8c:02:6e:ca:
         e8:99:4c:07:b6:e7:05:82:82:dd:72:25:cf:fd:55:ec:ae:c0:
         ab:f1:c5:18:6e:1e:45:67:04:f7:2f:c6:63:a5:f7:99:c9:c2:
         96:db:e3:a8:68:12:b7:57:27:cc:f1:55:c1:3b:12:41:81:c6:
         00:8d:ad:5f:f1:64:1d:6e:5d:5d:05:95:4b:c1:36:cc:a5:f9:
         73:c2:49:d4:97:28:e0:88:e7:b7:32:e2:67:6e:db:6e:47:51:
         fd:42:a0:99:27:18:b7:95:ce:bb:ee:19:e9:cf:41:03:b0:8e:
         e6:30:29:83:c0:24:5a:de:8f:9e:8a:f0:25:d1:88:ce:ef:be:
         e3:2d:2f:d3:1f:b3:d8:c6:9a:de:cc:54:1f:ec:9d:92:cf:21:
         6e:77:4d:d0:8c:6f:fa:aa:d8:c5:b3:91:6a:5f:ed:b0:71:87:
         92:d8:a3:a9:c4:1c:ae:90:32:7d:3f:4b:ea:6d:34:52:95:25:
         ab:cc:f7:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:16:04 2026 by rpki-client