Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91529DF/EACCA918ED2E11F080C46032476F56BC/bPH0dvRFFGbI_SbiFvMnbMFeLho.mft
File:                     bPH0dvRFFGbI_SbiFvMnbMFeLho.mft (raw, json)
Hash identifier:          V927VpCqMe2EnnFQmw5XXdYJmc0hRc83u9etNLT5E+s=
Subject key identifier:   8D:7E:90:11:62:5D:95:DB:2F:1F:D9:0F:D4:05:6C:F6:3A:31:C8:9C
Authority key identifier: 6C:F1:F4:76:F4:45:14:66:C8:FD:26:E2:16:F3:27:6C:C1:5E:2E:1A
Certificate issuer:       /CN=A91529DF/serialNumber=6CF1F476F4451466C8FD26E216F3276CC15E2E1A
Certificate serial:       31
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bPH0dvRFFGbI_SbiFvMnbMFeLho.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91529DF/EACCA918ED2E11F080C46032476F56BC/bPH0dvRFFGbI_SbiFvMnbMFeLho.mft
Manifest number:          29
Signing time:             Sun 01 Mar 2026 10:22:04 +0000
Manifest this update:     Sun 01 Mar 2026 10:22:04 +0000
Manifest next update:     Sun 08 Mar 2026 10:22:04 +0000
Files and hashes:         1: bPH0dvRFFGbI_SbiFvMnbMFeLho.crl (hash: bq0uOqYcDu8sEUv5VAD9aXpvEb3L/jCWsa+5T08WqRY=)
                          2: E9C84708F67911F0B1D76CE5736F56BC.roa (hash: B9uNDvU5cJoDVtHMnMwD+CGmLLX1Ekokgd9afDF1IlY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91529DF/EACCA918ED2E11F080C46032476F56BC/bPH0dvRFFGbI_SbiFvMnbMFeLho.crl
                          rsync://rpki.apnic.net/member_repository/A91529DF/EACCA918ED2E11F080C46032476F56BC/bPH0dvRFFGbI_SbiFvMnbMFeLho.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bPH0dvRFFGbI_SbiFvMnbMFeLho.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 10:22:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 49 (0x31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91529DF, serialNumber=6CF1F476F4451466C8FD26E216F3276CC15E2E1A
        Validity
            Not Before: Mar  1 10:22:04 2026 GMT
            Not After : Mar  8 10:22:04 2026 GMT
        Subject: CN=69a4134c-f8e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:87:fe:9a:ab:f1:1a:9c:ac:a7:08:ed:bb:8e:
                    81:61:f1:b4:37:3b:ce:bd:a2:e4:4e:e9:b6:9c:ea:
                    f0:2e:0d:e2:7e:4f:6d:78:fd:89:eb:86:4a:f7:dc:
                    63:dc:f0:10:83:ea:a4:8b:e2:b8:98:eb:9d:53:13:
                    c9:40:c7:62:05:24:23:1d:49:1c:70:32:25:24:8a:
                    c1:9f:00:cd:da:dd:98:1a:ce:85:78:6a:0f:7d:f9:
                    b8:3f:25:58:5d:07:77:0e:69:af:a9:74:30:6d:0e:
                    8f:8b:6e:d2:00:8c:2b:87:00:35:45:d5:bc:f1:68:
                    81:82:31:bf:4a:73:17:22:d1:8a:50:8a:72:a2:10:
                    3c:f0:40:3f:da:5d:c3:27:e1:b5:13:ab:54:ae:8a:
                    b1:d2:3a:6a:f7:c4:a1:80:d4:16:2d:e1:7b:0b:dd:
                    04:fd:07:a7:2c:2f:29:5a:19:a1:3d:ef:6b:15:e9:
                    59:4e:ca:09:b2:db:e7:a0:c7:d9:ac:ce:9c:c7:1f:
                    b3:1b:74:ad:36:06:eb:1a:c7:5a:2b:4f:ef:34:fc:
                    98:cc:ca:aa:af:fc:95:2b:ec:34:ad:d3:79:ed:a3:
                    da:e4:59:01:3b:5c:08:c4:b8:d8:c7:93:a3:b4:f6:
                    21:f8:36:b6:72:21:18:86:ce:4d:d1:51:a9:42:21:
                    25:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:7E:90:11:62:5D:95:DB:2F:1F:D9:0F:D4:05:6C:F6:3A:31:C8:9C
            X509v3 Authority Key Identifier:
                keyid:6C:F1:F4:76:F4:45:14:66:C8:FD:26:E2:16:F3:27:6C:C1:5E:2E:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91529DF/EACCA918ED2E11F080C46032476F56BC/bPH0dvRFFGbI_SbiFvMnbMFeLho.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bPH0dvRFFGbI_SbiFvMnbMFeLho.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91529DF/EACCA918ED2E11F080C46032476F56BC/bPH0dvRFFGbI_SbiFvMnbMFeLho.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:ea:ce:8b:70:be:9a:a1:61:92:a2:66:37:a4:a4:6e:0c:de:
         45:d4:30:2b:cc:c8:a4:15:9b:cc:c1:c9:53:24:52:9c:54:df:
         07:28:03:ae:c0:41:ca:10:09:bb:3b:a9:b1:97:e7:0c:7f:3b:
         2b:28:df:9b:fa:97:6c:b0:9e:42:3c:6f:ac:b7:78:fe:9c:f2:
         26:fb:9a:cf:f3:8d:42:fa:83:58:c8:26:2f:74:75:76:87:75:
         96:78:4c:36:98:7c:b2:3d:28:05:01:36:0c:6c:84:24:33:1a:
         90:57:46:95:23:a6:55:e4:62:df:05:b7:5f:29:22:09:36:18:
         a1:95:12:dc:10:72:df:98:12:2c:c0:36:6d:35:cc:00:61:67:
         40:33:d6:48:a0:39:48:d4:b0:fe:53:03:db:a5:d8:06:84:97:
         be:ec:ae:20:bd:97:43:c6:28:32:d4:95:54:bd:45:15:a3:fa:
         b2:5b:70:e3:34:ca:77:fa:4f:cb:90:e0:35:5b:bf:f8:c1:f3:
         a5:5b:44:7a:90:9e:67:d3:7a:32:bf:a6:ba:34:9a:eb:94:ac:
         37:85:c6:13:e8:d4:54:47:61:13:63:cb:5d:df:81:69:20:1c:
         22:e5:8b:05:37:a8:ce:11:d8:fd:4f:c2:a5:bd:28:7b:94:da:
         34:77:32:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:19:42 2026 by rpki-client