Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D13/AA25DF1C98FD11E7A8145560C4F9AE02/bifP0YnuRkQx1LkBO8wHWKgCZOY.mft
File:                     bifP0YnuRkQx1LkBO8wHWKgCZOY.mft (raw, json)
Hash identifier:          09ZwXZtgRzFsVv8kxRbCxSpRsX1D1cl8M6H9hpAopck=
Subject key identifier:   20:F5:6A:50:FE:FE:11:1D:1F:68:2E:E8:0F:0A:F2:9D:2B:A8:2D:CB
Authority key identifier: 6E:27:CF:D1:89:EE:46:44:31:D4:B9:01:3B:CC:07:58:A8:02:64:E6
Certificate issuer:       /CN=A9157D13/serialNumber=6E27CFD189EE464431D4B9013BCC0758A80264E6
Certificate serial:       1948
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bifP0YnuRkQx1LkBO8wHWKgCZOY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9157D13/AA25DF1C98FD11E7A8145560C4F9AE02/bifP0YnuRkQx1LkBO8wHWKgCZOY.mft
Manifest number:          1931
Signing time:             Sat 28 Feb 2026 16:29:58 +0000
Manifest this update:     Sat 28 Feb 2026 16:29:58 +0000
Manifest next update:     Sat 07 Mar 2026 16:29:58 +0000
Files and hashes:         1: bifP0YnuRkQx1LkBO8wHWKgCZOY.crl (hash: hk0XPSxQolKaSt3oh9aKeYQBQYAnNBw3LUFlCuY+nRY=)
                          2: 33E73FAAE50B11EF838B6642C4F9AE02.roa (hash: BzZIag9MKt4Vg0xmJcVZ+BTMEatnURI4Q5l9Kw8jOgQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9157D13/AA25DF1C98FD11E7A8145560C4F9AE02/bifP0YnuRkQx1LkBO8wHWKgCZOY.crl
                          rsync://rpki.apnic.net/member_repository/A9157D13/AA25DF1C98FD11E7A8145560C4F9AE02/bifP0YnuRkQx1LkBO8wHWKgCZOY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bifP0YnuRkQx1LkBO8wHWKgCZOY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 16:29:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6472 (0x1948)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9157D13, serialNumber=6E27CFD189EE464431D4B9013BCC0758A80264E6
        Validity
            Not Before: Feb 28 16:29:58 2026 GMT
            Not After : Mar  7 16:29:58 2026 GMT
        Subject: CN=69a31806-1930
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:7c:69:c2:46:f7:d2:20:7d:17:5c:f1:7e:bf:
                    e8:e6:cc:00:fd:65:a7:b1:36:27:dd:3a:fe:b7:ac:
                    d2:69:cd:bb:a5:ab:78:12:e0:fc:f7:11:d8:ff:75:
                    99:7b:70:93:f0:55:69:63:f2:ea:88:aa:47:e3:fc:
                    b5:c0:9d:ec:9c:14:b2:cd:cb:db:c4:77:3c:c0:97:
                    a8:4a:9b:3b:94:78:95:44:e4:1b:f3:19:4f:02:0d:
                    66:92:1d:1a:9f:c2:bb:be:f3:15:78:7a:84:af:1f:
                    fc:cc:56:a5:86:f2:2c:c4:0d:98:8d:85:67:c9:3b:
                    90:93:0f:e1:40:65:65:94:22:fc:0c:d3:84:f6:a6:
                    35:30:30:87:06:2a:06:03:83:2e:86:63:3b:0b:3a:
                    ce:10:3e:65:f8:f5:51:7f:75:2f:90:ad:25:30:71:
                    2c:9b:e6:90:12:a3:81:bd:4c:39:4d:2b:51:8e:f7:
                    c5:21:56:86:ff:19:6f:c4:7a:8d:70:1b:64:40:c9:
                    cb:a6:53:28:df:96:a0:a6:7a:67:cf:13:5c:69:dc:
                    5c:c9:c6:ed:5f:e7:4a:bd:6b:af:38:31:4e:93:39:
                    b9:d0:c6:25:08:4c:09:a9:90:2c:eb:56:54:2d:87:
                    ca:d1:c9:a8:e0:c8:50:28:12:f9:87:bf:ed:1a:0a:
                    f0:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:F5:6A:50:FE:FE:11:1D:1F:68:2E:E8:0F:0A:F2:9D:2B:A8:2D:CB
            X509v3 Authority Key Identifier:
                keyid:6E:27:CF:D1:89:EE:46:44:31:D4:B9:01:3B:CC:07:58:A8:02:64:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9157D13/AA25DF1C98FD11E7A8145560C4F9AE02/bifP0YnuRkQx1LkBO8wHWKgCZOY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bifP0YnuRkQx1LkBO8wHWKgCZOY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D13/AA25DF1C98FD11E7A8145560C4F9AE02/bifP0YnuRkQx1LkBO8wHWKgCZOY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:79:3e:51:5b:47:44:80:1c:76:2c:a9:e2:81:3b:07:6b:bb:
         a9:1d:5d:52:40:4b:8c:2e:a9:ae:db:8d:89:f1:95:e0:3c:54:
         ae:26:dd:bc:15:f3:dc:50:dd:92:00:31:91:5d:ee:99:61:31:
         de:74:a6:4e:5a:e8:1d:80:50:3d:16:b0:7d:58:56:93:8b:97:
         bc:39:95:b1:44:8a:19:ab:68:81:6f:e4:6a:f6:06:5f:dd:10:
         29:5a:13:cb:50:39:e3:bc:e9:ea:d4:48:c1:75:b6:2e:d5:99:
         44:d2:fa:39:db:8e:16:45:21:7d:3a:67:9d:14:ad:5f:6e:58:
         50:29:38:d3:c5:09:9c:c4:78:2b:08:d3:11:80:92:24:54:97:
         0c:85:e0:4b:51:e4:e0:05:5a:81:35:b0:5a:99:2d:87:b0:d3:
         47:96:a3:14:c3:75:c6:5d:6f:70:f7:0a:b1:dd:a7:9e:45:9f:
         ff:a4:6c:14:7d:13:f6:2a:e1:c0:0b:8c:b9:7a:58:8b:39:dc:
         a8:c6:ee:4a:6a:a3:fd:06:80:5d:9d:6f:ba:b0:86:dc:50:84:
         8e:10:eb:04:8f:4f:99:4a:09:e5:56:48:d6:dd:5c:ce:e7:8b:
         da:9b:4f:59:38:1b:b1:73:34:9e:6c:62:f9:86:ea:a9:fb:1f:
         01:03:94:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:27:05 2026 by rpki-client