Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0FB/5056C8B2005611EFA54D6140C4F9AE02/bkVzNIaAMm09remFIV0iZii58Ws.mft
File:                     bkVzNIaAMm09remFIV0iZii58Ws.mft (raw, json)
Hash identifier:          NSBbxAq9aeBBs1I1r0XKs3P+NLrujXvhW6vJdzKtDrU=
Subject key identifier:   C3:68:AC:79:77:AE:A5:E2:F9:16:90:9D:F6:10:0C:4B:4D:21:C0:85
Authority key identifier: 6E:45:73:34:86:80:32:6D:3D:AD:E9:85:21:5D:22:66:28:B9:F1:6B
Certificate issuer:       /CN=A915A0FB/serialNumber=6E4573348680326D3DADE985215D226628B9F16B
Certificate serial:       0164
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bkVzNIaAMm09remFIV0iZii58Ws.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A0FB/5056C8B2005611EFA54D6140C4F9AE02/bkVzNIaAMm09remFIV0iZii58Ws.mft
Manifest number:          0161
Signing time:             Sun 01 Mar 2026 05:59:18 +0000
Manifest this update:     Sun 01 Mar 2026 05:59:17 +0000
Manifest next update:     Sun 08 Mar 2026 05:59:17 +0000
Files and hashes:         1: bkVzNIaAMm09remFIV0iZii58Ws.crl (hash: /Vefcx7ZFe5Fz6fV9Dpyy6aYzppMiIxzQB/phLumpSI=)
                          2: 47B1ABEA005711EF9DA70542C4F9AE02.roa (hash: EKbBGVNf6UZGjGH5PT+x5TqElAgqJbm8pSoP/IIyglU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A0FB/5056C8B2005611EFA54D6140C4F9AE02/bkVzNIaAMm09remFIV0iZii58Ws.crl
                          rsync://rpki.apnic.net/member_repository/A915A0FB/5056C8B2005611EFA54D6140C4F9AE02/bkVzNIaAMm09remFIV0iZii58Ws.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bkVzNIaAMm09remFIV0iZii58Ws.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 05:59:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 356 (0x164)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A0FB, serialNumber=6E4573348680326D3DADE985215D226628B9F16B
        Validity
            Not Before: Mar  1 05:59:17 2026 GMT
            Not After : Mar  8 05:59:17 2026 GMT
        Subject: CN=69a3d5b6-72c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:cf:9b:91:dd:b8:a3:dd:e0:d6:25:e0:fe:77:
                    12:d1:ae:d2:1a:55:9c:7a:c3:22:03:57:e5:88:c5:
                    89:1b:2e:7e:2f:3d:37:ff:c5:43:48:12:17:1d:c2:
                    d5:69:06:fe:05:c1:89:65:a5:29:b4:12:fa:2b:be:
                    03:b5:4e:a7:20:b1:b7:a1:1a:da:bc:4b:71:79:6d:
                    f9:59:3c:42:00:15:26:01:38:9c:8d:1e:3f:76:d7:
                    87:41:7e:5b:35:80:b9:2b:23:ab:24:fc:53:0c:36:
                    c0:47:04:34:d4:9e:61:06:11:f7:9b:a7:d6:84:64:
                    2f:9b:c8:27:f5:b4:ea:ba:11:01:fd:93:ae:34:48:
                    87:ea:ae:42:fe:48:ea:a8:0c:09:cc:fb:7c:fc:46:
                    50:9a:64:75:e3:8a:d3:f8:2b:24:d8:ac:4f:4e:ba:
                    a5:6d:67:54:8c:97:db:37:b4:6b:5f:77:7f:e8:62:
                    e9:e1:64:8f:b5:88:19:bc:9a:7a:91:93:c1:aa:27:
                    35:60:b5:6d:ae:14:8d:fc:a0:cd:bd:32:a9:cf:fa:
                    2a:8f:80:74:ad:e5:59:c2:5b:f5:a1:55:e4:cb:e3:
                    37:cf:68:17:8f:ba:a8:ba:cc:af:3c:a2:c7:d2:4c:
                    d4:90:02:d3:a4:15:cb:86:c7:47:15:aa:0d:f5:3e:
                    7c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:68:AC:79:77:AE:A5:E2:F9:16:90:9D:F6:10:0C:4B:4D:21:C0:85
            X509v3 Authority Key Identifier:
                keyid:6E:45:73:34:86:80:32:6D:3D:AD:E9:85:21:5D:22:66:28:B9:F1:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A0FB/5056C8B2005611EFA54D6140C4F9AE02/bkVzNIaAMm09remFIV0iZii58Ws.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bkVzNIaAMm09remFIV0iZii58Ws.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0FB/5056C8B2005611EFA54D6140C4F9AE02/bkVzNIaAMm09remFIV0iZii58Ws.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:87:ba:94:fe:ba:d9:1a:6b:10:ec:6b:27:d7:03:b7:a8:22:
         a4:19:d0:13:4b:ff:b3:a9:d1:5e:94:89:ca:4e:4e:ce:81:9e:
         c2:9f:73:09:65:28:ac:f8:e4:08:3f:5c:21:0d:b0:1a:fe:d4:
         5d:94:18:76:7c:20:74:59:db:61:f5:a5:f1:df:ad:49:62:da:
         a6:9e:f3:cb:a0:f2:12:27:a9:62:d3:e2:11:3a:8b:67:d5:b5:
         65:6c:43:df:39:88:a3:d0:9d:fa:5f:d1:96:2c:72:89:20:19:
         8a:02:0b:a9:35:88:66:e5:65:e1:ba:ad:d8:c8:4e:bf:ac:14:
         cf:d5:30:ca:59:d1:7f:63:75:2a:e1:5a:f4:d9:e1:ca:a5:f6:
         ad:3d:44:48:9c:66:b0:30:11:4f:3f:07:71:03:05:46:01:9c:
         0f:27:53:8c:35:9c:b7:2f:fa:50:b6:eb:e7:fe:7d:67:07:96:
         77:70:5a:20:35:a3:3f:c8:39:e3:be:54:0b:44:31:e0:bb:ac:
         c7:35:5a:e0:3b:c0:b7:34:17:f0:83:ca:fb:a0:bf:0d:80:84:
         b1:24:5c:d5:69:ec:10:45:ec:41:24:3e:f7:e1:bf:05:80:7b:
         20:f3:3d:3b:2e:76:c5:2a:bb:ff:90:bb:d9:49:dc:ec:70:96:
         a1:db:94:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:15:04 2026 by rpki-client