Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91881D9/D89BB30EB47711E7AD54B664C4F9AE02/bBtjjqnXxs4CPLXlfjyuFqEbRQU.mft
File:                     bBtjjqnXxs4CPLXlfjyuFqEbRQU.mft (raw, json)
Hash identifier:          /EjT+sCPbg2jVw+5Di3eUmEsF1lr1GHcCUHFpqin8EM=
Subject key identifier:   EE:9E:29:D9:23:5A:99:21:06:2D:40:46:00:58:5E:F5:F3:95:4B:BB
Authority key identifier: 6C:1B:63:8E:A9:D7:C6:CE:02:3C:B5:E5:7E:3C:AE:16:A1:1B:45:05
Certificate issuer:       /CN=A91881D9/serialNumber=6C1B638EA9D7C6CE023CB5E57E3CAE16A11B4505
Certificate serial:       18A4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBtjjqnXxs4CPLXlfjyuFqEbRQU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91881D9/D89BB30EB47711E7AD54B664C4F9AE02/bBtjjqnXxs4CPLXlfjyuFqEbRQU.mft
Manifest number:          189A
Signing time:             Mon 02 Mar 2026 01:50:15 +0000
Manifest this update:     Mon 02 Mar 2026 01:50:12 +0000
Manifest next update:     Mon 09 Mar 2026 01:50:12 +0000
Files and hashes:         1: bBtjjqnXxs4CPLXlfjyuFqEbRQU.crl (hash: +yb1i8VCejsHQSx+FbsGpiJqoD0uL1HG6pDQIpDaPJA=)
                          2: 870C2B58B47811E788EC7E65C4F9AE02.roa (hash: 6xlKJ/tgCn9Gr5JUQHkedm0+Y56LHFXTYQ4StdZJ2Gk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91881D9/D89BB30EB47711E7AD54B664C4F9AE02/bBtjjqnXxs4CPLXlfjyuFqEbRQU.crl
                          rsync://rpki.apnic.net/member_repository/A91881D9/D89BB30EB47711E7AD54B664C4F9AE02/bBtjjqnXxs4CPLXlfjyuFqEbRQU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBtjjqnXxs4CPLXlfjyuFqEbRQU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:50:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6308 (0x18a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91881D9, serialNumber=6C1B638EA9D7C6CE023CB5E57E3CAE16A11B4505
        Validity
            Not Before: Mar  2 01:50:12 2026 GMT
            Not After : Mar  9 01:50:12 2026 GMT
        Subject: CN=69a4ecd6-7979
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:17:1b:04:69:72:cb:7d:2d:d4:23:a3:8d:d4:
                    87:8a:c7:69:ea:2b:04:e2:8f:2d:cb:d2:7e:07:39:
                    9d:07:f1:4f:cd:8c:28:9b:1b:bc:bd:e0:48:97:4d:
                    bb:74:40:0d:03:bc:ec:e4:f4:f9:ff:cc:44:ca:c4:
                    80:3a:41:e7:b7:cb:c7:44:ed:ad:cd:ac:e3:4d:fb:
                    fd:e6:19:50:40:48:2d:8a:1b:33:f0:c5:1c:df:92:
                    1e:97:31:02:0e:1d:b2:ff:f9:94:ab:1c:d9:d2:83:
                    60:1c:de:6d:d3:05:b8:eb:df:08:e1:08:50:1e:4a:
                    97:0e:9d:68:cb:09:c6:0b:34:1e:7f:76:32:5a:23:
                    d8:aa:d3:1d:ef:4a:ac:73:8f:9b:3c:ba:91:15:25:
                    68:c9:68:28:aa:90:cd:3c:47:91:26:f7:c9:10:e7:
                    1f:f0:af:79:80:a5:e1:93:e9:8e:58:f0:97:92:07:
                    c7:4a:18:f2:a7:28:e9:aa:c3:ba:64:af:fd:5e:b6:
                    23:a2:d2:fb:94:4f:c0:75:3c:37:e4:df:d3:e5:22:
                    34:44:44:0c:0b:62:3a:9f:0c:f3:e4:ab:df:25:e0:
                    53:4e:be:9a:5f:1e:b0:29:77:32:d9:86:9e:fe:5e:
                    da:62:ca:7a:0a:dd:a6:01:d9:07:02:74:61:3b:82:
                    a7:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:9E:29:D9:23:5A:99:21:06:2D:40:46:00:58:5E:F5:F3:95:4B:BB
            X509v3 Authority Key Identifier:
                keyid:6C:1B:63:8E:A9:D7:C6:CE:02:3C:B5:E5:7E:3C:AE:16:A1:1B:45:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91881D9/D89BB30EB47711E7AD54B664C4F9AE02/bBtjjqnXxs4CPLXlfjyuFqEbRQU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBtjjqnXxs4CPLXlfjyuFqEbRQU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91881D9/D89BB30EB47711E7AD54B664C4F9AE02/bBtjjqnXxs4CPLXlfjyuFqEbRQU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:4d:c4:22:e1:48:3d:23:b8:65:f5:81:6e:b7:59:c0:3e:be:
         cf:d6:6d:c7:aa:e0:ff:fa:2e:4d:a7:cf:fb:ac:76:b7:86:01:
         3e:da:1d:b9:c8:f7:f8:e3:1f:c7:da:e1:4b:89:06:34:1e:b1:
         7e:c0:ab:e9:a4:9f:8f:b5:c4:d3:60:3f:86:ec:a4:18:03:80:
         5d:d9:6e:a7:82:4f:57:7e:37:8a:d4:56:2d:ec:b5:58:74:aa:
         3d:6c:56:97:43:d1:6c:0c:9d:c2:6e:e9:90:0d:93:6f:25:0f:
         1a:da:5d:25:69:e6:ff:c3:33:19:44:d8:e3:f8:34:95:6d:d2:
         2d:70:32:cb:1f:07:9c:f4:93:35:2b:f5:77:58:df:71:8a:a3:
         d3:0c:99:a8:74:7b:c5:26:6e:ca:af:e2:3f:10:60:60:e8:ec:
         a8:3f:ec:a2:d9:ac:ec:85:ca:d5:6e:4f:5e:89:fe:3d:3d:b0:
         7e:06:f3:56:a7:cd:ca:93:e4:11:9a:e2:73:65:38:e9:5e:71:
         87:9f:a3:ea:24:e2:6a:d2:52:4c:78:74:50:e4:2e:c9:d9:7c:
         f0:78:50:d3:30:7f:2c:6a:33:b2:7b:ae:bb:82:6b:4a:a7:f7:
         02:d3:00:ab:8c:a2:78:f0:f7:03:a4:f3:15:4b:6d:08:df:72:
         ec:e5:da:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:42:56 2026 by rpki-client