Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91995D5/163B1E7C2AAE11E9AA574E4EC4F9AE02/bywgdVh2TqtQ74UGb3hZDOWxxWE.mft
File:                     bywgdVh2TqtQ74UGb3hZDOWxxWE.mft (raw, json)
Hash identifier:          pFmIRnbSn/JIWzT+xzQFw1nV0ie9+fb9okepuJ2AYNs=
Subject key identifier:   2B:C5:30:07:A9:E2:F9:A6:DB:96:74:AC:A0:38:56:90:B4:38:41:B0
Authority key identifier: 6F:2C:20:75:58:76:4E:AB:50:EF:85:06:6F:78:59:0C:E5:B1:C5:61
Certificate issuer:       /CN=A91995D5/serialNumber=6F2C207558764EAB50EF85066F78590CE5B1C561
Certificate serial:       1138
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bywgdVh2TqtQ74UGb3hZDOWxxWE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91995D5/163B1E7C2AAE11E9AA574E4EC4F9AE02/bywgdVh2TqtQ74UGb3hZDOWxxWE.mft
Manifest number:          112D
Signing time:             Mon 02 Mar 2026 17:14:49 +0000
Manifest this update:     Mon 02 Mar 2026 17:14:48 +0000
Manifest next update:     Mon 09 Mar 2026 17:14:48 +0000
Files and hashes:         1: bywgdVh2TqtQ74UGb3hZDOWxxWE.crl (hash: i8Hyn3kLF6n8nYKdfqkTl7su331muW2dT84EcJQGDj4=)
                          2: ADA9DA3C2AAE11E9BEFAEF4EC4F9AE02.roa (hash: w7sXrnUGsDJc+cQ7IcP7P8MU3+8bOEuBq5H+umacKzQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91995D5/163B1E7C2AAE11E9AA574E4EC4F9AE02/bywgdVh2TqtQ74UGb3hZDOWxxWE.crl
                          rsync://rpki.apnic.net/member_repository/A91995D5/163B1E7C2AAE11E9AA574E4EC4F9AE02/bywgdVh2TqtQ74UGb3hZDOWxxWE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bywgdVh2TqtQ74UGb3hZDOWxxWE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 16:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4408 (0x1138)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91995D5, serialNumber=6F2C207558764EAB50EF85066F78590CE5B1C561
        Validity
            Not Before: Mar  2 17:14:48 2026 GMT
            Not After : Mar  9 17:14:48 2026 GMT
        Subject: CN=69a5c589-1963
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:a6:74:fc:84:d3:17:cc:2e:de:60:f8:2e:90:
                    a1:5f:b7:4a:14:cc:ea:a0:60:dd:97:1c:30:b0:47:
                    54:76:8f:d2:18:31:64:82:ef:8d:7b:ae:06:10:89:
                    b4:2c:98:cb:a8:88:7d:bd:c6:21:34:b1:c7:89:ee:
                    ed:55:f3:05:53:20:d7:74:9d:78:28:af:ca:d8:ce:
                    f3:c3:7d:ae:a7:5e:7f:b6:42:f1:87:b5:ba:ca:40:
                    5c:1f:0f:02:b7:cb:6b:3c:7f:31:6e:d5:0b:8d:cf:
                    47:a9:c5:60:2c:f2:01:2d:12:f2:6a:c9:30:a0:ee:
                    fa:1d:e8:57:1c:34:b6:d0:43:1a:70:8b:94:e5:21:
                    3b:f4:15:26:23:56:28:f1:0d:8b:2c:a6:15:1c:b3:
                    8c:e6:ac:19:bf:23:20:af:29:38:2b:ba:08:7e:a7:
                    8c:40:1e:78:3b:f7:a9:a5:8e:e1:fe:ed:fe:40:80:
                    9d:1e:f1:39:c1:f2:cc:c2:60:8f:ae:88:83:c5:0f:
                    7e:c1:50:fc:09:0d:7a:72:c2:34:d0:cb:c0:c0:59:
                    49:71:0b:fa:d4:61:fd:38:25:2a:e4:83:f8:30:ac:
                    82:f1:af:12:94:ec:c4:8c:12:d3:8c:87:56:0f:1b:
                    22:af:59:da:77:66:42:41:78:18:44:1d:01:ca:79:
                    58:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:C5:30:07:A9:E2:F9:A6:DB:96:74:AC:A0:38:56:90:B4:38:41:B0
            X509v3 Authority Key Identifier:
                keyid:6F:2C:20:75:58:76:4E:AB:50:EF:85:06:6F:78:59:0C:E5:B1:C5:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91995D5/163B1E7C2AAE11E9AA574E4EC4F9AE02/bywgdVh2TqtQ74UGb3hZDOWxxWE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bywgdVh2TqtQ74UGb3hZDOWxxWE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91995D5/163B1E7C2AAE11E9AA574E4EC4F9AE02/bywgdVh2TqtQ74UGb3hZDOWxxWE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:eb:14:c2:50:a2:d4:02:68:25:09:4d:1b:f1:ed:be:18:2a:
         2b:48:d5:06:bf:ed:26:6c:32:61:3d:fa:23:cd:2f:a6:06:0a:
         36:71:d1:70:88:b5:f2:cb:c3:e6:e1:53:12:15:ce:6d:25:fb:
         e7:05:f5:bc:45:c7:cd:13:35:86:e6:5b:a9:b1:fc:92:1a:91:
         56:fd:ad:44:0d:de:e5:c3:9a:41:5f:10:b1:23:03:1f:28:58:
         4b:e2:95:7f:44:4b:6a:9f:5a:37:e9:fd:26:c3:8c:9b:12:ba:
         d7:00:97:15:4d:04:9f:d6:71:85:94:b3:5e:b1:37:d4:85:18:
         e2:65:0c:a3:d0:e1:91:86:40:73:a1:79:e5:c3:79:39:22:c6:
         df:3e:d4:8f:84:19:1b:63:f0:28:d0:6d:16:eb:a9:24:1e:7d:
         50:04:96:a0:80:d9:bf:7e:9a:17:73:2c:eb:b8:09:54:e4:64:
         2a:01:4e:48:bb:59:c3:3f:88:e3:7e:54:51:2e:75:b1:14:3a:
         25:2a:f6:4f:a5:55:2f:99:51:01:8d:f6:5b:bd:ca:bb:be:c0:
         f8:7d:22:b4:8b:51:8b:ae:1a:a7:16:25:41:c0:aa:ee:12:5b:
         79:bc:bb:4a:d7:00:dc:68:6e:38:5c:a5:e4:b9:52:be:69:40:
         6e:40:39:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:20:53 2026 by rpki-client