Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919AFBE/BA018DB4BA1E11F0B987393BC4F9AE02/Bi0xOwma6Gs_T-LiC7RfjoZTYnM.mft
File:                     Bi0xOwma6Gs_T-LiC7RfjoZTYnM.mft (raw, json)
Hash identifier:          ZHTDGq6t7nDs8F0/nQtMVDswEmMfAhb+TQMJbhLKkDg=
Subject key identifier:   44:BD:17:9E:94:77:42:65:0E:FC:25:7C:09:20:7C:DF:3A:3D:68:82
Authority key identifier: 06:2D:31:3B:09:9A:E8:6B:3F:4F:E2:E2:0B:B4:5F:8E:86:53:62:73
Certificate issuer:       /CN=A919AFBE/serialNumber=062D313B099AE86B3F4FE2E20BB45F8E86536273
Certificate serial:       40
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Bi0xOwma6Gs_T-LiC7RfjoZTYnM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919AFBE/BA018DB4BA1E11F0B987393BC4F9AE02/Bi0xOwma6Gs_T-LiC7RfjoZTYnM.mft
Manifest number:          3E
Signing time:             Sun 01 Mar 2026 09:51:43 +0000
Manifest this update:     Sun 01 Mar 2026 09:51:42 +0000
Manifest next update:     Sun 08 Mar 2026 09:51:42 +0000
Files and hashes:         1: Bi0xOwma6Gs_T-LiC7RfjoZTYnM.crl (hash: vPO37Fm1abFPZyUQojkClMMq8QFds8QEbiF+PVJx6aY=)
                          2: 4F172076BA1F11F08DD0CE3CC4F9AE02.roa (hash: otJtZV8aWxED8Ots8vZzliR1uFIMPOI3+2ENrD6egEA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919AFBE/BA018DB4BA1E11F0B987393BC4F9AE02/Bi0xOwma6Gs_T-LiC7RfjoZTYnM.crl
                          rsync://rpki.apnic.net/member_repository/A919AFBE/BA018DB4BA1E11F0B987393BC4F9AE02/Bi0xOwma6Gs_T-LiC7RfjoZTYnM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Bi0xOwma6Gs_T-LiC7RfjoZTYnM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:51:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 64 (0x40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919AFBE, serialNumber=062D313B099AE86B3F4FE2E20BB45F8E86536273
        Validity
            Not Before: Mar  1 09:51:42 2026 GMT
            Not After : Mar  8 09:51:42 2026 GMT
        Subject: CN=69a40c2f-1943
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:91:d7:3f:07:df:bf:d3:51:cf:a2:8a:9f:c1:
                    c3:ed:c4:23:19:3e:99:8e:24:80:fa:ef:ae:54:a1:
                    8c:85:14:11:84:e9:b0:cf:ed:d9:be:2c:03:5c:45:
                    d3:8e:e6:45:69:11:cd:d7:68:c6:9c:9a:74:06:90:
                    e8:0b:8a:dc:89:90:84:08:31:dd:8f:87:cd:af:6f:
                    b1:1a:3b:9d:3c:98:6c:a3:cc:6d:b5:24:86:a2:78:
                    bc:a1:68:43:4c:10:b5:7f:20:dd:c8:2c:0a:d8:2f:
                    55:9f:1b:c3:b5:b5:38:78:71:0b:57:1a:f4:89:38:
                    2d:a0:62:86:af:f5:08:ba:76:e5:79:0f:d8:94:df:
                    5f:22:39:4e:5d:2a:b0:11:ea:56:03:7b:b0:7f:93:
                    ea:c6:e4:01:79:24:57:25:ab:5f:9d:90:39:64:62:
                    a0:93:d6:c3:1e:94:b9:78:ee:61:56:04:7d:5a:c5:
                    3f:2b:8d:e6:34:70:10:24:0b:12:04:c8:58:33:35:
                    37:8d:17:a6:df:ce:86:7c:c1:90:74:09:21:e0:3a:
                    99:fc:62:23:2f:fa:fc:fc:f1:40:be:ca:1f:11:6e:
                    37:30:e1:f4:16:07:83:40:97:78:51:34:93:79:0a:
                    96:94:4b:5b:b4:8a:e1:c1:5b:0c:f6:5a:c4:e0:f3:
                    00:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:BD:17:9E:94:77:42:65:0E:FC:25:7C:09:20:7C:DF:3A:3D:68:82
            X509v3 Authority Key Identifier:
                keyid:06:2D:31:3B:09:9A:E8:6B:3F:4F:E2:E2:0B:B4:5F:8E:86:53:62:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919AFBE/BA018DB4BA1E11F0B987393BC4F9AE02/Bi0xOwma6Gs_T-LiC7RfjoZTYnM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Bi0xOwma6Gs_T-LiC7RfjoZTYnM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AFBE/BA018DB4BA1E11F0B987393BC4F9AE02/Bi0xOwma6Gs_T-LiC7RfjoZTYnM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:e1:fe:e0:2c:79:5a:a9:e2:04:fe:13:32:de:8b:2f:80:b4:
         08:8f:d8:c3:8a:38:f4:a1:3c:5d:7f:9d:59:79:fa:66:1d:0f:
         cc:c9:2b:ef:33:87:15:6a:3d:e2:17:22:bc:df:0d:71:12:bf:
         8c:eb:64:31:e8:6a:55:0d:62:80:f8:3a:20:c7:4f:43:5d:9f:
         9c:9c:02:c9:1d:9f:18:87:24:3f:38:77:47:7a:db:95:1f:ac:
         8c:d0:8d:7d:7e:63:21:e5:54:f4:7f:2c:77:a8:4d:f2:fa:d1:
         b1:15:34:ac:47:9b:10:fe:36:3f:a8:87:0f:07:ec:93:24:f3:
         bf:14:c1:22:85:65:d2:87:cb:82:5c:7b:cc:7a:de:60:96:d2:
         80:18:c1:cd:50:4f:ef:6c:ec:9f:6e:65:57:01:42:7b:db:cf:
         1d:6e:91:cc:83:98:da:8e:53:16:e5:a0:9c:80:32:8a:dc:35:
         fa:de:a8:7b:58:0a:d9:ea:35:36:d6:83:28:61:7b:8d:3e:52:
         e7:32:91:39:05:73:2f:2a:3b:2f:87:2d:be:1b:09:14:5c:98:
         62:c9:a1:12:50:9c:d5:4b:fa:90:40:6b:ef:94:0c:c8:53:4d:
         6f:c4:9f:c6:06:05:cb:3c:bf:4a:05:eb:28:c3:c1:b4:46:2b:
         e8:37:c7:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:07:02 2026 by rpki-client