Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB027/68F75910734611E9AD561B47C4F9AE02/bzPCWtM2F4RBLEKweYYz0Dslvso.mft
File:                     bzPCWtM2F4RBLEKweYYz0Dslvso.mft (raw, json)
Hash identifier:          SUXXMMhnrNZel2Bf17G8dFEOnfW3p4uh9G/ZVY0pOBo=
Subject key identifier:   CB:52:97:0A:9E:6A:9F:B0:52:D9:2F:05:03:DA:52:C7:AB:D1:0D:94
Authority key identifier: 6F:33:C2:5A:D3:36:17:84:41:2C:42:B0:79:86:33:D0:3B:25:BE:CA
Certificate issuer:       /CN=A91AB027/serialNumber=6F33C25AD3361784412C42B0798633D03B25BECA
Certificate serial:       0FC4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bzPCWtM2F4RBLEKweYYz0Dslvso.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB027/68F75910734611E9AD561B47C4F9AE02/bzPCWtM2F4RBLEKweYYz0Dslvso.mft
Manifest number:          0FBA
Signing time:             Mon 02 Mar 2026 00:42:50 +0000
Manifest this update:     Mon 02 Mar 2026 00:42:48 +0000
Manifest next update:     Mon 09 Mar 2026 00:42:48 +0000
Files and hashes:         1: bzPCWtM2F4RBLEKweYYz0Dslvso.crl (hash: MHyL3I7b4UL0IYi8XOAsa+05rS6iNvOFMCI6RIhRdN0=)
                          2: 62C1F5587ACD11E9AC0A867BC4F9AE02.roa (hash: HSDF6r0vrEGGhFaSVBrgmhu0L895iD5PYpCHtPDJbg8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB027/68F75910734611E9AD561B47C4F9AE02/bzPCWtM2F4RBLEKweYYz0Dslvso.crl
                          rsync://rpki.apnic.net/member_repository/A91AB027/68F75910734611E9AD561B47C4F9AE02/bzPCWtM2F4RBLEKweYYz0Dslvso.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bzPCWtM2F4RBLEKweYYz0Dslvso.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:42:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4036 (0xfc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB027, serialNumber=6F33C25AD3361784412C42B0798633D03B25BECA
        Validity
            Not Before: Mar  2 00:42:48 2026 GMT
            Not After : Mar  9 00:42:48 2026 GMT
        Subject: CN=69a4dd0a-aeb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:f9:78:19:18:81:e5:27:f9:7b:3d:d3:df:06:
                    b5:c7:f5:2c:a0:d0:76:89:43:23:ad:81:93:e9:53:
                    b1:6c:b6:82:c0:9c:fa:18:f8:91:33:2c:95:95:69:
                    7c:d5:ae:8b:a4:06:9e:37:e9:3e:a1:39:1b:b1:c7:
                    9f:13:5b:22:6f:f5:c9:c9:ae:66:92:a5:a6:0b:c0:
                    63:18:48:fe:1d:53:5f:c9:f1:6f:2f:59:a3:70:9c:
                    35:ef:2d:b0:7c:5b:d3:9c:49:e5:4d:0a:58:8e:6e:
                    e3:ae:1b:da:64:20:ad:3b:d0:3f:a4:eb:5e:0b:05:
                    0f:6b:5a:31:47:a3:ab:56:73:56:bc:a7:a0:e6:b1:
                    78:38:b3:aa:a3:ca:56:19:b9:ab:e9:09:f6:f4:05:
                    87:8a:74:4a:aa:ce:6b:3d:37:91:a6:8c:6d:ad:71:
                    09:7a:c3:a0:e7:24:fd:21:01:8e:e0:a3:fa:27:98:
                    e7:4a:4a:97:51:5c:27:5f:87:4d:c8:3a:34:5d:65:
                    d4:fa:8a:09:74:9c:42:71:c1:f0:fd:0e:12:75:de:
                    df:66:a1:22:5e:35:82:b2:e1:86:34:f2:b6:aa:b3:
                    8a:f6:7d:21:0b:59:63:67:77:f0:af:a5:fe:4e:64:
                    7b:78:f6:0e:93:dc:3c:1d:15:32:7f:01:12:ac:a4:
                    f4:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:52:97:0A:9E:6A:9F:B0:52:D9:2F:05:03:DA:52:C7:AB:D1:0D:94
            X509v3 Authority Key Identifier:
                keyid:6F:33:C2:5A:D3:36:17:84:41:2C:42:B0:79:86:33:D0:3B:25:BE:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB027/68F75910734611E9AD561B47C4F9AE02/bzPCWtM2F4RBLEKweYYz0Dslvso.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bzPCWtM2F4RBLEKweYYz0Dslvso.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB027/68F75910734611E9AD561B47C4F9AE02/bzPCWtM2F4RBLEKweYYz0Dslvso.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:22:17:86:66:31:b5:ce:41:bd:7b:8c:95:df:de:3e:77:75:
         27:5d:5a:e6:10:d6:c6:4f:72:b3:b2:7c:45:d3:4a:5e:01:04:
         5f:f5:cf:a5:7c:5e:e4:24:53:20:d3:33:f5:ee:22:1c:df:ac:
         31:fb:58:21:f4:9b:70:16:7a:42:85:1e:a0:23:db:03:9d:52:
         f9:fb:6b:a7:d4:a1:2d:bb:74:68:c2:e7:8d:6b:4b:8a:c6:6f:
         b4:b9:d3:ff:9f:9e:f1:a0:6e:87:80:e5:6b:98:98:46:fe:13:
         e0:a2:53:7b:34:ca:28:29:1d:8a:77:04:e9:e6:25:15:e1:04:
         8e:3e:5b:f4:f6:43:85:ba:6f:52:e4:9c:a4:62:18:e1:6f:5d:
         9b:ce:a2:e5:9d:f6:09:8e:c3:f1:89:ce:ea:1c:16:c8:06:26:
         7a:34:95:bf:88:80:66:6e:f4:e6:38:be:78:08:46:47:c9:bd:
         df:51:a5:58:0c:9c:25:55:28:6d:b6:17:0a:d7:c6:30:7b:8b:
         6a:e5:71:7a:a5:bf:7c:06:79:f9:df:ee:e3:98:08:8e:7d:44:
         46:d1:b6:36:e1:10:85:5d:d9:e6:e3:a4:87:0b:bf:15:f6:b7:
         e2:49:e9:2d:73:2e:b7:aa:f6:f4:02:83:5e:ce:8d:68:d2:be:
         92:d1:44:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:05:47 2026 by rpki-client