Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C146D/F4D5A67E003711F0BBD72475C4F9AE02/BKM4-nsSbgfA74urj33BycGsMiE.mft
File:                     BKM4-nsSbgfA74urj33BycGsMiE.mft (raw, json)
Hash identifier:          FD4mA67qK8VEEgjOsWOBTCf9WDWfizbtfZ8ZBUAJjcI=
Subject key identifier:   1C:D8:C9:B9:D8:49:42:A9:5B:D9:22:35:02:FD:21:48:99:61:E2:12
Authority key identifier: 04:A3:38:FA:7B:12:6E:07:C0:EF:8B:AB:8F:7D:C1:C9:C1:AC:32:21
Certificate issuer:       /CN=A91C146D/serialNumber=04A338FA7B126E07C0EF8BAB8F7DC1C9C1AC3221
Certificate serial:       B7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKM4-nsSbgfA74urj33BycGsMiE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C146D/F4D5A67E003711F0BBD72475C4F9AE02/BKM4-nsSbgfA74urj33BycGsMiE.mft
Manifest number:          B7
Signing time:             Mon 02 Mar 2026 01:57:59 +0000
Manifest this update:     Mon 02 Mar 2026 01:57:57 +0000
Manifest next update:     Mon 09 Mar 2026 01:57:57 +0000
Files and hashes:         1: BKM4-nsSbgfA74urj33BycGsMiE.crl (hash: 8s8Z2OFJ0+Tf07rzbWn5neVems0Kl76xFtrQm46uNgU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C146D/F4D5A67E003711F0BBD72475C4F9AE02/BKM4-nsSbgfA74urj33BycGsMiE.crl
                          rsync://rpki.apnic.net/member_repository/A91C146D/F4D5A67E003711F0BBD72475C4F9AE02/BKM4-nsSbgfA74urj33BycGsMiE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKM4-nsSbgfA74urj33BycGsMiE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:57:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 183 (0xb7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C146D, serialNumber=04A338FA7B126E07C0EF8BAB8F7DC1C9C1AC3221
        Validity
            Not Before: Mar  2 01:57:57 2026 GMT
            Not After : Mar  9 01:57:57 2026 GMT
        Subject: CN=69a4eea7-9365
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f7:37:0b:5c:f2:cb:9c:e6:4e:85:7d:3c:15:
                    bd:e6:67:f9:e0:47:96:b3:49:57:70:ae:e0:4e:57:
                    76:d5:24:a5:ef:28:fc:5b:52:cb:25:4f:4b:e8:a6:
                    e4:37:ac:cd:5b:81:e0:94:c7:65:ad:2c:d6:ef:df:
                    21:e5:5b:35:d0:16:00:ad:0a:1c:35:fd:80:3f:db:
                    c5:ec:fc:17:c8:15:b8:9e:d1:b9:43:dd:2f:f5:cd:
                    ce:0b:93:7b:05:00:f5:ab:78:46:cf:b9:71:b6:1e:
                    92:24:a5:2d:8e:bd:80:70:50:a1:54:5d:f0:d2:c8:
                    db:21:03:fd:c5:17:39:19:07:b3:d1:0f:07:d9:1d:
                    ba:07:35:f2:05:55:18:7b:0c:d8:81:1d:a1:6e:c7:
                    be:c5:c4:54:07:ef:eb:8e:69:b1:a3:72:44:e7:4c:
                    eb:41:8a:14:cc:b4:7b:74:d3:75:c3:02:0d:1b:30:
                    b4:ad:68:6c:99:51:12:f3:36:65:ff:58:39:68:0f:
                    a6:19:fc:2e:3c:a9:bf:2e:4e:2d:c9:4f:4d:16:de:
                    1b:2b:2c:3d:6c:6d:1d:de:d9:3c:68:a6:13:be:7a:
                    b2:cf:fe:f0:59:65:8a:49:ab:25:20:ba:e3:7c:47:
                    13:7a:75:a1:84:90:93:5e:bd:57:97:da:af:85:0d:
                    24:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:D8:C9:B9:D8:49:42:A9:5B:D9:22:35:02:FD:21:48:99:61:E2:12
            X509v3 Authority Key Identifier:
                keyid:04:A3:38:FA:7B:12:6E:07:C0:EF:8B:AB:8F:7D:C1:C9:C1:AC:32:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C146D/F4D5A67E003711F0BBD72475C4F9AE02/BKM4-nsSbgfA74urj33BycGsMiE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKM4-nsSbgfA74urj33BycGsMiE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C146D/F4D5A67E003711F0BBD72475C4F9AE02/BKM4-nsSbgfA74urj33BycGsMiE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:58:a0:09:19:46:b3:ec:46:d0:ca:86:13:b9:34:c2:ea:c7:
         37:65:5d:cb:0e:5e:30:02:98:58:ab:a9:ae:35:bb:56:94:32:
         0a:44:b4:8b:65:fe:8a:05:20:e5:c7:2d:53:22:7a:39:07:27:
         c4:6f:b2:05:94:61:bd:b5:88:ef:f7:9b:89:5b:5b:14:9e:b6:
         0a:00:8e:dd:5e:29:15:2d:b2:cf:f7:92:c6:db:20:a1:d6:70:
         fe:e8:b3:cb:1e:9c:c9:93:d0:39:51:e0:ac:41:db:58:2c:d7:
         4f:c3:98:d9:19:64:28:56:ad:a2:19:09:52:b9:67:c1:ec:b5:
         a2:8b:5f:c6:8c:39:90:6b:2d:95:03:32:cd:2f:70:b1:90:83:
         b8:20:04:ce:26:8c:f4:2f:81:40:93:ac:91:a1:ae:11:09:8f:
         de:2a:fd:d3:e1:b8:96:84:f7:be:1d:f8:ce:e6:8c:88:a3:7c:
         46:1f:55:34:bc:4c:65:bc:7d:8a:e0:cd:a8:7d:6f:8c:e1:06:
         27:05:17:85:51:17:3f:4d:47:89:37:b1:03:41:d9:68:69:b6:
         0e:51:7c:d2:f2:cf:c3:0a:28:d4:6f:e5:41:00:28:02:15:05:
         81:d9:f6:5d:b7:a8:f2:6c:28:44:b1:5b:b1:9f:18:76:48:31:
         c4:96:da:22
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICALcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzE0NkQxMTAvBgNVBAUTKDA0QTMzOEZBN0IxMjZFMDdDMEVGOEJBQjhGN0RDMUM5
QzFBQzMyMjEwHhcNMjYwMzAyMDE1NzU3WhcNMjYwMzA5MDE1NzU3WjAYMRYwFAYD
VQQDEw02OWE0ZWVhNy05MzY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyvc3C1zyy5zmToV9PBW95mf54EeWs0lXcK7gTld21SSl7yj8W1LLJU9L6Kbk
N6zNW4HglMdlrSzW798h5Vs10BYArQocNf2AP9vF7PwXyBW4ntG5Q90v9c3OC5N7
BQD1q3hGz7lxth6SJKUtjr2AcFChVF3w0sjbIQP9xRc5GQez0Q8H2R26BzXyBVUY
ewzYgR2hbse+xcRUB+/rjmmxo3JE50zrQYoUzLR7dNN1wwINGzC0rWhsmVES8zZl
/1g5aA+mGfwuPKm/Lk4tyU9NFt4bKyw9bG0d3tk8aKYTvnqyz/7wWWWKSaslILrj
fEcTenWhhJCTXr1Xl9qvhQ0krwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBzYybnY
SUKpW9kiNQL9IUiZYeISMB8GA1UdIwQYMBaAFASjOPp7Em4HwO+Lq499wcnBrDIh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTQ2RC9GNEQ1QTY3RTAw
MzcxMUYwQkJENzI0NzVDNEY5QUUwMi9CS000LW5zU2JnZkE3NHVyajMzQnljR3NN
aUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0JLTTQtbnNTYmdmQTc0dXJqMzNCeWNHc01pRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MTQ2RC9GNEQ1QTY3RTAwMzcxMUYwQkJENzI0NzVDNEY5QUUwMi9CS000LW5zU2Jn
ZkE3NHVyajMzQnljR3NNaUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALligCRlGs+xG0MqGE7k0wurHN2Vdyw5eMAKYWKuprjW7VpQyCkS0i2X+igUg
5cctUyJ6OQcnxG+yBZRhvbWI7/ebiVtbFJ62CgCO3V4pFS2yz/eSxtsgodZw/uiz
yx6cyZPQOVHgrEHbWCzXT8OY2RlkKFatohkJUrlnwey1ootfxow5kGstlQMyzS9w
sZCDuCAEziaM9C+BQJOskaGuEQmP3ir90+G4loT3vh34zuaMiKN8Rh9VNLxMZbx9
iuDNqH1vjOEGJwUXhVEXP01HiTexA0HZaGm2DlF80vLPwwoo1G/lQQAoAhUFgdn2
Xbeo8mwoRLFbsZ8YdkgxxJbaIg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:05:08 2026 by rpki-client