Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C40D1/CC7830B0C30911E8900E5F21C4F9AE02/bLMNwI7ylzDp3wScVPOVgquFvpQ.mft
File:                     bLMNwI7ylzDp3wScVPOVgquFvpQ.mft (raw, json)
Hash identifier:          Oxo/64e14EVEgU5E5RtaePL8mPmyGo+BRCJL9ApKQHo=
Subject key identifier:   B1:4B:31:9E:FE:33:6B:29:6F:28:51:49:D6:80:DA:A0:C4:2A:68:83
Authority key identifier: 6C:B3:0D:C0:8E:F2:97:30:E9:DF:04:9C:54:F3:95:82:AB:85:BE:94
Certificate issuer:       /CN=A91C40D1/serialNumber=6CB30DC08EF29730E9DF049C54F39582AB85BE94
Certificate serial:       1350
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLMNwI7ylzDp3wScVPOVgquFvpQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C40D1/CC7830B0C30911E8900E5F21C4F9AE02/bLMNwI7ylzDp3wScVPOVgquFvpQ.mft
Manifest number:          1342
Signing time:             Sun 01 Mar 2026 22:36:28 +0000
Manifest this update:     Sun 01 Mar 2026 22:36:27 +0000
Manifest next update:     Sun 08 Mar 2026 22:36:27 +0000
Files and hashes:         1: bLMNwI7ylzDp3wScVPOVgquFvpQ.crl (hash: 0/ek/2lqppPlwyc5JwEWr4Xq+VrdTP7oG7r/468sgx8=)
                          2: 18272628C30B11E8A6851824C4F9AE02.roa (hash: kMK6cFoyDF+YC63uz7mLOHILoZmbrgDgimkdvFEz5OA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C40D1/CC7830B0C30911E8900E5F21C4F9AE02/bLMNwI7ylzDp3wScVPOVgquFvpQ.crl
                          rsync://rpki.apnic.net/member_repository/A91C40D1/CC7830B0C30911E8900E5F21C4F9AE02/bLMNwI7ylzDp3wScVPOVgquFvpQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLMNwI7ylzDp3wScVPOVgquFvpQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 22:36:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4944 (0x1350)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C40D1, serialNumber=6CB30DC08EF29730E9DF049C54F39582AB85BE94
        Validity
            Not Before: Mar  1 22:36:27 2026 GMT
            Not After : Mar  8 22:36:27 2026 GMT
        Subject: CN=69a4bf6c-b479
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3d:b7:e7:12:56:ee:e1:4f:44:2a:b3:d4:5c:
                    11:59:84:9a:36:39:43:bb:d9:d8:e1:5b:56:28:90:
                    cd:38:62:b8:e1:78:64:9a:1b:bf:85:b4:09:5c:f6:
                    ca:bf:a7:13:60:34:04:c5:47:c1:8c:e5:91:7e:23:
                    f9:70:70:9d:66:c4:4a:b6:64:66:66:18:82:4c:bb:
                    5a:9b:97:fb:e2:45:23:dd:c7:f5:e5:c9:2b:b6:fb:
                    35:df:da:74:49:40:5c:d8:48:3b:43:5e:2a:0b:db:
                    c9:d7:95:f5:ec:e6:23:30:c0:6a:91:57:ea:f1:95:
                    69:b3:3b:e8:1d:16:32:e6:84:59:ba:6f:10:3b:51:
                    80:93:ce:0a:75:10:3a:05:1f:f4:e5:49:39:e8:c4:
                    1e:b7:9d:af:30:56:4f:f1:d8:6e:75:57:0d:62:0d:
                    64:68:98:5d:17:f2:eb:43:0f:7b:2f:cd:3e:d8:84:
                    58:1b:38:94:4a:a7:c0:81:cc:38:96:a2:a3:e0:3d:
                    3b:89:34:b0:d1:e5:fd:f3:ff:84:30:7d:7a:44:e7:
                    3e:f4:43:cf:48:73:63:4d:63:9e:32:9e:f1:21:fc:
                    01:93:5c:05:2e:e5:f4:7d:a5:98:56:13:9b:db:3c:
                    cf:5a:f8:db:cd:de:60:eb:01:70:83:97:aa:f2:4f:
                    8e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:4B:31:9E:FE:33:6B:29:6F:28:51:49:D6:80:DA:A0:C4:2A:68:83
            X509v3 Authority Key Identifier:
                keyid:6C:B3:0D:C0:8E:F2:97:30:E9:DF:04:9C:54:F3:95:82:AB:85:BE:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C40D1/CC7830B0C30911E8900E5F21C4F9AE02/bLMNwI7ylzDp3wScVPOVgquFvpQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLMNwI7ylzDp3wScVPOVgquFvpQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C40D1/CC7830B0C30911E8900E5F21C4F9AE02/bLMNwI7ylzDp3wScVPOVgquFvpQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:c6:18:ba:7e:79:57:24:d3:2f:b0:85:28:28:16:aa:f1:5a:
         a3:fe:4b:b2:25:c6:cb:84:a2:b2:6a:91:dd:43:cc:cd:f0:07:
         80:98:16:3d:89:c4:af:68:94:64:81:fd:42:3f:0f:9d:c0:a7:
         4a:0a:9f:d1:aa:68:07:ed:5e:ed:39:bc:d6:8d:c6:5c:58:2c:
         18:a8:71:59:a1:6b:4d:eb:f7:75:cb:39:4a:ea:06:3f:ec:ef:
         c2:d5:63:68:61:65:6d:c8:ab:01:b0:6e:14:1b:10:08:e3:42:
         64:a9:05:6a:96:84:93:9a:0d:5a:2a:4e:75:64:1d:b4:92:62:
         fb:e3:18:80:82:a7:40:79:3a:e5:e4:be:07:6f:d1:81:de:63:
         fd:83:cd:96:df:8a:67:55:b5:c6:35:34:06:67:4d:59:3d:a3:
         99:e8:90:7e:e9:c6:ca:51:bd:65:54:2e:b6:d5:a8:93:27:e5:
         64:31:ec:0b:1a:f5:b6:b6:a7:fe:e0:51:f6:9d:67:c8:76:31:
         e3:94:60:8d:2f:87:9d:90:3f:91:52:6c:ce:90:43:52:88:21:
         d4:15:a0:71:fd:e6:e0:7a:6c:f0:ab:0e:ec:92:ca:cb:df:a0:
         68:1f:83:cc:2d:d8:89:2a:ae:57:73:73:d7:7b:e0:d3:e4:70:
         68:96:a1:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:04:58 2026 by rpki-client