Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCAF1/09C0D3668AAD11EFBEF9166AC4F9AE02/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.mft
File:                     bBlGl4FvmxMLpTz0vuZ2AVlOjLE.mft (raw, json)
Hash identifier:          fjwenXXPRrTjdxYiYbUUVNaqHC45qIn++yE4D2eHVYw=
Subject key identifier:   E9:7D:D5:A6:A8:03:63:AE:AD:F2:7D:C3:1B:1B:49:3A:0F:D4:D9:C2
Authority key identifier: 6C:19:46:97:81:6F:9B:13:0B:A5:3C:F4:BE:E6:76:01:59:4E:8C:B1
Certificate issuer:       /CN=A91CCAF1/serialNumber=6C194697816F9B130BA53CF4BEE67601594E8CB1
Certificate serial:       0107
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CCAF1/09C0D3668AAD11EFBEF9166AC4F9AE02/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.mft
Manifest number:          0105
Signing time:             Sun 01 Mar 2026 07:09:42 +0000
Manifest this update:     Sun 01 Mar 2026 07:09:41 +0000
Manifest next update:     Sun 08 Mar 2026 07:09:41 +0000
Files and hashes:         1: bBlGl4FvmxMLpTz0vuZ2AVlOjLE.crl (hash: gCEA4FW+1fF03ZXSKuEg/pwX8TReJb86aRmm+6zB4Xs=)
                          2: BF71D9D0F26811EFBC446868C4F9AE02.roa (hash: 2f3u95lJSNskCNREu+ioXj6oMF+zHFPqIr2DagPPIWc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CCAF1/09C0D3668AAD11EFBEF9166AC4F9AE02/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.crl
                          rsync://rpki.apnic.net/member_repository/A91CCAF1/09C0D3668AAD11EFBEF9166AC4F9AE02/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 07:09:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 263 (0x107)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CCAF1, serialNumber=6C194697816F9B130BA53CF4BEE67601594E8CB1
        Validity
            Not Before: Mar  1 07:09:41 2026 GMT
            Not After : Mar  8 07:09:41 2026 GMT
        Subject: CN=69a3e636-1341
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c3:cc:5c:8b:4b:60:9a:26:c8:4c:cd:3e:0b:
                    96:1f:e8:fd:e7:99:e6:85:ea:f9:fd:4d:07:13:2e:
                    18:45:12:d3:ee:d7:0e:bb:85:c8:56:c8:19:d4:89:
                    6e:43:6b:cf:24:fd:63:02:03:61:5f:42:4b:4e:5d:
                    b7:d5:0f:fe:08:ba:95:33:ed:51:99:e8:d3:a8:d2:
                    53:a0:f7:ec:f9:c0:f1:62:a0:c9:95:f2:39:00:5c:
                    ab:4a:db:57:15:b3:8c:57:bb:37:9d:fc:23:1a:6d:
                    ad:66:e1:8b:f6:9c:b6:96:b8:45:90:02:b0:45:72:
                    16:7f:96:0b:eb:e6:7a:94:00:f7:23:5c:bc:ad:61:
                    26:c3:33:88:a9:13:f1:f3:e2:0f:29:1d:90:18:d6:
                    44:2b:5d:4a:31:b1:ff:ff:19:68:b8:59:cc:21:46:
                    93:1d:ce:db:87:84:de:0f:e0:45:49:fe:06:41:ef:
                    4b:82:d9:6e:0d:1f:d8:ae:0b:b6:fe:29:c5:c7:db:
                    58:af:f1:d6:ba:b5:c3:bb:d0:09:b0:f3:aa:20:01:
                    3c:10:f9:ea:10:70:0b:a7:8e:71:3e:24:e7:52:da:
                    99:b5:55:de:15:4c:31:c9:91:44:06:43:26:07:d8:
                    ed:52:93:52:73:f2:ce:55:ab:d9:90:a1:3c:4b:2e:
                    bc:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:7D:D5:A6:A8:03:63:AE:AD:F2:7D:C3:1B:1B:49:3A:0F:D4:D9:C2
            X509v3 Authority Key Identifier:
                keyid:6C:19:46:97:81:6F:9B:13:0B:A5:3C:F4:BE:E6:76:01:59:4E:8C:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CCAF1/09C0D3668AAD11EFBEF9166AC4F9AE02/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCAF1/09C0D3668AAD11EFBEF9166AC4F9AE02/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:c5:de:c7:39:12:67:c3:e3:a9:66:7f:a4:c7:9f:b1:eb:22:
         31:7b:6c:26:5b:b1:ac:b6:fc:d2:62:4e:14:1b:a2:e5:74:08:
         04:10:39:69:cb:91:a4:c2:9e:67:3e:16:88:62:ba:fa:f1:96:
         5f:6a:2c:91:9f:7e:18:eb:62:96:f6:f6:2f:04:85:af:36:84:
         9d:ec:f2:a1:a6:ec:20:f5:66:94:63:26:1b:e7:1e:41:98:9a:
         f7:bd:ce:e4:6d:9e:d3:ef:e6:00:02:b2:ed:02:59:ed:00:11:
         aa:07:1b:74:5d:0d:1b:4d:4f:23:8e:63:b1:39:0b:44:0b:d1:
         41:06:07:67:ab:aa:3d:b3:31:e1:f9:b7:6d:28:c7:ab:e1:0f:
         f6:1f:77:29:56:d8:13:36:4a:e9:74:8c:5f:c9:f9:e9:6c:3f:
         6c:b7:4f:30:40:b2:01:7a:21:48:4d:ac:02:8f:be:b4:c0:35:
         9c:56:83:0b:08:71:73:79:d7:db:a5:ab:c9:ef:f0:c6:f1:30:
         e3:84:3e:de:32:46:f7:c5:b3:dd:3e:4d:15:f0:43:23:fd:0f:
         19:23:eb:89:b2:31:cc:cd:25:ac:61:64:af:39:57:21:30:6c:
         37:10:bf:49:2f:9d:ea:ba:27:5c:9d:0a:c4:ab:08:70:6f:11:
         a9:90:01:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:16:09 2026 by rpki-client