Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEBCC/2AE8981A272711EF9143E622C4F9AE02/bath0S4_GW9RaThyPIAnWZxddVI.mft
File:                     bath0S4_GW9RaThyPIAnWZxddVI.mft (raw, json)
Hash identifier:          AbIIis1q937O5MIx5DpfokYVsDWj2unJCsvOxW3wRSA=
Subject key identifier:   44:24:27:C0:DB:E3:A5:B4:A9:CF:4F:DA:77:C4:79:6E:EF:CA:B5:82
Authority key identifier: 6D:AB:61:D1:2E:3F:19:6F:51:69:38:72:3C:80:27:59:9C:5D:75:52
Certificate issuer:       /CN=A91CEBCC/serialNumber=6DAB61D12E3F196F516938723C8027599C5D7552
Certificate serial:       0154
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bath0S4_GW9RaThyPIAnWZxddVI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CEBCC/2AE8981A272711EF9143E622C4F9AE02/bath0S4_GW9RaThyPIAnWZxddVI.mft
Manifest number:          014D
Signing time:             Mon 02 Mar 2026 01:36:27 +0000
Manifest this update:     Mon 02 Mar 2026 01:36:25 +0000
Manifest next update:     Mon 09 Mar 2026 01:36:25 +0000
Files and hashes:         1: bath0S4_GW9RaThyPIAnWZxddVI.crl (hash: r7aDZbYxhzOgjj/Da+m4w55InDeDU4ne/pRpnp0pxJ0=)
                          2: CBB24958FF2511F09CBC8DC686EE528E.roa (hash: hScirkgRSexQDvrxYU3M3859w1cY57Bw0t1xqYWGOh8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CEBCC/2AE8981A272711EF9143E622C4F9AE02/bath0S4_GW9RaThyPIAnWZxddVI.crl
                          rsync://rpki.apnic.net/member_repository/A91CEBCC/2AE8981A272711EF9143E622C4F9AE02/bath0S4_GW9RaThyPIAnWZxddVI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bath0S4_GW9RaThyPIAnWZxddVI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:36:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 340 (0x154)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CEBCC, serialNumber=6DAB61D12E3F196F516938723C8027599C5D7552
        Validity
            Not Before: Mar  2 01:36:25 2026 GMT
            Not After : Mar  9 01:36:25 2026 GMT
        Subject: CN=69a4e99b-20af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:00:f3:f3:9f:b8:d9:8b:3f:80:6c:5e:fe:e9:
                    2a:da:9e:0a:ab:c4:5a:2f:eb:87:54:f4:30:0f:79:
                    dd:4b:20:f7:c0:5a:eb:f6:11:17:b5:4a:ee:fc:6a:
                    88:cb:88:80:c3:e6:0b:1b:42:60:f7:f3:b8:0e:03:
                    a6:2a:37:2b:ba:03:ae:d5:db:0f:7f:04:8e:5f:c9:
                    99:15:e0:d4:1d:c5:2e:9b:86:c2:7c:b4:8b:5e:a8:
                    e8:0f:b9:0d:70:dd:40:de:6f:4f:c1:77:3d:a4:03:
                    92:fb:2d:71:c0:58:e5:16:fa:64:2d:04:e0:4c:0d:
                    cd:a6:ce:f7:a6:43:5d:89:7c:76:7c:02:da:65:be:
                    a8:dc:ae:a5:2f:f0:7f:6e:35:d9:c8:54:e7:5e:6f:
                    ee:f5:3a:89:5f:d7:5e:a6:32:b3:b3:ec:71:b5:48:
                    44:0f:b3:4c:da:0d:ea:5e:a6:48:73:d2:ae:b8:29:
                    93:6a:a1:68:78:bb:4a:ad:2a:5a:7e:b9:d6:65:f4:
                    c5:f3:e7:8f:5f:b2:07:db:bd:f9:c7:02:9e:8e:6f:
                    2c:0b:57:1e:63:32:41:9f:73:26:a8:e8:15:80:83:
                    d9:8f:40:89:f2:d9:e6:5e:20:ee:45:79:4c:d8:d2:
                    66:ba:a7:d5:c7:87:31:e9:9c:db:cd:25:b8:4d:db:
                    6f:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:24:27:C0:DB:E3:A5:B4:A9:CF:4F:DA:77:C4:79:6E:EF:CA:B5:82
            X509v3 Authority Key Identifier:
                keyid:6D:AB:61:D1:2E:3F:19:6F:51:69:38:72:3C:80:27:59:9C:5D:75:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CEBCC/2AE8981A272711EF9143E622C4F9AE02/bath0S4_GW9RaThyPIAnWZxddVI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bath0S4_GW9RaThyPIAnWZxddVI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEBCC/2AE8981A272711EF9143E622C4F9AE02/bath0S4_GW9RaThyPIAnWZxddVI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:72:6d:0d:48:9a:39:9e:8f:96:6c:0d:d9:40:be:c2:04:44:
         fa:20:c8:0b:4f:54:0f:fc:de:42:a4:1c:70:f7:e6:ff:78:a4:
         a4:46:48:5f:f0:6e:61:a5:85:05:f8:a9:7c:74:bc:68:11:e8:
         ec:5f:fa:c1:65:d4:d1:76:2c:18:0c:03:cc:b4:9e:00:05:58:
         c6:bb:5b:16:9d:7a:e1:e2:f1:93:a6:de:6b:25:b4:c6:4b:dc:
         be:87:5b:fe:1c:a1:a2:72:c5:80:0f:9b:7d:ab:0a:d9:e1:0a:
         0f:f1:bb:4a:ff:2a:dd:03:a2:5e:b9:88:39:37:5a:82:68:b6:
         32:8f:5a:2d:ba:72:43:5e:75:a2:ec:68:00:40:38:39:ff:d7:
         76:ba:09:a8:09:72:17:76:2e:e2:c6:52:cb:d1:1a:3d:bf:04:
         cb:d2:86:1e:39:22:70:42:ba:7b:b8:bb:a0:cf:b3:6e:fc:53:
         9a:12:90:e0:ef:52:f4:0f:0a:5f:80:5e:e7:91:a8:9a:b2:bd:
         ba:e2:63:1c:4b:d5:5c:6e:b1:e0:7e:ae:39:fe:a6:29:7b:11:
         be:f5:65:d1:ba:7e:51:45:34:d2:09:9e:51:a7:c8:5e:1f:86:
         b2:4f:57:b4:dd:5f:d4:fa:43:56:fb:a5:21:af:6f:a9:cb:ec:
         8d:83:3f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:38:52 2026 by rpki-client