Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.mft
File:                     bcUkgWS7lS6Lntkjm-cQamPO8Gw.mft (raw, json)
Hash identifier:          1bnU5hvTEh6XWb6F6vcZYJEonSBRcs2aRKI6RB7HAes=
Subject key identifier:   9B:D9:68:0D:C1:C4:4C:91:BE:17:B3:98:D6:41:1B:80:B3:18:C2:51
Authority key identifier: 6D:C5:24:81:64:BB:95:2E:8B:9E:D9:23:9B:E7:10:6A:63:CE:F0:6C
Certificate issuer:       /CN=A91CF24F/serialNumber=6DC5248164BB952E8B9ED9239BE7106A63CEF06C
Certificate serial:       0A26
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bcUkgWS7lS6Lntkjm-cQamPO8Gw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.mft
Manifest number:          0A18
Signing time:             Sat 28 Feb 2026 20:04:35 +0000
Manifest this update:     Sat 28 Feb 2026 20:04:34 +0000
Manifest next update:     Sat 07 Mar 2026 20:04:34 +0000
Files and hashes:         1: bcUkgWS7lS6Lntkjm-cQamPO8Gw.crl (hash: Qd1BCvON3NvP6e8fDwCpM6nGFZ/ioZbtS/SU1sVPvew=)
                          2: 75D9F37C007A11ECA444E049C4F9AE02.roa (hash: dpLf2qBFe220x5GKZk4KYPgV5wQJtggmyE0D/YCjeAI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.crl
                          rsync://rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bcUkgWS7lS6Lntkjm-cQamPO8Gw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 20:04:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2598 (0xa26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CF24F, serialNumber=6DC5248164BB952E8B9ED9239BE7106A63CEF06C
        Validity
            Not Before: Feb 28 20:04:34 2026 GMT
            Not After : Mar  7 20:04:34 2026 GMT
        Subject: CN=69a34a53-c0a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2f:ea:f2:94:ce:f4:a3:86:e2:7e:f0:69:00:
                    37:7c:97:dd:7d:97:14:bb:08:2d:07:a8:ce:03:50:
                    13:5e:ea:32:66:7d:7c:b1:10:a7:c0:fc:10:5a:b0:
                    f9:c0:ee:46:b1:e9:e4:41:fc:bc:42:2b:4a:29:d9:
                    e3:70:93:42:39:64:c3:cc:d5:e1:f1:be:f7:a8:84:
                    fc:bf:e7:3c:d9:56:f2:8a:f8:63:3f:b8:52:93:17:
                    b1:ea:7a:88:e7:2c:2d:16:f8:e3:1b:91:d5:f9:26:
                    81:63:71:46:f3:cb:a9:09:cb:4b:13:44:4c:64:17:
                    44:d9:9e:61:4a:ec:86:86:c9:4c:ca:05:cd:4f:f1:
                    8f:a9:c5:fd:0f:dd:ed:0a:b8:eb:9a:c3:94:c7:47:
                    17:39:18:30:bd:06:1f:9c:56:5f:9d:f6:8d:27:f2:
                    82:0c:16:a5:e9:ae:b8:37:a4:70:b7:f4:02:5f:57:
                    72:da:42:e2:67:5b:6f:48:a3:64:f5:56:15:81:0e:
                    5c:22:e4:31:ae:b3:1a:8d:87:0c:5d:82:ba:1e:52:
                    86:04:87:46:e4:88:e7:b8:f2:29:3a:9d:f0:eb:fc:
                    b5:d1:4d:1c:8d:1a:47:6a:b0:6d:9d:bf:85:47:86:
                    bf:94:97:93:df:dc:8e:3e:7e:43:a4:d6:8d:52:e4:
                    d8:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:D9:68:0D:C1:C4:4C:91:BE:17:B3:98:D6:41:1B:80:B3:18:C2:51
            X509v3 Authority Key Identifier:
                keyid:6D:C5:24:81:64:BB:95:2E:8B:9E:D9:23:9B:E7:10:6A:63:CE:F0:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bcUkgWS7lS6Lntkjm-cQamPO8Gw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:0a:0c:6f:f2:30:d0:5d:99:f2:28:49:dc:e2:16:aa:2b:3f:
         d6:a5:ee:3f:b8:ba:c5:7f:3b:8e:0b:ff:12:24:ff:68:1e:ec:
         2f:c5:3b:4b:65:69:08:a8:50:04:cc:1e:25:80:f9:86:2c:27:
         e8:34:0e:ec:43:3b:94:e5:a3:e1:20:30:40:ac:a5:d6:4d:0b:
         1d:92:91:9d:e7:10:0c:6d:b2:9d:01:4d:10:87:f6:27:b2:ff:
         bb:35:b3:fa:a9:ae:dc:3f:00:56:72:73:be:76:bc:b1:7c:30:
         48:4b:6d:d5:e5:cd:cf:20:c9:39:80:1d:51:b1:fe:6b:72:94:
         13:18:55:17:4e:19:ab:2b:2c:0b:87:00:db:29:8c:34:57:5e:
         72:35:eb:e2:12:24:27:fc:bd:80:79:90:bb:dc:d6:f5:4a:55:
         ae:73:e4:14:97:39:c1:b1:26:9c:e2:b5:82:af:ef:00:fe:7d:
         22:6b:d6:3c:52:b6:97:60:fc:f5:fe:e7:d5:51:90:e3:4d:16:
         fd:00:5d:68:83:f5:27:88:87:69:e3:9e:bd:dd:ae:2c:39:aa:
         1f:07:d1:57:d8:90:48:7b:29:6e:0f:1e:3a:b0:8d:5f:5b:45:
         33:a6:5a:cc:a0:83:f1:7f:60:9b:fa:56:05:b9:e9:ab:bd:a5:
         2b:c5:84:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:49:31 2026 by rpki-client