Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.mft
File:                     bb1cTQEh_LMY54xFG29WcyCYYAI.mft (raw, json)
Hash identifier:          N8cgII/OAR+3u2/Axt4OctqeC2/EN9Tw9qNyWaFLRKM=
Subject key identifier:   5A:60:46:63:8E:C8:27:19:10:10:E1:47:2F:CA:34:4D:FA:98:16:20
Authority key identifier: 6D:BD:5C:4D:01:21:FC:B3:18:E7:8C:45:1B:6F:56:73:20:98:60:02
Certificate issuer:       /CN=A91D1216/serialNumber=6DBD5C4D0121FCB318E78C451B6F567320986002
Certificate serial:       044F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bb1cTQEh_LMY54xFG29WcyCYYAI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.mft
Manifest number:          0417
Signing time:             Sun 01 Mar 2026 01:23:08 +0000
Manifest this update:     Sun 01 Mar 2026 01:23:08 +0000
Manifest next update:     Sun 08 Mar 2026 01:23:08 +0000
Files and hashes:         1: bb1cTQEh_LMY54xFG29WcyCYYAI.crl (hash: ZM77gbGB4sO/ZpNu0AZk/6vBSYZ2jkoRj+TSxUhem7A=)
                          2: 9B0C244C73B611EEB18A0385C4F9AE02.roa (hash: 2Y9sjJKHecukVuvVbaq82FcEcKk1PVtU2APTvtdHmf4=)
                          3: 943D15902D1011EFBBEBA67BC4F9AE02.roa (hash: bpDflyeDea4iA77MAsR1yqXpb72az5BwoapOKhJMn4E=)
                          4: AD17704445F611EE97DF317CC4F9AE02.roa (hash: Clfd7tFcfwoObvQimW3finauT91uWKGe0cqtaB1OpHA=)
                          5: AEE9F9E6326011ED9031BC4FC4F9AE02.roa (hash: o0bGkeKtz3bzG/bWSV5R/zZyXNKnvRhJi3bUD0NjFsE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.crl
                          rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bb1cTQEh_LMY54xFG29WcyCYYAI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 01:23:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1103 (0x44f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D1216, serialNumber=6DBD5C4D0121FCB318E78C451B6F567320986002
        Validity
            Not Before: Mar  1 01:23:08 2026 GMT
            Not After : Mar  8 01:23:08 2026 GMT
        Subject: CN=69a394fc-c2fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e6:a2:bc:7b:17:05:0f:16:55:6e:c4:a6:f6:
                    ce:3f:7a:93:2d:9e:7f:5d:0c:cf:bf:d2:9c:46:bd:
                    86:3b:c2:0c:8a:bb:43:27:e5:fc:43:f8:95:b9:07:
                    1e:a4:e4:64:db:d3:3f:fd:bb:df:8c:8a:3f:7a:94:
                    91:36:96:64:19:aa:4b:58:5c:68:08:26:c4:26:bc:
                    7f:eb:6a:fb:d3:7a:f4:1c:1e:c2:02:b5:7e:95:d4:
                    44:12:3e:46:11:eb:2f:bc:94:ae:48:86:ea:c0:da:
                    b1:74:e7:59:c2:ee:47:22:70:42:bc:24:71:21:b9:
                    d9:2e:fc:c3:1e:71:49:2a:ff:bf:83:b6:5f:e8:14:
                    0c:d6:e8:42:22:52:37:c9:17:36:13:f9:01:f7:72:
                    59:18:59:1b:11:7b:16:4d:b2:c9:9e:5d:4d:dd:8e:
                    7b:7c:ef:93:75:25:0e:e2:51:2e:38:3e:1f:d1:d9:
                    7c:bc:fb:97:d0:32:5c:be:84:6c:6c:47:6c:10:c8:
                    00:28:9f:07:76:b3:72:87:3b:bd:e6:47:f2:bf:60:
                    dd:f1:a2:ca:22:7c:1f:22:95:bc:94:45:5a:f1:12:
                    9a:bf:4c:0c:4a:79:d8:db:e1:b1:fc:64:70:42:d8:
                    68:26:d3:6f:33:25:d7:93:6c:38:29:6d:47:d9:62:
                    1e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:60:46:63:8E:C8:27:19:10:10:E1:47:2F:CA:34:4D:FA:98:16:20
            X509v3 Authority Key Identifier:
                keyid:6D:BD:5C:4D:01:21:FC:B3:18:E7:8C:45:1B:6F:56:73:20:98:60:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bb1cTQEh_LMY54xFG29WcyCYYAI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:5c:43:cd:7a:ad:57:1f:1d:2a:5c:66:06:2e:0f:61:6e:bb:
         db:55:9b:7e:e3:dd:ae:75:a9:94:09:a6:9c:f2:13:20:a0:9d:
         7c:cd:a6:87:9e:a2:50:3d:7b:d7:7d:6c:57:42:f2:26:b5:fb:
         96:30:14:07:f8:06:43:03:a1:f1:62:2a:82:f8:72:04:92:80:
         68:70:9b:ff:58:05:90:a1:e2:da:e3:46:81:39:e7:16:d1:09:
         be:63:f9:43:2c:74:05:49:a0:6d:ca:14:72:eb:a3:9e:68:44:
         51:b5:16:40:5b:73:67:f8:6f:83:b2:4c:4c:1a:5f:2e:84:3e:
         cf:45:a3:76:d2:41:3b:4a:5a:5f:2b:bb:a6:48:2e:5f:2d:b1:
         04:4f:4a:5c:ca:2d:ca:13:85:09:e2:98:ed:23:71:d8:89:c0:
         7c:4c:38:3f:43:0d:b3:fc:31:cf:5a:b7:89:f6:3c:9c:8c:95:
         12:ca:b4:e9:ca:0d:c6:ab:83:d5:9b:b5:20:0c:8d:5d:f9:8f:
         47:a1:be:ec:88:45:ec:20:f1:87:6f:d7:0e:19:36:14:84:8d:
         0b:0a:7a:42:a4:ca:97:32:2a:84:c2:30:0c:32:e0:c9:4f:1b:
         bd:1d:9b:61:02:54:22:06:9c:a7:bf:12:94:f1:d3:db:d3:a7:
         b4:0f:18:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:15:11 2026 by rpki-client