Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD468/5B4A33C68C8F11EDBC8A6114C4F9AE02/7Tl4HnyiYyxUt_riJU4h8Bugdoc.mft
File:                     7Tl4HnyiYyxUt_riJU4h8Bugdoc.mft (raw, json)
Hash identifier:          x1WDDap4b+vfCxMmo/H8F/mPwuBYPiVVxqmoDLj6Jio=
Subject key identifier:   39:76:B3:1E:11:38:A2:81:EF:22:C3:D7:15:88:24:C8:3A:E2:7D:6D
Authority key identifier: ED:39:78:1E:7C:A2:63:2C:54:B7:FA:E2:25:4E:21:F0:1B:A0:76:87
Certificate issuer:       /CN=A91DD468/serialNumber=ED39781E7CA2632C54B7FAE2254E21F01BA07687
Certificate serial:       0255
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Tl4HnyiYyxUt_riJU4h8Bugdoc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DD468/5B4A33C68C8F11EDBC8A6114C4F9AE02/7Tl4HnyiYyxUt_riJU4h8Bugdoc.mft
Manifest number:          024F
Signing time:             Sun 01 Mar 2026 23:59:41 +0000
Manifest this update:     Sun 01 Mar 2026 23:59:39 +0000
Manifest next update:     Sun 08 Mar 2026 23:59:39 +0000
Files and hashes:         1: 7Tl4HnyiYyxUt_riJU4h8Bugdoc.crl (hash: M+/f36iUSmK0EjNSpyX17LzQpAmq7pExF3Mu1qIBwOo=)
                          2: 3FF7C9468C9211ED8D052619C4F9AE02.roa (hash: aQw0D37afO5neo4AokVg/IzSK3eNpaf2rox5ksNIBBY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DD468/5B4A33C68C8F11EDBC8A6114C4F9AE02/7Tl4HnyiYyxUt_riJU4h8Bugdoc.crl
                          rsync://rpki.apnic.net/member_repository/A91DD468/5B4A33C68C8F11EDBC8A6114C4F9AE02/7Tl4HnyiYyxUt_riJU4h8Bugdoc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Tl4HnyiYyxUt_riJU4h8Bugdoc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:59:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 597 (0x255)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DD468, serialNumber=ED39781E7CA2632C54B7FAE2254E21F01BA07687
        Validity
            Not Before: Mar  1 23:59:39 2026 GMT
            Not After : Mar  8 23:59:39 2026 GMT
        Subject: CN=69a4d2ec-599d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:bc:8f:b7:90:dc:34:e2:01:ec:96:dc:81:c9:
                    7c:b7:41:c7:0b:52:42:eb:54:cc:e5:4e:6d:cb:7d:
                    a1:1e:ae:5a:3d:98:b0:67:6f:28:95:d8:65:58:fb:
                    1b:3c:77:03:4e:dd:0e:7a:0e:7e:e9:c9:71:9f:9d:
                    4d:41:19:0e:91:1a:d7:44:de:5a:51:55:c2:0c:4a:
                    a1:f7:86:40:86:ab:dc:31:9d:dc:cc:ed:27:02:36:
                    20:d7:c6:a3:05:0e:87:20:b3:99:9e:73:3e:51:fb:
                    b6:ef:12:b8:cb:e8:11:e4:3e:11:4b:d9:e8:e2:2a:
                    c6:87:60:0e:79:2a:2e:88:61:7d:9c:9e:54:32:97:
                    47:46:31:c5:c7:2f:86:3f:54:81:d2:b6:dd:83:07:
                    16:0f:98:f5:7f:a8:83:e9:58:45:b7:a6:a0:8e:4f:
                    a1:fd:f1:4b:28:8b:3f:80:c4:80:30:74:e6:ff:b1:
                    7a:79:43:5f:cb:f8:63:33:63:1d:17:ac:ab:48:fa:
                    e2:c4:ca:b2:9c:13:50:a8:ef:1e:12:41:36:45:d2:
                    1a:97:69:11:a6:51:13:a9:c4:41:a5:a0:84:bd:b6:
                    1e:2b:fe:d2:0b:7c:ea:e9:b0:16:da:d9:5d:b5:73:
                    f7:c0:3d:4c:07:b5:f4:d0:bc:0a:bc:dc:a3:58:b9:
                    73:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:76:B3:1E:11:38:A2:81:EF:22:C3:D7:15:88:24:C8:3A:E2:7D:6D
            X509v3 Authority Key Identifier:
                keyid:ED:39:78:1E:7C:A2:63:2C:54:B7:FA:E2:25:4E:21:F0:1B:A0:76:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DD468/5B4A33C68C8F11EDBC8A6114C4F9AE02/7Tl4HnyiYyxUt_riJU4h8Bugdoc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Tl4HnyiYyxUt_riJU4h8Bugdoc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD468/5B4A33C68C8F11EDBC8A6114C4F9AE02/7Tl4HnyiYyxUt_riJU4h8Bugdoc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:3e:a8:cf:42:7f:b7:55:56:b3:2c:8d:32:ae:d4:20:e8:95:
         b7:a7:54:13:73:46:34:ec:61:5c:63:a0:87:75:51:66:6d:cf:
         3c:ca:01:f0:f1:5f:b7:e0:f0:6c:17:c5:a3:c0:1f:4b:c9:24:
         51:94:0d:9c:e3:35:90:09:97:44:12:cc:6e:ce:b4:c4:44:ac:
         f6:f0:ed:8f:82:66:4f:a9:2d:fe:48:b2:4e:63:6e:a3:f6:78:
         f6:9e:b9:f0:b1:de:02:26:a2:37:1d:7b:20:4e:6a:74:56:53:
         a2:ab:47:be:5d:0e:c3:da:08:e8:73:21:03:50:7b:2b:c6:e9:
         7a:53:af:2d:79:87:42:3f:55:dd:bf:5a:5b:a5:65:06:36:60:
         5a:75:72:a4:0f:03:30:e4:ba:0a:0a:99:25:75:f2:52:a3:2b:
         0f:8a:3c:a6:e7:ca:97:ec:6e:1d:87:38:63:1f:09:cd:5d:bd:
         12:f0:2e:3f:bd:d6:ab:35:4b:eb:71:37:82:32:6c:a6:35:a9:
         da:73:19:ed:eb:da:d1:f3:15:85:ef:d1:cb:e4:06:03:e5:0a:
         39:26:a2:ce:7e:1b:1a:85:b5:86:d9:2d:d2:1c:48:cc:f3:41:
         91:e9:1e:53:1b:88:e9:ca:93:cf:45:d8:43:2d:4f:4d:01:18:
         46:67:de:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:00:24 2026 by rpki-client