Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF2E1/3F69CC667F0311EBA081A02BC4F9AE02/bBl9pJIs_dxOmMiEbgOn19DkC3E.mft
File:                     bBl9pJIs_dxOmMiEbgOn19DkC3E.mft (raw, json)
Hash identifier:          so4iCuNXxWIDhlYT21mC6gAh8z0Iu9A6TKGl09d4+sk=
Subject key identifier:   16:B7:46:21:D1:73:73:AA:25:C2:E2:35:95:5E:DE:BE:87:CF:C2:4F
Authority key identifier: 6C:19:7D:A4:92:2C:FD:DC:4E:98:C8:84:6E:03:A7:D7:D0:E4:0B:71
Certificate issuer:       /CN=A91EF2E1/serialNumber=6C197DA4922CFDDC4E98C8846E03A7D7D0E40B71
Certificate serial:       070C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBl9pJIs_dxOmMiEbgOn19DkC3E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EF2E1/3F69CC667F0311EBA081A02BC4F9AE02/bBl9pJIs_dxOmMiEbgOn19DkC3E.mft
Manifest number:          06F7
Signing time:             Sat 28 Feb 2026 22:29:13 +0000
Manifest this update:     Sat 28 Feb 2026 22:29:12 +0000
Manifest next update:     Sat 07 Mar 2026 22:29:12 +0000
Files and hashes:         1: bBl9pJIs_dxOmMiEbgOn19DkC3E.crl (hash: Y7u0YJB1M70aED9MtEdPHbI5DfBNVXOx/RoA+KqB7Cw=)
                          2: 7D6F53547F0411EBB8CAEE2BC4F9AE02.roa (hash: VneqGQNP18iG+RzoK9rzGT1v0y/EKMK88ucBZjMvCCE=)
                          3: 08C849682F6E11EDA8ABA74BC4F9AE02.roa (hash: hmEwq8j3GlUgHO4QkFMDsLDsFyKYgDX+OadwrR+PhRU=)
                          4: ECCDCA04809A11EB9093216EC4F9AE02.roa (hash: //P4Dwc0yC8aNI6dL5grZWmAPuUGPAB2QMNisS1s91o=)
                          5: 397ED08A2F7911ED93B17C0FC4F9AE02.roa (hash: sO+5ZUlz1ZfgN4m9jGacz4xKmgRg5xQ7WfaHnr5n8EY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EF2E1/3F69CC667F0311EBA081A02BC4F9AE02/bBl9pJIs_dxOmMiEbgOn19DkC3E.crl
                          rsync://rpki.apnic.net/member_repository/A91EF2E1/3F69CC667F0311EBA081A02BC4F9AE02/bBl9pJIs_dxOmMiEbgOn19DkC3E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBl9pJIs_dxOmMiEbgOn19DkC3E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 22:29:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1804 (0x70c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EF2E1, serialNumber=6C197DA4922CFDDC4E98C8846E03A7D7D0E40B71
        Validity
            Not Before: Feb 28 22:29:12 2026 GMT
            Not After : Mar  7 22:29:12 2026 GMT
        Subject: CN=69a36c39-fda8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:80:fb:e3:cf:95:db:38:0c:03:23:ef:81:d3:
                    42:cb:3c:fc:c4:e6:5e:20:88:13:ba:10:43:33:aa:
                    d1:3e:e6:75:57:b7:cb:df:09:a9:c8:9d:c0:11:4b:
                    b3:ee:ff:10:83:03:79:bb:0c:88:e4:90:75:2a:8f:
                    a8:50:69:d6:20:c2:0b:2a:4b:be:28:72:d5:d0:08:
                    cb:c0:27:fc:51:7b:fc:fe:cb:0a:38:12:4d:f6:98:
                    11:36:20:34:11:cf:f7:7c:70:ac:5c:7a:0c:82:08:
                    4e:dd:95:3d:59:cd:7f:02:8c:f1:fb:38:c0:ec:3b:
                    ee:c7:1f:47:1a:69:64:f9:fb:6d:76:02:98:10:91:
                    2d:9d:65:41:fe:c1:6b:f0:71:a9:0a:24:fd:65:0a:
                    d2:a3:a3:98:13:1d:82:4f:a4:36:25:5b:b4:87:04:
                    5a:cf:bd:c7:96:ef:ab:ac:85:97:5b:83:99:40:d0:
                    50:7f:72:8e:e9:62:9a:c1:fc:64:85:9b:34:56:61:
                    a1:93:f3:5b:44:7d:fb:6d:38:ab:56:bf:54:a9:11:
                    79:af:19:09:31:0b:7c:87:ec:ed:c9:85:9f:c4:60:
                    66:87:44:bd:80:e8:da:d6:bd:26:8d:1e:40:4a:23:
                    82:ed:27:3f:2a:b6:0d:d5:b9:dd:ca:92:24:ab:d9:
                    e8:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:B7:46:21:D1:73:73:AA:25:C2:E2:35:95:5E:DE:BE:87:CF:C2:4F
            X509v3 Authority Key Identifier:
                keyid:6C:19:7D:A4:92:2C:FD:DC:4E:98:C8:84:6E:03:A7:D7:D0:E4:0B:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EF2E1/3F69CC667F0311EBA081A02BC4F9AE02/bBl9pJIs_dxOmMiEbgOn19DkC3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBl9pJIs_dxOmMiEbgOn19DkC3E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF2E1/3F69CC667F0311EBA081A02BC4F9AE02/bBl9pJIs_dxOmMiEbgOn19DkC3E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:fe:fe:bb:6f:8f:b2:ad:76:5d:88:a9:03:5f:6c:61:71:54:
         be:8b:0a:bb:31:04:bd:90:ef:6c:5a:d6:7c:cd:6c:64:8b:62:
         91:be:fd:f5:e3:62:9d:0a:ef:c8:e9:a9:11:c2:ef:65:d3:53:
         81:fa:b8:b8:af:b8:f5:ba:a7:f4:43:ce:e2:7e:88:d9:af:6d:
         0d:bb:4e:ae:69:2d:e5:9a:88:2d:21:bc:d0:16:33:85:0e:20:
         79:97:db:4f:cd:b3:9d:21:36:4d:fd:e6:ed:cd:2f:04:36:07:
         6b:de:6e:6e:cf:36:dd:f4:50:8f:48:ad:d1:c3:9d:1f:fc:aa:
         bc:f4:4a:02:39:45:10:2b:a9:7a:cc:33:4e:30:01:a9:fe:6e:
         de:e7:66:a4:c0:89:8c:08:04:ae:1a:d8:1c:ef:e3:4e:33:b6:
         14:62:d4:d5:5a:c7:ad:57:12:32:f5:e2:5a:e0:f1:5e:db:b1:
         fc:d8:80:36:bd:46:36:a1:6b:82:d7:e5:58:87:a8:a1:25:2a:
         3d:95:50:05:f9:8b:a9:36:2f:41:f9:7e:73:d2:23:a1:45:62:
         95:d1:b1:77:6f:36:14:82:c3:3e:db:d6:d0:28:e8:50:1b:45:
         4c:a5:59:ca:c2:cc:0f:59:d9:b1:6b:80:55:99:47:66:ec:0a:
         14:a2:9f:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:06:17 2026 by rpki-client