Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.mft
File:                     Bt9S0pFQPQ4rEXLThcKxh3lMecc.mft (raw, json)
Hash identifier:          y3fjXzN17zSR8FoBukG7lSm+R2B6Fq7EC0SofhSmIZs=
Subject key identifier:   B7:13:0D:F8:AB:15:12:CF:50:30:67:8F:46:99:A6:91:E2:B6:E2:5C
Authority key identifier: 06:DF:52:D2:91:50:3D:0E:2B:11:72:D3:85:C2:B1:87:79:4C:79:C7
Certificate issuer:       /CN=A91F6E7D/serialNumber=06DF52D291503D0E2B1172D385C2B187794C79C7
Certificate serial:       0A52
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Bt9S0pFQPQ4rEXLThcKxh3lMecc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.mft
Manifest number:          0A48
Signing time:             Mon 02 Mar 2026 02:43:23 +0000
Manifest this update:     Mon 02 Mar 2026 02:43:21 +0000
Manifest next update:     Mon 09 Mar 2026 02:43:21 +0000
Files and hashes:         1: Bt9S0pFQPQ4rEXLThcKxh3lMecc.crl (hash: uT63B3TJYwzU5vJQIgdBdCt+UEJJXiNaHdlMAvEEMvI=)
                          2: 401EA996B5B511EABB640052C4F9AE02.roa (hash: 3UdrZqdhdDJ0HDKYCaHDQZmp3LAxyKD7mCp5FO7bhxY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.crl
                          rsync://rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Bt9S0pFQPQ4rEXLThcKxh3lMecc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:43:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2642 (0xa52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F6E7D, serialNumber=06DF52D291503D0E2B1172D385C2B187794C79C7
        Validity
            Not Before: Mar  2 02:43:21 2026 GMT
            Not After : Mar  9 02:43:21 2026 GMT
        Subject: CN=69a4f94a-181e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:55:2c:f8:1b:2a:c4:1a:dd:f7:0e:a4:55:48:
                    04:0c:ed:e3:8c:83:17:20:5d:c1:bc:9a:59:b9:b7:
                    53:a1:a8:c3:77:be:2b:f1:7d:59:76:aa:e4:ec:b3:
                    ae:ad:e4:1e:e2:2e:43:10:72:7c:f9:fe:66:65:d7:
                    6b:11:29:4f:0b:3f:9c:c9:ab:fb:17:cb:0e:0d:6f:
                    db:3c:05:d7:03:a3:5f:0d:33:52:45:99:e6:b2:2c:
                    fc:e6:f7:15:eb:76:ea:0a:30:3b:a5:d1:4f:79:8d:
                    1f:93:36:76:94:b7:94:70:9f:46:4c:7c:74:41:22:
                    6d:c1:de:19:fb:44:51:75:df:6a:fd:a5:18:ae:dd:
                    e9:06:af:e7:aa:ff:6d:0f:6a:bb:8e:9f:c7:71:bb:
                    72:48:11:c1:67:92:d8:4a:7a:8a:fc:dc:85:a1:8f:
                    ca:79:8e:48:55:f5:e5:ad:fb:c3:3b:06:f9:34:cc:
                    df:48:29:60:f4:81:ad:02:eb:30:01:d3:13:f9:51:
                    1e:80:13:5e:29:9f:ef:00:5b:23:6a:c0:4b:0e:f8:
                    76:23:fc:c3:f3:5e:44:71:67:6e:86:71:c1:db:34:
                    b8:f5:9c:fa:18:4a:29:c8:31:9f:88:24:66:68:30:
                    9b:15:62:b5:a0:78:35:75:92:1d:26:04:3c:a1:55:
                    a1:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:13:0D:F8:AB:15:12:CF:50:30:67:8F:46:99:A6:91:E2:B6:E2:5C
            X509v3 Authority Key Identifier:
                keyid:06:DF:52:D2:91:50:3D:0E:2B:11:72:D3:85:C2:B1:87:79:4C:79:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Bt9S0pFQPQ4rEXLThcKxh3lMecc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:f0:2a:64:f5:8c:76:51:11:9f:a6:55:fb:bd:c6:1d:a5:b0:
         ef:56:0f:0f:97:2c:44:50:1f:10:dd:6c:98:31:a9:df:f4:31:
         9e:c3:80:e5:7f:a8:c0:5c:64:e3:87:44:6c:49:92:e0:8d:07:
         06:9c:5f:d6:10:b5:2a:b4:96:0d:21:4a:59:1b:16:8a:10:5a:
         ae:29:eb:64:0f:c3:28:8e:35:40:f4:cf:ae:e4:7b:eb:e1:a0:
         21:e4:82:79:85:86:c3:d0:79:e9:cc:5c:dc:22:b9:1e:6f:26:
         6b:11:38:f6:9d:8b:04:e2:4f:34:49:3a:f5:8f:3f:29:a6:2f:
         b8:8d:0d:12:98:dd:43:52:06:e4:20:b9:fd:77:f7:99:22:50:
         09:3e:7e:41:da:aa:39:b5:fe:18:fb:1f:f6:f9:38:82:97:3e:
         a3:83:65:86:d7:73:01:be:9e:6e:aa:d5:8a:59:12:c1:fe:99:
         df:c4:c0:0a:d4:c9:06:19:57:9d:5b:93:a5:55:a8:bb:12:24:
         5a:a8:a6:f2:89:8c:9c:46:6d:e9:d9:ed:e8:ad:94:a0:7f:44:
         e5:01:a4:8c:83:25:f7:4f:73:64:da:f3:eb:61:1c:01:49:68:
         08:4e:eb:73:75:2d:43:18:97:b5:7a:c7:86:67:38:ab:55:6d:
         ca:28:00:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:27:03 2026 by rpki-client