Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91881D9/D89BB30EB47711E7AD54B664C4F9AE02/bBtjjqnXxs4CPLXlfjyuFqEbRQU.mft
File:                     bBtjjqnXxs4CPLXlfjyuFqEbRQU.mft (raw, json)
Hash identifier:          4wZmyOq5WFnHjn7mM29yQKE0KbRX9M+a3D69ypdGHs8=
Subject key identifier:   B5:71:E7:35:7D:42:32:AB:21:B9:7D:F6:5D:9E:AF:74:8B:D6:1A:81
Authority key identifier: 6C:1B:63:8E:A9:D7:C6:CE:02:3C:B5:E5:7E:3C:AE:16:A1:1B:45:05
Certificate issuer:       /CN=A91881D9/serialNumber=6C1B638EA9D7C6CE023CB5E57E3CAE16A11B4505
Certificate serial:       18B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBtjjqnXxs4CPLXlfjyuFqEbRQU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91881D9/D89BB30EB47711E7AD54B664C4F9AE02/bBtjjqnXxs4CPLXlfjyuFqEbRQU.mft
Manifest number:          18AE
Signing time:             Sat 04 Apr 2026 16:22:55 +0000
Manifest this update:     Sat 04 Apr 2026 16:22:55 +0000
Manifest next update:     Sat 11 Apr 2026 16:22:55 +0000
Files and hashes:         1: bBtjjqnXxs4CPLXlfjyuFqEbRQU.crl (hash: CB0bS09+9OX8VSvJLXhEQsDORxF5bMailR30mCuTpEc=)
                          2: 870C2B58B47811E788EC7E65C4F9AE02.roa (hash: Cy9jIf+CyOis8YIH5a0sOi5OoR3Vm1n2YEe3NcN+W00=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91881D9/D89BB30EB47711E7AD54B664C4F9AE02/bBtjjqnXxs4CPLXlfjyuFqEbRQU.crl
                          rsync://rpki.apnic.net/member_repository/A91881D9/D89BB30EB47711E7AD54B664C4F9AE02/bBtjjqnXxs4CPLXlfjyuFqEbRQU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBtjjqnXxs4CPLXlfjyuFqEbRQU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 16:22:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6329 (0x18b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91881D9, serialNumber=6C1B638EA9D7C6CE023CB5E57E3CAE16A11B4505
        Validity
            Not Before: Apr  4 16:22:55 2026 GMT
            Not After : Apr 11 16:22:55 2026 GMT
        Subject: CN=69d13adf-3553
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e1:9f:61:ea:85:12:c0:eb:07:b8:3b:c3:99:
                    c1:2b:d0:19:e1:6a:40:bd:7d:e8:ce:88:58:83:62:
                    7f:aa:22:94:13:0c:4d:fc:17:06:00:91:5a:56:40:
                    a9:ba:9b:d2:a0:e2:57:60:73:d3:fa:f6:d5:a0:85:
                    01:33:f9:b1:0e:31:15:8f:18:ae:0a:f6:5e:d3:c6:
                    34:e5:c2:71:36:73:42:bd:84:48:af:18:01:f7:75:
                    41:23:6f:91:24:4d:d8:42:ae:1b:51:95:fc:38:ae:
                    d6:37:1b:d8:fc:f3:56:b9:00:0f:43:76:5f:58:57:
                    1b:6e:0f:90:6f:c7:42:cf:9a:e9:49:b0:a6:cd:8b:
                    40:89:10:77:17:97:06:24:a2:57:ff:3d:23:e7:af:
                    96:ff:62:ea:dd:a6:ae:80:9d:6a:fc:e9:45:bc:60:
                    0b:e0:f6:dd:30:bb:e1:57:17:f6:47:5a:96:4d:9b:
                    f8:3c:7a:eb:06:8e:71:ea:db:3b:1d:a7:bf:f3:08:
                    00:b9:ac:79:95:c4:1e:55:1b:b8:5b:82:31:14:df:
                    47:c7:11:6f:a1:63:46:73:b2:ec:2d:a3:43:4c:af:
                    55:ad:1d:4a:74:a5:4b:6b:97:9d:26:c5:43:01:34:
                    2f:62:6f:82:a0:d9:be:b1:9d:71:fb:ed:c5:8a:65:
                    f3:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:71:E7:35:7D:42:32:AB:21:B9:7D:F6:5D:9E:AF:74:8B:D6:1A:81
            X509v3 Authority Key Identifier:
                keyid:6C:1B:63:8E:A9:D7:C6:CE:02:3C:B5:E5:7E:3C:AE:16:A1:1B:45:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91881D9/D89BB30EB47711E7AD54B664C4F9AE02/bBtjjqnXxs4CPLXlfjyuFqEbRQU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBtjjqnXxs4CPLXlfjyuFqEbRQU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91881D9/D89BB30EB47711E7AD54B664C4F9AE02/bBtjjqnXxs4CPLXlfjyuFqEbRQU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:8a:b5:7d:d7:5a:3a:e6:fc:fe:0b:57:69:36:73:3b:1d:7f:
         82:8a:ea:24:95:7a:5b:13:01:62:8a:a1:51:d3:66:be:67:b1:
         33:75:e5:8f:d9:bd:ac:6c:1e:08:b1:2a:b9:0e:b2:d9:2e:c2:
         db:ee:6f:df:a6:e6:90:cc:2c:0b:f8:d5:f3:6a:e4:8b:b0:86:
         7b:0f:4d:de:56:1d:a4:32:b3:a2:03:d9:aa:54:e2:21:3c:e4:
         80:0f:36:38:35:3b:af:77:d4:95:58:18:45:46:47:19:a4:29:
         59:fc:f6:e5:44:27:8b:f7:b3:24:4e:9f:42:7b:97:5f:57:05:
         a1:41:80:2d:8d:a7:d1:8e:48:27:0b:b7:88:c1:41:9e:b3:4c:
         86:2e:db:28:4b:c4:73:1e:dd:5e:a2:83:1f:f2:9c:fa:5b:e9:
         84:e9:fb:fa:bc:57:00:7e:44:1b:70:90:64:c2:70:01:9f:1b:
         9f:43:9d:0d:8d:98:b0:79:7b:b1:11:b4:09:e4:7a:e1:e4:d3:
         78:b5:6c:03:95:d1:7f:f1:bc:82:55:41:e7:7d:44:1f:58:bb:
         0a:25:a0:55:b4:d6:6c:2f:fa:0e:25:52:4a:4c:79:33:e7:0b:
         ed:9a:48:46:da:95:ff:59:d9:bf:ec:da:70:c1:a1:e4:1f:c3:
         74:4d:c4:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 20:00:16 2026 by rpki-client