Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/bKLPpoi9-eLWVhYIZ3owyRUkPQw.mft
File:                     bKLPpoi9-eLWVhYIZ3owyRUkPQw.mft (raw, json)
Hash identifier:          svooJR0aDUC+fCGKIqEqUqauXI9+Drhk4TZiPg31Kfc=
Subject key identifier:   FF:DD:4E:99:A9:50:2C:C3:07:06:FA:DB:95:FD:73:91:53:98:BF:DB
Authority key identifier: 6C:A2:CF:A6:88:BD:F9:E2:D6:56:16:08:67:7A:30:C9:15:24:3D:0C
Certificate issuer:       /CN=A9148F80/serialNumber=6CA2CFA688BDF9E2D6561608677A30C915243D0C
Certificate serial:       0727
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKLPpoi9-eLWVhYIZ3owyRUkPQw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/bKLPpoi9-eLWVhYIZ3owyRUkPQw.mft
Manifest number:          071F
Signing time:             Sat 04 Apr 2026 21:41:56 +0000
Manifest this update:     Sat 04 Apr 2026 21:41:55 +0000
Manifest next update:     Sat 11 Apr 2026 21:41:55 +0000
Files and hashes:         1: bKLPpoi9-eLWVhYIZ3owyRUkPQw.crl (hash: iTtxFOidIHsEB+shQkF8u0bybz5/2w220ATyQfaNtaw=)
                          2: 1C93BF747CD011EB9F876E78C4F9AE02.roa (hash: 4qKXGZ0bRYv362hDQR/ZiXlcYhUu1dIqkoFSj1gTT6I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/bKLPpoi9-eLWVhYIZ3owyRUkPQw.crl
                          rsync://rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/bKLPpoi9-eLWVhYIZ3owyRUkPQw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKLPpoi9-eLWVhYIZ3owyRUkPQw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 21:41:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1831 (0x727)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148F80, serialNumber=6CA2CFA688BDF9E2D6561608677A30C915243D0C
        Validity
            Not Before: Apr  4 21:41:55 2026 GMT
            Not After : Apr 11 21:41:55 2026 GMT
        Subject: CN=69d185a3-96ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:6d:43:9d:4b:35:f7:20:f3:fb:11:32:e3:31:
                    f1:c4:37:fd:4a:be:66:e5:2a:02:b8:ae:92:66:5d:
                    90:92:a9:63:78:29:6e:a2:ad:c6:05:c8:82:6e:ee:
                    39:2a:00:47:39:3d:69:c7:d5:d9:91:62:a2:c0:0d:
                    a9:44:95:0a:1a:52:5e:92:2e:62:00:bb:29:3e:38:
                    be:1b:d3:8b:14:ad:6a:b5:33:39:57:20:6c:6d:63:
                    da:69:eb:b0:63:03:e9:8a:40:8b:fb:12:8f:fa:66:
                    0e:d7:8b:c3:09:f8:cc:b3:3a:15:b5:c8:99:03:12:
                    55:5f:e6:14:97:65:f0:c8:f1:32:f6:c8:6b:80:47:
                    1b:a1:e7:45:05:a1:32:dd:fd:93:c5:65:ee:8c:10:
                    b7:1e:4f:9a:ee:3f:e0:dd:18:e7:1b:e9:c2:6c:77:
                    f2:c0:76:9f:87:9b:2d:99:69:72:45:60:12:34:8a:
                    68:28:6a:ad:5a:4e:0c:a4:b3:da:ae:8c:c6:22:50:
                    08:1b:a6:42:4e:04:76:38:da:ef:a9:59:63:6f:bb:
                    82:00:ad:16:b6:47:b2:24:c4:3b:38:03:db:d0:d0:
                    34:5d:e8:ae:9e:cf:4e:f8:de:f7:54:6f:12:18:9a:
                    ec:47:4e:f1:1d:ec:d3:7a:f9:e6:ef:2a:57:15:25:
                    ca:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:DD:4E:99:A9:50:2C:C3:07:06:FA:DB:95:FD:73:91:53:98:BF:DB
            X509v3 Authority Key Identifier:
                keyid:6C:A2:CF:A6:88:BD:F9:E2:D6:56:16:08:67:7A:30:C9:15:24:3D:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/bKLPpoi9-eLWVhYIZ3owyRUkPQw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKLPpoi9-eLWVhYIZ3owyRUkPQw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/bKLPpoi9-eLWVhYIZ3owyRUkPQw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:19:c8:0c:0c:96:1a:87:4a:a5:cb:13:52:c7:4e:a5:fe:89:
         1b:cb:19:05:29:4c:4f:56:5e:e5:b3:1d:3d:42:c4:7e:64:98:
         16:e4:7f:2e:4d:23:78:fb:24:1f:e8:d9:1c:80:03:cd:90:a4:
         ee:64:23:37:44:6f:c7:60:78:c4:a7:9d:96:b1:4b:b8:49:84:
         d4:b7:e3:ed:b5:65:ea:9f:fc:6c:c8:84:03:6d:b9:7c:15:ef:
         28:bb:34:fe:cf:09:fb:3e:41:c9:86:56:0c:cc:43:cd:37:9a:
         cd:99:ce:ef:c0:61:2e:e3:76:24:6d:83:10:1f:a9:c8:49:21:
         d5:e6:3d:b7:4d:42:94:28:7f:ce:4a:d9:44:d9:55:ab:fd:37:
         97:5a:11:41:ad:f9:ae:fc:29:21:cc:6c:cb:34:7f:d5:29:ff:
         bf:e1:b0:69:17:3f:25:b3:54:a8:80:67:fa:2e:95:77:be:7f:
         01:8d:d3:99:fc:57:16:bf:cd:98:76:51:ac:d5:5c:d2:96:70:
         05:46:47:f5:ee:a1:66:cb:5f:3e:0e:69:e5:f0:60:83:c9:6c:
         e7:3e:8b:d1:83:e8:c2:68:1f:d6:b7:9b:cc:2a:a1:1a:9f:24:
         70:00:af:8d:3d:e0:28:5f:ce:25:b4:08:da:fc:a2:59:28:be:
         86:8e:75:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:51:33 2026 by rpki-client