Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E012/B81AA258141311F0B68E7373C4F9AE02/-bQCLAKefZ5aY0lo_bpKDpzWJOQ.mft
File:                     -bQCLAKefZ5aY0lo_bpKDpzWJOQ.mft (raw, json)
Hash identifier:          wzVzbFdRiMYjCvuFl+yAhftfcKzDcfXsSHUno87htJg=
Subject key identifier:   80:2A:6A:7D:1F:27:59:EA:31:50:8B:96:FB:50:4A:EB:A1:DB:38:41
Authority key identifier: F9:B4:02:2C:02:9E:7D:9E:5A:63:49:68:FD:BA:4A:0E:9C:D6:24:E4
Certificate issuer:       /CN=A915E012/serialNumber=F9B4022C029E7D9E5A634968FDBA4A0E9CD624E4
Certificate serial:       B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bQCLAKefZ5aY0lo_bpKDpzWJOQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E012/B81AA258141311F0B68E7373C4F9AE02/-bQCLAKefZ5aY0lo_bpKDpzWJOQ.mft
Manifest number:          B1
Signing time:             Fri 13 Mar 2026 06:05:42 +0000
Manifest this update:     Fri 13 Mar 2026 06:05:41 +0000
Manifest next update:     Fri 20 Mar 2026 06:05:41 +0000
Files and hashes:         1: -bQCLAKefZ5aY0lo_bpKDpzWJOQ.crl (hash: UWtM88/hBG2vuCRZRVsuXDem+2BeIyF4ZhcSHzgN3Dc=)
                          2: 2857C712141411F08D862A74C4F9AE02.roa (hash: fCwPLnnKHeCfga4EZBzIKSNWWA3Do3Z4t/zNIL+OprI=)
                          3: 28BBA728141411F08D862A74C4F9AE02.roa (hash: P446GhZxMIH5ntaxf5uODP8HpX8PKKRVRtpeogmimzc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E012/B81AA258141311F0B68E7373C4F9AE02/-bQCLAKefZ5aY0lo_bpKDpzWJOQ.crl
                          rsync://rpki.apnic.net/member_repository/A915E012/B81AA258141311F0B68E7373C4F9AE02/-bQCLAKefZ5aY0lo_bpKDpzWJOQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bQCLAKefZ5aY0lo_bpKDpzWJOQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Mar 2026 06:05:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 185 (0xb9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E012, serialNumber=F9B4022C029E7D9E5A634968FDBA4A0E9CD624E4
        Validity
            Not Before: Mar 13 06:05:41 2026 GMT
            Not After : Mar 20 06:05:41 2026 GMT
        Subject: CN=69b3a936-7fa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:87:20:79:ee:88:5c:8a:46:fb:ab:38:82:0a:
                    df:e0:89:02:d7:15:68:57:05:fa:b5:0b:28:90:17:
                    17:c2:10:6b:06:37:f0:bd:bf:f0:7a:de:c2:4f:22:
                    40:a9:6e:d6:69:90:1f:f1:7e:bc:e7:7f:b0:a8:2a:
                    3a:b6:09:ed:0e:31:da:f3:73:69:fa:98:c1:70:c9:
                    81:d7:79:a7:01:1e:5d:82:e8:a0:fb:91:ae:e1:22:
                    2c:86:a9:a0:e2:ce:a5:18:aa:d2:df:ae:3a:56:15:
                    af:23:79:61:ca:f3:cf:ec:c6:5c:bf:98:32:f8:45:
                    69:8a:2f:67:43:e6:8b:2c:4e:d4:b2:a3:17:7a:d0:
                    07:e8:b4:90:29:68:20:07:9e:e7:fd:0e:c2:a6:1c:
                    5c:99:9c:af:40:d9:e3:33:83:85:9a:16:7e:f4:a6:
                    5f:b4:32:fe:c9:dc:cb:a0:d6:80:5e:a0:de:d8:f9:
                    7b:b9:02:f5:0a:b9:b7:b6:5c:06:b7:54:fb:a9:12:
                    53:47:b0:77:03:3c:a4:71:e6:8e:30:4e:c1:94:ac:
                    ab:78:80:29:3e:40:44:11:87:aa:b2:0a:f9:30:78:
                    d2:bd:97:b9:c4:f0:8f:19:97:91:f8:c6:3a:e4:46:
                    da:75:5d:bd:f1:ef:9b:6d:28:67:66:5b:ca:3f:9a:
                    c5:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:2A:6A:7D:1F:27:59:EA:31:50:8B:96:FB:50:4A:EB:A1:DB:38:41
            X509v3 Authority Key Identifier:
                keyid:F9:B4:02:2C:02:9E:7D:9E:5A:63:49:68:FD:BA:4A:0E:9C:D6:24:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E012/B81AA258141311F0B68E7373C4F9AE02/-bQCLAKefZ5aY0lo_bpKDpzWJOQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bQCLAKefZ5aY0lo_bpKDpzWJOQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E012/B81AA258141311F0B68E7373C4F9AE02/-bQCLAKefZ5aY0lo_bpKDpzWJOQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:b2:da:43:2a:66:82:54:aa:9a:1a:fb:5a:f3:03:92:8d:0d:
         64:82:ec:74:86:08:56:ed:a1:90:6d:d9:da:86:c5:60:c8:92:
         f1:dc:80:5e:8d:4c:5c:48:de:38:1a:e2:89:b0:29:c7:a9:04:
         fa:aa:bc:60:62:a3:0c:a3:4b:da:3c:4c:81:f8:6c:94:c7:5a:
         0d:6f:e0:06:01:49:6c:45:37:05:7a:8d:8a:57:92:84:8b:aa:
         eb:dc:67:ec:5c:f1:72:9c:76:b2:3d:a6:d3:c4:20:0a:d8:2c:
         16:32:9f:78:10:86:40:ab:e1:51:c4:02:c7:f0:c6:27:c8:77:
         2a:6d:1c:5d:64:b6:a2:05:51:e5:e8:08:bb:7d:f6:c1:c8:89:
         67:67:76:0b:0d:f7:2e:4d:e1:ff:9b:7a:3c:b3:47:7a:e6:c9:
         af:a9:ec:b5:65:1b:2a:28:7e:80:78:28:ed:fc:99:23:5f:3e:
         7b:a0:45:0f:98:c7:6d:5b:27:aa:3a:61:f9:3b:78:20:3f:9d:
         82:58:f0:65:b3:9c:13:f1:09:ce:c8:9a:ff:44:62:8b:33:c0:
         45:a6:92:9e:f2:2c:83:83:55:7b:a0:72:39:46:78:7d:68:9a:
         f3:d9:ff:6c:77:43:8d:32:0a:9a:71:7f:86:46:6d:64:5d:52:
         d9:ec:ed:8d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICALkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUUwMTIxMTAvBgNVBAUTKEY5QjQwMjJDMDI5RTdEOUU1QTYzNDk2OEZEQkE0QTBF
OUNENjI0RTQwHhcNMjYwMzEzMDYwNTQxWhcNMjYwMzIwMDYwNTQxWjAYMRYwFAYD
VQQDEw02OWIzYTkzNi03ZmE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqocgee6IXIpG+6s4ggrf4IkC1xVoVwX6tQsokBcXwhBrBjfwvb/wet7CTyJA
qW7WaZAf8X6853+wqCo6tgntDjHa83Np+pjBcMmB13mnAR5dguig+5Gu4SIshqmg
4s6lGKrS3646VhWvI3lhyvPP7MZcv5gy+EVpii9nQ+aLLE7UsqMXetAH6LSQKWgg
B57n/Q7CphxcmZyvQNnjM4OFmhZ+9KZftDL+ydzLoNaAXqDe2Pl7uQL1Crm3tlwG
t1T7qRJTR7B3AzykceaOME7BlKyreIApPkBEEYeqsgr5MHjSvZe5xPCPGZeR+MY6
5EbadV298e+bbShnZlvKP5rFRQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIAqan0f
J1nqMVCLlvtQSuuh2zhBMB8GA1UdIwQYMBaAFPm0AiwCnn2eWmNJaP26Sg6c1iTk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTAxMi9CODFBQTI1ODE0
MTMxMUYwQjY4RTczNzNDNEY5QUUwMi8tYlFDTEFLZWZaNWFZMGxvX2JwS0RweldK
T1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1iUUNMQUtlZlo1YVkwbG9fYnBLRHB6V0pPUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
RTAxMi9CODFBQTI1ODE0MTMxMUYwQjY4RTczNzNDNEY5QUUwMi8tYlFDTEFLZWZa
NWFZMGxvX2JwS0RweldKT1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEArLLaQypmglSqmhr7WvMDko0NZILsdIYIVu2hkG3Z2obFYMiS8dyAXo1MXEje
OBriibApx6kE+qq8YGKjDKNL2jxMgfhslMdaDW/gBgFJbEU3BXqNileShIuq69xn
7Fzxcpx2sj2m08QgCtgsFjKfeBCGQKvhUcQCx/DGJ8h3Km0cXWS2ogVR5egIu332
wciJZ2d2Cw33Lk3h/5t6PLNHeubJr6nstWUbKih+gHgo7fyZI18+e6BFD5jHbVsn
qjph+Tt4ID+dgljwZbOcE/EJzsia/0RiizPARaaSnvIsg4NVe6ByOUZ4fWia89n/
bHdDjTIKmnF/hkZtZF1S2eztjQ==
-----END CERTIFICATE-----
Generated at Fri Mar 13 12:29:32 2026 by rpki-client