Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.mft
File:                     bb1cTQEh_LMY54xFG29WcyCYYAI.mft (raw, json)
Hash identifier:          0Y3n87LM2oMvA78ToKKJ8zA1rqtf8gmQRPjzutrp9fo=
Subject key identifier:   B1:8F:5C:97:BE:DE:F3:B6:38:94:46:AF:51:C2:0B:4F:C9:32:7A:DE
Authority key identifier: 6D:BD:5C:4D:01:21:FC:B3:18:E7:8C:45:1B:6F:56:73:20:98:60:02
Certificate issuer:       /CN=A91D1216/serialNumber=6DBD5C4D0121FCB318E78C451B6F567320986002
Certificate serial:       0467
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bb1cTQEh_LMY54xFG29WcyCYYAI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.mft
Manifest number:          0427
Signing time:             Sun 29 Mar 2026 00:25:47 +0000
Manifest this update:     Sun 29 Mar 2026 00:25:46 +0000
Manifest next update:     Sun 05 Apr 2026 00:25:46 +0000
Files and hashes:         1: bb1cTQEh_LMY54xFG29WcyCYYAI.crl (hash: 0m+mW+sBvS2u8ouvXM4N675m37NUff1DYfpMR2AHzyI=)
                          2: AD17704445F611EE97DF317CC4F9AE02.roa (hash: /vhmP+Y6Yb84j9vhzg0Zbk6HCi7aZS+Km8vmqSzsrmM=)
                          3: 943D15902D1011EFBBEBA67BC4F9AE02.roa (hash: dPxIUNEqYuFtJskM6HAN9FGSFnQOEAtn06dnZBLnvG8=)
                          4: 9B0C244C73B611EEB18A0385C4F9AE02.roa (hash: tBey+DH64+Kn32UVWimcmMh2WoGFqT18gD06i2GEZsU=)
                          5: AEE9F9E6326011ED9031BC4FC4F9AE02.roa (hash: r+lrx7WpAI1BilPAcnEksEUaCu2KnCEQLhymAPB2i1s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.crl
                          rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bb1cTQEh_LMY54xFG29WcyCYYAI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Apr 2026 00:25:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1127 (0x467)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D1216, serialNumber=6DBD5C4D0121FCB318E78C451B6F567320986002
        Validity
            Not Before: Mar 29 00:25:46 2026 GMT
            Not After : Apr  5 00:25:46 2026 GMT
        Subject: CN=69c8718a-ce09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:63:fd:53:10:94:cc:4e:c4:6a:cb:76:bb:df:
                    38:a8:f4:a9:e2:3e:83:46:b6:71:46:36:ac:61:4c:
                    d1:32:be:8c:18:1e:ee:23:ed:93:d5:96:6e:60:28:
                    f4:59:e7:e7:1c:61:c8:54:8e:ba:ec:35:a3:c0:af:
                    84:b0:32:50:e4:79:da:13:6c:b7:4f:50:b1:7e:f4:
                    7c:f7:2a:a6:9f:ef:9d:d8:60:45:78:c9:26:eb:0d:
                    1f:a8:68:79:5b:af:96:dd:0a:66:b5:22:7c:04:cd:
                    c2:95:65:67:7d:85:7b:33:ae:93:8a:65:00:75:7d:
                    f2:6d:04:57:9d:db:dc:77:ea:c4:80:bc:d7:62:1d:
                    90:27:13:df:00:16:b8:a4:88:13:7f:5a:5a:d9:37:
                    f7:3b:f8:f4:11:c2:f7:67:bb:f7:e0:5a:f3:ce:1c:
                    05:d2:92:ef:27:21:96:14:2d:5f:9b:d7:41:a6:be:
                    92:31:d2:d6:22:78:ef:7b:c9:5b:09:a8:c1:94:19:
                    06:9e:ad:52:cb:f4:34:df:31:14:f7:b4:75:33:6d:
                    c4:6a:c4:55:4f:ec:74:8f:53:3e:f9:ec:28:ac:b8:
                    d4:b0:7f:7f:02:5c:8d:26:5c:cb:bc:3d:d8:3f:b0:
                    31:92:6c:57:93:24:aa:ff:f3:48:e0:51:16:1d:2f:
                    44:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:8F:5C:97:BE:DE:F3:B6:38:94:46:AF:51:C2:0B:4F:C9:32:7A:DE
            X509v3 Authority Key Identifier:
                keyid:6D:BD:5C:4D:01:21:FC:B3:18:E7:8C:45:1B:6F:56:73:20:98:60:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bb1cTQEh_LMY54xFG29WcyCYYAI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:2e:d6:c5:88:64:86:81:72:da:3f:f8:79:5f:a4:0f:75:fe:
         ef:af:66:6f:34:64:d3:98:96:67:20:75:60:e1:a4:35:35:62:
         51:90:45:47:1c:5f:e5:83:83:43:12:b7:0b:10:ac:ca:99:71:
         cf:e9:1a:fb:26:fa:3b:d7:8c:6c:92:bf:ba:9d:c2:44:fd:71:
         97:79:eb:33:59:08:19:25:57:30:50:c0:3a:a8:a4:f5:ea:52:
         09:ef:c8:a5:56:a8:14:20:32:e0:a6:10:99:e7:c9:df:89:f6:
         11:8f:7a:33:ea:8b:a7:1c:bb:11:70:db:f0:9b:23:96:73:cd:
         df:d5:03:82:fe:89:f1:be:b0:fb:68:8f:3c:a9:e3:02:a2:bf:
         16:7a:b2:0b:2e:f4:b8:84:e2:7e:df:fa:e9:ef:5e:d0:f0:b2:
         bf:ab:d6:c8:f8:1c:64:7f:3e:50:49:cb:dd:7f:51:91:08:55:
         a9:3a:24:73:0f:eb:5d:17:5f:4a:a2:6e:eb:d7:7a:66:25:2b:
         3f:93:48:fd:d4:b0:61:96:25:74:ed:9e:7a:a5:c8:d3:40:94:
         d6:8e:a2:e5:13:18:84:5f:f3:10:fa:88:36:d5:02:57:6a:33:
         f2:10:67:11:3c:45:c1:04:6b:40:e0:ed:85:e0:a6:08:87:a7:
         20:90:2d:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 30 06:37:16 2026 by rpki-client