Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D795B/A88FB3E200C011EC96C2D583C4F9AE02/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.mft
File:                     Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.mft (raw, json)
Hash identifier:          bWYMmeAHIBWO6RPm8ShUzf8lnQM4SEZYchoVLBhl1J8=
Subject key identifier:   29:CA:79:44:DF:BC:04:A9:45:E5:5A:3C:A7:E6:1E:A7:92:E4:27:A7
Authority key identifier: 05:BE:F3:B7:64:63:56:CE:40:9F:C5:63:F2:A6:90:78:67:79:5E:F7
Certificate issuer:       /CN=A91D795B/serialNumber=05BEF3B7646356CE409FC563F2A6907867795EF7
Certificate serial:       05C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D795B/A88FB3E200C011EC96C2D583C4F9AE02/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.mft
Manifest number:          05C1
Signing time:             Sat 04 Apr 2026 22:52:47 +0000
Manifest this update:     Sat 04 Apr 2026 22:52:47 +0000
Manifest next update:     Sat 11 Apr 2026 22:52:47 +0000
Files and hashes:         1: Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.crl (hash: pnW+SRasR0pdiSaZlPIjzOwBXqncEcFqgJlStBbvfZM=)
                          2: 7C05ACEE75B311EF83EC6F78C4F9AE02.roa (hash: OrGWOjKaq8LbnZvZB603X7/PZgRovjlf9H8990xA32M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D795B/A88FB3E200C011EC96C2D583C4F9AE02/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.crl
                          rsync://rpki.apnic.net/member_repository/A91D795B/A88FB3E200C011EC96C2D583C4F9AE02/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 22:52:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1481 (0x5c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D795B, serialNumber=05BEF3B7646356CE409FC563F2A6907867795EF7
        Validity
            Not Before: Apr  4 22:52:47 2026 GMT
            Not After : Apr 11 22:52:47 2026 GMT
        Subject: CN=69d1963f-24b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2f:93:a2:50:3f:73:f5:83:e7:dd:16:11:6f:
                    bc:9b:83:90:e4:a2:65:e4:04:2f:cb:c4:76:3e:6a:
                    c8:50:ed:78:82:ff:ee:5b:16:3f:de:5f:a6:03:e8:
                    1b:d2:c9:17:20:0c:13:13:5c:60:5d:3a:f5:b0:78:
                    be:3c:a3:20:93:dd:a3:e1:0d:3f:99:b6:03:f1:f6:
                    2f:56:ec:f0:66:73:cf:19:ad:f4:2a:73:94:8e:e7:
                    3a:bc:4f:14:31:aa:bf:b7:59:ff:ec:90:02:bd:6c:
                    82:15:0b:e6:69:1b:d2:c3:60:a7:a4:c5:1f:d5:c4:
                    87:b5:42:fd:22:ea:d9:7a:b9:76:db:31:8f:1d:ff:
                    8b:0c:ee:03:13:e5:5b:1d:34:9b:f5:b0:68:8f:f2:
                    f5:bb:69:a3:d7:98:e1:fe:06:3c:2d:c4:55:51:88:
                    4d:e3:db:cd:cc:bb:db:c3:d9:07:b5:33:49:e1:62:
                    c0:b5:46:83:db:e4:50:cc:e0:20:3c:48:8c:3d:1a:
                    94:c4:15:59:35:0c:00:75:21:c0:53:63:fe:57:b0:
                    0e:f2:b7:e6:4c:00:5d:76:89:c4:b7:ca:2b:62:50:
                    0e:22:2c:5c:f4:f0:15:00:7e:0f:a3:9a:f6:d8:ce:
                    e4:7d:05:42:95:14:c0:11:8c:43:74:ac:1c:db:92:
                    8d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:CA:79:44:DF:BC:04:A9:45:E5:5A:3C:A7:E6:1E:A7:92:E4:27:A7
            X509v3 Authority Key Identifier:
                keyid:05:BE:F3:B7:64:63:56:CE:40:9F:C5:63:F2:A6:90:78:67:79:5E:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D795B/A88FB3E200C011EC96C2D583C4F9AE02/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D795B/A88FB3E200C011EC96C2D583C4F9AE02/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:7b:ee:52:d8:a4:2e:4d:4c:62:ca:7e:cb:19:39:22:0b:0d:
         f6:56:30:6b:ea:40:b8:2f:f8:2d:be:ae:02:c6:cf:33:72:23:
         79:64:a1:74:5e:c8:08:26:99:70:30:6e:ff:95:c0:e0:de:14:
         53:de:63:3a:8e:dd:20:41:f1:b3:7c:24:7f:d7:35:20:21:71:
         e4:dd:64:1f:c9:c3:76:7f:9c:08:26:c7:70:f2:d8:ac:e4:5f:
         94:92:a4:2c:3a:e2:ff:db:29:5d:c5:75:69:af:a6:65:f6:4a:
         2e:9e:db:36:05:fc:58:bd:5a:1d:7d:89:7f:34:c8:5c:a7:17:
         0b:b8:79:2f:90:43:9b:38:12:ce:57:95:2f:02:8f:9b:42:43:
         01:4a:26:42:e8:ca:e6:15:d5:1b:e4:9a:0c:4b:84:cf:61:20:
         46:fd:ca:43:aa:af:bc:88:82:cb:ac:5e:80:0f:c4:cd:9a:76:
         3b:53:af:09:77:92:87:ee:f1:03:a4:6e:af:4c:14:cb:f1:3f:
         dd:94:63:f3:34:b6:08:83:3d:c8:ed:4a:de:9f:bf:b9:c3:06:
         ab:8d:e3:e8:bc:4b:a8:e6:99:79:4d:2f:ed:05:c3:b0:4d:ee:
         fd:a4:9e:9f:62:09:2f:89:7d:4d:80:46:bb:57:84:da:f6:ab:
         51:a9:0e:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:48:31 2026 by rpki-client