Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.mft
File:                     Bt9S0pFQPQ4rEXLThcKxh3lMecc.mft (raw, json)
Hash identifier:          QREr14OSsUhzKLR0VqVDZ1qD2Vqcfxm34DYXYUBOFcg=
Subject key identifier:   71:42:E4:34:32:09:50:9C:0A:F9:26:8A:7F:DC:F3:4D:F7:60:06:EA
Authority key identifier: 06:DF:52:D2:91:50:3D:0E:2B:11:72:D3:85:C2:B1:87:79:4C:79:C7
Certificate issuer:       /CN=A91F6E7D/serialNumber=06DF52D291503D0E2B1172D385C2B187794C79C7
Certificate serial:       0A53
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Bt9S0pFQPQ4rEXLThcKxh3lMecc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.mft
Manifest number:          0A49
Signing time:             Mon 02 Mar 2026 19:33:29 +0000
Manifest this update:     Mon 02 Mar 2026 19:33:28 +0000
Manifest next update:     Mon 09 Mar 2026 19:33:28 +0000
Files and hashes:         1: Bt9S0pFQPQ4rEXLThcKxh3lMecc.crl (hash: 0dlHRaIxlR0kOlC55GQLEyLpbZhdWVa2Ph+Fxj5sI1Q=)
                          2: 401EA996B5B511EABB640052C4F9AE02.roa (hash: 3UdrZqdhdDJ0HDKYCaHDQZmp3LAxyKD7mCp5FO7bhxY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.crl
                          rsync://rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Bt9S0pFQPQ4rEXLThcKxh3lMecc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 19:33:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2643 (0xa53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F6E7D, serialNumber=06DF52D291503D0E2B1172D385C2B187794C79C7
        Validity
            Not Before: Mar  2 19:33:28 2026 GMT
            Not After : Mar  9 19:33:28 2026 GMT
        Subject: CN=69a5e608-a0ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ff:0a:a6:92:a9:5f:5d:e5:a5:08:33:c5:c3:
                    51:a9:57:fb:41:12:5f:60:96:dd:d0:06:31:04:8e:
                    15:e9:70:59:9d:d1:64:7f:53:68:d2:0b:35:95:4e:
                    0d:38:70:59:15:94:1f:e2:eb:70:3d:32:e0:86:c9:
                    fd:c6:c0:6c:7c:8e:33:36:16:21:9b:ff:f1:1e:1c:
                    65:e1:79:77:73:07:4a:4e:8e:99:22:a1:05:19:1c:
                    c7:43:a4:53:d0:b3:63:03:bf:d0:c8:a5:89:b3:61:
                    00:e1:1f:40:4c:3d:4d:19:21:ab:4e:e2:99:10:76:
                    5e:94:4d:fc:94:62:15:9a:f6:2d:ed:96:20:a0:c4:
                    d9:e6:8c:0f:3a:b0:61:2b:83:ff:9b:c6:d2:37:03:
                    c3:1b:85:a3:58:9b:a1:c4:5d:b2:aa:b1:1a:22:33:
                    41:88:09:15:15:ae:62:d5:bf:aa:b2:ae:e6:f6:b3:
                    dd:23:53:b6:16:a1:b5:4f:b0:5a:70:1b:8e:cb:7a:
                    11:36:6a:bc:cc:42:13:63:81:05:35:1e:61:0f:44:
                    b9:ed:ca:2e:a8:0f:f6:f8:bd:f0:8e:8c:93:93:06:
                    42:42:c7:97:55:ac:d0:18:58:57:37:cb:ff:83:34:
                    fe:7c:0d:90:58:a6:fd:bf:6e:f0:0e:84:e5:79:9d:
                    d7:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:42:E4:34:32:09:50:9C:0A:F9:26:8A:7F:DC:F3:4D:F7:60:06:EA
            X509v3 Authority Key Identifier:
                keyid:06:DF:52:D2:91:50:3D:0E:2B:11:72:D3:85:C2:B1:87:79:4C:79:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Bt9S0pFQPQ4rEXLThcKxh3lMecc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:03:fb:ac:39:ab:1c:ca:74:a5:ee:85:43:0b:b3:d8:0c:e7:
         2b:eb:12:2e:aa:01:63:02:ee:c3:6f:5b:64:6b:26:ff:48:29:
         fb:c0:ab:7c:2b:7e:09:11:d5:aa:22:da:d6:21:c5:06:c6:34:
         8e:e1:7f:10:bf:f5:7f:e6:fa:81:0f:a0:e9:7f:a0:a4:84:89:
         ca:b3:47:52:95:fd:31:00:ed:47:b0:a5:09:ce:70:a6:d3:5a:
         12:48:c0:e9:0a:1b:a1:a0:1c:6f:b2:e5:ec:ed:10:bd:20:cc:
         1e:65:60:11:52:a7:89:7d:80:9e:28:5c:ef:b7:20:e3:e0:6f:
         7e:6f:a0:f3:08:0f:cf:06:41:ca:75:23:aa:24:a7:49:77:18:
         5a:c4:c8:f0:9b:fe:15:9b:1e:86:e0:e3:67:18:cf:27:ed:fd:
         92:29:94:3d:b5:8e:67:f1:2c:56:89:c3:52:c9:1d:9d:16:85:
         f6:70:5a:69:ae:1e:6d:e2:3f:25:f2:4c:e5:44:5a:0b:2a:33:
         bc:38:73:24:c4:7c:8f:c6:99:51:bd:19:9e:d6:8e:fb:37:df:
         81:bf:28:dd:fa:b9:f4:da:f6:1b:61:2d:eb:40:aa:fe:21:b2:
         ad:c1:08:fa:03:47:64:28:32:8c:f2:d0:eb:b6:1d:fb:eb:d7:
         5e:2e:08:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:22:45 2026 by rpki-client