Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F89A2/BCBAE0CEC54111EEABC2C385C4F9AE02/bIAwUr-WwqtKuqntJqOptGOWBaM.mft
File:                     bIAwUr-WwqtKuqntJqOptGOWBaM.mft (raw, json)
Hash identifier:          FhMccyvmVjEssmUFVdwwB9AVTAMEOATogAP46NR6bqI=
Subject key identifier:   5E:50:9C:73:A8:51:9F:83:46:A0:F2:41:68:73:C3:EF:39:D0:69:89
Authority key identifier: 6C:80:30:52:BF:96:C2:AB:4A:BA:A9:ED:26:A3:A9:B4:63:96:05:A3
Certificate issuer:       /CN=A91F89A2/serialNumber=6C803052BF96C2AB4ABAA9ED26A3A9B4639605A3
Certificate serial:       0199
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bIAwUr-WwqtKuqntJqOptGOWBaM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F89A2/BCBAE0CEC54111EEABC2C385C4F9AE02/bIAwUr-WwqtKuqntJqOptGOWBaM.mft
Manifest number:          0196
Signing time:             Sun 05 Apr 2026 03:47:02 +0000
Manifest this update:     Sun 05 Apr 2026 03:47:02 +0000
Manifest next update:     Sun 12 Apr 2026 03:47:02 +0000
Files and hashes:         1: bIAwUr-WwqtKuqntJqOptGOWBaM.crl (hash: J+qdKZU+H/pM2yQm4INBIy5fOUMiTepF/YdpAZOMv2g=)
                          2: 0FBF57D2F16611EEB75BE640C4F9AE02.roa (hash: cs0XXfBuh/azVaZsG4BADKeGQ7mBKcl8emhLzIxBwKs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F89A2/BCBAE0CEC54111EEABC2C385C4F9AE02/bIAwUr-WwqtKuqntJqOptGOWBaM.crl
                          rsync://rpki.apnic.net/member_repository/A91F89A2/BCBAE0CEC54111EEABC2C385C4F9AE02/bIAwUr-WwqtKuqntJqOptGOWBaM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bIAwUr-WwqtKuqntJqOptGOWBaM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 03:47:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 409 (0x199)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F89A2, serialNumber=6C803052BF96C2AB4ABAA9ED26A3A9B4639605A3
        Validity
            Not Before: Apr  5 03:47:02 2026 GMT
            Not After : Apr 12 03:47:02 2026 GMT
        Subject: CN=69d1db36-fb4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f8:50:7f:7c:75:d1:68:02:f9:f5:38:1a:63:
                    d4:7f:1d:5e:a7:c2:be:f2:a5:72:ef:ed:b3:b9:45:
                    71:44:e3:35:b1:d4:58:1d:ef:99:88:90:3b:08:6f:
                    f3:4b:97:f4:16:6c:ef:1c:89:57:f1:d4:25:92:11:
                    40:37:e8:b8:22:70:87:da:a6:d8:10:2d:2d:ae:f5:
                    94:78:17:01:54:d4:80:03:2d:f9:91:f3:47:fc:5f:
                    46:14:ea:37:a4:d6:30:13:ac:7a:a8:ac:bd:81:0c:
                    6d:31:1c:15:4a:cc:4c:be:0d:34:69:72:90:5e:ff:
                    dd:cb:ca:3f:3b:c5:9a:65:ee:f7:8f:ae:d6:25:eb:
                    6e:b6:4d:b3:d6:67:26:28:8c:e8:c8:eb:fd:61:cc:
                    8d:8b:eb:ed:46:d1:f4:5d:0f:b8:de:2a:c9:94:75:
                    b5:41:06:15:62:97:e0:c5:1b:b2:1c:cf:52:a1:38:
                    d2:db:45:95:7c:25:f0:73:c7:86:c9:0f:84:8c:16:
                    e1:26:f4:a5:b3:2f:7e:91:dd:a1:16:e5:7e:61:93:
                    79:71:73:ea:d4:79:7b:67:aa:9a:6b:60:48:28:6a:
                    ed:37:bd:a2:f1:9f:11:f7:1b:d0:d7:e1:04:bc:5e:
                    1f:57:3b:d1:73:1e:9e:22:89:26:12:9c:a5:d9:4c:
                    c2:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:50:9C:73:A8:51:9F:83:46:A0:F2:41:68:73:C3:EF:39:D0:69:89
            X509v3 Authority Key Identifier:
                keyid:6C:80:30:52:BF:96:C2:AB:4A:BA:A9:ED:26:A3:A9:B4:63:96:05:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F89A2/BCBAE0CEC54111EEABC2C385C4F9AE02/bIAwUr-WwqtKuqntJqOptGOWBaM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bIAwUr-WwqtKuqntJqOptGOWBaM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89A2/BCBAE0CEC54111EEABC2C385C4F9AE02/bIAwUr-WwqtKuqntJqOptGOWBaM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:73:e3:5e:f5:bf:db:c7:cf:4e:a5:73:32:08:e6:7c:1f:05:
         6f:ab:5c:b1:35:69:cd:8f:c1:4c:1d:03:a2:4c:61:01:e1:12:
         15:9a:55:d6:9c:11:70:05:29:95:2c:4f:e7:94:74:a0:c8:d3:
         aa:39:3a:57:5f:79:94:4d:b3:38:54:b9:1f:ed:e0:aa:68:3a:
         42:61:5b:31:24:a6:c5:c2:9c:e4:24:85:93:82:1b:1d:a6:11:
         8f:f9:f7:61:60:bb:8d:d2:65:1e:1e:a1:af:ed:c0:b9:7e:9e:
         99:a3:02:cb:13:03:16:15:d0:59:f1:97:e4:78:f2:0b:9e:b3:
         4d:16:d4:13:c4:56:3e:6d:c1:b2:e2:ba:a6:fd:5f:8b:ee:a2:
         90:df:5c:96:8d:fa:f3:04:0f:24:82:f5:03:96:91:63:b2:2c:
         02:3f:a6:f7:df:03:a8:74:5a:a9:52:1d:40:38:50:11:e1:fe:
         06:97:f4:0c:3a:32:28:75:85:56:fd:5e:32:b5:d1:8e:88:e2:
         cb:31:22:3e:8d:e8:74:20:00:56:a6:17:b5:3c:35:e7:4b:dc:
         d7:30:35:00:ee:05:ae:41:8e:0d:89:06:27:f3:4f:1e:28:b9:
         fc:ec:0d:b9:c2:9d:12:e5:6f:ea:9c:11:60:27:f7:12:17:80:
         3d:2d:f5:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:26:10 2026 by rpki-client