Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C075/75A6218ADE3911E783B7CC6CC4F9AE02/Fs6MGXC4akr081Y5EEZo0JWz1Og.mft
File:                     Fs6MGXC4akr081Y5EEZo0JWz1Og.mft (raw, json)
Hash identifier:          oMHBrNBdNU9frkVY3xrOXiKtkl4UWKowah46apmfRfM=
Subject key identifier:   23:90:BC:7A:E1:B2:12:69:19:4C:C7:70:68:9A:83:68:06:D2:06:2F
Authority key identifier: 16:CE:8C:19:70:B8:6A:4A:F4:F3:56:39:10:46:68:D0:95:B3:D4:E8
Certificate issuer:       /CN=A911C075/serialNumber=16CE8C1970B86A4AF4F35639104668D095B3D4E8
Certificate serial:       17FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fs6MGXC4akr081Y5EEZo0JWz1Og.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C075/75A6218ADE3911E783B7CC6CC4F9AE02/Fs6MGXC4akr081Y5EEZo0JWz1Og.mft
Manifest number:          17E4
Signing time:             Tue 24 Mar 2026 16:27:23 +0000
Manifest this update:     Tue 24 Mar 2026 16:27:23 +0000
Manifest next update:     Tue 31 Mar 2026 16:27:23 +0000
Files and hashes:         1: Fs6MGXC4akr081Y5EEZo0JWz1Og.crl (hash: z4XXg3v2Dgh/QQcsk4bzK/RqyeHGELs79AuxyBlrDSg=)
                          2: 3EB855ACDE3A11E781926D6DC4F9AE02.roa (hash: 3aOP/rpHrMEj7OG6rQvWrYiltaSfwH+gQCump53DqcM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C075/75A6218ADE3911E783B7CC6CC4F9AE02/Fs6MGXC4akr081Y5EEZo0JWz1Og.crl
                          rsync://rpki.apnic.net/member_repository/A911C075/75A6218ADE3911E783B7CC6CC4F9AE02/Fs6MGXC4akr081Y5EEZo0JWz1Og.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fs6MGXC4akr081Y5EEZo0JWz1Og.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 16:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6140 (0x17fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C075, serialNumber=16CE8C1970B86A4AF4F35639104668D095B3D4E8
        Validity
            Not Before: Mar 24 16:27:23 2026 GMT
            Not After : Mar 31 16:27:23 2026 GMT
        Subject: CN=69c2bb6b-ca94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:5f:93:10:a5:21:59:2e:98:58:83:8c:cb:e8:
                    53:aa:e5:55:ed:b4:7a:a9:aa:9e:82:11:05:be:bb:
                    d9:ba:da:eb:33:2a:3c:98:33:20:9f:79:4b:54:51:
                    46:cc:53:9e:17:e2:f4:2a:cb:ea:08:a1:53:16:c0:
                    03:18:73:26:61:2d:9d:f7:c1:1b:5b:c3:45:cd:9e:
                    0a:5a:a4:72:af:32:14:6d:53:65:33:75:c4:f8:27:
                    eb:8d:67:f3:d7:55:d0:4e:51:a1:bf:5b:f7:07:ce:
                    e8:66:a3:1f:c8:23:00:78:00:2f:c1:7a:72:ac:42:
                    34:b7:f4:31:9c:f3:ab:1a:e9:ea:e0:75:6f:22:1e:
                    a2:d5:90:bc:04:ff:fa:6f:b6:cd:c1:89:27:9c:1a:
                    4a:7f:eb:61:00:3e:de:97:60:f0:49:4c:cd:c1:56:
                    73:3c:29:ff:92:0e:38:77:b8:f7:a4:e8:5e:85:61:
                    b7:86:f7:8a:36:92:fb:d3:80:a4:61:7b:bf:73:9a:
                    62:06:60:3a:34:e4:93:2d:a4:59:f3:3f:47:9f:eb:
                    fc:ec:98:13:8a:aa:9a:dc:7c:99:13:53:9c:0c:3b:
                    57:fc:ff:9a:a5:1a:59:ee:68:be:36:b3:f7:e1:21:
                    81:f8:0e:8b:6e:67:34:31:25:9d:cf:64:e6:45:da:
                    b9:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:90:BC:7A:E1:B2:12:69:19:4C:C7:70:68:9A:83:68:06:D2:06:2F
            X509v3 Authority Key Identifier:
                keyid:16:CE:8C:19:70:B8:6A:4A:F4:F3:56:39:10:46:68:D0:95:B3:D4:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C075/75A6218ADE3911E783B7CC6CC4F9AE02/Fs6MGXC4akr081Y5EEZo0JWz1Og.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fs6MGXC4akr081Y5EEZo0JWz1Og.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C075/75A6218ADE3911E783B7CC6CC4F9AE02/Fs6MGXC4akr081Y5EEZo0JWz1Og.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:9f:34:91:28:de:3c:65:5b:b9:1e:80:a3:8e:6f:d0:ac:ed:
         e6:af:6d:a6:b0:71:de:6d:c5:02:5d:a9:d3:f5:74:11:73:86:
         44:5c:52:15:f0:3c:56:10:8d:c8:1b:4f:4e:25:e6:f5:1f:b6:
         a2:2f:59:8d:f0:5c:e1:1e:f3:29:5a:7d:55:5b:6b:65:69:74:
         f3:3e:80:e3:06:18:31:19:d8:fe:a7:27:e5:8d:e1:3a:e5:27:
         46:e9:65:e7:ab:f7:a8:cc:3e:88:61:fa:a0:23:3c:e7:4a:34:
         7d:a5:6f:b3:bd:2f:27:d7:ea:04:e6:cd:78:21:6b:78:2c:b9:
         b7:e4:8f:7e:e5:fb:fb:e9:9e:94:95:c1:d9:69:f1:5c:7a:1d:
         a1:61:b5:88:ce:60:ac:41:bb:cf:f8:78:d5:26:4e:e8:75:4d:
         c5:5c:5c:e2:b3:28:cd:da:a8:c5:82:4a:bb:3e:7a:92:7f:cc:
         24:93:3b:35:26:59:bf:82:f2:51:be:b5:80:fd:ea:08:ad:76:
         94:a0:d9:00:8b:65:54:5c:37:f6:6c:b2:28:7c:2a:32:fb:a3:
         7b:f5:48:f7:ad:b3:c6:9e:20:aa:0a:f6:51:60:75:7d:3d:b3:
         83:b1:5c:87:da:f2:c9:cb:5b:4d:c4:28:b5:83:7f:91:1c:1d:
         83:2f:fa:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:41:16 2026 by rpki-client