Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9125864/192315F2ED1811F08E1C0602406F56BC/_fbWlYIK89Dw56dNs0RTLFfa7kA.mft
File:                     _fbWlYIK89Dw56dNs0RTLFfa7kA.mft (raw, json)
Hash identifier:          R6z1wU4ROpRr9owfiUI5wf15L8zbfzsBqxG/nigXnfo=
Subject key identifier:   44:0A:17:6A:7E:97:F3:E2:C5:47:AA:D3:D3:D5:06:74:C3:54:25:E7
Authority key identifier: FD:F6:D6:95:82:0A:F3:D0:F0:E7:A7:4D:B3:44:53:2C:57:DA:EE:40
Certificate issuer:       /CN=A9125864/serialNumber=FDF6D695820AF3D0F0E7A74DB344532C57DAEE40
Certificate serial:       2F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_fbWlYIK89Dw56dNs0RTLFfa7kA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9125864/192315F2ED1811F08E1C0602406F56BC/_fbWlYIK89Dw56dNs0RTLFfa7kA.mft
Manifest number:          2B
Signing time:             Wed 25 Mar 2026 07:54:53 +0000
Manifest this update:     Wed 25 Mar 2026 07:54:53 +0000
Manifest next update:     Wed 01 Apr 2026 07:54:53 +0000
Files and hashes:         1: _fbWlYIK89Dw56dNs0RTLFfa7kA.crl (hash: f+3UYvw2zoR8w9vKmfMRfEQ1ZxmcYu2kemfp2eNIoAw=)
                          2: 7B57CA16ED1C11F09DBA53AB416F56BC.roa (hash: zWp6TDXFrmD5/NSfTk8YdIj2drPaBuTNuJsIqnk6a6U=)
                          3: 0BE73752ED1C11F0A0F1907B416F56BC.roa (hash: wnHDSrJ1lNjniUVeFmGkrnIaI5zcmuj8d7YV4WvUiMk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9125864/192315F2ED1811F08E1C0602406F56BC/_fbWlYIK89Dw56dNs0RTLFfa7kA.crl
                          rsync://rpki.apnic.net/member_repository/A9125864/192315F2ED1811F08E1C0602406F56BC/_fbWlYIK89Dw56dNs0RTLFfa7kA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_fbWlYIK89Dw56dNs0RTLFfa7kA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 07:54:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47 (0x2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9125864, serialNumber=FDF6D695820AF3D0F0E7A74DB344532C57DAEE40
        Validity
            Not Before: Mar 25 07:54:53 2026 GMT
            Not After : Apr  1 07:54:53 2026 GMT
        Subject: CN=69c394cd-4d1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:18:2f:73:cf:f3:a7:73:e3:4d:df:3b:fb:71:
                    70:c1:dd:5f:33:42:fb:2e:6b:35:e8:1f:0a:bd:68:
                    07:a5:39:ed:42:84:26:b9:52:a5:de:7e:c0:dc:c1:
                    1a:37:25:c2:71:ec:6b:f3:92:ff:57:42:ad:36:52:
                    96:9f:e8:c5:a5:a9:81:a0:72:29:25:37:6e:77:73:
                    45:60:a9:eb:89:45:b7:95:c3:0f:22:e6:17:17:94:
                    78:58:6c:b0:35:b2:5f:4c:7f:4b:25:81:fe:51:3a:
                    fb:8f:80:8f:fb:a7:c5:2d:3f:23:02:c0:22:0d:40:
                    30:21:84:4f:cc:8d:52:e2:d5:7a:d9:fe:58:b7:9c:
                    fb:ae:95:53:aa:de:13:e8:29:38:16:af:af:4f:3c:
                    36:27:ba:b3:83:d7:47:52:dd:51:72:02:40:a4:50:
                    a8:70:28:e9:6e:aa:8b:41:bc:8e:46:49:76:a5:7e:
                    2c:8e:c1:48:99:20:7b:03:32:a0:9e:45:ac:93:ef:
                    e2:35:46:db:75:ef:6b:47:cf:1e:88:c9:b1:9b:09:
                    4b:3b:c3:36:e7:9a:8b:a8:ac:a6:f4:dc:5e:66:59:
                    31:3c:d9:5a:e6:ac:15:67:bb:c4:60:40:95:b7:a4:
                    41:e5:51:49:d6:4a:e7:d9:97:b1:bb:c4:22:aa:26:
                    ff:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:0A:17:6A:7E:97:F3:E2:C5:47:AA:D3:D3:D5:06:74:C3:54:25:E7
            X509v3 Authority Key Identifier:
                keyid:FD:F6:D6:95:82:0A:F3:D0:F0:E7:A7:4D:B3:44:53:2C:57:DA:EE:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9125864/192315F2ED1811F08E1C0602406F56BC/_fbWlYIK89Dw56dNs0RTLFfa7kA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_fbWlYIK89Dw56dNs0RTLFfa7kA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125864/192315F2ED1811F08E1C0602406F56BC/_fbWlYIK89Dw56dNs0RTLFfa7kA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:e5:c7:ce:13:18:2e:6d:c7:ab:f4:9a:f0:01:2a:d1:ca:cb:
         c7:14:b6:a0:5c:eb:93:69:82:74:a8:74:da:2a:1e:b0:b4:51:
         45:11:24:f0:02:0b:18:c4:df:08:1b:ab:36:b7:aa:58:d2:cc:
         ba:82:7a:32:a4:2d:73:61:94:46:b3:1e:2f:82:0b:d8:54:36:
         63:dd:fa:a7:89:d7:81:f7:73:f0:f9:a1:81:b2:aa:a7:d6:53:
         38:e3:69:40:e8:a4:3f:43:a1:45:02:d5:4c:ec:43:00:49:65:
         a8:46:28:d1:6c:9a:3b:19:e3:e7:ba:28:00:31:79:ce:d2:c8:
         02:e1:5e:1f:4c:70:f1:0b:19:ee:77:51:bb:40:e0:14:86:13:
         1c:ab:8e:e5:50:fe:b7:02:eb:a8:d0:19:f1:89:3e:f6:41:91:
         fb:7a:ea:08:15:d8:61:a2:7e:b3:19:9e:ed:43:f8:b0:70:5f:
         78:7c:fc:06:31:e6:56:bc:80:fa:b8:40:d9:86:35:7b:cf:c2:
         1a:6c:a4:d1:59:c4:59:70:ff:43:35:98:88:06:70:25:b9:16:
         08:b5:e9:d6:0f:33:f6:88:98:ae:a3:79:07:f8:e4:be:3d:85:
         70:41:6a:74:6a:6c:b4:d3:2c:18:ff:13:fc:95:6f:c2:47:99:
         92:77:e8:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:38:19 2026 by rpki-client