Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134FAF/8248E914449711F0A9757362C4F9AE02/FWbBYbuz41NHqXrE1YFtjt5UIY4.mft
File:                     FWbBYbuz41NHqXrE1YFtjt5UIY4.mft (raw, json)
Hash identifier:          29WzAvZQ6XAlX6Cc2jspkQYHpft8vG469yZe75k4Vgs=
Subject key identifier:   92:F8:EB:DC:86:8F:9A:04:F2:69:77:AD:CB:DA:25:60:A6:9C:8E:80
Authority key identifier: 15:66:C1:61:BB:B3:E3:53:47:A9:7A:C4:D5:81:6D:8E:DE:54:21:8E
Certificate issuer:       /CN=A9134FAF/serialNumber=1566C161BBB3E35347A97AC4D5816D8EDE54218E
Certificate serial:       9C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FWbBYbuz41NHqXrE1YFtjt5UIY4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134FAF/8248E914449711F0A9757362C4F9AE02/FWbBYbuz41NHqXrE1YFtjt5UIY4.mft
Manifest number:          99
Signing time:             Wed 25 Mar 2026 06:38:48 +0000
Manifest this update:     Wed 25 Mar 2026 06:38:48 +0000
Manifest next update:     Wed 01 Apr 2026 06:38:48 +0000
Files and hashes:         1: FWbBYbuz41NHqXrE1YFtjt5UIY4.crl (hash: jZhpLFTo7ex/tlCZtfT1iLzQT9MUzRW0/wpMQBo/szg=)
                          2: 4CB714B644AA11F0B7FB6E72C4F9AE02.roa (hash: Kpi2lExwMtUBB90ubhO2BgOMUMkDluldZJCK6di+564=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134FAF/8248E914449711F0A9757362C4F9AE02/FWbBYbuz41NHqXrE1YFtjt5UIY4.crl
                          rsync://rpki.apnic.net/member_repository/A9134FAF/8248E914449711F0A9757362C4F9AE02/FWbBYbuz41NHqXrE1YFtjt5UIY4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FWbBYbuz41NHqXrE1YFtjt5UIY4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:38:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 156 (0x9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134FAF, serialNumber=1566C161BBB3E35347A97AC4D5816D8EDE54218E
        Validity
            Not Before: Mar 25 06:38:48 2026 GMT
            Not After : Apr  1 06:38:48 2026 GMT
        Subject: CN=69c382f8-6418
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:90:91:04:3d:91:d7:48:0a:0a:cc:33:44:45:
                    a5:32:64:3c:74:27:a3:25:7d:88:99:6c:c5:3d:1a:
                    0d:66:49:8e:db:bc:48:b9:22:a0:5b:a1:a1:be:ea:
                    18:36:f6:46:d3:b9:36:bc:d0:30:ef:7a:16:c7:03:
                    08:e3:16:da:88:5a:44:7b:4b:75:ad:3b:64:97:a4:
                    0c:23:0f:34:3c:7d:e4:96:98:c7:89:97:aa:2c:51:
                    85:1b:03:60:92:1c:36:fc:67:20:d6:f3:ec:c2:c8:
                    9c:9a:53:fd:d3:55:d7:fd:3e:01:96:b0:9d:ff:12:
                    4b:09:d6:8d:84:38:21:40:dd:06:92:d9:16:43:56:
                    bf:38:6c:f9:c9:dc:9b:17:96:2b:d7:47:aa:bc:8a:
                    7c:42:11:7d:e4:7b:6b:e6:17:de:7e:4f:10:27:be:
                    bc:4e:95:79:30:a4:b2:52:e6:43:47:cc:00:e8:04:
                    ae:40:7a:d7:44:4e:a1:ef:f0:00:d7:88:b5:7f:c1:
                    a6:b6:a9:6d:6e:c1:b4:57:51:d9:a9:4c:38:c7:40:
                    09:0d:ce:52:57:d1:36:02:90:76:9d:88:56:ca:54:
                    21:00:e2:20:e1:ee:8b:56:f7:f2:8b:18:1b:ee:69:
                    04:f0:4e:eb:f3:15:8a:89:00:3d:67:3c:7a:35:b0:
                    0f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:F8:EB:DC:86:8F:9A:04:F2:69:77:AD:CB:DA:25:60:A6:9C:8E:80
            X509v3 Authority Key Identifier:
                keyid:15:66:C1:61:BB:B3:E3:53:47:A9:7A:C4:D5:81:6D:8E:DE:54:21:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134FAF/8248E914449711F0A9757362C4F9AE02/FWbBYbuz41NHqXrE1YFtjt5UIY4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FWbBYbuz41NHqXrE1YFtjt5UIY4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134FAF/8248E914449711F0A9757362C4F9AE02/FWbBYbuz41NHqXrE1YFtjt5UIY4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:b6:38:d9:2c:f1:ea:9a:07:d2:9b:8a:a9:0a:d8:46:c9:c6:
         41:cc:1a:45:e4:7b:49:83:0d:4d:e8:08:d7:82:b7:94:01:2a:
         21:7a:63:5b:61:99:af:f8:73:53:a2:77:31:a7:53:87:6e:9d:
         b6:f5:31:30:96:b7:44:83:fb:43:fe:47:91:e4:e2:de:37:6e:
         2e:39:c3:51:08:74:4b:33:eb:0c:eb:96:7e:7b:c8:2e:51:cb:
         39:3a:5d:f2:d6:a1:31:4a:f4:a2:26:fc:1c:af:86:49:a7:4e:
         f8:8e:45:b5:51:d3:85:b2:b8:11:87:d5:88:b7:49:4c:32:2a:
         fe:d8:c5:2f:84:0f:ee:7f:c4:66:fe:e5:de:39:96:d0:46:da:
         9f:00:b2:76:8a:01:e8:34:45:72:ef:6c:0f:28:27:10:65:56:
         02:2f:c9:e8:f1:3e:de:76:af:c6:15:44:75:09:e3:8b:9c:79:
         f9:fc:e3:bf:5b:e7:83:4c:87:c3:4b:68:23:fa:5a:b0:50:88:
         ca:93:86:29:fd:b0:1a:70:98:84:7e:97:07:b0:5f:5c:fc:11:
         ae:df:b8:01:0c:64:09:65:6d:43:4f:f8:5d:a5:1c:b7:4b:04:
         00:56:86:ac:89:78:cc:4b:97:3d:ac:cc:85:44:c6:08:97:1d:
         72:c0:bb:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:29:55 2026 by rpki-client