Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91444E5/2E822DAA1B9111EC9E7A3114C4F9AE02/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.mft
File:                     Fgi_RiSn4bcjIotGYd1mHnCu8_Q.mft (raw, json)
Hash identifier:          Sen5YA6hspGwwQOzRTgX8LLgA2YIhs+pjJr9XpR22NM=
Subject key identifier:   4C:F9:72:39:37:C9:F5:CF:60:53:C5:09:BF:3C:14:51:41:ED:B2:D0
Authority key identifier: 16:08:BF:46:24:A7:E1:B7:23:22:8B:46:61:DD:66:1E:70:AE:F3:F4
Certificate issuer:       /CN=A91444E5/serialNumber=1608BF4624A7E1B723228B4661DD661E70AEF3F4
Certificate serial:       0587
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91444E5/2E822DAA1B9111EC9E7A3114C4F9AE02/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.mft
Manifest number:          057D
Signing time:             Tue 24 Mar 2026 22:58:38 +0000
Manifest this update:     Tue 24 Mar 2026 22:58:37 +0000
Manifest next update:     Tue 31 Mar 2026 22:58:37 +0000
Files and hashes:         1: Fgi_RiSn4bcjIotGYd1mHnCu8_Q.crl (hash: Zfo06jiBxMvwkH7v5FaT56BZiaGqrfFCc1nsp/uFbT4=)
                          2: 90AB89E4547511EEB44F391AC4F9AE02.roa (hash: HFHAqZaEtAW52D1hUPhZmJHncyLuC7GnGgQ2YVfhigw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91444E5/2E822DAA1B9111EC9E7A3114C4F9AE02/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.crl
                          rsync://rpki.apnic.net/member_repository/A91444E5/2E822DAA1B9111EC9E7A3114C4F9AE02/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 22:58:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1415 (0x587)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91444E5, serialNumber=1608BF4624A7E1B723228B4661DD661E70AEF3F4
        Validity
            Not Before: Mar 24 22:58:37 2026 GMT
            Not After : Mar 31 22:58:37 2026 GMT
        Subject: CN=69c3171d-6147
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:aa:1e:b7:03:7e:9c:8c:df:55:bf:db:05:34:
                    d8:3f:0b:7c:f1:f6:7c:4b:06:6c:2c:96:bf:5e:2c:
                    10:15:d4:f6:c0:83:b1:a9:1a:2c:ce:17:1d:72:1d:
                    63:fa:d0:bd:da:a1:33:00:2d:2b:14:40:e4:e3:b6:
                    a8:40:bc:4d:15:2d:15:2e:8c:9e:ec:57:19:db:93:
                    91:ef:40:e5:00:dc:de:00:7a:00:54:9e:f9:7f:cc:
                    c8:83:b2:25:09:6b:0f:29:4e:41:4c:45:b2:ed:fe:
                    dc:32:de:6b:69:32:d5:05:28:5c:cc:94:df:49:da:
                    fb:54:51:1e:ba:db:5e:94:5c:ed:7e:b5:e1:6c:15:
                    bd:f5:aa:68:87:46:5f:2e:1b:32:4c:f1:5e:f7:86:
                    b2:12:a6:f2:51:bc:9b:02:1d:c5:41:5a:65:2a:db:
                    ec:df:0a:26:32:14:15:95:dd:06:e2:8f:1d:28:7b:
                    d7:93:87:b7:4f:22:28:aa:cb:35:98:60:f3:c6:28:
                    89:42:dc:f0:e9:91:0a:70:91:5d:e0:f1:5e:db:85:
                    52:cb:60:d7:b4:fb:55:4e:4a:9a:4b:84:f9:a3:e4:
                    56:ee:dc:af:65:7b:11:b1:01:dc:30:43:65:8e:50:
                    9e:0e:7a:25:e1:5d:3d:d5:e0:97:53:c4:de:af:4f:
                    c3:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:F9:72:39:37:C9:F5:CF:60:53:C5:09:BF:3C:14:51:41:ED:B2:D0
            X509v3 Authority Key Identifier:
                keyid:16:08:BF:46:24:A7:E1:B7:23:22:8B:46:61:DD:66:1E:70:AE:F3:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91444E5/2E822DAA1B9111EC9E7A3114C4F9AE02/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91444E5/2E822DAA1B9111EC9E7A3114C4F9AE02/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:7a:3f:5c:02:69:6b:b3:19:58:33:45:b2:56:46:53:4b:e2:
         56:96:6b:24:3b:b4:16:c4:13:f2:00:b6:8a:cf:3b:65:2b:48:
         ef:f9:eb:af:2e:55:e8:1f:0e:8b:f3:29:15:0f:ed:9b:52:c5:
         1f:9a:3a:61:c6:9f:4f:fa:0f:f2:45:23:4c:d7:f9:24:23:75:
         68:cd:f5:cc:73:af:47:47:8a:53:36:88:05:eb:a8:c4:12:de:
         9e:e0:4d:f7:46:55:ce:96:0d:a1:58:82:71:49:e0:69:98:28:
         af:12:a6:9f:42:3a:89:f5:31:8f:c0:f2:07:cb:a1:77:7e:1b:
         23:3e:49:42:d2:b1:f3:08:fb:63:0c:a4:7f:2b:7f:ed:b6:b4:
         d5:bc:c2:a5:38:17:f9:56:1c:4f:8b:0d:62:41:e3:85:09:c3:
         5b:f1:76:c6:1e:99:69:c0:b3:a9:b9:0a:2b:dc:0a:02:cd:7c:
         14:91:b3:d9:24:d3:b5:4c:d7:f0:cd:37:9e:d7:7a:07:5c:2e:
         51:a0:56:74:9e:78:60:92:a1:25:b3:ef:59:3a:ae:df:d7:a5:
         ef:e7:bb:cf:f6:53:7c:5e:64:a5:d5:36:37:20:77:f3:51:cc:
         72:73:67:6c:c1:bf:31:e6:2a:bb:c8:7a:5a:39:6d:12:8c:1b:
         cc:ca:c7:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:53:58 2026 by rpki-client