Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.mft
File:                     fONyLR7LAIObJGf9XDmmrUamImE.mft (raw, json)
Hash identifier:          fn2fYYzP097rW8+ckOaHrB3QWqfk90NreTw47cmaSqY=
Subject key identifier:   74:E0:EF:39:F1:48:48:1D:23:5E:54:C2:A7:69:F6:F7:7D:C4:91:6E
Authority key identifier: 7C:E3:72:2D:1E:CB:00:83:9B:24:67:FD:5C:39:A6:AD:46:A6:22:61
Certificate issuer:       /CN=A9156E6F/serialNumber=7CE3722D1ECB00839B2467FD5C39A6AD46A62261
Certificate serial:       0CE7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fONyLR7LAIObJGf9XDmmrUamImE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.mft
Manifest number:          0CDC
Signing time:             Thu 26 Mar 2026 18:14:43 +0000
Manifest this update:     Thu 26 Mar 2026 18:14:43 +0000
Manifest next update:     Thu 02 Apr 2026 18:14:43 +0000
Files and hashes:         1: fONyLR7LAIObJGf9XDmmrUamImE.crl (hash: QiYSa2E5V3nVPkRtuddl+gIWJVL6G58gm110/QrdF1Y=)
                          2: ABD61D2E06D611EA8EBBEA50C4F9AE02.roa (hash: taMg9ABZmz3UBA8VdUB5OiDUtv+I/OZVxR13yJafYfo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.crl
                          rsync://rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fONyLR7LAIObJGf9XDmmrUamImE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 18:14:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3303 (0xce7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9156E6F, serialNumber=7CE3722D1ECB00839B2467FD5C39A6AD46A62261
        Validity
            Not Before: Mar 26 18:14:43 2026 GMT
            Not After : Apr  2 18:14:43 2026 GMT
        Subject: CN=69c57793-8e9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:6d:8d:1f:86:8e:7c:f9:1e:26:80:9a:6d:b2:
                    ff:a2:f2:34:c1:42:82:af:df:a9:11:0a:70:fe:18:
                    62:dd:f2:66:59:c8:ec:a0:70:b7:a0:1d:70:e4:58:
                    e8:74:6e:9a:9d:06:77:50:1b:84:e3:5a:a2:2c:97:
                    c0:cc:ab:69:af:10:21:97:53:68:6f:14:f3:d6:94:
                    ab:6f:e0:d5:1e:0c:53:2b:2b:32:53:7f:6c:6e:92:
                    cf:e9:f0:4b:07:3a:c7:81:70:11:d0:ae:35:e5:d7:
                    6b:23:2e:46:99:19:30:d4:81:bf:07:be:a1:ad:2d:
                    bd:b3:fe:d9:0d:bf:51:18:a2:ee:7f:30:50:f6:2e:
                    1a:b5:62:02:87:0e:a6:71:52:a9:93:24:8a:45:ac:
                    89:be:08:25:01:66:09:fd:52:71:ca:83:87:7a:83:
                    81:0c:1b:86:83:9e:d5:90:3a:b1:28:b8:5e:36:ac:
                    b1:93:0d:2e:55:6b:80:31:14:fd:8b:22:78:14:b2:
                    35:e6:1c:01:ac:3e:fc:a5:1c:fb:df:10:ba:52:05:
                    ec:e2:af:a1:ba:44:d0:bb:ff:df:e3:f7:24:8c:a2:
                    2d:27:1d:e8:ff:1a:e3:fa:a4:5c:9c:60:9a:a9:88:
                    3c:d7:5c:50:b5:5c:c1:bf:b1:fc:7f:b7:f2:45:c5:
                    8f:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:E0:EF:39:F1:48:48:1D:23:5E:54:C2:A7:69:F6:F7:7D:C4:91:6E
            X509v3 Authority Key Identifier:
                keyid:7C:E3:72:2D:1E:CB:00:83:9B:24:67:FD:5C:39:A6:AD:46:A6:22:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fONyLR7LAIObJGf9XDmmrUamImE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:73:f9:8d:ee:c2:c4:f2:1c:d3:a6:66:e1:4d:9a:19:35:40:
         a6:26:80:e5:d3:b2:2a:da:49:87:2d:33:98:74:5f:b0:b1:69:
         f1:1c:55:ff:2c:08:79:a7:a0:76:89:ad:77:91:d5:7a:0d:8d:
         47:d9:19:f4:75:40:20:80:56:30:f8:b0:96:77:03:d9:8b:1a:
         54:ca:cb:af:6c:94:28:89:06:33:1c:03:6a:81:ee:89:ea:d0:
         d4:19:92:65:ca:2f:85:3e:51:f0:d7:59:ef:e5:91:59:85:25:
         75:27:88:f4:fe:ca:ae:a2:eb:08:b8:e7:39:a1:c5:21:ae:44:
         7e:2f:3e:c6:c8:31:b1:60:ef:bb:98:52:ed:31:92:5a:54:67:
         14:2f:21:f3:29:8f:a3:6e:32:45:f0:1a:9c:60:38:cd:09:f9:
         a6:6b:5f:c6:74:6d:09:43:a6:6e:bf:86:88:23:c5:14:42:47:
         e6:fc:05:78:8b:97:e9:bc:ba:70:46:a8:ad:8c:fc:cd:7e:02:
         c8:02:bc:66:eb:52:33:a8:b4:36:75:3b:28:fb:eb:27:0d:43:
         ed:36:76:96:9c:f9:82:76:32:6f:17:32:a2:fa:35:20:09:de:
         98:32:7a:c9:e3:d4:ec:cd:9a:44:ca:1e:0c:2c:c4:87:d3:7f:
         9e:57:4e:91
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTZFNkYxMTAvBgNVBAUTKDdDRTM3MjJEMUVDQjAwODM5QjI0NjdGRDVDMzlBNkFE
NDZBNjIyNjEwHhcNMjYwMzI2MTgxNDQzWhcNMjYwNDAyMTgxNDQzWjAYMRYwFAYD
VQQDEw02OWM1Nzc5My04ZTliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAj22NH4aOfPkeJoCabbL/ovI0wUKCr9+pEQpw/hhi3fJmWcjsoHC3oB1w5Fjo
dG6anQZ3UBuE41qiLJfAzKtprxAhl1NobxTz1pSrb+DVHgxTKysyU39sbpLP6fBL
BzrHgXAR0K415ddrIy5GmRkw1IG/B76hrS29s/7ZDb9RGKLufzBQ9i4atWIChw6m
cVKpkySKRayJvgglAWYJ/VJxyoOHeoOBDBuGg57VkDqxKLheNqyxkw0uVWuAMRT9
iyJ4FLI15hwBrD78pRz73xC6UgXs4q+hukTQu//f4/ckjKItJx3o/xrj+qRcnGCa
qYg811xQtVzBv7H8f7fyRcWPJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHTg7znx
SEgdI15Uwqdp9vd9xJFuMB8GA1UdIwQYMBaAFHzjci0eywCDmyRn/Vw5pq1GpiJh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NkU2Ri9CMUI1QjNENjA2
RDUxMUVBQThCQTNFNEZDNEY5QUUwMi9mT055TFI3TEFJT2JKR2Y5WERtbXJVYW1J
bUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZPTnlMUjdMQUlPYkpHZjlYRG1tclVhbUltRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NkU2Ri9CMUI1QjNENjA2RDUxMUVBQThCQTNFNEZDNEY5QUUwMi9mT055TFI3TEFJ
T2JKR2Y5WERtbXJVYW1JbUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAsHP5je7CxPIc06Zm4U2aGTVApiaA5dOyKtpJhy0zmHRfsLFp8RxV/ywIeaeg
domtd5HVeg2NR9kZ9HVAIIBWMPiwlncD2YsaVMrLr2yUKIkGMxwDaoHuierQ1BmS
ZcovhT5R8NdZ7+WRWYUldSeI9P7KrqLrCLjnOaHFIa5Efi8+xsgxsWDvu5hS7TGS
WlRnFC8h8ymPo24yRfAanGA4zQn5pmtfxnRtCUOmbr+GiCPFFEJH5vwFeIuX6by6
cEaorYz8zX4CyAK8ZutSM6i0NnU7KPvrJw1D7TZ2lpz5gnYybxcyovo1IAnemDJ6
yePU7M2aRMoeDCzEh9N/nldOkQ==
-----END CERTIFICATE-----
Generated at Sat Mar 28 10:39:41 2026 by rpki-client