Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft
File:                     fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft (raw, json)
Hash identifier:          zcJecxAnxPs1nmiMMEZMBqzmdWkYt4RDQkIBt7zOsb8=
Subject key identifier:   45:73:A1:C1:F5:E5:20:36:C5:E2:0E:39:27:9E:7E:8E:C2:81:F7:AF
Authority key identifier: 7D:18:D8:77:50:21:05:FA:18:72:AD:EE:4C:F2:62:3C:41:4F:16:B5
Certificate issuer:       /CN=A915D4F2/serialNumber=7D18D877502105FA1872ADEE4CF2623C414F16B5
Certificate serial:       0416
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRjYd1AhBfoYcq3uTPJiPEFPFrU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft
Manifest number:          0400
Signing time:             Fri 27 Mar 2026 00:17:20 +0000
Manifest this update:     Fri 27 Mar 2026 00:17:19 +0000
Manifest next update:     Fri 03 Apr 2026 00:17:19 +0000
Files and hashes:         1: fRjYd1AhBfoYcq3uTPJiPEFPFrU.crl (hash: 9RYwr2OKKulz5MEzX2kels3UoOrPs+DVJ7FeYQylhFI=)
                          2: A201A06CB42B11F0849A7A7AC4F9AE02.roa (hash: 8711DjizhgwUlMNKXElZ5orEHkZ18p22C/iB5twicyI=)
                          3: 791CD4FEFAE511F0B461E4A0696F56BC.roa (hash: nkx43CRHYNhsKmR2UchTww3j8r3WylsKbynVxRoROSc=)
                          4: 319786BEB63B11EF8D06900EC4F9AE02.roa (hash: 9o3pl6rhGeRs3aXVGw+bwYJylicnCZsy7pyeVUVfyFw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.crl
                          rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRjYd1AhBfoYcq3uTPJiPEFPFrU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 00:17:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1046 (0x416)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D4F2, serialNumber=7D18D877502105FA1872ADEE4CF2623C414F16B5
        Validity
            Not Before: Mar 27 00:17:19 2026 GMT
            Not After : Apr  3 00:17:19 2026 GMT
        Subject: CN=69c5cc90-dbd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:df:ce:50:26:2c:a6:62:74:47:6c:c7:f1:2f:
                    2c:33:54:a8:b7:da:26:bb:c5:43:25:ab:be:0d:38:
                    40:76:5a:d4:70:d8:c3:5e:53:96:4c:c3:05:c2:ec:
                    63:01:37:8a:cd:7d:a4:8d:2d:bd:30:2f:e8:14:40:
                    c7:5b:83:c6:a4:e5:75:bf:16:b5:dd:68:6c:31:66:
                    8b:d0:bb:fe:cd:0a:a6:03:67:50:41:38:d5:ec:60:
                    04:20:5f:c3:83:0d:c8:a8:03:bf:c5:ef:13:e4:70:
                    96:31:7b:5b:bf:63:3d:ea:78:3e:e5:b7:eb:28:87:
                    45:5b:ce:90:93:cb:5a:f3:87:bf:5a:5b:a3:5b:2c:
                    3a:cb:12:29:d4:c7:ed:68:f7:c8:0b:3f:a0:30:1e:
                    31:3b:e4:eb:62:c4:fe:2c:1c:f4:94:ef:d3:ad:44:
                    8c:3d:b8:a0:6c:a9:e3:6d:cf:53:b7:98:0d:e9:6d:
                    8c:ff:e8:47:f9:54:5d:07:21:3c:46:0f:e7:ca:a1:
                    c4:60:2f:16:83:cb:2f:53:01:0d:22:f3:17:2d:a8:
                    c9:6c:d0:59:36:4b:6d:e3:03:fb:ed:d9:80:20:b0:
                    5b:44:ed:5d:ee:0d:c7:67:96:a9:a8:20:52:8f:1e:
                    34:78:fd:32:7a:b3:92:44:00:45:83:bd:fb:dd:2a:
                    43:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:73:A1:C1:F5:E5:20:36:C5:E2:0E:39:27:9E:7E:8E:C2:81:F7:AF
            X509v3 Authority Key Identifier:
                keyid:7D:18:D8:77:50:21:05:FA:18:72:AD:EE:4C:F2:62:3C:41:4F:16:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRjYd1AhBfoYcq3uTPJiPEFPFrU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:9e:49:00:09:85:46:f1:88:d7:d6:16:cd:5a:4e:5b:ce:4a:
         03:36:48:31:86:d5:47:0a:7c:90:ea:72:82:bd:da:c5:8d:4a:
         79:b8:6d:50:4b:0e:8a:6c:53:bd:1f:6a:49:10:3b:82:d5:d4:
         89:f2:da:06:39:4b:5c:60:f7:c7:3a:6b:88:5f:17:b4:e1:19:
         4f:0d:5b:75:c0:ff:10:b2:a7:fd:64:66:50:a4:4b:9c:90:0c:
         ff:b3:b9:18:90:15:89:5b:75:23:38:8f:ab:24:09:61:45:fb:
         1d:b1:61:68:c4:98:e9:b4:dc:80:43:08:87:3f:07:66:3b:2f:
         bf:08:6f:4d:52:c4:6f:d5:a6:5f:dc:3c:2f:4c:ad:f9:e2:46:
         ee:4a:74:d3:d7:64:dd:8c:24:d9:2d:bd:91:c1:9e:d2:84:ba:
         fb:0d:5d:73:3e:1c:8a:82:41:d4:40:27:4c:33:36:93:e9:7b:
         0f:9f:85:f6:4c:0b:0a:0a:c9:c2:c1:cc:29:a3:11:10:dd:09:
         ca:79:44:99:ed:50:74:3a:e8:f4:e7:6e:68:ba:d6:b0:d5:77:
         b4:af:48:34:e5:da:db:1d:a3:52:b3:95:74:85:70:92:bc:dc:
         0c:57:35:10:ff:61:ed:01:4a:64:53:cf:be:db:7b:4c:c0:28:
         a8:fa:42:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:30:52 2026 by rpki-client