Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915DB9F/B88F4252545011E6A3A6D466C4F9AE02/fgqozSvoYXAaXKfPudRQ09kYJ-g.mft
File:                     fgqozSvoYXAaXKfPudRQ09kYJ-g.mft (raw, json)
Hash identifier:          PchGxUm6XtgR4Rd2kOeYxpoI50m7ZhiN5JVtwiFwCCA=
Subject key identifier:   86:B7:0A:BE:97:9D:D0:8C:2C:F1:C8:CD:E6:40:35:2E:A7:7B:B2:19
Authority key identifier: 7E:0A:A8:CD:2B:E8:61:70:1A:5C:A7:CF:B9:D4:50:D3:D9:18:27:E8
Certificate issuer:       /CN=A915DB9F/serialNumber=7E0AA8CD2BE861701A5CA7CFB9D450D3D91827E8
Certificate serial:       1FC8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fgqozSvoYXAaXKfPudRQ09kYJ-g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915DB9F/B88F4252545011E6A3A6D466C4F9AE02/fgqozSvoYXAaXKfPudRQ09kYJ-g.mft
Manifest number:          1FB9
Signing time:             Thu 26 Mar 2026 15:58:29 +0000
Manifest this update:     Thu 26 Mar 2026 15:58:28 +0000
Manifest next update:     Thu 02 Apr 2026 15:58:28 +0000
Files and hashes:         1: fgqozSvoYXAaXKfPudRQ09kYJ-g.crl (hash: yRSHqf4Jx196hhUUau49S8BU4huXZpZ4xQTxLUAs5yA=)
                          2: 4D94E0D6545211E6A367BC68C4F9AE02.roa (hash: nzLMDhvvKl6G16FEG2gICFkWdz4KTK6PcIX/fg8UQKE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915DB9F/B88F4252545011E6A3A6D466C4F9AE02/fgqozSvoYXAaXKfPudRQ09kYJ-g.crl
                          rsync://rpki.apnic.net/member_repository/A915DB9F/B88F4252545011E6A3A6D466C4F9AE02/fgqozSvoYXAaXKfPudRQ09kYJ-g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fgqozSvoYXAaXKfPudRQ09kYJ-g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 15:58:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8136 (0x1fc8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915DB9F, serialNumber=7E0AA8CD2BE861701A5CA7CFB9D450D3D91827E8
        Validity
            Not Before: Mar 26 15:58:28 2026 GMT
            Not After : Apr  2 15:58:28 2026 GMT
        Subject: CN=69c557a5-27a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b0:3c:dc:32:af:da:d8:3b:02:0e:01:b6:d5:
                    33:ef:dd:fa:25:d6:1d:b4:44:e1:d5:93:83:33:90:
                    cb:08:49:9b:c4:6b:b4:f2:97:72:44:01:ba:22:26:
                    9b:17:6a:70:50:97:33:97:15:82:a7:19:3e:e5:8b:
                    e0:c9:c4:8a:c5:eb:37:c4:c4:25:22:e2:92:68:0c:
                    13:71:b3:a3:80:99:a0:5a:76:45:e5:9b:b0:5c:28:
                    89:a8:0e:65:83:91:98:58:03:ff:d4:9f:b2:0c:bc:
                    02:5a:79:1c:08:04:03:3a:a8:1d:f3:39:57:71:cd:
                    43:ed:c9:43:db:4d:59:ef:16:b6:f9:aa:b3:31:ed:
                    af:e9:00:55:a4:80:09:48:c2:a2:d4:dd:89:00:1b:
                    78:4a:ea:79:1c:f6:6b:84:a2:f9:2f:6f:3b:f4:9d:
                    0b:63:5c:59:31:e7:ec:19:97:57:5c:fb:06:93:ae:
                    f3:77:32:e5:4c:47:8f:94:54:cc:98:f9:50:a9:1f:
                    af:18:d0:f4:d3:27:7e:8c:57:2d:af:dc:b2:ef:45:
                    ca:c6:2a:ee:75:ee:bb:3d:6e:0e:07:0b:5f:da:55:
                    bb:73:1a:8c:d6:a1:99:3e:19:ab:2a:b6:0d:06:cd:
                    a7:50:34:df:c1:10:60:69:54:19:89:b1:d7:e4:c1:
                    a9:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:B7:0A:BE:97:9D:D0:8C:2C:F1:C8:CD:E6:40:35:2E:A7:7B:B2:19
            X509v3 Authority Key Identifier:
                keyid:7E:0A:A8:CD:2B:E8:61:70:1A:5C:A7:CF:B9:D4:50:D3:D9:18:27:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915DB9F/B88F4252545011E6A3A6D466C4F9AE02/fgqozSvoYXAaXKfPudRQ09kYJ-g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fgqozSvoYXAaXKfPudRQ09kYJ-g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DB9F/B88F4252545011E6A3A6D466C4F9AE02/fgqozSvoYXAaXKfPudRQ09kYJ-g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:22:9c:cb:b3:67:0f:16:d5:5d:36:a6:ab:fa:dc:f5:42:b2:
         0e:ab:fd:e8:a2:0c:ca:06:d3:d5:1c:86:69:b3:1d:43:65:24:
         63:20:f3:53:7c:dc:9b:da:9d:31:a8:54:59:f1:90:9e:d0:7f:
         7f:ed:15:14:b2:2c:5d:93:da:a8:3a:59:0d:1f:52:d7:f1:9d:
         94:e6:80:64:39:a9:77:3e:80:fe:05:f6:ac:60:d3:2d:ab:93:
         72:d7:75:88:56:25:4a:cb:66:d2:b9:d9:1a:c2:4d:82:12:e3:
         6e:7f:e5:2e:77:6e:6a:88:4a:95:c0:5e:7d:2c:ad:75:ba:e1:
         1f:55:3e:f4:58:b1:ee:41:91:d0:f1:9e:5d:b5:34:63:a3:75:
         fd:37:04:53:5c:3f:c5:ff:6a:9c:e4:f4:65:4f:7b:68:96:11:
         d1:94:a3:de:56:83:bb:d3:61:8b:2c:b1:8c:3f:a1:ff:c3:be:
         08:b4:7c:a1:c8:dd:e4:58:48:38:a4:5f:48:1a:70:e2:4a:b4:
         a9:e4:c3:94:0d:b1:73:79:33:f7:09:0a:8b:7f:33:85:d9:56:
         ca:cf:d2:05:b1:30:a1:96:8f:ac:af:d2:75:5e:24:a3:4b:e2:
         76:2b:f4:7e:f5:ee:86:25:5f:7f:5a:f9:a2:6e:b6:a9:14:4a:
         4c:d6:4a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:15:22 2026 by rpki-client