Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E061/BBC6C3EA138C11F1AA4176333A3D8C67/F1VV_w7FB6or38GD0zPg-PqNyYQ.mft
File:                     F1VV_w7FB6or38GD0zPg-PqNyYQ.mft (raw, json)
Hash identifier:          qnOygow+cOPAkUxUiaWZMmEDFOTsQI+5zlpiP/muvcA=
Subject key identifier:   3A:42:3C:3E:76:A8:EF:76:68:41:44:D8:E0:FE:D1:6C:FC:B5:5A:0E
Authority key identifier: 17:55:55:FF:0E:C5:07:AA:2B:DF:C1:83:D3:33:E0:F8:FA:8D:C9:84
Certificate issuer:       /CN=A915E061/serialNumber=175555FF0EC507AA2BDFC183D333E0F8FA8DC984
Certificate serial:       15
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/F1VV_w7FB6or38GD0zPg-PqNyYQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E061/BBC6C3EA138C11F1AA4176333A3D8C67/F1VV_w7FB6or38GD0zPg-PqNyYQ.mft
Manifest number:          11
Signing time:             Wed 25 Mar 2026 08:15:32 +0000
Manifest this update:     Wed 25 Mar 2026 08:15:32 +0000
Manifest next update:     Wed 01 Apr 2026 08:15:32 +0000
Files and hashes:         1: F1VV_w7FB6or38GD0zPg-PqNyYQ.crl (hash: ZcyXUm+uUyD9mgtuZLiMbwsB4Tc5aHMTNckLd7z3kLY=)
                          2: CF173000138D11F198EDAC703A3D8C67.roa (hash: QgpTV6aM04npF7e8lin14bW0c02BbLbQZoykBUGrpd4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E061/BBC6C3EA138C11F1AA4176333A3D8C67/F1VV_w7FB6or38GD0zPg-PqNyYQ.crl
                          rsync://rpki.apnic.net/member_repository/A915E061/BBC6C3EA138C11F1AA4176333A3D8C67/F1VV_w7FB6or38GD0zPg-PqNyYQ.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/F1VV_w7FB6or38GD0zPg-PqNyYQ.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 08:15:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21 (0x15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E061, serialNumber=175555FF0EC507AA2BDFC183D333E0F8FA8DC984
        Validity
            Not Before: Mar 25 08:15:32 2026 GMT
            Not After : Apr  1 08:15:32 2026 GMT
        Subject: CN=69c399a4-0420
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:d5:45:c2:24:50:f4:ca:5e:f9:63:dd:03:9f:
                    d7:29:a7:7d:d4:ea:9a:78:31:be:6b:a3:b2:12:26:
                    4b:fd:99:2e:8f:5e:a1:b7:aa:16:86:20:7c:b6:e7:
                    3b:95:65:27:e4:0e:ef:43:05:19:6e:32:41:d7:13:
                    df:16:37:af:12:dd:ad:3e:46:1d:41:20:28:ce:f4:
                    97:7d:7d:f7:8e:a3:62:c3:25:77:ff:2c:93:88:98:
                    20:33:f5:20:5c:c9:a0:2d:13:59:88:d1:97:98:a2:
                    f9:a8:b9:f3:09:15:74:94:ca:fe:04:33:5b:ec:c6:
                    33:7d:92:e3:02:ed:6e:bf:a4:56:7b:cd:b9:a7:88:
                    e0:c7:d0:2f:08:46:1c:6d:e5:bc:59:0f:9b:86:6d:
                    f8:4f:63:33:24:90:7f:e2:d1:e3:b1:66:3e:33:26:
                    9f:b7:1c:37:8f:b2:41:52:52:04:0d:e0:21:b6:bd:
                    11:c1:05:70:60:5c:6d:f7:42:c5:bf:70:af:e1:f7:
                    96:35:8f:6d:ab:05:56:7c:50:83:f7:d7:5e:26:e3:
                    5d:55:a0:d9:8e:92:23:64:5b:b4:e6:b0:08:43:91:
                    1b:00:cc:aa:f2:1d:02:35:76:fb:52:cb:1f:7f:d4:
                    81:35:15:93:39:15:22:bd:3c:aa:29:0a:bc:c6:d3:
                    f9:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:42:3C:3E:76:A8:EF:76:68:41:44:D8:E0:FE:D1:6C:FC:B5:5A:0E
            X509v3 Authority Key Identifier:
                keyid:17:55:55:FF:0E:C5:07:AA:2B:DF:C1:83:D3:33:E0:F8:FA:8D:C9:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E061/BBC6C3EA138C11F1AA4176333A3D8C67/F1VV_w7FB6or38GD0zPg-PqNyYQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/F1VV_w7FB6or38GD0zPg-PqNyYQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E061/BBC6C3EA138C11F1AA4176333A3D8C67/F1VV_w7FB6or38GD0zPg-PqNyYQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:16:65:b6:7d:e4:d7:bc:f9:a8:34:b4:bd:63:40:2a:64:73:
         51:01:1d:18:31:6d:11:b8:97:da:cb:1f:8d:6e:b5:67:57:06:
         1c:dd:bd:69:67:32:b6:4e:2a:9e:bc:2a:75:aa:1f:cd:b5:08:
         e6:0d:ec:3a:57:c1:9a:d5:25:05:67:40:2d:7f:61:97:8e:71:
         51:e6:fe:be:c6:f9:fa:f1:8b:ca:46:1c:da:d8:e0:11:13:85:
         b1:42:d9:92:88:8a:40:b1:60:31:a6:50:9a:8d:35:73:7d:3a:
         e4:0c:e2:39:27:d9:89:38:9c:f2:47:26:01:59:97:14:dd:63:
         53:8c:b0:a2:fa:c3:b0:2c:91:7f:c9:aa:e4:88:7d:01:61:12:
         08:59:d4:d7:97:a5:cc:0a:95:ad:2b:30:c6:5a:12:13:ac:38:
         ae:a2:03:15:09:37:f5:a1:7e:57:ce:76:40:52:8f:71:9b:d5:
         c0:79:b0:d3:47:39:1f:1f:c4:c5:f4:6c:bb:4b:ad:91:a7:5a:
         ab:1e:11:61:c0:aa:dd:f6:da:64:5c:83:68:20:d3:2f:4f:ed:
         85:5a:4b:20:de:3c:04:43:10:1e:78:52:89:aa:73:67:3e:8f:
         55:8b:e4:b4:06:63:4a:fe:38:1b:53:93:62:d7:b5:11:58:bb:
         10:98:b7:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:03:53 2026 by rpki-client