Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91627F3/779F6E9283F811EC816B0367C4F9AE02/FSze4Zs7fRcbTKrQNbUymFTTbcI.mft
File:                     FSze4Zs7fRcbTKrQNbUymFTTbcI.mft (raw, json)
Hash identifier:          roNGQijirN4qcyWaCQu2hAl1loAAkRWt1jTh6Hu1p7Q=
Subject key identifier:   A4:8F:1C:27:10:39:5F:6F:1B:3C:35:DF:6A:E7:C7:B6:2A:DE:0A:EB
Authority key identifier: 15:2C:DE:E1:9B:3B:7D:17:1B:4C:AA:D0:35:B5:32:98:54:D3:6D:C2
Certificate issuer:       /CN=A91627F3/serialNumber=152CDEE19B3B7D171B4CAAD035B5329854D36DC2
Certificate serial:       0487
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSze4Zs7fRcbTKrQNbUymFTTbcI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91627F3/779F6E9283F811EC816B0367C4F9AE02/FSze4Zs7fRcbTKrQNbUymFTTbcI.mft
Manifest number:          047B
Signing time:             Tue 24 Mar 2026 23:46:28 +0000
Manifest this update:     Tue 24 Mar 2026 23:46:28 +0000
Manifest next update:     Tue 31 Mar 2026 23:46:28 +0000
Files and hashes:         1: FSze4Zs7fRcbTKrQNbUymFTTbcI.crl (hash: f81t8p4j2y6WIIcOO3/o79G0fzvoG0t3DONBVZiarVw=)
                          2: FF9D74D8735F11F093707251C4F9AE02.roa (hash: giiA+gbjaObpoGPhZNDd/Pz8GB9dBt3ThgFxVbT5y50=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91627F3/779F6E9283F811EC816B0367C4F9AE02/FSze4Zs7fRcbTKrQNbUymFTTbcI.crl
                          rsync://rpki.apnic.net/member_repository/A91627F3/779F6E9283F811EC816B0367C4F9AE02/FSze4Zs7fRcbTKrQNbUymFTTbcI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSze4Zs7fRcbTKrQNbUymFTTbcI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 23:46:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1159 (0x487)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91627F3, serialNumber=152CDEE19B3B7D171B4CAAD035B5329854D36DC2
        Validity
            Not Before: Mar 24 23:46:28 2026 GMT
            Not After : Mar 31 23:46:28 2026 GMT
        Subject: CN=69c32254-75d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:49:a7:3e:99:46:2d:47:0a:27:d5:5d:0a:6d:
                    a9:04:fc:de:5c:f7:44:51:57:22:ae:80:c4:94:76:
                    28:06:70:f0:e1:f9:53:32:bb:40:9e:cd:5a:57:01:
                    c8:c4:41:e1:ce:e2:30:03:36:2b:14:61:d3:8c:85:
                    09:ff:ed:ea:9d:ba:58:c3:0a:f9:1f:3d:16:e6:cc:
                    22:c4:1d:17:31:51:d9:93:d2:1d:72:4b:6b:4e:bc:
                    db:1a:bc:7c:6f:90:b0:34:73:62:66:34:a0:06:41:
                    b1:a2:36:5b:38:f9:eb:0b:3c:c3:22:18:77:81:95:
                    1d:bf:49:a5:3a:25:22:ac:9a:93:02:0f:e1:4d:cb:
                    2f:b7:b4:e4:49:f6:ea:1b:be:ce:6f:da:71:8c:e9:
                    a8:8e:c2:be:e3:c9:f8:60:0a:54:b5:e5:c9:14:24:
                    f1:2b:4f:3c:87:f5:94:e7:da:35:5c:4f:32:64:cc:
                    03:38:6e:83:90:1a:ff:4f:f1:a2:53:95:3a:48:70:
                    da:d8:da:65:f8:ce:c2:bb:12:da:bc:77:a4:4b:4e:
                    16:b6:ab:b9:9c:d7:ff:41:99:f6:e6:38:11:57:80:
                    ba:d8:98:75:e8:41:1b:d8:f9:6e:2d:2e:e6:72:08:
                    ac:a8:5e:64:f6:eb:3b:5a:08:c7:c2:73:fb:37:ec:
                    5e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:8F:1C:27:10:39:5F:6F:1B:3C:35:DF:6A:E7:C7:B6:2A:DE:0A:EB
            X509v3 Authority Key Identifier:
                keyid:15:2C:DE:E1:9B:3B:7D:17:1B:4C:AA:D0:35:B5:32:98:54:D3:6D:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91627F3/779F6E9283F811EC816B0367C4F9AE02/FSze4Zs7fRcbTKrQNbUymFTTbcI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSze4Zs7fRcbTKrQNbUymFTTbcI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91627F3/779F6E9283F811EC816B0367C4F9AE02/FSze4Zs7fRcbTKrQNbUymFTTbcI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:28:3d:67:01:5b:32:ea:42:f0:75:48:9d:08:af:40:73:93:
         2d:9b:79:ae:ba:a3:46:c5:fb:78:f1:cf:ab:11:76:9c:70:6b:
         62:1a:47:ae:32:b1:b7:c5:0b:55:95:f1:bc:ca:01:66:b8:59:
         8e:76:83:f5:de:6c:d5:17:a5:5b:8f:62:b9:b1:ff:ef:b3:a3:
         44:3d:17:7d:86:62:d8:86:d7:fd:c9:03:86:dd:8f:e9:f8:c3:
         09:e0:b0:8a:df:0d:b0:00:98:d5:2a:41:a7:c7:63:dc:f5:11:
         96:b2:f9:f2:c5:99:90:f6:e2:f2:81:49:f1:4a:af:f9:12:13:
         99:4a:a3:2f:25:a9:54:43:f5:ea:b6:0f:1b:c8:a1:e9:e6:85:
         ee:b6:c2:a1:70:dd:1d:68:08:87:34:59:94:83:50:0a:3c:35:
         c8:3a:9b:37:52:8d:c5:93:af:89:05:d8:dd:fd:62:85:a6:07:
         74:4c:fc:ce:00:3c:25:f0:e0:53:60:54:7a:08:84:46:d2:16:
         fb:2a:4f:9f:5e:04:b3:3d:9c:59:f7:4a:68:84:c2:81:34:4c:
         04:e5:6d:39:b9:e8:cc:49:6e:ab:67:b0:7f:a7:a9:02:16:b2:
         1c:b4:af:5a:bd:d6:0e:6f:44:49:de:81:3a:05:9e:9e:8d:a1:
         62:b8:b9:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:36:01 2026 by rpki-client