Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.mft
File:                     Fx7dP3eF4PU4VW-e8mvtcWaejYw.mft (raw, json)
Hash identifier:          HvNet3zpG9TB1ykxtiiab1rEKKVUb/8Z24JeCcrLt7E=
Subject key identifier:   07:9E:EB:61:70:87:60:62:93:97:3F:73:0A:7D:5F:44:71:2F:41:CD
Authority key identifier: 17:1E:DD:3F:77:85:E0:F5:38:55:6F:9E:F2:6B:ED:71:66:9E:8D:8C
Certificate issuer:       /CN=A9186363/serialNumber=171EDD3F7785E0F538556F9EF26BED71669E8D8C
Certificate serial:       0100
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fx7dP3eF4PU4VW-e8mvtcWaejYw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.mft
Manifest number:          F8
Signing time:             Wed 25 Mar 2026 05:28:33 +0000
Manifest this update:     Wed 25 Mar 2026 05:28:33 +0000
Manifest next update:     Wed 01 Apr 2026 05:28:33 +0000
Files and hashes:         1: Fx7dP3eF4PU4VW-e8mvtcWaejYw.crl (hash: xbA4F2aXPQS9PEhwPC27PN0NZOEMCPZ6P1OlYJU9fYs=)
                          2: 0FFCC5E8AFAE11EFAC818674C4F9AE02.roa (hash: 3nD9LInONQ51DGwH1Bk1CRRWQxIMYRaBTzihhmaQ14w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.crl
                          rsync://rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fx7dP3eF4PU4VW-e8mvtcWaejYw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:28:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 256 (0x100)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186363, serialNumber=171EDD3F7785E0F538556F9EF26BED71669E8D8C
        Validity
            Not Before: Mar 25 05:28:33 2026 GMT
            Not After : Apr  1 05:28:33 2026 GMT
        Subject: CN=69c37281-9d1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:1f:92:79:11:2d:d0:52:27:b8:0a:60:d9:1d:
                    35:f6:c9:5e:49:a4:9a:b0:2a:b8:35:51:35:10:21:
                    65:9e:48:2c:5b:2d:7c:ef:8e:cf:cb:aa:ad:bc:52:
                    ea:3b:bb:5c:fa:bb:be:c3:3b:2b:bc:11:8c:03:87:
                    09:8e:90:b9:01:b7:6e:d1:c0:e4:7e:cd:1c:b3:1d:
                    70:4e:b4:f4:d8:ae:7b:4e:34:f5:ed:93:14:4e:9e:
                    fb:11:d1:d2:6e:de:40:66:13:aa:f9:cb:4a:d2:47:
                    86:e4:eb:bc:a2:35:e0:00:84:63:a8:fe:5f:7c:1d:
                    34:31:b0:6c:9d:bf:ff:f8:47:f2:b6:72:a0:09:79:
                    aa:19:41:94:a4:05:69:48:b8:f5:2c:bf:86:67:94:
                    db:03:ef:32:77:ed:99:bc:e0:c8:03:3c:7f:60:53:
                    cf:e0:78:9f:a5:f3:fc:c3:0e:95:87:ae:61:d7:d4:
                    cf:fd:8e:c5:67:be:39:66:38:ef:03:2e:b0:ae:c7:
                    6f:92:77:fa:7c:25:4c:09:1a:57:dc:b4:2d:0e:1f:
                    c2:d8:68:06:bc:11:94:8e:ca:cd:69:5f:3c:3f:fb:
                    dc:45:8f:c3:1c:3b:2b:bc:36:35:f1:82:57:d1:8c:
                    0c:ef:4d:2a:cf:6b:01:a2:6a:7c:49:74:23:58:3c:
                    43:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:9E:EB:61:70:87:60:62:93:97:3F:73:0A:7D:5F:44:71:2F:41:CD
            X509v3 Authority Key Identifier:
                keyid:17:1E:DD:3F:77:85:E0:F5:38:55:6F:9E:F2:6B:ED:71:66:9E:8D:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fx7dP3eF4PU4VW-e8mvtcWaejYw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:f6:ea:11:0b:0e:83:b2:7c:bf:59:b6:e3:1c:74:c7:7d:6c:
         59:96:eb:cb:a7:34:88:7a:f3:00:95:86:72:c4:4b:39:4f:46:
         54:f0:de:66:89:62:c9:da:55:2b:94:54:bb:f5:31:a1:db:48:
         f4:df:00:9a:9a:26:cb:72:7a:e9:c3:ec:d4:bc:f1:c2:2a:46:
         54:8c:62:1d:ae:10:52:1b:98:e6:88:bf:07:db:ae:20:a8:ec:
         13:65:1e:06:0f:88:f5:f4:d2:8f:3d:51:da:0a:15:0d:c6:e0:
         20:16:7f:00:df:cc:ce:ff:22:6c:00:ed:17:8d:69:15:71:a9:
         4d:c4:bf:ff:b6:76:06:7d:f9:c3:5a:c7:b8:94:85:fd:a3:64:
         18:5c:7c:69:93:fe:68:7d:15:38:00:ec:8e:53:bf:4b:ce:0a:
         af:84:8b:c5:e2:49:27:7e:57:d8:28:c0:93:93:9c:0a:e8:b7:
         9e:5d:1e:dc:b2:5b:74:4b:ec:47:6d:e8:f4:90:de:2e:9f:1d:
         5e:36:9e:30:29:ce:34:db:5f:51:ae:27:c1:73:74:1f:ec:2b:
         1b:2b:45:78:04:78:11:af:ed:dd:7c:15:f6:38:13:06:12:54:
         9e:d6:9c:f0:e8:05:e8:6c:ee:7f:32:4a:77:d9:57:ff:93:f4:
         ae:f4:ac:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:26:21 2026 by rpki-client