Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.mft
File:                     fFt0FOPMgEBZvKhsxRY6B0PkHIU.mft (raw, json)
Hash identifier:          3Rv1dfI893BdsxAzqeRe6LRfrudLwfaEQuK1jNm0Wxc=
Subject key identifier:   27:BB:EA:07:38:35:AB:39:98:82:EE:27:D1:40:5C:81:CD:83:5F:01
Authority key identifier: 7C:5B:74:14:E3:CC:80:40:59:BC:A8:6C:C5:16:3A:07:43:E4:1C:85
Certificate issuer:       /CN=A9194D56/serialNumber=7C5B7414E3CC804059BCA86CC5163A0743E41C85
Certificate serial:       2412
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFt0FOPMgEBZvKhsxRY6B0PkHIU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.mft
Manifest number:          23ED
Signing time:             Thu 26 Mar 2026 15:48:40 +0000
Manifest this update:     Thu 26 Mar 2026 15:48:40 +0000
Manifest next update:     Thu 02 Apr 2026 15:48:40 +0000
Files and hashes:         1: fFt0FOPMgEBZvKhsxRY6B0PkHIU.crl (hash: ErOYWwt0CN2f7slrdJaaOExu50QdRDGNSuaukVKHLgk=)
                          2: AD8187A41FF511ED8DD6D661C4F9AE02.roa (hash: qLDoFJBL4tjU3a5+OgqcUODZnGFeDhknY5OqvsDbWxk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.crl
                          rsync://rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFt0FOPMgEBZvKhsxRY6B0PkHIU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 15:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9234 (0x2412)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194D56, serialNumber=7C5B7414E3CC804059BCA86CC5163A0743E41C85
        Validity
            Not Before: Mar 26 15:48:40 2026 GMT
            Not After : Apr  2 15:48:40 2026 GMT
        Subject: CN=69c55558-4141
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ab:3a:9a:80:aa:6b:e9:64:87:fa:bb:fd:00:
                    ac:a1:61:16:35:e6:d1:40:95:2e:6a:22:87:74:ce:
                    62:2f:c2:1f:32:ea:d2:fd:85:8a:8e:d5:6e:a1:c8:
                    77:23:30:d9:a2:64:c5:26:a6:a8:96:07:2a:75:4f:
                    57:4a:0b:0a:49:fc:69:16:85:3d:fa:a5:27:ea:8c:
                    e5:18:27:76:b0:be:ef:6f:24:24:af:04:cf:3f:40:
                    1c:74:6a:37:15:7e:b2:6a:b0:2c:3e:5c:15:5d:59:
                    b5:97:33:91:63:6f:1d:e7:78:40:8f:0d:b3:09:7f:
                    b9:a6:cf:64:b9:18:04:91:cd:4b:cd:92:69:5a:b3:
                    21:ff:17:ad:61:cd:0f:61:cb:33:ea:10:a5:d9:4c:
                    aa:b1:e7:ae:33:6e:97:0d:75:41:c0:d9:05:b6:06:
                    08:70:b3:0d:55:ce:22:d8:b6:ba:72:5c:ae:cf:53:
                    bb:e0:3b:68:3c:6b:8b:92:ec:7a:b7:f1:b1:a5:d0:
                    34:0c:d8:8c:b3:f8:40:d6:c8:53:53:0f:7f:d8:c6:
                    55:84:4d:0a:85:2b:a1:cd:e7:c5:81:e5:c4:f0:b4:
                    c2:b4:7a:d3:89:b6:eb:38:f7:fa:9f:5e:82:de:25:
                    04:84:b0:ef:9e:a4:ef:23:dc:f4:62:07:c7:4b:ff:
                    86:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:BB:EA:07:38:35:AB:39:98:82:EE:27:D1:40:5C:81:CD:83:5F:01
            X509v3 Authority Key Identifier:
                keyid:7C:5B:74:14:E3:CC:80:40:59:BC:A8:6C:C5:16:3A:07:43:E4:1C:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFt0FOPMgEBZvKhsxRY6B0PkHIU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:c4:dc:ee:6f:65:c5:e7:75:b5:63:65:7f:79:56:2a:53:63:
         c4:95:35:20:da:68:d4:6a:79:cf:d9:34:64:fb:e8:db:aa:fe:
         df:36:3c:ad:88:18:24:79:20:7e:78:b0:ba:81:94:c3:72:ad:
         94:fc:d4:ce:2d:48:81:25:05:fa:16:41:04:6f:a3:3a:c0:2d:
         06:7b:ab:19:62:a7:f2:0c:1c:72:e2:dc:63:b1:8e:3f:fa:c8:
         48:bb:ce:74:50:e0:86:03:9f:ca:74:85:96:8c:06:14:00:ec:
         0f:89:6c:dd:a1:e4:c4:d1:9a:49:ab:48:cc:ec:22:a3:b5:19:
         8a:12:e1:7e:0f:1a:29:da:b0:b1:b4:dd:d1:4c:b8:4f:7b:22:
         66:90:7f:5f:2d:1a:2b:21:1c:33:76:72:ba:66:f8:09:2e:b4:
         91:58:81:df:0e:1b:4c:a2:ed:c8:d6:fd:c4:ad:cd:ef:3d:6d:
         28:dd:1f:e4:02:79:1f:08:59:56:42:4b:7d:9d:78:e2:c0:00:
         f7:f8:8c:ca:32:bd:85:80:40:26:1e:94:f5:a6:41:4c:49:41:
         de:16:0a:62:ff:8a:81:db:77:2f:de:70:30:a0:27:60:b4:ff:
         2e:fc:39:19:e6:fd:e3:d8:25:ab:80:85:11:07:8f:f6:65:6b:
         0f:25:9a:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 15:56:08 2026 by rpki-client