Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919542A/5BE418828EE511F090902D68C4F9AE02/ffgmqR46CHq9KaYomhI7qR8RMF8.mft
File:                     ffgmqR46CHq9KaYomhI7qR8RMF8.mft (raw, json)
Hash identifier:          MBm3qQgCeu1XvM+uu9187kqSoa7e9YRVU+5cvyemfYY=
Subject key identifier:   AF:E6:DF:D5:6B:0C:8C:61:65:16:D3:FD:B3:0F:DF:D0:A9:2C:92:9C
Authority key identifier: 7D:F8:26:A9:1E:3A:08:7A:BD:29:A6:28:9A:12:3B:A9:1F:11:30:5F
Certificate issuer:       /CN=A919542A/serialNumber=7DF826A91E3A087ABD29A6289A123BA91F11305F
Certificate serial:       69
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ffgmqR46CHq9KaYomhI7qR8RMF8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919542A/5BE418828EE511F090902D68C4F9AE02/ffgmqR46CHq9KaYomhI7qR8RMF8.mft
Manifest number:          66
Signing time:             Wed 25 Mar 2026 07:10:43 +0000
Manifest this update:     Wed 25 Mar 2026 07:10:43 +0000
Manifest next update:     Wed 01 Apr 2026 07:10:43 +0000
Files and hashes:         1: ffgmqR46CHq9KaYomhI7qR8RMF8.crl (hash: ROBz/b2d0LYHmsXXlYhN1H+Yuce+wNWCSM5vuWpWsM8=)
                          2: FC15F5FA8EE511F0BFFDD274C4F9AE02.roa (hash: dNdji1Fr3jK6/jkHnFcVdkdFZjgcGqOwAU51jGRYmhM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919542A/5BE418828EE511F090902D68C4F9AE02/ffgmqR46CHq9KaYomhI7qR8RMF8.crl
                          rsync://rpki.apnic.net/member_repository/A919542A/5BE418828EE511F090902D68C4F9AE02/ffgmqR46CHq9KaYomhI7qR8RMF8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ffgmqR46CHq9KaYomhI7qR8RMF8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 07:10:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 105 (0x69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919542A, serialNumber=7DF826A91E3A087ABD29A6289A123BA91F11305F
        Validity
            Not Before: Mar 25 07:10:43 2026 GMT
            Not After : Apr  1 07:10:43 2026 GMT
        Subject: CN=69c38a73-4d42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9d:86:07:7a:a6:e6:8b:9a:77:27:aa:9c:87:
                    e6:3a:55:e6:eb:17:31:b4:3e:c7:62:ad:b7:8c:8d:
                    63:29:ef:eb:7a:25:1a:81:fc:c6:00:6d:0b:4a:b2:
                    37:ba:0d:15:b2:4e:4d:94:e5:7e:84:60:00:98:4b:
                    51:23:20:27:3b:c7:18:53:f0:7c:94:70:86:6c:b4:
                    03:a7:b1:22:58:35:b7:6a:51:6b:7d:da:e9:5c:9e:
                    2d:e8:3a:32:d7:21:f4:01:56:e9:b5:9e:b2:74:7b:
                    91:1b:06:2d:37:c4:17:2c:7f:37:9e:d2:50:a3:20:
                    27:34:f6:76:33:1d:43:e9:6d:76:af:92:ee:51:17:
                    8c:3f:c1:ee:75:88:2f:db:50:6a:aa:7f:17:07:e9:
                    e1:7a:3c:c1:61:c3:cc:dd:b4:5f:0c:c0:fa:a9:4b:
                    87:35:d2:71:ae:a0:e0:9c:dc:7d:1d:a4:08:46:08:
                    f0:21:2f:e8:99:38:5b:b3:90:27:90:8a:bc:a4:b0:
                    4a:3f:62:20:00:66:08:f7:21:a1:d5:f5:4d:4d:61:
                    23:dc:25:9c:0d:37:19:6d:d3:e4:b5:7e:5a:93:1a:
                    f9:8e:3f:39:6d:28:f3:9f:0f:53:50:7c:4a:b3:a0:
                    47:c3:d5:98:c3:c9:ba:fd:61:f4:9c:e0:55:db:8b:
                    89:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:E6:DF:D5:6B:0C:8C:61:65:16:D3:FD:B3:0F:DF:D0:A9:2C:92:9C
            X509v3 Authority Key Identifier:
                keyid:7D:F8:26:A9:1E:3A:08:7A:BD:29:A6:28:9A:12:3B:A9:1F:11:30:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919542A/5BE418828EE511F090902D68C4F9AE02/ffgmqR46CHq9KaYomhI7qR8RMF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ffgmqR46CHq9KaYomhI7qR8RMF8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919542A/5BE418828EE511F090902D68C4F9AE02/ffgmqR46CHq9KaYomhI7qR8RMF8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:4e:d1:56:d6:02:6e:1b:3b:87:48:af:62:af:02:84:7e:58:
         9d:49:73:4c:bb:b9:36:cb:c7:d0:36:2f:0a:52:19:8f:30:f2:
         f3:cf:d5:f6:dc:af:e8:83:c4:d7:81:89:77:f1:97:c7:1b:cf:
         11:68:99:4f:42:f2:6e:7f:d8:46:ba:8c:7c:1d:9d:75:2d:b1:
         2c:3a:17:e3:67:a1:8a:41:27:ce:36:05:11:68:a7:7d:aa:27:
         c9:2c:29:9d:ee:3a:67:00:68:a8:cc:30:5f:56:32:bb:9e:21:
         aa:b2:74:7e:c4:c6:d1:a0:00:6e:bb:2e:c3:bf:6c:19:99:72:
         c1:2c:8c:57:c8:64:27:15:2e:18:7c:61:0a:24:e1:95:ca:76:
         a3:25:6a:a5:e4:e0:54:b1:14:c2:cc:99:73:28:64:30:e9:a1:
         8e:a2:f0:de:c4:ad:af:bd:b6:a1:4d:c7:87:9e:58:ef:8b:e3:
         e3:62:05:95:33:9e:df:ff:ef:92:bf:4d:78:ce:b2:40:4f:0e:
         87:f7:af:20:3a:99:20:ee:b7:7e:24:0d:22:dd:6c:78:ac:92:
         13:26:49:7d:8f:ff:73:ed:2d:1d:65:66:80:13:6c:88:12:c6:
         dc:60:7f:44:f1:94:ce:51:af:9b:8b:ef:72:d5:b4:3b:bb:08:
         25:ea:d9:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:25:55 2026 by rpki-client