Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.mft
File:                     FiENxlKhYN7k5AFbvLQJ-odyRkA.mft (raw, json)
Hash identifier:          IfizF9eH1mA01xr/XiI9cCaEW0+klO5OezV3RKPJu+E=
Subject key identifier:   54:88:4C:CC:C5:A4:4C:04:52:68:4C:35:B9:67:4A:C6:B3:69:B9:87
Authority key identifier: 16:21:0D:C6:52:A1:60:DE:E4:E4:01:5B:BC:B4:09:FA:87:72:46:40
Certificate issuer:       /CN=A91983BD/serialNumber=16210DC652A160DEE4E4015BBCB409FA87724640
Certificate serial:       3522
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FiENxlKhYN7k5AFbvLQJ-odyRkA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.mft
Manifest number:          39F6
Signing time:             Thu 26 Mar 2026 14:39:25 +0000
Manifest this update:     Thu 26 Mar 2026 14:39:24 +0000
Manifest next update:     Thu 02 Apr 2026 14:39:24 +0000
Files and hashes:         1: FiENxlKhYN7k5AFbvLQJ-odyRkA.crl (hash: 7LHMjuyYOVkbLTPD0gdEDmAFeTxe3fvpCIYgmvYStis=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.crl
                          rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FiENxlKhYN7k5AFbvLQJ-odyRkA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 14:39:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13602 (0x3522)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91983BD, serialNumber=16210DC652A160DEE4E4015BBCB409FA87724640
        Validity
            Not Before: Mar 26 14:39:24 2026 GMT
            Not After : Apr  2 14:39:24 2026 GMT
        Subject: CN=69c5451c-e6d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:84:b7:8d:e5:77:0b:73:b7:3c:d9:b0:6d:0e:
                    ab:35:05:dd:cf:36:ee:6f:a4:d4:ae:61:ad:01:0e:
                    f2:3c:11:2f:b5:1d:e3:29:6d:8d:54:52:a4:d9:f8:
                    a9:eb:3f:c3:59:6d:70:f9:41:ea:cd:eb:a1:5a:ee:
                    49:d8:86:ac:bf:ae:cb:49:21:71:b0:73:a8:1d:91:
                    dc:66:81:0d:40:e0:73:20:68:39:55:47:1c:50:90:
                    5d:67:5e:31:e8:42:8c:9c:a6:94:25:31:0d:2a:34:
                    66:c5:02:5c:0a:86:e2:f4:1f:f9:26:1b:9c:77:17:
                    9f:d5:74:91:6a:74:00:ca:74:36:40:1e:b0:49:3d:
                    2a:3d:75:bd:2a:00:23:df:47:1c:23:ac:43:cb:60:
                    df:39:b0:02:5e:22:81:f2:24:4f:cc:40:89:27:37:
                    d5:66:f6:db:64:21:bd:01:b8:b2:64:a4:4e:90:5f:
                    91:5f:b0:c9:2e:16:77:5b:e6:6c:f4:18:e5:1e:ce:
                    df:60:62:30:1e:b7:f6:02:22:31:84:12:9f:4e:7a:
                    14:f7:fb:bb:76:68:23:c2:63:60:1f:30:b7:11:6a:
                    09:6b:89:22:c2:49:e8:c7:5b:c8:56:d2:a9:0c:01:
                    17:6f:c9:5e:0c:b1:ab:4c:99:80:84:74:f6:6d:8d:
                    68:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:88:4C:CC:C5:A4:4C:04:52:68:4C:35:B9:67:4A:C6:B3:69:B9:87
            X509v3 Authority Key Identifier:
                keyid:16:21:0D:C6:52:A1:60:DE:E4:E4:01:5B:BC:B4:09:FA:87:72:46:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FiENxlKhYN7k5AFbvLQJ-odyRkA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:8d:4a:6e:d6:7f:a2:0f:b1:37:c5:15:07:c5:41:4e:a3:03:
         c9:79:7b:84:dd:b2:f6:6a:49:5d:be:2c:72:86:4f:de:ff:c9:
         8c:fc:dc:c5:09:fd:57:e2:ac:4e:80:65:41:12:58:06:fd:32:
         07:26:8b:92:62:60:6d:6f:b1:54:69:03:db:79:d3:49:93:61:
         64:8a:06:95:50:f8:12:36:17:d5:42:f6:93:49:7d:ff:03:9a:
         4d:43:98:73:af:37:90:6e:48:b9:5a:6b:ce:0e:1f:7f:27:13:
         73:5b:5b:60:6a:eb:bd:57:78:31:e3:cb:25:3a:65:e2:6a:0d:
         08:91:a1:46:22:e0:30:19:1b:58:61:c4:dc:74:40:67:cf:71:
         54:ed:98:b1:4b:b4:8c:d0:c2:1a:81:dd:35:c8:22:61:81:3a:
         f6:05:e8:fe:99:41:bc:ac:46:bc:24:2f:7e:be:49:84:d0:1f:
         d4:f5:83:05:34:3b:2f:ea:60:af:7a:d7:17:e0:fd:c2:16:71:
         f9:b2:47:71:f3:62:27:5f:43:85:65:ca:2f:94:f4:25:75:12:
         47:6b:d7:4a:b4:1c:b5:6e:04:27:d2:a1:29:d7:95:57:08:91:
         a7:58:27:3a:c1:e3:78:7e:21:9c:51:ad:99:d6:be:eb:e0:7e:
         b5:44:0d:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:32:18 2026 by rpki-client