Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft
File:                     fSkuhkI7U8Czc7eZZYghkTSp5hA.mft (raw, json)
Hash identifier:          26FRHLpmlk3gRHk+2is/llJejvam/W0V3bnJDDWrIKM=
Subject key identifier:   E0:9D:72:54:E3:9C:1C:89:79:6C:5A:3B:CF:8E:0A:33:37:7E:C8:93
Authority key identifier: 7D:29:2E:86:42:3B:53:C0:B3:73:B7:99:65:88:21:91:34:A9:E6:10
Certificate issuer:       /CN=A91A3430/serialNumber=7D292E86423B53C0B373B7996588219134A9E610
Certificate serial:       0D81
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSkuhkI7U8Czc7eZZYghkTSp5hA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft
Manifest number:          0D75
Signing time:             Tue 24 Mar 2026 17:50:02 +0000
Manifest this update:     Tue 24 Mar 2026 17:50:01 +0000
Manifest next update:     Tue 31 Mar 2026 17:50:01 +0000
Files and hashes:         1: fSkuhkI7U8Czc7eZZYghkTSp5hA.crl (hash: zej1iU/OkSUgYSJwiUTyo7s9sl7FYBlryOuXTmVpbdk=)
                          2: 7B3163F0072A11EA9E314D4CC4F9AE02.roa (hash: oix3uz2iO7DhsNaPKdZjSYeOooosW/vMEsfqrJxUpws=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.crl
                          rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSkuhkI7U8Czc7eZZYghkTSp5hA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 17:50:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3457 (0xd81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A3430, serialNumber=7D292E86423B53C0B373B7996588219134A9E610
        Validity
            Not Before: Mar 24 17:50:01 2026 GMT
            Not After : Mar 31 17:50:01 2026 GMT
        Subject: CN=69c2ceca-1536
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6b:93:e0:ea:ce:95:62:4c:66:d6:cb:74:47:
                    e4:f4:bb:c2:c8:8a:90:22:44:fc:96:a0:8a:38:fe:
                    1e:19:6e:17:e1:80:1a:12:c3:4b:fe:8e:f3:45:aa:
                    76:1b:02:7e:d3:ea:26:f7:1a:ea:67:2c:25:9b:fb:
                    a3:f9:00:74:02:9e:6c:f3:da:4a:d8:8e:61:d7:e3:
                    a9:f8:4c:45:8f:82:10:a8:55:36:02:20:95:20:5f:
                    f4:f6:16:99:ad:db:04:3f:c0:50:28:05:e2:25:eb:
                    4c:72:97:e0:96:46:4d:20:73:97:7f:ba:f0:f5:dd:
                    90:48:b8:e6:f5:7e:bf:fe:d6:73:5c:e5:ad:f7:02:
                    b8:00:c4:a0:2b:74:04:d3:e7:5b:b6:dc:64:62:32:
                    18:5c:71:00:5b:f9:66:5f:7f:7a:ab:56:9b:5f:82:
                    59:41:03:f5:e4:63:9f:c1:63:60:83:d2:a8:dc:af:
                    8a:a5:ac:69:69:ce:a2:9e:47:67:b4:eb:9c:89:18:
                    7a:d1:cb:e3:b1:b4:43:44:32:9a:34:a9:dd:48:35:
                    fe:37:24:b6:87:b5:94:8e:81:ea:c3:63:30:c6:70:
                    11:6a:58:ef:5d:33:73:62:52:8b:ad:e0:e5:d4:e3:
                    27:96:e4:25:10:b9:29:24:bf:1d:41:5f:da:fe:d0:
                    03:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:9D:72:54:E3:9C:1C:89:79:6C:5A:3B:CF:8E:0A:33:37:7E:C8:93
            X509v3 Authority Key Identifier:
                keyid:7D:29:2E:86:42:3B:53:C0:B3:73:B7:99:65:88:21:91:34:A9:E6:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSkuhkI7U8Czc7eZZYghkTSp5hA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:97:e7:d1:21:15:97:27:64:36:30:8f:be:9f:47:de:32:45:
         51:d6:1b:36:f3:04:4c:f0:d2:56:cd:05:49:6d:12:89:fe:dd:
         33:1d:f3:21:fb:08:2e:14:f7:67:2d:14:fd:ee:22:c1:d2:ef:
         7c:15:90:8b:b9:95:59:8f:a1:bd:af:e3:e5:55:79:0a:9c:e3:
         f5:ea:78:e1:3e:23:d1:f7:fc:66:2e:b3:50:37:ac:97:a5:8b:
         74:0a:76:ca:50:d4:14:94:f9:94:8e:64:df:82:63:09:6f:a4:
         20:e9:0e:89:4c:a5:1c:63:66:d7:c4:3f:2b:c2:44:33:ab:9e:
         c1:95:df:dc:3b:01:cf:7f:88:e4:4d:4e:1c:75:86:f1:cf:93:
         ba:12:42:03:db:75:4a:be:5b:91:78:6a:3e:c5:70:ea:a7:22:
         02:f4:f4:41:a0:f1:d6:99:ba:71:f9:38:bd:62:7f:4d:10:f8:
         0c:2a:98:db:b4:64:79:cd:5d:25:6a:5e:71:a1:07:31:85:5d:
         38:f1:a6:71:6e:65:0a:65:7a:c2:08:b0:fd:3d:d8:3c:d8:f2:
         74:e9:b4:15:28:26:29:c9:bb:bb:5c:7b:47:0e:aa:36:aa:1c:
         5b:ad:00:59:b7:55:d7:23:4a:13:83:17:ca:98:78:1f:36:c4:
         d6:40:34:d1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDYEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTM0MzAxMTAvBgNVBAUTKDdEMjkyRTg2NDIzQjUzQzBCMzczQjc5OTY1ODgyMTkx
MzRBOUU2MTAwHhcNMjYwMzI0MTc1MDAxWhcNMjYwMzMxMTc1MDAxWjAYMRYwFAYD
VQQDEw02OWMyY2VjYS0xNTM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqGuT4OrOlWJMZtbLdEfk9LvCyIqQIkT8lqCKOP4eGW4X4YAaEsNL/o7zRap2
GwJ+0+om9xrqZywlm/uj+QB0Ap5s89pK2I5h1+Op+ExFj4IQqFU2AiCVIF/09haZ
rdsEP8BQKAXiJetMcpfglkZNIHOXf7rw9d2QSLjm9X6//tZzXOWt9wK4AMSgK3QE
0+dbttxkYjIYXHEAW/lmX396q1abX4JZQQP15GOfwWNgg9Ko3K+Kpaxpac6inkdn
tOuciRh60cvjsbRDRDKaNKndSDX+NyS2h7WUjoHqw2MwxnARaljvXTNzYlKLreDl
1OMnluQlELkpJL8dQV/a/tADOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOCdclTj
nByJeWxaO8+OCjM3fsiTMB8GA1UdIwQYMBaAFH0pLoZCO1PAs3O3mWWIIZE0qeYQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzQzMC84NkFDODlEMEU4
N0IxMUU5QTFFRDVCNDdDNEY5QUUwMi9mU2t1aGtJN1U4Q3pjN2VaWllnaGtUU3A1
aEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZTa3Voa0k3VThDemM3ZVpaWWdoa1RTcDVoQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MzQzMC84NkFDODlEMEU4N0IxMUU5QTFFRDVCNDdDNEY5QUUwMi9mU2t1aGtJN1U4
Q3pjN2VaWllnaGtUU3A1aEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADpfn0SEVlydkNjCPvp9H3jJFUdYbNvMETPDSVs0FSW0Sif7dMx3zIfsILhT3
Zy0U/e4iwdLvfBWQi7mVWY+hva/j5VV5Cpzj9ep44T4j0ff8Zi6zUDesl6WLdAp2
ylDUFJT5lI5k34JjCW+kIOkOiUylHGNm18Q/K8JEM6uewZXf3DsBz3+I5E1OHHWG
8c+TuhJCA9t1Sr5bkXhqPsVw6qciAvT0QaDx1pm6cfk4vWJ/TRD4DCqY27Rkec1d
JWpecaEHMYVdOPGmcW5lCmV6wgiw/T3YPNjydOm0FSgmKcm7u1x7Rw6qNqocW60A
WbdV1yNKE4MXyph4HzbE1kA00Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:00:28 2026 by rpki-client