Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2131/BE4A6CD07D7211EB8CB63665C4F9AE02/FAfjHIfhFiRZ2Dw660iMl1qcI_E.mft
File:                     FAfjHIfhFiRZ2Dw660iMl1qcI_E.mft (raw, json)
Hash identifier:          p2RNJklV/oBFXgu3VfqL6CK5wnONeB1mXWsnGojKBYQ=
Subject key identifier:   79:8E:2F:1D:A3:2C:FC:00:90:14:EC:8D:71:85:CA:04:80:7F:E0:43
Authority key identifier: 14:07:E3:1C:87:E1:16:24:59:D8:3C:3A:EB:48:8C:97:5A:9C:23:F1
Certificate issuer:       /CN=A91B2131/serialNumber=1407E31C87E1162459D83C3AEB488C975A9C23F1
Certificate serial:       070F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FAfjHIfhFiRZ2Dw660iMl1qcI_E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B2131/BE4A6CD07D7211EB8CB63665C4F9AE02/FAfjHIfhFiRZ2Dw660iMl1qcI_E.mft
Manifest number:          0707
Signing time:             Tue 24 Mar 2026 21:39:50 +0000
Manifest this update:     Tue 24 Mar 2026 21:39:50 +0000
Manifest next update:     Tue 31 Mar 2026 21:39:50 +0000
Files and hashes:         1: FAfjHIfhFiRZ2Dw660iMl1qcI_E.crl (hash: SMh6pJexRigujsHwToMoKKqe4FPPnYOxCLOJ4+NoATQ=)
                          2: D240E2EE814D11EBB1CE367FC4F9AE02.roa (hash: 15pEXJcucsCIR0M5bRuAonPQfsR2kZ7v/pBuDfGaiCk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B2131/BE4A6CD07D7211EB8CB63665C4F9AE02/FAfjHIfhFiRZ2Dw660iMl1qcI_E.crl
                          rsync://rpki.apnic.net/member_repository/A91B2131/BE4A6CD07D7211EB8CB63665C4F9AE02/FAfjHIfhFiRZ2Dw660iMl1qcI_E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FAfjHIfhFiRZ2Dw660iMl1qcI_E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 21:39:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1807 (0x70f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B2131, serialNumber=1407E31C87E1162459D83C3AEB488C975A9C23F1
        Validity
            Not Before: Mar 24 21:39:50 2026 GMT
            Not After : Mar 31 21:39:50 2026 GMT
        Subject: CN=69c304a6-4193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:49:a6:dd:c9:03:0f:14:9d:0f:8a:02:d8:c9:
                    58:25:98:e6:ab:ea:dd:cb:59:37:21:ae:19:47:aa:
                    2b:bc:07:aa:5c:b9:a7:b4:cc:5f:2f:0c:9e:ff:43:
                    2a:b9:f1:90:c6:dd:7c:03:20:49:9a:22:c5:61:bd:
                    34:d5:5c:ee:c6:1d:29:c2:3b:fc:9a:5a:b9:b4:79:
                    95:de:06:ae:11:8b:46:61:81:a5:92:08:c0:5b:f8:
                    68:cd:9c:26:b1:e8:04:4c:11:54:a1:5f:f9:7a:6a:
                    19:70:19:04:70:94:26:1d:a4:cc:18:e5:33:d0:3b:
                    8b:0f:5d:b7:0d:e2:b2:60:79:58:ba:46:ee:95:3b:
                    54:11:db:c5:a3:a4:64:cc:dd:7c:09:b1:c6:ee:3e:
                    00:86:46:39:85:1a:24:f5:98:86:1f:b0:0a:bd:5b:
                    d0:c5:df:01:f2:96:e0:1d:c5:39:16:1b:fb:e2:66:
                    f1:6b:b3:1b:f9:ac:95:fc:7c:3f:db:45:6d:e4:4e:
                    7d:38:6b:a7:ad:7d:c3:da:39:99:89:98:7f:2a:ee:
                    22:74:f3:89:93:23:65:f9:c0:dd:bb:1c:98:70:1e:
                    e7:49:a9:94:22:ad:95:9f:c7:22:43:8d:4e:e1:af:
                    b7:33:b4:6f:70:e5:9d:4c:f9:62:94:f5:35:38:dc:
                    2b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:8E:2F:1D:A3:2C:FC:00:90:14:EC:8D:71:85:CA:04:80:7F:E0:43
            X509v3 Authority Key Identifier:
                keyid:14:07:E3:1C:87:E1:16:24:59:D8:3C:3A:EB:48:8C:97:5A:9C:23:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B2131/BE4A6CD07D7211EB8CB63665C4F9AE02/FAfjHIfhFiRZ2Dw660iMl1qcI_E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FAfjHIfhFiRZ2Dw660iMl1qcI_E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2131/BE4A6CD07D7211EB8CB63665C4F9AE02/FAfjHIfhFiRZ2Dw660iMl1qcI_E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:b1:65:0b:f0:28:a4:26:c6:29:4d:7e:b9:51:ea:2b:4d:33:
         3c:57:b0:4a:f0:4f:fe:02:64:cf:c0:38:6a:4a:81:0a:37:1d:
         59:c8:58:06:16:de:90:f8:10:e8:7e:69:66:3b:98:15:12:8f:
         65:74:83:38:da:e4:ee:ce:1e:71:a2:28:0c:01:b9:66:fe:bb:
         11:8c:1f:3d:84:66:4e:fd:44:92:cc:a3:f2:e8:2f:7c:b2:4f:
         12:7d:ab:60:af:94:92:f7:28:44:10:b7:d7:71:04:21:d5:83:
         a3:ea:a1:04:67:a5:7f:cc:b0:c1:69:7d:ba:95:79:b1:bd:b4:
         56:50:b6:62:05:5e:a1:c1:75:03:55:42:fe:78:0a:53:41:3b:
         31:35:5e:62:e9:cf:09:14:3d:b5:c9:64:70:d9:5c:61:2b:3e:
         3b:67:a4:2c:73:2b:2d:08:aa:52:2d:90:79:96:6b:9b:63:7b:
         d4:ea:f2:4a:74:57:cc:fb:5b:22:b4:9c:10:01:8f:9e:98:95:
         80:e9:82:6c:e9:3a:84:f1:3a:cb:56:78:e9:45:0f:d3:6f:86:
         40:35:0a:58:99:af:51:35:43:2e:bf:0d:9a:b3:10:67:af:cb:
         74:e9:60:60:ca:8d:aa:b5:08:3d:4b:aa:d3:1f:25:e5:bf:d2:
         b7:6b:80:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:17:46 2026 by rpki-client