Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.mft
File:                     Fc9Q21Kw8S8abjs5Yz1ILgnP41w.mft (raw, json)
Hash identifier:          XdRHpQsOR3mUfCx8wA/mnKG5A85xVPxGL0nGpbWW5Lc=
Subject key identifier:   9D:E5:6B:E3:34:84:64:5E:A5:3C:B8:23:C6:AB:8C:63:63:2D:71:08
Authority key identifier: 15:CF:50:DB:52:B0:F1:2F:1A:6E:3B:39:63:3D:48:2E:09:CF:E3:5C
Certificate issuer:       /CN=A91B673B/serialNumber=15CF50DB52B0F12F1A6E3B39633D482E09CFE35C
Certificate serial:       0136
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.mft
Manifest number:          012E
Signing time:             Wed 25 Mar 2026 04:46:44 +0000
Manifest this update:     Wed 25 Mar 2026 04:46:44 +0000
Manifest next update:     Wed 01 Apr 2026 04:46:44 +0000
Files and hashes:         1: Fc9Q21Kw8S8abjs5Yz1ILgnP41w.crl (hash: xc7p9IXoMq6lXRZZeAEa+lL+eI2MZtSX99k80DiLZ4k=)
                          2: A242BED45E1511EFBBFB911EC4F9AE02.roa (hash: xjdj17TdvEDkLf9+p3eEDDKwL+UFS4OGM0bjJjQEXIo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.crl
                          rsync://rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:46:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 310 (0x136)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B673B, serialNumber=15CF50DB52B0F12F1A6E3B39633D482E09CFE35C
        Validity
            Not Before: Mar 25 04:46:44 2026 GMT
            Not After : Apr  1 04:46:44 2026 GMT
        Subject: CN=69c368b4-4e7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:95:b3:6a:1e:05:c3:cf:ee:8d:12:22:d2:78:
                    fb:9d:27:64:b8:96:7b:32:02:c4:30:73:e6:8e:c1:
                    ed:fa:bc:a1:4a:26:41:d8:46:e0:5d:27:50:fc:46:
                    4a:b6:a5:1f:20:a6:b9:1b:6f:48:53:16:07:94:eb:
                    21:e4:5b:52:eb:e8:79:3b:63:ea:63:b4:8d:27:48:
                    5b:23:9b:e3:29:a9:69:c3:fa:6d:21:4c:10:ec:f1:
                    24:9d:c7:01:5a:67:08:3f:6a:3b:70:6d:71:4b:cd:
                    df:5d:8c:3e:4f:9f:05:d0:96:49:db:2d:9c:5f:da:
                    7b:f0:f4:0d:59:52:e1:90:13:51:b2:ab:b6:ee:89:
                    57:91:79:63:b9:ab:5b:5d:88:8f:7f:06:64:12:b5:
                    40:67:7d:a1:10:67:95:54:99:0e:82:84:14:53:ec:
                    61:fb:a7:19:17:83:17:ae:b0:e9:a2:3e:8f:fe:58:
                    04:7d:c3:57:51:33:d5:1d:5f:56:7e:75:8a:fc:09:
                    e8:b6:24:f9:46:d0:b3:f3:84:40:f1:97:5a:38:9b:
                    c2:76:8c:f9:f2:67:ff:40:5a:af:a6:84:c8:11:e4:
                    11:28:14:8a:cb:22:99:b2:9b:cd:c9:c5:30:07:fe:
                    c1:6c:94:bd:fa:f1:a0:ef:f0:13:27:2f:b2:50:a7:
                    44:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:E5:6B:E3:34:84:64:5E:A5:3C:B8:23:C6:AB:8C:63:63:2D:71:08
            X509v3 Authority Key Identifier:
                keyid:15:CF:50:DB:52:B0:F1:2F:1A:6E:3B:39:63:3D:48:2E:09:CF:E3:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:cf:85:2b:bc:ea:f5:82:48:b6:e6:ff:fb:0e:92:5b:7b:a3:
         8e:e7:0d:26:28:bf:da:af:04:02:72:e7:c4:29:de:7d:e8:4d:
         5a:c5:0e:79:4f:59:fa:6e:9d:f3:a1:e1:0e:08:56:9f:4d:df:
         94:03:af:73:3d:7f:de:98:ef:6e:8f:a2:1b:f6:92:e0:2b:9f:
         82:33:3b:b0:f5:b7:c4:2b:ea:a1:43:21:d0:2b:79:98:db:cd:
         37:fc:f4:9c:25:7d:55:47:de:e9:c5:c1:53:26:6f:37:7c:ee:
         ed:a4:c8:75:19:67:64:2b:60:0a:e2:5f:c5:57:9e:56:54:94:
         bf:50:ce:3b:b2:a0:b3:7b:03:eb:cf:b5:7c:98:1b:f7:cb:52:
         16:ef:4a:2b:35:a7:7e:0c:4a:70:af:5e:f3:ac:08:ee:ae:4d:
         d3:8a:de:09:dd:85:e8:97:c8:1e:88:23:01:14:e6:7f:dd:6c:
         84:08:71:47:fb:dc:d2:14:e7:37:fe:c4:a2:bb:09:fb:b9:35:
         35:0f:5c:b2:9f:94:1d:6f:43:56:5d:f7:f5:6f:41:7f:f8:5b:
         1e:d5:ae:3f:c9:bc:e9:8c:5c:d8:86:39:34:ee:08:c4:66:89:
         f1:ff:9b:7b:c0:9a:88:bf:f3:37:8c:c1:cc:42:25:f6:78:09:
         fe:66:94:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:22:10 2026 by rpki-client