Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF8F4/707765A838A111ED9F3C0C82C4F9AE02/FPn_SiOnILc7r-YDNT8R65c5Jxk.mft
File:                     FPn_SiOnILc7r-YDNT8R65c5Jxk.mft (raw, json)
Hash identifier:          96pZz1kcBRAIs69NzD+6XJlifPRpAG0XOhWOM/swypo=
Subject key identifier:   CE:15:A9:17:DD:66:37:17:88:EB:47:8C:16:71:17:A6:49:B6:60:FF
Authority key identifier: 14:F9:FF:4A:23:A7:20:B7:3B:AF:E6:03:35:3F:11:EB:97:39:27:19
Certificate issuer:       /CN=A91BF8F4/serialNumber=14F9FF4A23A720B73BAFE603353F11EB97392719
Certificate serial:       02B3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FPn_SiOnILc7r-YDNT8R65c5Jxk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BF8F4/707765A838A111ED9F3C0C82C4F9AE02/FPn_SiOnILc7r-YDNT8R65c5Jxk.mft
Manifest number:          02AB
Signing time:             Fri 27 Mar 2026 01:13:54 +0000
Manifest this update:     Fri 27 Mar 2026 01:13:54 +0000
Manifest next update:     Fri 03 Apr 2026 01:13:54 +0000
Files and hashes:         1: FPn_SiOnILc7r-YDNT8R65c5Jxk.crl (hash: 5AbvIOwtYjdALqL91ShiqlSD3ZPG6EQHJbFsfZwK0S8=)
                          2: 9B3244E038A411EDB5C86A28C4F9AE02.roa (hash: GWPxIWtX/zwRGLkOWbdqE/upTqp/GZlTgsxR+zXWx1k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BF8F4/707765A838A111ED9F3C0C82C4F9AE02/FPn_SiOnILc7r-YDNT8R65c5Jxk.crl
                          rsync://rpki.apnic.net/member_repository/A91BF8F4/707765A838A111ED9F3C0C82C4F9AE02/FPn_SiOnILc7r-YDNT8R65c5Jxk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FPn_SiOnILc7r-YDNT8R65c5Jxk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 01:13:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 691 (0x2b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BF8F4, serialNumber=14F9FF4A23A720B73BAFE603353F11EB97392719
        Validity
            Not Before: Mar 27 01:13:54 2026 GMT
            Not After : Apr  3 01:13:54 2026 GMT
        Subject: CN=69c5d9d2-c06e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:38:9f:f2:a3:64:19:e8:7c:02:dc:27:dd:0a:
                    fa:8f:cd:5c:60:96:c4:13:37:51:d7:74:a1:8b:5d:
                    ef:ef:e9:5b:05:83:15:29:29:3d:81:77:45:c7:e3:
                    4b:34:cd:29:14:39:eb:42:01:e2:12:5d:a2:94:58:
                    60:a8:17:92:c6:e3:c6:48:ed:73:95:68:b5:f0:68:
                    1e:79:97:54:6c:c1:75:f2:94:01:9b:df:57:d1:d3:
                    76:05:dc:a9:f8:f6:07:f0:a4:94:1a:fe:43:77:91:
                    09:be:2d:42:44:ec:c8:94:0e:03:d8:95:ab:de:0e:
                    22:67:ce:0b:cc:92:3d:8f:a2:51:ab:3c:87:ad:6e:
                    b0:13:10:78:87:2c:82:01:08:47:c7:14:d5:45:87:
                    30:32:25:ef:5e:7b:b8:21:f2:d8:f4:af:e3:f6:d4:
                    45:b5:9f:72:0d:0d:1d:09:e1:7f:77:21:c6:82:54:
                    33:52:a9:cb:7a:2a:16:15:9a:c6:47:f2:0f:85:e8:
                    29:e9:0e:ce:5f:fd:9f:87:67:32:d4:fa:ca:72:44:
                    5d:42:9a:e0:39:29:85:7c:84:c3:65:18:ec:9b:07:
                    22:e1:3e:a4:c4:3d:37:62:0b:32:4e:78:19:20:5a:
                    1b:a1:7e:fc:00:50:08:57:6c:27:0e:98:56:cf:0f:
                    ad:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:15:A9:17:DD:66:37:17:88:EB:47:8C:16:71:17:A6:49:B6:60:FF
            X509v3 Authority Key Identifier:
                keyid:14:F9:FF:4A:23:A7:20:B7:3B:AF:E6:03:35:3F:11:EB:97:39:27:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BF8F4/707765A838A111ED9F3C0C82C4F9AE02/FPn_SiOnILc7r-YDNT8R65c5Jxk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FPn_SiOnILc7r-YDNT8R65c5Jxk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF8F4/707765A838A111ED9F3C0C82C4F9AE02/FPn_SiOnILc7r-YDNT8R65c5Jxk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:c4:7a:24:48:9b:a0:8c:5c:ff:93:5a:43:be:9c:71:21:28:
         41:bb:0f:db:99:a1:fd:ba:34:bc:42:49:8d:ba:e3:08:15:55:
         54:7a:d9:ff:83:28:39:30:b1:de:6b:8a:b1:1d:61:9c:f9:86:
         3e:c0:77:68:8a:6e:97:dc:f3:53:97:29:12:fd:52:e9:23:67:
         3c:7c:53:ef:04:95:5e:42:29:ec:72:69:a9:ef:54:d1:88:c4:
         37:eb:69:b8:3a:05:1a:d5:d2:07:9f:3c:7f:81:b9:2c:1a:74:
         b2:44:58:c8:8d:b3:38:0d:76:39:96:1b:62:f7:13:2f:49:8e:
         46:2f:6b:78:4f:b8:61:14:0c:9b:9c:cb:f1:1d:9a:6a:38:7e:
         ec:af:25:6e:27:1b:53:09:3f:bc:a1:20:c5:66:eb:ca:87:1a:
         f9:da:a7:fb:ea:ba:2f:20:11:70:51:c7:ed:8d:71:b8:e7:6c:
         22:57:9b:8a:57:f3:4b:a2:e4:ed:78:4f:07:eb:01:e2:30:a9:
         f4:19:24:26:65:50:ab:91:9f:9a:30:a1:dd:2b:c1:dc:71:1d:
         ed:1d:3b:e1:74:39:14:a8:18:bf:cd:8c:61:8f:14:c4:31:b4:
         a3:0a:83:63:97:6b:29:03:28:74:52:fe:96:c8:5f:ab:29:5d:
         fa:b3:9a:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:10:30 2026 by rpki-client