Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.mft
File:                     Fb8hC3N4HVzAvpm9OdcLL-tOuGw.mft (raw, json)
Hash identifier:          zlcf3HArQ8uQJqdvepv/XVTFq3C8lhcnOhC4VxtFRUo=
Subject key identifier:   D1:74:43:7A:46:A1:C5:FC:AD:C2:0E:03:D8:38:37:A3:98:3E:CB:6C
Authority key identifier: 15:BF:21:0B:73:78:1D:5C:C0:BE:99:BD:39:D7:0B:2F:EB:4E:B8:6C
Certificate issuer:       /CN=A91D61DF/serialNumber=15BF210B73781D5CC0BE99BD39D70B2FEB4EB86C
Certificate serial:       0209
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.mft
Manifest number:          0202
Signing time:             Wed 25 Mar 2026 02:28:07 +0000
Manifest this update:     Wed 25 Mar 2026 02:28:07 +0000
Manifest next update:     Wed 01 Apr 2026 02:28:07 +0000
Files and hashes:         1: Fb8hC3N4HVzAvpm9OdcLL-tOuGw.crl (hash: TIwWKefLaLAVpT4xjhM9D1JbLYvYz/xVWS6NJeT0jN0=)
                          2: 1D52E8E860D711EEA524AE64C4F9AE02.roa (hash: d4FaNu31p/uaswzVtkfn+Uus7pKd0fHTyCObgFxrvWg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.crl
                          rsync://rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 02:28:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 521 (0x209)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D61DF, serialNumber=15BF210B73781D5CC0BE99BD39D70B2FEB4EB86C
        Validity
            Not Before: Mar 25 02:28:07 2026 GMT
            Not After : Apr  1 02:28:07 2026 GMT
        Subject: CN=69c34837-4562
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:62:d9:5a:a8:10:ec:08:8d:e8:9c:c0:ce:7e:
                    67:d4:5b:32:49:37:ee:e3:d9:28:e3:45:9b:ed:d4:
                    76:6b:7e:73:03:3e:37:ae:39:ab:4a:7a:5c:6b:e7:
                    72:d7:8f:96:83:be:76:2c:0e:3a:86:82:09:c8:e6:
                    d7:79:44:9e:4b:c4:e4:f3:8c:d1:8d:e6:6d:59:67:
                    e2:2f:4d:6e:59:e1:41:9e:3a:ca:57:80:f9:c8:83:
                    ec:a2:48:02:d4:eb:91:a0:14:df:b8:a9:84:30:32:
                    68:8d:93:35:84:90:e1:dc:0e:d7:2e:5a:ac:18:90:
                    15:cb:41:3b:10:fd:14:90:94:20:03:d3:29:88:75:
                    2e:9a:fc:5e:45:87:1a:a6:f2:9e:de:e1:b7:8c:5a:
                    4e:98:91:3a:83:43:4e:0b:8a:da:da:fe:c0:8a:00:
                    dc:ab:68:e7:42:10:fc:54:41:13:c6:42:cc:41:4c:
                    fb:24:c0:33:47:5d:fc:39:fa:92:dd:1b:93:30:53:
                    57:88:6a:b9:6e:23:99:75:7d:47:1d:7b:ec:ce:2d:
                    cc:46:55:66:5f:d7:87:99:ca:0a:34:27:c2:10:cc:
                    fb:32:a7:17:be:f2:04:6c:52:f8:2c:bf:0a:5b:e4:
                    0a:6f:4a:3c:d2:5e:84:e5:09:7e:b0:2f:f8:bc:08:
                    8f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:74:43:7A:46:A1:C5:FC:AD:C2:0E:03:D8:38:37:A3:98:3E:CB:6C
            X509v3 Authority Key Identifier:
                keyid:15:BF:21:0B:73:78:1D:5C:C0:BE:99:BD:39:D7:0B:2F:EB:4E:B8:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:bd:b4:91:4b:c1:89:64:7f:66:e3:7f:a9:b7:ca:8c:40:b7:
         99:e0:da:da:8c:d7:19:d2:f9:45:92:a2:8a:5e:05:12:ca:72:
         db:1c:04:ed:f3:31:ed:d1:80:90:93:4a:03:9e:9e:5a:51:11:
         ad:0c:49:9c:31:63:b1:8f:b4:11:67:d9:2c:dd:5c:73:66:2a:
         77:b0:fc:69:00:bd:b4:e8:1f:82:a3:73:fa:0a:6c:63:f4:f5:
         14:fe:c2:c4:ca:82:89:2d:de:cd:3c:6b:4b:d3:e5:49:0b:d4:
         c0:bb:f2:6b:7e:49:75:95:26:ac:5d:34:c9:44:00:d4:d6:f9:
         7d:29:f7:d5:38:b5:86:a3:f2:32:b2:75:7d:a3:50:10:05:d4:
         d0:3f:d4:b0:9c:27:c7:ea:80:65:f3:5b:37:45:93:86:36:cd:
         e3:02:1d:77:5f:ea:5c:70:04:45:dd:1a:90:23:ca:74:2b:c1:
         fc:28:a1:5d:46:48:3c:a2:c3:63:54:fb:f9:82:c7:06:91:34:
         94:c4:9c:95:73:e2:63:50:ba:35:1f:c3:a3:c6:a2:f2:02:0d:
         31:6a:50:bf:aa:2a:e3:52:9c:d8:e2:71:bc:69:c4:73:64:dd:
         a3:f4:87:f5:72:23:8c:a3:1c:2f:4c:5f:df:75:12:71:58:59:
         71:7d:0a:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:17:43 2026 by rpki-client