Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9785/47DF9CEC56EC11E7BAD48D3BC4F9AE02/ft761lb9iDJvbfriSHAQWAQCo18.mft
File:                     ft761lb9iDJvbfriSHAQWAQCo18.mft (raw, json)
Hash identifier:          KmqiIlKAXImUuwwaALPqqOqdfq+F5uFYVnRr6iofC0g=
Subject key identifier:   FA:72:A0:AC:EF:FD:4E:71:A1:01:49:19:EB:7B:96:B2:50:5C:B9:3F
Authority key identifier: 7E:DE:FA:D6:56:FD:88:32:6F:6D:FA:E2:48:70:10:58:04:02:A3:5F
Certificate issuer:       /CN=A91D9785/serialNumber=7EDEFAD656FD88326F6DFAE2487010580402A35F
Certificate serial:       1AAD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ft761lb9iDJvbfriSHAQWAQCo18.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D9785/47DF9CEC56EC11E7BAD48D3BC4F9AE02/ft761lb9iDJvbfriSHAQWAQCo18.mft
Manifest number:          1A97
Signing time:             Thu 26 Mar 2026 16:18:45 +0000
Manifest this update:     Thu 26 Mar 2026 16:18:45 +0000
Manifest next update:     Thu 02 Apr 2026 16:18:45 +0000
Files and hashes:         1: ft761lb9iDJvbfriSHAQWAQCo18.crl (hash: OQGIDzpvNSBXKTNaYz/FeNW4I3hH2rMYLzdXFHwMuZc=)
                          2: CBCD905AA6E811EFB43BBB4EC4F9AE02.roa (hash: P3itnqAI1hjQnV+fMMGletZWZFTHkB/4hVkmtiZye0I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D9785/47DF9CEC56EC11E7BAD48D3BC4F9AE02/ft761lb9iDJvbfriSHAQWAQCo18.crl
                          rsync://rpki.apnic.net/member_repository/A91D9785/47DF9CEC56EC11E7BAD48D3BC4F9AE02/ft761lb9iDJvbfriSHAQWAQCo18.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ft761lb9iDJvbfriSHAQWAQCo18.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 16:18:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6829 (0x1aad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D9785, serialNumber=7EDEFAD656FD88326F6DFAE2487010580402A35F
        Validity
            Not Before: Mar 26 16:18:45 2026 GMT
            Not After : Apr  2 16:18:45 2026 GMT
        Subject: CN=69c55c65-f7ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:7e:f7:19:9c:92:dc:91:d9:2b:f9:2a:c5:56:
                    17:94:f6:ab:f6:92:7a:f5:b2:b4:73:b8:4d:8f:cf:
                    04:53:29:82:14:52:67:c7:29:25:b2:14:aa:e0:78:
                    9d:4c:23:b3:8e:a8:4c:94:02:29:c1:81:38:30:3a:
                    61:07:2a:b6:2f:eb:60:d5:52:0a:df:8d:df:c8:14:
                    1c:75:2b:c6:3e:51:2f:4f:88:75:52:56:c3:87:1b:
                    d1:92:a5:d2:6c:63:37:b5:c7:3a:45:ef:61:07:33:
                    d9:e4:5e:bc:79:f8:10:7f:4d:e4:9c:48:70:c0:6f:
                    cb:70:2c:bb:5b:46:1b:f6:62:2d:b9:f0:42:15:dd:
                    e1:db:c6:f6:53:99:c1:a4:72:05:a2:8d:8a:81:f3:
                    d8:2f:e2:6d:f5:03:39:44:c3:d3:44:ed:71:85:62:
                    b3:4b:4f:84:27:49:74:c5:8c:36:bf:ca:11:f2:54:
                    fb:4a:da:b9:b9:c5:f6:4c:e1:d9:dc:25:58:db:d4:
                    de:8c:26:4f:bd:9e:53:17:18:99:21:b0:20:dc:ca:
                    8f:66:e2:c3:6a:6c:d2:9d:50:bb:bb:0f:b6:4e:7f:
                    85:23:52:9d:50:b8:f0:ec:95:93:db:5d:15:06:68:
                    c8:8f:a6:7c:38:0e:12:66:08:55:13:c7:91:9e:9e:
                    9c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:72:A0:AC:EF:FD:4E:71:A1:01:49:19:EB:7B:96:B2:50:5C:B9:3F
            X509v3 Authority Key Identifier:
                keyid:7E:DE:FA:D6:56:FD:88:32:6F:6D:FA:E2:48:70:10:58:04:02:A3:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D9785/47DF9CEC56EC11E7BAD48D3BC4F9AE02/ft761lb9iDJvbfriSHAQWAQCo18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ft761lb9iDJvbfriSHAQWAQCo18.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9785/47DF9CEC56EC11E7BAD48D3BC4F9AE02/ft761lb9iDJvbfriSHAQWAQCo18.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:00:b5:9e:66:7d:90:a5:4b:73:6a:4a:19:92:ef:f4:76:5b:
         8d:09:cd:ba:36:85:64:e4:3b:40:58:fa:ee:86:df:f6:c8:2e:
         c3:ec:15:7a:14:5e:4f:71:b0:88:12:cd:bc:35:7b:1d:89:72:
         e9:7e:99:8d:a5:59:e7:34:67:a4:80:1b:e5:83:4f:01:a8:51:
         fc:6f:04:7c:15:22:f0:7b:65:22:b7:05:68:bf:ca:d5:03:0d:
         ee:bd:ea:ae:9a:e5:49:93:a7:2c:06:3f:38:0d:ce:0d:78:81:
         63:be:62:21:a9:79:e1:98:a7:a2:f0:82:9d:cd:60:51:35:8f:
         73:ee:b5:44:24:2d:b2:56:20:1d:ef:aa:2b:e4:d8:f1:c5:79:
         b7:7e:08:72:34:7c:ef:b8:05:92:e9:3b:e6:6b:97:59:5f:bb:
         d3:00:b3:e1:88:13:b9:ad:b4:dd:a4:5a:73:aa:8b:44:8d:bb:
         c3:94:be:22:6b:b3:d1:68:7c:6f:a6:2a:4e:79:f7:5e:79:9e:
         34:4d:1b:92:87:8f:51:12:fb:45:cf:87:0f:f6:84:c7:51:e9:
         dd:f9:05:38:ee:3b:4a:1e:52:52:26:d9:ec:d9:57:44:14:90:
         34:d9:05:e5:1d:38:ac:2b:52:ec:6b:5e:15:1c:24:d9:6e:e2:
         81:1e:5c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:38:06 2026 by rpki-client