Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft
File:                     fiRDENekVusSe5JsQvJteems24g.mft (raw, json)
Hash identifier:          T3G1nE3SwWKk9GnZMMtKDHJseDsQNIHG1vgbQg9C7BI=
Subject key identifier:   C3:AC:A3:74:DC:41:79:84:6E:5E:32:46:25:89:9E:B5:85:14:B0:F5
Authority key identifier: 7E:24:43:10:D7:A4:56:EB:12:7B:92:6C:42:F2:6D:79:E9:AC:DB:88
Certificate issuer:       /CN=A91DF93A/serialNumber=7E244310D7A456EB127B926C42F26D79E9ACDB88
Certificate serial:       0961
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft
Manifest number:          08F4
Signing time:             Tue 24 Mar 2026 20:19:37 +0000
Manifest this update:     Tue 24 Mar 2026 20:19:36 +0000
Manifest next update:     Tue 31 Mar 2026 20:19:36 +0000
Files and hashes:         1: fiRDENekVusSe5JsQvJteems24g.crl (hash: 7/arc0klX0fF+6Q7E3N0fb7n6krBL2BkPGU0kWvRlA8=)
                          2: 536CEA945D5D11F0A20A8B47C4F9AE02.roa (hash: MLWfrOxjTe3AR9tg1+HLkf7LXjRAcZZbPyx6j5qp/E0=)
                          3: 48DDFB8E8FAF11F0B59F0948C4F9AE02.roa (hash: z+HwCEnQPM1ZWbTaxIobMQlSkN1lILUyzjqFvMLdIyM=)
                          4: B59B34B2A59511EFB1B8AF36C4F9AE02.roa (hash: oN4J/EcgA5cJ0J9rkL7zQRfRZdibZkxBCp4t5o08pHk=)
                          5: BE33817A69AE11EEBBC89D75C4F9AE02.roa (hash: TwMUHvA3vWv9zFduSTekp60I17PPmAq4drJ/AVIK7t4=)
                          6: A64C29AA3D9811EE88B2694CC4F9AE02.roa (hash: R+sCJm2tVHaLnPE521uRviPKR8GVvNnNJP6RsvHQgGU=)
                          7: 885A3B4C198C11EEA06C1429C4F9AE02.roa (hash: vakBkNtUUuGs7h4zM7eGY5+Ut3h93Lyy2S4tZhrD+pQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.crl
                          rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 20:19:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2401 (0x961)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DF93A, serialNumber=7E244310D7A456EB127B926C42F26D79E9ACDB88
        Validity
            Not Before: Mar 24 20:19:36 2026 GMT
            Not After : Mar 31 20:19:36 2026 GMT
        Subject: CN=69c2f1d9-4bce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e5:51:e5:93:51:da:25:1d:44:79:90:e2:e6:
                    c2:cf:29:62:ed:b7:9e:f0:ef:79:44:9a:ec:df:8e:
                    3b:40:7c:bf:9c:e1:21:95:2f:7d:db:b8:51:4b:b4:
                    82:9e:9b:dd:c2:c8:1d:67:df:05:50:9e:59:4b:9a:
                    a1:aa:cf:5f:c5:7b:a8:c1:27:37:65:0d:3e:a1:b5:
                    11:e2:6c:56:70:37:d2:a2:13:36:a9:d3:ca:25:70:
                    4b:30:9a:02:a3:4d:68:89:79:77:19:d4:fd:98:3b:
                    45:7f:e5:d7:58:da:79:6b:6a:92:f5:20:e5:07:08:
                    34:25:89:10:79:3c:49:18:89:2a:17:6b:79:fa:5f:
                    10:97:fd:99:5f:e8:2e:8f:bc:ef:9d:db:c3:0b:89:
                    16:47:74:10:f3:6c:2a:7d:70:c0:10:63:d3:c1:e1:
                    88:0e:c0:77:2e:d6:63:1a:85:89:97:d5:c6:bc:79:
                    2d:15:f9:ae:52:ae:06:fe:09:14:40:b6:2b:20:47:
                    1d:a8:0d:5d:bf:d6:de:f3:10:4e:46:fd:2b:86:57:
                    0e:ed:c1:a9:f9:51:a1:c0:d4:9e:d9:b3:26:94:74:
                    b7:70:9a:1f:8e:f8:c8:e1:a4:8a:32:32:d7:cc:6e:
                    6f:5b:1f:6b:cb:2a:35:2d:c9:9c:51:79:46:91:93:
                    af:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:AC:A3:74:DC:41:79:84:6E:5E:32:46:25:89:9E:B5:85:14:B0:F5
            X509v3 Authority Key Identifier:
                keyid:7E:24:43:10:D7:A4:56:EB:12:7B:92:6C:42:F2:6D:79:E9:AC:DB:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:af:6b:92:b8:62:8e:89:d9:f8:b5:e8:57:5b:2b:8f:70:39:
         16:ae:5c:ec:30:33:0d:24:d4:11:54:55:82:ca:98:5b:c5:28:
         f8:5f:67:74:2a:d6:87:43:d3:6d:91:2e:22:ed:7f:ef:c2:46:
         1b:ae:2e:b8:c3:2f:c9:24:06:0d:db:44:04:5c:10:8a:28:65:
         36:34:a1:22:39:db:0d:7b:17:d7:a6:d6:0c:c1:bd:5f:d1:d1:
         2f:1d:ca:46:62:4c:cd:43:1d:bf:a2:5f:d0:84:59:39:4b:7a:
         1f:b4:15:3e:36:63:eb:9c:0b:09:28:8b:bf:44:96:7d:6d:ff:
         0a:22:cb:4a:82:3b:4e:1b:a1:b2:39:dc:9c:a1:9a:ff:af:b4:
         21:97:a4:97:a8:ff:f0:2f:e6:ab:f9:a4:30:eb:e0:37:25:74:
         94:9e:b5:0f:ef:da:61:36:b0:3a:49:d4:25:aa:d4:47:5a:ee:
         e9:dc:47:c1:a0:b1:2e:90:9e:00:59:8d:e9:51:48:ce:98:78:
         87:d2:01:f9:53:c2:e2:c0:a9:2e:61:61:57:bc:b4:60:d7:12:
         8b:83:60:42:69:07:d9:1e:99:3e:d0:ae:14:70:aa:a9:b5:0b:
         ac:b9:b0:5b:19:58:56:a3:6a:9f:df:bb:1a:74:d7:fc:95:ad:
         4b:79:e9:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:54:13 2026 by rpki-client