Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.mft
File:                     FDm85NeiKugDbOsu5uavGPIbtZM.mft (raw, json)
Hash identifier:          H0MAxAyumjGCxF+J4qYVxpU9vLryNpn7bknwTKPExvA=
Subject key identifier:   55:C8:C9:72:FB:FC:DF:35:A1:19:4C:4A:C2:DB:EF:A5:8B:90:AF:F9
Authority key identifier: 14:39:BC:E4:D7:A2:2A:E8:03:6C:EB:2E:E6:E6:AF:18:F2:1B:B5:93
Certificate issuer:       /CN=A91F57D9/serialNumber=1439BCE4D7A22AE8036CEB2EE6E6AF18F21BB593
Certificate serial:       04BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FDm85NeiKugDbOsu5uavGPIbtZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.mft
Manifest number:          04A8
Signing time:             Sat 14 Nov 2026 23:43:31 +0000
Manifest this update:     Sat 14 Nov 2026 23:43:30 +0000
Manifest next update:     Sat 21 Nov 2026 23:43:30 +0000
Files and hashes:         1: FDm85NeiKugDbOsu5uavGPIbtZM.crl (hash: vZHE3UdcNkOovgc4WF4mz4BbrSbRGqIr6Yp52ivbH+Q=)
                          2: CD22C9C8DC0D11ECA064B94CC4F9AE02.roa (hash: KrGSfeFezfMBfirneaLIWiJ6P58/fqAvRIXr1XydAtM=)
                          3: F8071E24DC1111EC80AE816DC4F9AE02.roa (hash: diQEJwaRZGmvk+KKJJNr2sqtXhHrrXlc+8yBz+g5Wd0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.crl
                          rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FDm85NeiKugDbOsu5uavGPIbtZM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Nov 2026 23:43:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1210 (0x4ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F57D9, serialNumber=1439BCE4D7A22AE8036CEB2EE6E6AF18F21BB593
        Validity
            Not Before: Nov 14 23:43:30 2026 GMT
            Not After : Nov 21 23:43:30 2026 GMT
        Subject: CN=6af8f223-5be7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:bb:14:b8:a0:91:d7:7a:c7:25:1f:c7:0b:5e:
                    46:31:ab:7a:8e:17:4f:fa:ec:58:39:42:50:8d:84:
                    6c:b6:54:29:c4:3e:56:fa:03:35:76:2c:b4:58:0c:
                    ac:b7:60:de:df:28:56:80:46:3f:8c:19:a1:08:e1:
                    0d:7b:6d:33:b2:eb:51:ff:ba:e4:e6:ad:b4:e3:21:
                    af:86:f8:3f:75:1d:73:a7:25:a2:7b:b8:8b:59:36:
                    67:4d:1c:d7:7c:6b:46:ba:68:93:53:01:9f:bf:fd:
                    73:4d:f1:cb:4f:1b:67:b9:c9:40:f4:9a:9a:f8:98:
                    98:3c:af:b5:a8:5d:7a:98:56:b2:de:f5:3d:1c:fe:
                    bb:31:b0:27:43:55:e8:84:75:bf:e6:27:61:e7:90:
                    f8:9d:a9:f8:ef:a7:ad:14:f5:78:3a:f8:ef:7f:6a:
                    f3:72:a6:2f:43:28:c2:6a:f3:57:95:e2:c2:db:02:
                    13:c5:51:ac:88:74:c5:dc:24:b7:90:9a:85:06:5a:
                    4e:9a:34:4b:e4:13:af:ab:48:38:c6:5c:a0:39:46:
                    3e:83:5d:5b:29:36:47:2a:50:1e:bd:58:c4:e8:6d:
                    5f:89:d9:5d:72:7b:f5:ee:ea:cb:63:3e:45:40:83:
                    75:7a:24:ca:d6:4a:72:24:2e:e4:68:3e:29:fa:59:
                    ff:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:C8:C9:72:FB:FC:DF:35:A1:19:4C:4A:C2:DB:EF:A5:8B:90:AF:F9
            X509v3 Authority Key Identifier:
                keyid:14:39:BC:E4:D7:A2:2A:E8:03:6C:EB:2E:E6:E6:AF:18:F2:1B:B5:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FDm85NeiKugDbOsu5uavGPIbtZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:fa:6d:b7:ec:78:45:3b:7a:98:51:db:df:14:a3:91:47:19:
         8d:fb:7d:63:c4:7a:34:3e:85:bc:8c:c7:df:8f:57:e2:3e:07:
         10:e6:69:c8:e4:ff:ee:ce:76:04:dc:87:fb:5f:10:c2:74:f8:
         10:de:a0:fe:33:d0:dc:05:7a:f3:69:56:53:71:30:c6:81:76:
         b6:58:36:2b:eb:dc:9a:f0:b6:2c:25:23:42:c8:9c:4f:aa:e7:
         47:ad:1e:af:5d:db:b8:26:4f:28:e7:d4:96:17:5f:1d:40:f2:
         18:95:7c:1e:7e:d8:0f:24:78:72:cc:aa:d4:ac:a7:48:2f:ee:
         06:b1:66:3b:c0:c3:cb:2c:33:29:40:5d:04:44:a5:b9:af:eb:
         16:a0:ed:c2:05:ad:0a:67:3e:37:74:89:8c:e6:f6:a8:1f:ed:
         84:48:5b:32:fd:38:c2:d7:6e:7b:c4:96:b4:ae:94:a2:eb:ca:
         3a:fe:38:4a:4a:e0:c6:3b:0f:50:a9:93:c3:6e:d8:3f:0d:e6:
         bd:6a:e7:13:bd:ae:c7:ca:f9:bf:cf:f9:b2:c5:38:9f:d9:7e:
         02:24:d2:d6:3f:e5:e9:db:65:6a:aa:ec:d4:70:68:36:88:d7:
         2d:cf:a9:ba:db:5d:7b:47:c3:3f:12:f7:6c:40:1a:54:e0:9c:
         55:34:32:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:54:46 2026 by rpki-client