Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8949/42C1298424D211F1A56C65E7A9833773/fTg2zUKn77NatGSlAOJiVxXVzqM.mft
File:                     fTg2zUKn77NatGSlAOJiVxXVzqM.mft (raw, json)
Hash identifier:          veA3e0+oLwZrqjkj989Zw7yFi8raAWsJPZFaEyVnLUQ=
Subject key identifier:   49:22:2E:71:F2:07:66:EA:CD:2A:49:8D:02:08:4C:64:55:23:E9:D7
Authority key identifier: 7D:38:36:CD:42:A7:EF:B3:5A:B4:64:A5:00:E2:62:57:15:D5:CE:A3
Certificate issuer:       /CN=A91F8949/serialNumber=7D3836CD42A7EFB35AB464A500E2625715D5CEA3
Certificate serial:       09
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fTg2zUKn77NatGSlAOJiVxXVzqM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8949/42C1298424D211F1A56C65E7A9833773/fTg2zUKn77NatGSlAOJiVxXVzqM.mft
Manifest number:          06
Signing time:             Wed 25 Mar 2026 08:24:39 +0000
Manifest this update:     Wed 25 Mar 2026 08:24:39 +0000
Manifest next update:     Wed 01 Apr 2026 08:24:39 +0000
Files and hashes:         1: fTg2zUKn77NatGSlAOJiVxXVzqM.crl (hash: BZlmQU8cdViPsHvEKhPK0t9lR39RiGDaTveDohBccbk=)
                          2: 71A9485224D311F1BAC6A199AA833773.roa (hash: YplJkElj+wTMuvLaT6qEqUoRVs6FwFRdfKKxyCyC/nM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8949/42C1298424D211F1A56C65E7A9833773/fTg2zUKn77NatGSlAOJiVxXVzqM.crl
                          rsync://rpki.apnic.net/member_repository/A91F8949/42C1298424D211F1A56C65E7A9833773/fTg2zUKn77NatGSlAOJiVxXVzqM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fTg2zUKn77NatGSlAOJiVxXVzqM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 08:24:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8949, serialNumber=7D3836CD42A7EFB35AB464A500E2625715D5CEA3
        Validity
            Not Before: Mar 25 08:24:39 2026 GMT
            Not After : Apr  1 08:24:39 2026 GMT
        Subject: CN=69c39bc7-0883
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:67:3e:90:da:08:e4:b0:4f:a0:39:03:dc:7b:
                    20:0e:5d:09:92:aa:1f:29:15:9f:72:27:cc:8e:ef:
                    6c:af:c2:22:cb:43:57:58:2e:30:df:85:69:f9:d0:
                    2e:2f:a0:39:dc:cb:66:77:b8:3a:84:6d:14:bc:c4:
                    b3:cc:63:48:0d:59:e0:9d:6c:bd:b4:99:dd:d7:70:
                    e9:8e:ba:af:f0:7f:90:67:f3:94:22:59:db:43:3a:
                    eb:08:db:58:35:0f:d6:18:17:79:9d:5d:6c:b9:af:
                    78:6b:b7:75:f2:bb:5e:de:d6:53:57:bc:c1:8d:af:
                    52:74:7f:a1:ba:7e:84:95:8e:4b:76:a2:2f:0a:d0:
                    fb:f6:28:b2:4f:f1:5b:c1:88:50:3c:5c:2e:7a:9f:
                    05:dd:14:f3:a5:4b:dd:63:5d:f3:e8:f8:25:bb:fa:
                    e6:59:0a:c2:30:d1:99:73:b3:f4:2d:71:6f:bf:b4:
                    5c:a7:03:aa:b8:c1:14:6d:94:6c:24:b6:ef:c6:06:
                    16:00:b2:f9:f0:66:4e:8f:ec:ca:db:c7:00:bf:4a:
                    30:99:cc:e4:d0:75:58:05:5b:0e:a1:60:9b:06:a8:
                    9c:53:80:b8:ea:98:8f:63:40:be:87:73:b5:9c:ee:
                    a1:10:64:79:e3:f0:5c:d7:e9:7e:82:7a:30:30:4c:
                    42:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:22:2E:71:F2:07:66:EA:CD:2A:49:8D:02:08:4C:64:55:23:E9:D7
            X509v3 Authority Key Identifier:
                keyid:7D:38:36:CD:42:A7:EF:B3:5A:B4:64:A5:00:E2:62:57:15:D5:CE:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8949/42C1298424D211F1A56C65E7A9833773/fTg2zUKn77NatGSlAOJiVxXVzqM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fTg2zUKn77NatGSlAOJiVxXVzqM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8949/42C1298424D211F1A56C65E7A9833773/fTg2zUKn77NatGSlAOJiVxXVzqM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:c6:5d:8f:23:cb:c3:36:79:75:94:ae:36:76:03:3d:73:76:
         1e:99:47:bb:1c:e1:1c:e7:15:c5:40:4e:67:56:33:81:bd:2f:
         5e:6c:3d:1b:60:c4:31:f5:60:ba:51:57:1a:fb:05:cb:9b:39:
         0f:85:85:13:03:d6:3b:e9:ed:d1:b2:38:77:8c:a8:e5:67:31:
         81:f3:d3:ec:da:95:3e:8e:c0:7f:bb:cd:90:d0:57:07:96:14:
         da:96:75:23:e1:4c:06:8a:85:49:bc:e4:ab:54:64:37:93:0c:
         3d:49:47:dc:c0:50:fb:7b:9f:e3:d4:b0:f1:96:0a:89:76:99:
         66:77:a8:35:e4:aa:cc:23:26:3c:1f:c3:17:30:c2:bd:ff:44:
         f1:6b:ab:4a:b3:fe:c9:c0:8d:07:01:93:6d:2c:d1:ef:60:be:
         3b:a8:0c:82:e2:05:b8:8a:d2:a7:85:72:bc:5a:4c:13:aa:20:
         92:63:ff:10:27:65:30:8f:5e:01:09:8c:33:c8:74:87:01:b4:
         b1:6d:89:a6:99:29:52:9d:86:5c:6f:8d:bc:58:13:8c:3a:3b:
         4f:39:98:92:8e:90:2a:fa:fd:69:a9:53:a8:04:4a:2d:49:13:
         4d:d9:1f:b6:82:cd:3f:3a:fe:c1:86:74:49:35:75:a0:a5:fb:
         a3:83:a0:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:41:10 2026 by rpki-client