Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.mft
File:                     -ffptMwx85XFzbj6yfUvyldSTeE.mft (raw, json)
Hash identifier:          fjmWr+XL9CJvwwOmEFe0vEEEZ9Upd6LxTJ9EJggBTdE=
Subject key identifier:   DE:FB:BF:A6:39:A8:59:CE:D1:04:AB:3F:F9:D6:61:B5:0C:89:F0:33
Authority key identifier: F9:F7:E9:B4:CC:31:F3:95:C5:CD:B8:FA:C9:F5:2F:CA:57:52:4D:E1
Certificate issuer:       /CN=A912DFFA/serialNumber=F9F7E9B4CC31F395C5CDB8FAC9F52FCA57524DE1
Certificate serial:       036C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ffptMwx85XFzbj6yfUvyldSTeE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.mft
Manifest number:          034C
Signing time:             Sun 05 Apr 2026 00:48:27 +0000
Manifest this update:     Sun 05 Apr 2026 00:48:26 +0000
Manifest next update:     Sun 12 Apr 2026 00:48:26 +0000
Files and hashes:         1: -ffptMwx85XFzbj6yfUvyldSTeE.crl (hash: r39Dz7xas9RLf5F23ISRzz3BhXlnvHzJH/Uj3ZrWFu0=)
                          2: 14A16ED4F0C011EFB89A0131C4F9AE02.roa (hash: ECSeiumhF5oPC8vKGrrFnvaLvLgLXMuCjAWZKE9LDkg=)
                          3: A38DD8D40E1111F1B60944950A3D8C67.roa (hash: GHZ3YRsElxVhV4TSVHAsZ841sjzEbyRfLhWH3IgdRUA=)
                          4: 9770D05EBC4211F0B94CE580C4F9AE02.roa (hash: Vz5aus1qjTDwqSJynji6dWI+giY9yDOu6ky9YPIfXGE=)
                          5: 0EDE44B2797511EF9F3FEC4CC4F9AE02.roa (hash: JED6L4ym3tnMx+jhhYAOkrMrkWY5nNzaoPdVYKGZkNo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.crl
                          rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ffptMwx85XFzbj6yfUvyldSTeE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 00:48:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 876 (0x36c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912DFFA, serialNumber=F9F7E9B4CC31F395C5CDB8FAC9F52FCA57524DE1
        Validity
            Not Before: Apr  5 00:48:26 2026 GMT
            Not After : Apr 12 00:48:26 2026 GMT
        Subject: CN=69d1b15b-6147
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b4:b4:85:74:93:f6:48:bc:21:6a:1c:dd:1a:
                    de:dd:03:33:6f:35:ff:82:1b:6f:46:24:18:65:0f:
                    66:5c:2a:cf:ea:80:3a:08:ff:55:f1:75:6c:15:44:
                    e6:d2:0e:1a:78:bb:93:1b:bb:96:49:ee:99:48:e9:
                    fb:49:4c:c9:76:12:a3:5f:b2:4e:07:f0:c0:b5:69:
                    71:aa:e5:ab:e7:c6:54:b3:98:9b:54:d4:d9:bc:29:
                    fe:c1:96:51:99:58:bb:db:80:af:ef:30:1e:f8:52:
                    0f:db:c9:f7:b5:c7:4a:c3:c9:fe:c8:d3:56:02:e3:
                    d0:6d:86:1f:b4:38:0c:54:95:7e:51:b9:31:8f:fd:
                    a3:91:93:e4:4f:7c:63:65:09:cd:a9:d3:2f:36:f5:
                    75:77:8b:47:aa:e8:f7:bb:ac:62:1d:9b:8f:cc:cd:
                    31:eb:49:9e:8d:91:04:ca:ab:8f:e3:88:bc:fe:3a:
                    e2:01:54:a2:b1:9d:45:04:af:00:f8:11:36:77:d9:
                    8d:92:d6:2c:f1:df:33:41:09:f8:cb:a2:96:8e:1c:
                    3b:84:a5:e0:d9:34:48:56:6b:e6:d0:1b:b2:7f:f6:
                    b7:4b:1e:11:69:36:28:78:c0:5d:b5:df:7a:bc:c5:
                    7b:26:64:5c:e4:a5:4f:1e:51:cb:7a:3f:64:fe:de:
                    48:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:FB:BF:A6:39:A8:59:CE:D1:04:AB:3F:F9:D6:61:B5:0C:89:F0:33
            X509v3 Authority Key Identifier:
                keyid:F9:F7:E9:B4:CC:31:F3:95:C5:CD:B8:FA:C9:F5:2F:CA:57:52:4D:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ffptMwx85XFzbj6yfUvyldSTeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:d7:c1:e0:f7:87:64:52:d5:5d:3a:1f:ce:e3:ff:02:10:eb:
         7b:79:7a:d7:92:c2:71:7e:f0:d8:d2:dc:b6:9d:ad:03:f9:c6:
         ff:bc:73:52:95:4b:3b:08:d2:6d:36:d8:ab:94:bb:05:2d:4b:
         32:d3:9d:59:79:b3:69:84:cb:bc:a1:ca:7e:c0:a3:c0:da:be:
         2a:10:ae:a4:09:4e:00:d7:5b:80:bb:51:21:72:6b:2b:7f:92:
         ba:61:1f:46:98:7f:36:28:29:43:10:02:c9:66:22:95:07:3d:
         88:8e:89:93:c7:11:a1:fe:ca:39:fe:5e:d1:2d:8a:c3:47:6d:
         7c:90:7d:1e:0a:78:f2:67:8e:b0:7e:ec:42:2f:06:b3:f0:b4:
         1f:71:e4:06:69:9a:93:df:0d:75:23:3b:50:a8:41:78:6e:c9:
         33:f5:62:cb:7f:30:b1:f7:91:77:66:4a:c4:f8:cd:65:14:2f:
         29:d7:87:d1:a9:6b:34:ea:85:fc:c2:49:3a:b8:ce:7e:61:6b:
         b9:95:56:02:2e:9a:af:e6:6e:e9:8e:d7:48:61:75:73:65:91:
         f8:ad:ba:8a:63:84:d6:4a:90:d4:61:52:45:41:39:35:2a:8c:
         3d:f2:a4:e4:17:45:5e:9e:ea:6c:a4:9a:a5:52:7d:0b:4c:b2:
         8e:00:dc:61
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA2wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkRGRkExMTAvBgNVBAUTKEY5RjdFOUI0Q0MzMUYzOTVDNUNEQjhGQUM5RjUyRkNB
NTc1MjRERTEwHhcNMjYwNDA1MDA0ODI2WhcNMjYwNDEyMDA0ODI2WjAYMRYwFAYD
VQQDEw02OWQxYjE1Yi02MTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxLS0hXST9ki8IWoc3Rre3QMzbzX/ghtvRiQYZQ9mXCrP6oA6CP9V8XVsFUTm
0g4aeLuTG7uWSe6ZSOn7SUzJdhKjX7JOB/DAtWlxquWr58ZUs5ibVNTZvCn+wZZR
mVi724Cv7zAe+FIP28n3tcdKw8n+yNNWAuPQbYYftDgMVJV+Ubkxj/2jkZPkT3xj
ZQnNqdMvNvV1d4tHquj3u6xiHZuPzM0x60mejZEEyquP44i8/jriAVSisZ1FBK8A
+BE2d9mNktYs8d8zQQn4y6KWjhw7hKXg2TRIVmvm0Buyf/a3Sx4RaTYoeMBdtd96
vMV7JmRc5KVPHlHLej9k/t5I8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN77v6Y5
qFnO0QSrP/nWYbUMifAzMB8GA1UdIwQYMBaAFPn36bTMMfOVxc24+sn1L8pXUk3h
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREZGQS9DRTgxQTUxNDAz
MkMxMUVEQThDQjQwNkVDNEY5QUUwMi8tZmZwdE13eDg1WEZ6Ymo2eWZVdnlsZFNU
ZUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1mZnB0TXd4ODVYRnpiajZ5ZlV2eWxkU1RlRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
REZGQS9DRTgxQTUxNDAzMkMxMUVEQThDQjQwNkVDNEY5QUUwMi8tZmZwdE13eDg1
WEZ6Ymo2eWZVdnlsZFNUZUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAptfB4PeHZFLVXTofzuP/AhDre3l615LCcX7w2NLctp2tA/nG/7xzUpVLOwjS
bTbYq5S7BS1LMtOdWXmzaYTLvKHKfsCjwNq+KhCupAlOANdbgLtRIXJrK3+SumEf
Rph/NigpQxACyWYilQc9iI6Jk8cRof7KOf5e0S2Kw0dtfJB9Hgp48meOsH7sQi8G
s/C0H3HkBmmak98NdSM7UKhBeG7JM/Viy38wsfeRd2ZKxPjNZRQvKdeH0alrNOqF
/MJJOrjOfmFruZVWAi6ar+Zu6Y7XSGF1c2WR+K26imOE1kqQ1GFSRUE5NSqMPfKk
5BdFXp7qbKSapVJ9C0yyjgDcYQ==
-----END CERTIFICATE-----
Generated at Sun Apr 5 19:40:09 2026 by rpki-client