Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.mft
File:                     fWXr4UwwRuc-OYaVcwKibggfGvg.mft (raw, json)
Hash identifier:          i6DY9ImmLMGEPupNCLw6aRUSU8b+L/ESSBraQO+qhRY=
Subject key identifier:   C2:86:79:7A:5C:22:2C:B3:93:D8:45:F5:B0:59:72:CA:D8:DF:69:AE
Authority key identifier: 7D:65:EB:E1:4C:30:46:E7:3E:39:86:95:73:02:A2:6E:08:1F:1A:F8
Certificate issuer:       /CN=A9145446/serialNumber=7D65EBE14C3046E73E3986957302A26E081F1AF8
Certificate serial:       2AA7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.mft
Manifest number:          27FF
Signing time:             Sat 04 Apr 2026 15:40:01 +0000
Manifest this update:     Sat 04 Apr 2026 15:40:01 +0000
Manifest next update:     Sat 11 Apr 2026 15:40:01 +0000
Files and hashes:         1: fWXr4UwwRuc-OYaVcwKibggfGvg.crl (hash: ekd9B8cLMJaOa8BpfoV9XOH5lBDPh77OcilGeaXy18w=)
                          2: 3E054AE6D94411E98E28CD85C4F9AE02.roa (hash: MAE8ECa4ZU9VCcKLBdECegfw7kX7IzX15XxZ/Gyafc0=)
                          3: 3F2B28B4D94411E98E28CD85C4F9AE02.roa (hash: AjKTaHNvjAK33caJVMs+rttbTjqbE8cLR2B3C3QO31Q=)
                          4: 7196A634B0F311E5AB30F151C4F9AE02.roa (hash: fjYtyEUh6eMIi4Yx+rwVGLX+OOUUBKZEoTe1oQIb2+8=)
                          5: 69CB6C488A3111EF85E56411C4F9AE02.roa (hash: RIyUNLcZYVOOPFugs6fDhd7Iym1W+tLc2f7Tni+xaAk=)
                          6: 089CB7F8E41C11E9AD4A8D16C4F9AE02.roa (hash: aceo4H/fTyvQQUJzj6yg5k3I5+edhLSx3DC/7yUMScg=)
                          7: 68356576B0F311E5AB30F151C4F9AE02.roa (hash: B5E0MWGdAw/hkt04BQ0kzfp1u7biwNRVTNh/RZkzRo8=)
                          8: E4E0C13C5EBF11EAB066F050C4F9AE02.roa (hash: rP3uJG8d8NODzioO5r14K9iDCn1QsTZyFsXVKGr+EHY=)
                          9: 40E8489ED94411E98E28CD85C4F9AE02.roa (hash: mbtIEwK/9P2Ak/Tfh/wKCxdKdssG2+5vHQb5udiNfP0=)
                          10: 4F8D63203EBF11EBA940A946C4F9AE02.roa (hash: DXWSF+G0kGa+VEDlKy2hdpflWmhisw8t2tP7/dHJlWk=)
                          11: EC5BF06C8A3411EFBF173E5BC4F9AE02.roa (hash: bLF9Qna0qP9uytxYo8IrGU+/S6ioRz9f5NPwRbsI6g0=)
                          12: 2022CF028A2511EF8F560567C4F9AE02.roa (hash: N+miyMu9/vtMLNWKoOE7GF4CEztRIcOfPc4M5lSm1VY=)
                          13: BDA4E3289A8311EF8E25CE76C4F9AE02.roa (hash: H18KD2kOZSxjm/b3p7HYt+YDpe2JlZmhqopujxMGKR0=)
                          14: 3C670256D94411E98E28CD85C4F9AE02.roa (hash: lWPghbeHPWLZN5Rcf9MFVvpTomN2lzTDAf8ZB3yAJEg=)
                          15: E5AA11C2974A11EFAE16EC38C4F9AE02.roa (hash: iwi5rASnbSd0xknkXnEdhxuEaKl5RgdixutwraiVBM4=)
                          16: 73464EBCB0F311E5AB30F151C4F9AE02.roa (hash: SmJ6FxhhV9EYvFLazFlLe8iePao8TNlk40vXQKMqlF0=)
                          17: 3D7A10E8D94411E98E28CD85C4F9AE02.roa (hash: uwA3pg0pgN7CcK7bdAev7O6kEnRUMZ3eRrblbwhpLww=)
                          18: E44FF288EE9811EF88F8B953C4F9AE02.roa (hash: gsVMlgziaQLbABnIyD6FsfM+JT38vivaus8keVfzqJc=)
                          19: 40397ED6D94411E98E28CD85C4F9AE02.roa (hash: dxQ66TJuZe/THBAGA7qLMMrU9qONi0v5dA8yehdi0Bo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.crl
                          rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 15:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10919 (0x2aa7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9145446, serialNumber=7D65EBE14C3046E73E3986957302A26E081F1AF8
        Validity
            Not Before: Apr  4 15:40:01 2026 GMT
            Not After : Apr 11 15:40:01 2026 GMT
        Subject: CN=69d130d1-d903
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:f0:30:1f:10:b3:ff:95:42:00:76:d8:47:56:
                    84:52:6b:fc:6c:55:90:fc:e9:29:2c:27:91:b1:89:
                    7d:ed:0d:e1:fe:28:88:8b:40:3b:58:4b:93:d5:7d:
                    93:a6:3b:d0:c9:22:ad:51:06:eb:96:33:17:1c:fe:
                    a1:23:e7:76:e7:19:8f:ce:a6:8b:b1:3e:84:c7:90:
                    00:d5:65:95:35:7a:75:59:eb:83:56:8d:ed:c3:21:
                    c5:ed:3d:38:84:4b:fd:8c:de:4d:9e:f0:d8:94:58:
                    dc:41:b4:92:12:3d:22:00:2e:5a:8e:7e:3c:ad:58:
                    e6:79:f0:d2:00:0a:3f:a1:a5:e6:1b:2e:18:eb:ff:
                    f1:8a:c5:25:96:f5:b0:94:1f:ec:2f:8b:fe:cd:67:
                    b7:af:64:0d:1a:9a:ae:08:f8:76:ec:48:c3:87:6f:
                    b9:1a:53:3b:15:8e:2a:e4:18:b7:a2:1d:12:23:52:
                    80:a0:a5:54:74:26:45:5a:c9:c9:d1:92:de:34:ef:
                    5f:f5:a2:67:2e:dc:c8:47:0c:58:a5:5b:1a:58:d1:
                    02:a0:7c:23:30:66:91:9d:9c:67:06:8c:4c:9c:97:
                    1c:1c:cd:f5:14:04:85:02:b3:ac:3f:fc:49:dd:48:
                    ca:29:40:4e:da:09:9d:9b:5f:74:a0:46:81:08:2c:
                    66:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:86:79:7A:5C:22:2C:B3:93:D8:45:F5:B0:59:72:CA:D8:DF:69:AE
            X509v3 Authority Key Identifier:
                keyid:7D:65:EB:E1:4C:30:46:E7:3E:39:86:95:73:02:A2:6E:08:1F:1A:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:0d:6d:38:f2:05:4c:13:c3:ec:65:c0:5d:7d:2b:e4:9c:5a:
         25:f9:a9:c6:c0:b8:a2:68:35:62:8b:bc:ae:cb:79:5f:fe:c4:
         db:c6:ed:e2:2a:fa:8b:d3:82:0a:97:51:0a:32:9c:80:84:83:
         9e:60:39:c4:0e:7e:cb:12:d3:94:13:bb:b3:04:de:bc:bd:20:
         1e:75:33:ca:bd:88:4e:6f:cd:06:e8:fa:72:7f:3b:3c:a7:98:
         37:b0:08:92:62:e8:a5:34:ac:c6:1b:02:63:73:97:6a:58:0f:
         ae:a9:2b:9b:83:37:9d:91:10:32:f5:bb:39:44:c7:a2:e6:e7:
         3e:dc:67:e1:46:38:dd:6f:f5:3d:af:49:b2:ad:db:b8:55:3e:
         9f:89:dc:66:b1:3e:0e:33:bd:37:af:3f:3a:e5:33:95:13:d3:
         1d:e1:f4:68:f7:5e:1b:da:3f:98:e4:1b:c3:55:8b:a7:1a:a8:
         48:d8:e0:c9:09:ce:39:0f:ee:1e:58:ad:99:e1:c7:cf:03:81:
         59:ba:50:5d:95:14:13:13:a8:89:27:88:23:31:1c:6e:a2:4b:
         b8:32:33:78:8f:b3:14:21:23:75:8e:8e:e1:26:87:f7:2f:3c:
         78:f3:64:c7:73:2b:70:bd:04:53:27:82:4d:97:21:1c:a0:f0:
         86:ac:05:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:51:47 2026 by rpki-client