Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917047F/FD72DE14A3A911E99F75777BC4F9AE02/RFYGB9mXqksKc6pXxvY1ND3QGNY.mft
File:                     RFYGB9mXqksKc6pXxvY1ND3QGNY.mft (raw, json)
Hash identifier:          tBJiVuIRwhlA/wTKC1qnst7vopTvu8HapDpZArVgT9o=
Subject key identifier:   E3:06:67:96:07:DC:6B:6E:AA:31:99:D4:95:DA:93:1A:8F:5B:05:FD
Authority key identifier: 44:56:06:07:D9:97:AA:4B:0A:73:AA:57:C6:F6:35:34:3D:D0:18:D6
Certificate issuer:       /CN=A917047F/serialNumber=44560607D997AA4B0A73AA57C6F635343DD018D6
Certificate serial:       10
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RFYGB9mXqksKc6pXxvY1ND3QGNY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917047F/FD72DE14A3A911E99F75777BC4F9AE02/RFYGB9mXqksKc6pXxvY1ND3QGNY.mft
Manifest number:          0EEC
Signing time:             Sat 04 Apr 2026 17:32:12 +0000
Manifest this update:     Sat 04 Apr 2026 17:32:11 +0000
Manifest next update:     Sat 11 Apr 2026 17:32:11 +0000
Files and hashes:         1: RFYGB9mXqksKc6pXxvY1ND3QGNY.crl (hash: GxjIjz3UY/nUX4aX0rbVyOHib0H8C8+vF57DjEHGBu4=)
                          2: 58A1565020E711F19CC84E688AEE528E.roa (hash: 0yKYPlVxJjwyMvurUmCkidN4rIU8FxKPZNApymflK/Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917047F/FD72DE14A3A911E99F75777BC4F9AE02/RFYGB9mXqksKc6pXxvY1ND3QGNY.crl
                          rsync://rpki.apnic.net/member_repository/A917047F/FD72DE14A3A911E99F75777BC4F9AE02/RFYGB9mXqksKc6pXxvY1ND3QGNY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RFYGB9mXqksKc6pXxvY1ND3QGNY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 17:32:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16 (0x10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917047F, serialNumber=44560607D997AA4B0A73AA57C6F635343DD018D6
        Validity
            Not Before: Apr  4 17:32:11 2026 GMT
            Not After : Apr 11 17:32:11 2026 GMT
        Subject: CN=69d14b1c-4356
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:74:58:c8:6d:0b:67:cc:68:92:b6:7b:14:42:
                    d5:0f:68:3e:32:76:24:ff:da:15:00:c5:80:d8:b5:
                    e3:31:50:73:89:b6:35:e9:ab:23:1e:36:8a:d4:d5:
                    18:36:f2:55:04:18:4f:33:f2:30:5e:4a:36:c8:9d:
                    68:ba:bb:94:3b:46:e4:b9:9d:8c:35:09:95:5d:4e:
                    3c:f0:0b:04:17:b6:35:20:98:de:b7:cf:5a:a0:4e:
                    e6:98:34:17:4e:d7:52:af:72:31:a5:24:d0:a2:79:
                    42:7f:a5:63:1c:41:7c:d7:20:1c:07:1a:60:58:97:
                    b4:dc:55:54:f4:e4:72:22:16:49:38:a0:91:4d:ce:
                    cb:09:61:3a:36:ec:ec:f5:da:05:2c:f0:71:81:5c:
                    4d:af:a1:60:8f:57:a8:82:fb:c6:dd:87:c3:7f:fe:
                    e6:8e:c6:ff:0f:e7:23:76:5b:65:54:ff:88:a6:e9:
                    49:fa:dc:05:46:75:fb:24:3f:fd:e1:9c:15:72:1c:
                    c2:44:d7:78:27:fb:2b:bd:18:aa:67:58:d9:88:c6:
                    2a:49:50:db:62:6e:d1:d5:22:90:6d:d7:42:2f:31:
                    24:a4:6e:d8:3f:15:26:b3:d4:c5:d6:5a:a9:21:fb:
                    27:26:c7:d5:cf:cd:d7:58:c3:33:d4:ff:26:43:94:
                    dc:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:06:67:96:07:DC:6B:6E:AA:31:99:D4:95:DA:93:1A:8F:5B:05:FD
            X509v3 Authority Key Identifier:
                keyid:44:56:06:07:D9:97:AA:4B:0A:73:AA:57:C6:F6:35:34:3D:D0:18:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917047F/FD72DE14A3A911E99F75777BC4F9AE02/RFYGB9mXqksKc6pXxvY1ND3QGNY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RFYGB9mXqksKc6pXxvY1ND3QGNY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917047F/FD72DE14A3A911E99F75777BC4F9AE02/RFYGB9mXqksKc6pXxvY1ND3QGNY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:a9:09:67:93:7c:db:08:cf:4a:da:6a:e5:d0:38:1a:cb:18:
         83:34:44:c5:84:a4:10:68:57:93:7d:d7:cb:cb:a7:dd:f8:84:
         fc:d6:c1:9c:3b:c3:1b:c6:c8:15:ad:67:12:d2:50:98:af:ff:
         63:68:33:05:ab:40:cf:c2:7d:25:e7:76:14:bd:a2:89:02:3a:
         90:5e:49:e5:e4:40:5d:a5:bb:65:f2:37:52:ff:41:cb:12:23:
         dd:6a:df:ee:41:3b:2e:83:5e:7c:4e:b0:dc:ea:72:eb:66:a3:
         30:d3:de:d6:e4:de:6f:f4:54:aa:bb:69:87:2b:c5:42:85:03:
         d5:10:5e:8a:5b:40:9a:f0:65:a6:57:ff:92:0b:82:b9:ac:d0:
         c3:c6:72:3a:3b:3d:30:26:ce:7a:3e:ca:a9:67:c2:5a:3a:2f:
         1b:a5:23:55:1e:21:1d:2e:02:2c:3b:34:fe:56:3e:62:27:d3:
         be:9d:4f:c7:b2:de:a2:dd:ab:d6:c1:68:38:30:7b:9a:ce:07:
         43:e2:0c:f5:b3:07:60:5d:c0:51:f6:06:c1:ab:12:44:b1:89:
         d4:b5:9e:7e:e4:2c:fd:07:c4:78:39:95:09:76:86:ad:77:66:
         46:71:58:2f:01:6e:f1:0b:41:e0:86:40:3b:2e:5f:55:82:73:
         d4:0d:c5:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:38:15 2026 by rpki-client