Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B994F/AAFD14ECE5A211EA89A3606DC4F9AE02/fLBjBy0uSJJZhhStW6tT4d6v9wE.mft
File:                     fLBjBy0uSJJZhhStW6tT4d6v9wE.mft (raw, json)
Hash identifier:          zcmdrUsKstlKghqIeFuftwsZyk1O4uBDDYdTi8N/bTg=
Subject key identifier:   F4:9D:11:5C:4A:63:0F:BE:2B:AD:AE:1B:21:1E:04:9B:0A:CF:8C:9B
Authority key identifier: 7C:B0:63:07:2D:2E:48:92:59:86:14:AD:5B:AB:53:E1:DE:AF:F7:01
Certificate issuer:       /CN=A91B994F/serialNumber=7CB063072D2E4892598614AD5BAB53E1DEAFF701
Certificate serial:       08A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fLBjBy0uSJJZhhStW6tT4d6v9wE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B994F/AAFD14ECE5A211EA89A3606DC4F9AE02/fLBjBy0uSJJZhhStW6tT4d6v9wE.mft
Manifest number:          0897
Signing time:             Sat 04 Apr 2026 20:20:13 +0000
Manifest this update:     Sat 04 Apr 2026 20:20:12 +0000
Manifest next update:     Sat 11 Apr 2026 20:20:12 +0000
Files and hashes:         1: fLBjBy0uSJJZhhStW6tT4d6v9wE.crl (hash: zvfhvksC929u3bklJItzQghJN2SnBtDspQN5kH4Wu1E=)
                          2: 2B24D5DC854511EB9B57240FC4F9AE02.roa (hash: QNcFW8jETPGZaiZI02ZkhuoyJg75vptFUOTMezljxJo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B994F/AAFD14ECE5A211EA89A3606DC4F9AE02/fLBjBy0uSJJZhhStW6tT4d6v9wE.crl
                          rsync://rpki.apnic.net/member_repository/A91B994F/AAFD14ECE5A211EA89A3606DC4F9AE02/fLBjBy0uSJJZhhStW6tT4d6v9wE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fLBjBy0uSJJZhhStW6tT4d6v9wE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 20:20:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2210 (0x8a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B994F, serialNumber=7CB063072D2E4892598614AD5BAB53E1DEAFF701
        Validity
            Not Before: Apr  4 20:20:12 2026 GMT
            Not After : Apr 11 20:20:12 2026 GMT
        Subject: CN=69d1727c-9b56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:83:3d:7c:aa:48:bc:f1:13:80:8f:28:1f:9c:
                    cc:43:3e:d6:de:b8:e3:bc:59:7d:9a:b8:79:ff:3e:
                    44:94:9f:58:7c:2f:85:cc:f4:7e:ee:a9:04:64:3f:
                    63:12:92:06:b0:7a:78:ff:bd:c5:af:0e:32:db:76:
                    07:9b:cf:3e:37:65:1a:9a:b4:4a:d3:db:2e:83:35:
                    c1:7b:6d:da:61:cf:2e:90:7d:ae:7b:eb:e5:ba:3c:
                    2a:76:02:20:d5:86:92:1c:70:dc:1b:9f:3a:d2:1e:
                    3f:e1:49:5f:f8:99:ef:ac:d8:f5:0d:e9:5a:1a:2a:
                    b7:86:06:e2:31:b6:d6:fc:21:d2:8b:a2:b6:64:da:
                    8e:bd:05:1a:3f:10:38:d1:09:0c:65:f2:03:f7:a8:
                    2e:4c:7d:b0:f4:73:2e:b7:c6:90:ce:6d:9f:e1:48:
                    df:fd:07:49:58:cc:8a:ac:29:45:3d:be:08:83:d8:
                    61:7c:c1:49:5d:e6:a6:0a:50:23:bc:9f:87:fb:04:
                    c8:50:68:d8:09:21:a8:d5:d1:82:c1:07:6f:14:02:
                    24:2b:d7:59:b1:89:cd:f9:51:0c:2d:97:00:f5:a4:
                    0a:18:3d:41:30:41:07:45:87:5a:e2:72:cf:e4:fe:
                    81:49:a0:11:22:e7:ea:ab:82:91:82:8e:92:69:e5:
                    7e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:9D:11:5C:4A:63:0F:BE:2B:AD:AE:1B:21:1E:04:9B:0A:CF:8C:9B
            X509v3 Authority Key Identifier:
                keyid:7C:B0:63:07:2D:2E:48:92:59:86:14:AD:5B:AB:53:E1:DE:AF:F7:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B994F/AAFD14ECE5A211EA89A3606DC4F9AE02/fLBjBy0uSJJZhhStW6tT4d6v9wE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fLBjBy0uSJJZhhStW6tT4d6v9wE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B994F/AAFD14ECE5A211EA89A3606DC4F9AE02/fLBjBy0uSJJZhhStW6tT4d6v9wE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:b7:f3:63:f8:75:87:d8:d4:71:57:c6:ff:1a:4b:f2:7d:bc:
         a3:94:da:44:94:a1:2a:73:84:a7:5f:a4:3a:d1:e5:36:73:04:
         8c:1a:a7:64:f7:dc:7e:a7:f9:f9:85:ff:0e:fc:21:59:82:22:
         8f:14:97:ce:f6:2f:f5:19:48:6e:ac:54:87:09:d3:b9:af:70:
         8b:4b:e0:dd:54:4a:e7:ee:27:bf:29:2d:d5:1d:b5:a3:7d:04:
         68:38:80:9f:55:ef:dc:02:df:2d:a3:1f:f0:27:52:8e:2b:77:
         f5:75:2e:ed:f6:18:87:f9:ce:33:c5:7b:b4:a8:ee:56:d2:93:
         52:56:b8:12:92:3b:10:4b:52:e0:53:a0:e8:ad:53:50:d1:85:
         86:bb:6a:2e:84:c9:89:82:77:e9:2a:a8:04:fd:4c:28:48:f7:
         86:21:f7:b3:43:74:4a:0e:29:3b:ac:c2:7e:ed:f2:50:89:44:
         99:b1:f7:43:af:0e:8b:64:d5:81:79:9f:1b:3d:79:42:47:b9:
         6e:c7:7b:6d:f8:d4:6f:39:ea:85:94:6f:da:d8:db:cb:b3:7c:
         7f:2a:af:1b:5e:7c:5c:86:6e:fa:2d:59:90:35:fe:bb:b5:79:
         f8:25:7d:5e:17:c3:48:b6:7a:5d:fc:8e:96:43:3c:ff:b8:08:
         7b:75:b0:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:52:09 2026 by rpki-client