Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8BAB/17849E442E4211F1AD9907B393833773/Fo1n2OUliYv9Dd8u98xBuJ65PE4.mft
File:                     Fo1n2OUliYv9Dd8u98xBuJ65PE4.mft (raw, json)
Hash identifier:          UA19G8Xc3EH0coEIsIkJTh9b5BQPXedECUhrJHUWOvU=
Subject key identifier:   1F:27:2F:73:71:8F:D1:60:02:9A:80:49:DF:86:33:41:BF:C0:25:24
Authority key identifier: 16:8D:67:D8:E5:25:89:8B:FD:0D:DF:2E:F7:CC:41:B8:9E:B9:3C:4E
Certificate issuer:       /CN=A91C8BAB/serialNumber=168D67D8E525898BFD0DDF2EF7CC41B89EB93C4E
Certificate serial:       05
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fo1n2OUliYv9Dd8u98xBuJ65PE4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C8BAB/17849E442E4211F1AD9907B393833773/Fo1n2OUliYv9Dd8u98xBuJ65PE4.mft
Manifest number:          04
Signing time:             Sun 05 Apr 2026 08:33:14 +0000
Manifest this update:     Sun 05 Apr 2026 08:33:14 +0000
Manifest next update:     Sun 12 Apr 2026 08:33:14 +0000
Files and hashes:         1: Fo1n2OUliYv9Dd8u98xBuJ65PE4.crl (hash: xY4cEDZlqjO9jZbwtvR1XnzoFcXAZ1X9uLaQCQUsz+M=)
                          2: B8FC2F342E4311F1A2579C1594833773.roa (hash: vGKy7Sa+q5U/O3Xs6QkfrT0xdcp2SafDBBYAHDPN+2M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C8BAB/17849E442E4211F1AD9907B393833773/Fo1n2OUliYv9Dd8u98xBuJ65PE4.crl
                          rsync://rpki.apnic.net/member_repository/A91C8BAB/17849E442E4211F1AD9907B393833773/Fo1n2OUliYv9Dd8u98xBuJ65PE4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fo1n2OUliYv9Dd8u98xBuJ65PE4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 08:33:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C8BAB, serialNumber=168D67D8E525898BFD0DDF2EF7CC41B89EB93C4E
        Validity
            Not Before: Apr  5 08:33:14 2026 GMT
            Not After : Apr 12 08:33:14 2026 GMT
        Subject: CN=69d21e4a-a0a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:cd:26:73:0c:cc:34:47:a8:ee:25:3e:04:bd:
                    f2:9b:8b:47:e7:6a:52:15:e1:9f:52:5a:42:02:14:
                    dd:93:15:bb:4a:d6:fa:32:46:26:97:ad:31:2a:b5:
                    f3:eb:2c:ca:d6:54:f1:88:22:21:d8:e2:42:be:93:
                    65:00:c7:4c:e4:f2:17:a8:18:2a:15:5d:29:92:ae:
                    87:f3:41:4a:d2:0d:ac:20:88:90:50:cd:85:7d:85:
                    a3:a3:4a:c6:b6:98:27:8d:f5:c2:cf:ca:31:5f:99:
                    fc:69:63:97:c0:b8:fe:ba:a8:af:1a:e5:de:91:65:
                    83:58:4b:24:df:ab:be:08:b1:17:ca:dd:9f:79:a2:
                    25:e1:72:8c:a5:90:72:08:26:81:a2:5d:3c:30:34:
                    29:c7:93:52:55:94:13:f2:9c:85:bf:41:de:c1:09:
                    d3:8b:e3:5d:f4:31:5b:9e:6d:cd:61:c7:a1:db:7b:
                    1c:85:2e:88:69:4c:c6:1b:96:e2:1e:30:c4:d4:e6:
                    4e:46:84:9c:fd:65:b5:96:fe:9f:aa:44:4c:1a:d0:
                    63:7b:4d:f3:fa:e1:87:3c:a4:66:e5:fd:00:7f:9f:
                    1b:5f:e9:4c:f7:9f:1c:1b:de:0f:90:bc:52:a2:5d:
                    0a:5c:ca:b8:80:b2:bf:51:f2:f2:0b:0b:dc:02:f4:
                    c8:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:27:2F:73:71:8F:D1:60:02:9A:80:49:DF:86:33:41:BF:C0:25:24
            X509v3 Authority Key Identifier:
                keyid:16:8D:67:D8:E5:25:89:8B:FD:0D:DF:2E:F7:CC:41:B8:9E:B9:3C:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C8BAB/17849E442E4211F1AD9907B393833773/Fo1n2OUliYv9Dd8u98xBuJ65PE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fo1n2OUliYv9Dd8u98xBuJ65PE4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8BAB/17849E442E4211F1AD9907B393833773/Fo1n2OUliYv9Dd8u98xBuJ65PE4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:b8:c5:83:ec:0a:ae:51:9f:e4:78:6f:fc:58:2a:dd:cd:7f:
         b9:61:37:6b:80:dd:9b:9d:cb:fb:7a:2c:c7:be:2b:55:fd:e4:
         7e:2b:24:dd:1a:3f:56:d4:b2:43:56:5b:3e:23:55:e7:62:09:
         ab:47:fb:ae:6b:68:dd:f8:30:b0:c2:9a:56:94:2f:5d:6e:bc:
         11:61:83:6d:d3:ea:d9:89:ff:dd:38:b4:2c:c1:5d:ea:25:33:
         cf:5e:40:4b:5a:5b:8e:85:87:80:0d:29:10:1c:98:f0:30:f2:
         a9:e3:52:3e:28:21:46:ed:2c:b7:a1:7a:30:90:e8:50:0c:13:
         88:84:06:2f:2e:76:4d:d5:f7:e1:80:2a:b9:da:71:c7:35:51:
         47:32:2a:8c:f0:ca:13:36:19:09:e4:de:25:c6:fd:25:bf:f6:
         7d:67:68:87:34:c8:33:36:86:37:5c:a2:39:15:96:c1:fc:eb:
         9c:8f:08:3e:16:c3:c3:91:4f:23:6d:5f:95:e9:2a:80:43:f8:
         28:84:3f:b1:5d:4d:ff:e9:74:de:3c:56:3f:05:67:ac:54:91:
         be:50:37:8e:39:d3:c7:8b:fe:c1:47:74:42:25:6d:f2:6c:92:
         4d:a6:72:37:a8:7b:ad:52:7d:fa:22:9e:31:06:52:f9:80:13:
         c2:e3:97:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:38:21 2026 by rpki-client