Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911018B/3A061A5A354211EBA53FFB48C4F9AE02/FTce6iqi6n2s0NdWvSmFkgHlTSU.mft
File:                     FTce6iqi6n2s0NdWvSmFkgHlTSU.mft (raw, json)
Hash identifier:          7yf0qeyjzNUSHlmCgY/zUKu9UyA0swHhOkMTCuHFOjI=
Subject key identifier:   35:D0:2B:C1:DA:A3:CE:FF:52:6E:56:74:0E:15:25:51:48:FA:BF:F9
Authority key identifier: 15:37:1E:EA:2A:A2:EA:7D:AC:D0:D7:56:BD:29:85:92:01:E5:4D:25
Certificate issuer:       /CN=A911018B/serialNumber=15371EEA2AA2EA7DACD0D756BD29859201E54D25
Certificate serial:       07CF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FTce6iqi6n2s0NdWvSmFkgHlTSU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911018B/3A061A5A354211EBA53FFB48C4F9AE02/FTce6iqi6n2s0NdWvSmFkgHlTSU.mft
Manifest number:          07C7
Signing time:             Sat 04 Apr 2026 21:11:00 +0000
Manifest this update:     Sat 04 Apr 2026 21:10:59 +0000
Manifest next update:     Sat 11 Apr 2026 21:10:59 +0000
Files and hashes:         1: FTce6iqi6n2s0NdWvSmFkgHlTSU.crl (hash: 7aLhfd1E+VaQZUrzK5UF+CobMG1bGLzYi01/JzoZcIQ=)
                          2: 87BCB892503311EB85660C6AC4F9AE02.roa (hash: re+Eo5+YZdObI/jNHewYJ8D7wYa7WolTQ6M2hkhxaRM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911018B/3A061A5A354211EBA53FFB48C4F9AE02/FTce6iqi6n2s0NdWvSmFkgHlTSU.crl
                          rsync://rpki.apnic.net/member_repository/A911018B/3A061A5A354211EBA53FFB48C4F9AE02/FTce6iqi6n2s0NdWvSmFkgHlTSU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FTce6iqi6n2s0NdWvSmFkgHlTSU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 21:10:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1999 (0x7cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911018B, serialNumber=15371EEA2AA2EA7DACD0D756BD29859201E54D25
        Validity
            Not Before: Apr  4 21:10:59 2026 GMT
            Not After : Apr 11 21:10:59 2026 GMT
        Subject: CN=69d17e64-8620
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:a1:a5:f3:4b:7f:64:9e:20:16:45:24:c8:18:
                    f4:bd:f0:ad:05:50:e0:21:8d:35:35:a0:9d:5d:49:
                    42:02:f9:73:9a:57:5b:49:31:1f:a1:75:c6:6d:f7:
                    0b:63:b4:74:b8:49:db:8a:1e:a4:cd:6b:c4:cc:0b:
                    3b:32:fa:ee:5f:4b:7b:1d:a3:71:fb:a7:c8:f6:be:
                    36:c3:bd:2c:83:63:2e:fa:a3:01:77:f7:3e:87:64:
                    8d:a8:5d:07:44:15:30:83:22:d6:29:5c:62:a9:c1:
                    28:f4:8e:fd:ec:f9:22:b4:d0:9c:ef:99:bc:16:bf:
                    ec:d1:bb:9c:f8:d2:09:11:c5:2e:2d:7a:7b:73:ca:
                    84:08:ed:4d:e9:d5:67:ca:06:b2:2f:cf:2a:b9:a6:
                    9d:fd:56:56:e0:07:69:8c:40:a2:06:38:c6:3b:3f:
                    4b:39:e4:96:27:13:17:49:48:16:53:f0:eb:58:e8:
                    65:97:39:73:59:21:3b:40:cb:c3:77:e7:46:c2:64:
                    ea:06:a4:bf:8c:e9:a5:30:76:a6:32:59:3e:89:e0:
                    c7:36:0c:bf:60:36:78:a0:c0:b2:b3:10:75:2e:f3:
                    77:03:d7:d8:b5:8d:ce:02:18:cf:96:d0:6d:c1:47:
                    2c:f3:25:e2:86:71:43:76:16:ad:0c:42:06:41:80:
                    b3:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:D0:2B:C1:DA:A3:CE:FF:52:6E:56:74:0E:15:25:51:48:FA:BF:F9
            X509v3 Authority Key Identifier:
                keyid:15:37:1E:EA:2A:A2:EA:7D:AC:D0:D7:56:BD:29:85:92:01:E5:4D:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911018B/3A061A5A354211EBA53FFB48C4F9AE02/FTce6iqi6n2s0NdWvSmFkgHlTSU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FTce6iqi6n2s0NdWvSmFkgHlTSU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911018B/3A061A5A354211EBA53FFB48C4F9AE02/FTce6iqi6n2s0NdWvSmFkgHlTSU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:a4:99:86:5e:5e:04:5e:ee:a5:50:79:ae:3d:fa:01:64:78:
         90:26:ed:e0:fe:12:b2:e9:13:21:df:af:8d:37:63:96:a8:c7:
         16:ed:41:67:ac:95:48:2d:77:67:c7:d5:2a:8a:30:37:42:fd:
         a5:ea:43:a1:3f:99:47:51:67:fe:e9:d7:2d:10:7d:39:3a:13:
         b5:ec:d1:04:cd:e2:8d:f9:42:87:f2:52:5f:7d:b8:b1:0b:42:
         b1:1f:dc:ed:9a:6f:d3:c6:1e:c0:2f:69:6c:01:39:53:b7:6c:
         e1:6a:5d:2c:fa:3c:19:64:27:2c:07:28:e0:6c:96:2d:26:02:
         0c:8b:51:67:61:6e:be:1b:ce:31:a5:13:2d:05:87:c6:eb:d6:
         e1:c7:de:d3:46:3c:3e:ff:85:40:48:73:8a:33:bf:ac:72:b0:
         67:a9:d3:2d:27:ca:c2:ce:50:38:53:da:ab:a5:27:7d:d1:e7:
         65:71:b0:b2:e5:a8:37:c9:7b:72:b1:f5:e5:2c:b7:94:db:6e:
         ea:27:1b:8f:75:be:4d:13:57:d5:a2:dc:2f:d5:97:ad:12:a3:
         29:52:cd:23:52:e5:50:ad:0d:45:e4:aa:19:b6:0c:97:ff:70:
         9e:40:ed:e0:88:28:48:a1:58:b0:b9:56:98:f3:18:f2:49:3d:
         d7:bf:18:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:56:39 2026 by rpki-client