Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.mft
File:                     FAK2T5rngWHQ1l2nJf3Qu8jhUtg.mft (raw, json)
Hash identifier:          TsBOu5q1m3BuF0TGOrr2lEA7W/AuEPRPNsrTh4gUEjE=
Subject key identifier:   43:DA:66:DA:15:97:AB:C2:37:36:88:DE:D8:B3:0A:85:61:D6:07:9E
Authority key identifier: 14:02:B6:4F:9A:E7:81:61:D0:D6:5D:A7:25:FD:D0:BB:C8:E1:52:D8
Certificate issuer:       /CN=A911C564/serialNumber=1402B64F9AE78161D0D65DA725FDD0BBC8E152D8
Certificate serial:       05F8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.mft
Manifest number:          05F1
Signing time:             Sat 04 Apr 2026 22:42:48 +0000
Manifest this update:     Sat 04 Apr 2026 22:42:48 +0000
Manifest next update:     Sat 11 Apr 2026 22:42:48 +0000
Files and hashes:         1: FAK2T5rngWHQ1l2nJf3Qu8jhUtg.crl (hash: 6Y91M/Iiy89rLOFsly7jzjWUAZcC6LsF2gp5lvUscD8=)
                          2: A3B2B0A8EE9711EB8EF1A50AC4F9AE02.roa (hash: NQX7JB0+/eWjbVIYCyPV0TJwdeszpx4RpQyQ+f5a0uw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.crl
                          rsync://rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 22:42:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1528 (0x5f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C564, serialNumber=1402B64F9AE78161D0D65DA725FDD0BBC8E152D8
        Validity
            Not Before: Apr  4 22:42:48 2026 GMT
            Not After : Apr 11 22:42:48 2026 GMT
        Subject: CN=69d193e8-8c9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b7:37:ae:84:f2:60:9b:09:f5:71:2e:35:bf:
                    4e:3f:4f:30:14:c3:1e:72:15:db:16:2b:5c:e7:2e:
                    ce:c5:80:2c:88:b7:28:84:06:71:6f:02:ac:e4:a5:
                    99:40:94:c1:2e:f0:7c:3c:7f:9a:d9:a7:b5:49:ee:
                    df:ff:27:c3:af:de:2a:4c:22:91:e7:80:cb:cb:21:
                    7e:a0:51:7f:cb:6c:0f:8d:56:4a:a5:38:f7:fe:85:
                    5c:0c:91:14:05:bf:a2:e2:f9:a3:44:6c:c7:26:f8:
                    94:90:c7:a8:e4:bd:fd:4a:5a:03:a7:79:0e:05:b3:
                    fd:30:af:a0:98:78:4a:ee:d1:bc:98:c3:39:ab:cf:
                    f7:60:70:ce:b5:2e:34:8b:8a:80:27:d7:76:0a:b0:
                    68:e1:7b:39:32:2b:0c:a4:33:a5:91:b7:cb:5a:a0:
                    b7:56:ca:28:8e:53:22:2a:29:da:02:64:0b:34:18:
                    fa:d4:6a:0c:53:36:25:09:69:17:a2:09:62:e8:22:
                    8a:5c:f1:1d:b6:87:70:74:53:a6:63:c7:02:d3:e6:
                    fc:14:eb:94:60:69:8e:45:3a:b3:d9:8d:d5:0a:33:
                    70:9e:65:5d:8b:5f:e8:aa:fb:a9:67:2a:7c:57:4d:
                    f9:13:ed:12:f6:5b:dd:c9:17:c5:3a:d7:10:c3:3a:
                    79:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:DA:66:DA:15:97:AB:C2:37:36:88:DE:D8:B3:0A:85:61:D6:07:9E
            X509v3 Authority Key Identifier:
                keyid:14:02:B6:4F:9A:E7:81:61:D0:D6:5D:A7:25:FD:D0:BB:C8:E1:52:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:a0:c5:f4:a8:4d:3f:6c:e5:50:0f:5c:e3:93:dd:3f:8f:8c:
         da:6d:5e:fb:34:9c:b3:03:a7:dc:5d:94:73:0b:9a:d8:c9:2b:
         42:90:8e:0c:9e:f5:86:cd:01:ea:03:bc:03:d5:0d:c9:bd:db:
         37:a7:fb:14:8b:c4:a7:0b:de:3d:b9:03:75:62:e3:15:47:e3:
         72:32:03:f9:30:09:31:b8:6f:f6:c0:97:e2:f0:51:ff:d2:e6:
         f2:03:84:1b:ef:f6:96:ba:e3:ac:7c:6b:06:b9:11:02:09:f0:
         99:40:ba:80:7c:27:35:90:da:b5:99:68:02:75:ee:b0:d4:53:
         30:4b:4a:8a:40:e6:a1:7c:2d:bb:2b:73:9f:69:75:f8:e6:61:
         8e:d3:de:d6:67:5d:85:78:ec:dd:1f:12:77:8d:bb:16:10:43:
         f1:f1:8c:42:37:58:69:6d:8b:58:63:c3:6c:51:0b:97:51:57:
         c3:d8:54:c2:22:c2:75:c1:b7:ca:01:56:25:c0:9f:5f:f2:95:
         5d:a4:be:3c:05:7f:7b:87:59:51:e9:ba:2b:68:e7:f4:a3:ba:
         8e:b6:a3:09:f0:44:3f:f4:3e:c6:ca:7e:02:d8:ec:49:65:22:
         0e:4d:a8:16:e8:a4:bd:31:e0:64:a2:33:0d:4a:10:a5:cc:61:
         64:07:21:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:31:48 2026 by rpki-client