Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9125864/192315F2ED1811F08E1C0602406F56BC/_fbWlYIK89Dw56dNs0RTLFfa7kA.mft
File:                     _fbWlYIK89Dw56dNs0RTLFfa7kA.mft (raw, json)
Hash identifier:          0j6fADCtCj7uEfBjPscT6dL7UKG1G3iySiDzoLeYalk=
Subject key identifier:   6E:82:55:CC:86:D1:63:F6:74:CD:F5:92:47:E5:FC:22:0C:80:13:BA
Authority key identifier: FD:F6:D6:95:82:0A:F3:D0:F0:E7:A7:4D:B3:44:53:2C:57:DA:EE:40
Certificate issuer:       /CN=A9125864/serialNumber=FDF6D695820AF3D0F0E7A74DB344532C57DAEE40
Certificate serial:       3B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_fbWlYIK89Dw56dNs0RTLFfa7kA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9125864/192315F2ED1811F08E1C0602406F56BC/_fbWlYIK89Dw56dNs0RTLFfa7kA.mft
Manifest number:          37
Signing time:             Fri 17 Apr 2026 08:16:42 +0000
Manifest this update:     Fri 17 Apr 2026 08:16:42 +0000
Manifest next update:     Fri 24 Apr 2026 08:16:42 +0000
Files and hashes:         1: _fbWlYIK89Dw56dNs0RTLFfa7kA.crl (hash: QeR/JXN4L5rMV1/kE0mAY1n1U56fj7dWCEDIccw26Ww=)
                          2: 0BE73752ED1C11F0A0F1907B416F56BC.roa (hash: wnHDSrJ1lNjniUVeFmGkrnIaI5zcmuj8d7YV4WvUiMk=)
                          3: 7B57CA16ED1C11F09DBA53AB416F56BC.roa (hash: zWp6TDXFrmD5/NSfTk8YdIj2drPaBuTNuJsIqnk6a6U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9125864/192315F2ED1811F08E1C0602406F56BC/_fbWlYIK89Dw56dNs0RTLFfa7kA.crl
                          rsync://rpki.apnic.net/member_repository/A9125864/192315F2ED1811F08E1C0602406F56BC/_fbWlYIK89Dw56dNs0RTLFfa7kA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_fbWlYIK89Dw56dNs0RTLFfa7kA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 08:16:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59 (0x3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9125864, serialNumber=FDF6D695820AF3D0F0E7A74DB344532C57DAEE40
        Validity
            Not Before: Apr 17 08:16:42 2026 GMT
            Not After : Apr 24 08:16:42 2026 GMT
        Subject: CN=69e1ec6a-04ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:0c:40:87:26:73:ab:34:9e:0e:25:a6:c7:e9:
                    83:d0:7c:cd:e8:6c:37:b5:30:aa:f2:05:d3:b5:c8:
                    69:33:6e:02:45:8d:50:86:76:e5:97:73:80:0d:ea:
                    2f:26:2d:0e:b2:5d:93:9e:06:fe:67:cf:d3:4a:db:
                    b3:bf:7d:c0:56:50:96:05:68:d6:71:5e:1d:67:73:
                    f3:63:59:a6:0c:ec:7a:90:ed:32:aa:6e:35:1e:11:
                    65:0b:76:d0:79:23:e0:59:82:76:35:00:05:91:5c:
                    ba:c8:97:85:bc:f0:21:6f:1a:df:75:74:7a:66:b2:
                    75:0d:35:2f:76:39:1f:51:6e:8f:cb:9c:09:29:6d:
                    b6:28:3f:94:8b:35:28:ea:2f:43:da:39:aa:85:ad:
                    90:74:10:9a:02:25:89:b2:2f:d6:5e:ed:6d:2c:d6:
                    e2:d8:8a:b1:9c:6b:4a:4e:51:0b:98:7b:5c:de:0d:
                    e1:9a:a2:6e:a9:c4:ce:8f:a3:3f:68:b4:70:4c:e5:
                    de:cb:cb:f2:99:0a:60:f8:8f:30:e8:fb:0e:ab:c0:
                    cc:7d:64:59:79:4e:f1:f1:96:24:ea:c8:a8:76:61:
                    1f:ae:fd:f8:08:4b:ff:cd:9a:2d:ff:0c:67:85:26:
                    08:9f:f7:1c:c9:2a:10:72:3c:22:5a:05:19:2c:c0:
                    7f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:82:55:CC:86:D1:63:F6:74:CD:F5:92:47:E5:FC:22:0C:80:13:BA
            X509v3 Authority Key Identifier:
                keyid:FD:F6:D6:95:82:0A:F3:D0:F0:E7:A7:4D:B3:44:53:2C:57:DA:EE:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9125864/192315F2ED1811F08E1C0602406F56BC/_fbWlYIK89Dw56dNs0RTLFfa7kA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_fbWlYIK89Dw56dNs0RTLFfa7kA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125864/192315F2ED1811F08E1C0602406F56BC/_fbWlYIK89Dw56dNs0RTLFfa7kA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:c7:78:e0:2c:97:5e:c3:9f:0d:c3:7a:d7:bc:da:b0:cb:96:
         ff:92:ad:9b:19:ab:fd:41:e4:80:16:16:ad:44:a2:a1:62:ec:
         26:e8:7a:ac:39:6e:58:cf:bf:71:78:48:b6:d1:f1:8d:49:20:
         d7:80:bb:75:bb:c6:f5:7d:42:e8:be:d4:cb:a0:c6:ff:ef:2c:
         13:d2:ec:aa:03:28:f5:32:a9:ea:5d:2b:71:96:9f:b3:c4:6c:
         84:25:02:64:41:55:c6:f1:71:47:96:bf:bb:e8:d1:a4:fa:82:
         3e:7e:f9:8a:5d:d1:9b:28:df:f6:1a:26:8c:cf:d4:f5:cb:d9:
         6a:50:6a:0d:81:24:fc:de:47:c8:50:2a:c9:79:0d:a4:cf:51:
         fa:53:ca:15:82:cc:3a:0c:72:69:0a:bd:1d:e3:b3:d0:e7:2e:
         b1:57:f1:75:6e:a2:16:15:59:04:c3:d3:3d:34:fb:f8:43:8a:
         7c:af:7e:64:cb:7d:38:19:59:6d:e4:3c:ef:09:38:61:c7:4b:
         f3:1d:ea:99:56:e9:c4:66:b3:31:80:ad:c7:1a:3d:42:f3:10:
         aa:7a:6f:ea:db:39:2d:1c:db:df:65:87:b7:ad:52:25:9e:e5:
         00:25:be:1b:f6:be:4c:df:56:da:c2:8d:3e:01:b9:c9:3d:fb:
         ea:75:60:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 18:26:10 2026 by rpki-client