Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9125864/192315F2ED1811F08E1C0602406F56BC/_fbWlYIK89Dw56dNs0RTLFfa7kA.mft
File:                     _fbWlYIK89Dw56dNs0RTLFfa7kA.mft (raw, json)
Hash identifier:          5svM9qvgzgEh0y1ft6dpuJodO3mLJD2IUDc/ilQouF0=
Subject key identifier:   D2:1B:5A:AE:19:CD:C4:EB:4E:B3:20:61:87:63:E9:4E:33:10:6A:3D
Authority key identifier: FD:F6:D6:95:82:0A:F3:D0:F0:E7:A7:4D:B3:44:53:2C:57:DA:EE:40
Certificate issuer:       /CN=A9125864/serialNumber=FDF6D695820AF3D0F0E7A74DB344532C57DAEE40
Certificate serial:       24
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_fbWlYIK89Dw56dNs0RTLFfa7kA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9125864/192315F2ED1811F08E1C0602406F56BC/_fbWlYIK89Dw56dNs0RTLFfa7kA.mft
Manifest number:          20
Signing time:             Tue 03 Mar 2026 08:31:43 +0000
Manifest this update:     Tue 03 Mar 2026 08:31:43 +0000
Manifest next update:     Tue 10 Mar 2026 08:31:43 +0000
Files and hashes:         1: _fbWlYIK89Dw56dNs0RTLFfa7kA.crl (hash: DCPG8r3oGAHOmkBtQ8hTtMVzESCAlD2tsGOHO7p/5II=)
                          2: 7B57CA16ED1C11F09DBA53AB416F56BC.roa (hash: zWp6TDXFrmD5/NSfTk8YdIj2drPaBuTNuJsIqnk6a6U=)
                          3: 0BE73752ED1C11F0A0F1907B416F56BC.roa (hash: wnHDSrJ1lNjniUVeFmGkrnIaI5zcmuj8d7YV4WvUiMk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9125864/192315F2ED1811F08E1C0602406F56BC/_fbWlYIK89Dw56dNs0RTLFfa7kA.crl
                          rsync://rpki.apnic.net/member_repository/A9125864/192315F2ED1811F08E1C0602406F56BC/_fbWlYIK89Dw56dNs0RTLFfa7kA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_fbWlYIK89Dw56dNs0RTLFfa7kA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 08:31:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36 (0x24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9125864, serialNumber=FDF6D695820AF3D0F0E7A74DB344532C57DAEE40
        Validity
            Not Before: Mar  3 08:31:43 2026 GMT
            Not After : Mar 10 08:31:43 2026 GMT
        Subject: CN=69a69c6f-36df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5a:23:a2:5d:ba:93:04:f8:ff:af:9f:c5:8c:
                    56:bf:5a:73:32:a7:de:ed:0f:af:0a:20:75:3d:2a:
                    cf:ef:4c:d1:8e:f2:6c:26:9d:a9:1c:c6:de:e6:0b:
                    e2:ef:d8:de:b5:23:fb:5e:3d:5b:e9:06:a9:dc:60:
                    de:bb:78:5f:b0:1a:43:52:87:34:7c:10:48:79:a6:
                    ee:e5:9d:14:0e:02:81:41:9e:70:0b:4c:4b:7f:8e:
                    82:31:77:e2:f7:1c:1f:60:78:60:9b:70:6e:4e:96:
                    f6:b4:20:e9:51:b2:f7:9b:24:7f:9f:71:96:2c:10:
                    6c:13:fa:37:37:fb:b5:83:ef:49:20:9f:85:60:67:
                    9e:6d:18:99:77:92:f3:e1:08:1d:66:10:b6:df:ce:
                    c9:8e:b8:84:4d:c0:e9:5e:8e:17:12:bd:a5:48:f9:
                    51:77:6b:22:20:d0:81:73:8a:07:13:9f:15:13:62:
                    a0:a4:4e:09:1c:41:33:02:a1:fc:f2:28:05:a2:73:
                    74:4f:c1:f7:01:96:2a:bf:2e:7f:c9:22:81:82:28:
                    fe:4b:68:7a:3c:57:17:54:27:ef:80:51:fd:c7:39:
                    7a:ea:4c:ad:d7:06:ff:97:3b:80:d7:2a:05:de:44:
                    71:21:5e:46:c4:46:ff:00:e5:7b:3e:3a:e7:50:1a:
                    64:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:1B:5A:AE:19:CD:C4:EB:4E:B3:20:61:87:63:E9:4E:33:10:6A:3D
            X509v3 Authority Key Identifier:
                keyid:FD:F6:D6:95:82:0A:F3:D0:F0:E7:A7:4D:B3:44:53:2C:57:DA:EE:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9125864/192315F2ED1811F08E1C0602406F56BC/_fbWlYIK89Dw56dNs0RTLFfa7kA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_fbWlYIK89Dw56dNs0RTLFfa7kA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125864/192315F2ED1811F08E1C0602406F56BC/_fbWlYIK89Dw56dNs0RTLFfa7kA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:e3:78:c3:3b:2f:20:d3:de:7b:77:c5:cb:97:a7:0c:cf:fc:
         fe:3e:b3:34:c7:e6:91:1b:70:1c:0c:b2:73:08:f4:81:3e:fa:
         1d:07:4b:67:68:0b:11:f7:bd:a4:41:3d:89:44:b1:16:e9:70:
         ed:c0:b6:3b:05:ac:43:51:a9:c1:17:dc:d3:a5:24:37:0f:d5:
         88:ad:52:42:4d:c0:0c:4a:ae:64:26:b5:7f:b0:50:77:1b:8f:
         b3:6c:0a:f0:53:d5:ad:9f:bc:e9:bb:da:b8:41:22:4c:dc:83:
         6e:1e:69:7b:b3:c5:9c:5b:48:3d:b7:95:a9:0a:6c:45:04:ba:
         13:58:80:43:0d:57:b4:93:e0:f1:1d:56:af:19:4f:ef:cc:eb:
         80:8f:af:d9:0a:0c:10:71:43:cd:cc:83:3f:aa:7d:6f:ba:7e:
         70:41:ab:4e:36:29:53:f6:ff:8c:ec:41:1f:3d:af:54:48:4e:
         51:8f:d1:96:5d:59:eb:3c:fc:12:53:93:51:0f:4d:22:c0:65:
         0d:24:b6:13:a9:e9:d8:87:2f:58:43:0a:9c:fe:7f:5e:3b:91:
         e0:da:80:e8:fa:70:e9:2f:10:e9:91:d5:f8:47:4d:ba:a9:e0:
         a4:32:4d:03:a6:1e:62:6c:b2:84:d5:b5:be:27:2d:4e:37:59:
         3b:ab:b0:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 16:05:50 2026 by rpki-client