Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/FxesrAU_Ex4iYUUnNlE-To9ibNs.mft
File:                     FxesrAU_Ex4iYUUnNlE-To9ibNs.mft (raw, json)
Hash identifier:          n2biBRf8qOJVz3K8vABDJ0AFLjr9+7noZUffltfM71w=
Subject key identifier:   D7:8D:FD:67:7A:CF:E7:9E:25:11:6A:1A:FC:05:B7:BC:35:86:AF:11
Authority key identifier: 17:17:AC:AC:05:3F:13:1E:22:61:45:27:36:51:3E:4E:8F:62:6C:DB
Certificate issuer:       /CN=A912986D/serialNumber=1717ACAC053F131E2261452736513E4E8F626CDB
Certificate serial:       0B71
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FxesrAU_Ex4iYUUnNlE-To9ibNs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/FxesrAU_Ex4iYUUnNlE-To9ibNs.mft
Manifest number:          0B52
Signing time:             Fri 20 Mar 2026 18:57:49 +0000
Manifest this update:     Fri 20 Mar 2026 18:57:49 +0000
Manifest next update:     Fri 27 Mar 2026 18:57:49 +0000
Files and hashes:         1: FxesrAU_Ex4iYUUnNlE-To9ibNs.crl (hash: L1oQ58emYTzmTEbQquKHqs+KjnklzptYBDEn+/g2+fk=)
                          2: 618A7D781F7111F09D1AC487C4F9AE02.roa (hash: IZyg4Fas/9IWukov6Dektnm2jiaHOXiUtTOZZUt7+3M=)
                          3: 0878844205F511EEBB8E1062C4F9AE02.roa (hash: BLYZvDvXZ+sEHXrXt0eXjQfJ4rst6tvWT4jPAMslICE=)
                          4: 13321D24572211EA88CE445FC4F9AE02.roa (hash: f0+uXUpvz6qGLjUJETTMJZ/hrRFSp5AhLboGVNTpZlU=)
                          5: 090D807E05F511EEBB8E1062C4F9AE02.roa (hash: Dbi+hv4YjHmxE51XT4Cwwk12GMJPFd/aSXYqPVpbTJE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/FxesrAU_Ex4iYUUnNlE-To9ibNs.crl
                          rsync://rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/FxesrAU_Ex4iYUUnNlE-To9ibNs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FxesrAU_Ex4iYUUnNlE-To9ibNs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 27 Mar 2026 18:57:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2929 (0xb71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912986D, serialNumber=1717ACAC053F131E2261452736513E4E8F626CDB
        Validity
            Not Before: Mar 20 18:57:49 2026 GMT
            Not After : Mar 27 18:57:49 2026 GMT
        Subject: CN=69bd98ad-e85a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:79:e5:dc:92:46:5b:af:86:a6:a8:55:6b:e3:
                    30:c4:fa:18:3a:17:c6:af:f4:c5:64:79:63:21:8f:
                    fb:b3:d6:28:e6:10:c9:54:e1:64:e3:7d:08:70:da:
                    27:ba:b5:d0:ed:d6:26:18:6d:aa:58:51:3f:87:f7:
                    81:e8:ce:8e:28:2d:a1:f6:1b:b6:1d:67:c1:d2:81:
                    68:84:e0:59:f5:59:90:2e:0b:1e:67:ac:81:a9:95:
                    42:d4:cf:ee:8c:06:28:dd:76:2e:c6:fa:79:79:f9:
                    58:d8:5d:be:bc:d6:1d:d5:42:7f:26:80:83:2a:fc:
                    8b:2c:e8:04:a4:42:ca:0d:c3:01:2c:51:9d:2a:29:
                    8f:80:a0:84:dd:4e:af:6a:9c:fe:3d:9e:41:bb:db:
                    b0:1a:c2:50:9a:ce:52:d3:da:31:8b:c7:11:b6:ae:
                    7e:0d:e4:f1:0f:51:60:9c:45:6f:3e:13:c9:77:19:
                    40:1d:72:f5:c4:f2:24:3f:fb:47:e1:0e:0e:43:4e:
                    35:15:30:80:b6:2b:57:b0:a3:b9:30:af:ad:4a:e3:
                    56:ca:b1:a0:b2:75:21:fc:ea:da:13:2c:2d:f0:55:
                    36:bb:49:ae:1e:3a:b3:ba:a6:92:b3:82:29:aa:f9:
                    fd:22:09:82:63:a4:36:c7:56:e9:b5:42:09:d2:0e:
                    ad:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:8D:FD:67:7A:CF:E7:9E:25:11:6A:1A:FC:05:B7:BC:35:86:AF:11
            X509v3 Authority Key Identifier:
                keyid:17:17:AC:AC:05:3F:13:1E:22:61:45:27:36:51:3E:4E:8F:62:6C:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/FxesrAU_Ex4iYUUnNlE-To9ibNs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FxesrAU_Ex4iYUUnNlE-To9ibNs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/FxesrAU_Ex4iYUUnNlE-To9ibNs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:55:ad:05:8e:e6:f7:52:a5:ea:b0:9a:bb:21:5b:b4:60:aa:
         98:84:b8:85:2c:30:4c:a8:c8:41:ea:94:20:0c:78:44:0d:67:
         4e:40:6f:ae:fc:13:2c:ee:84:be:3b:7d:4c:60:38:ee:d0:5a:
         ae:21:95:bf:56:4a:2d:19:8d:b9:9e:97:24:6a:c4:9c:27:ea:
         5e:74:05:fe:08:4e:05:78:55:6a:37:3a:7b:22:80:33:8e:40:
         63:0a:c9:7a:17:80:94:cb:f8:e5:b8:64:31:8f:72:e3:f9:b0:
         79:27:ff:f6:84:4b:ee:0c:d6:7a:75:c6:51:f0:11:9c:80:6f:
         d9:02:b0:e0:d1:ad:67:83:4d:b8:87:c8:1b:43:c1:53:46:56:
         ea:6e:7c:41:81:54:f1:e4:85:27:c0:34:f0:74:db:e3:ae:d5:
         4a:46:08:30:6d:8b:e0:7e:aa:20:ce:40:a0:f8:b7:9f:db:57:
         3a:a2:52:00:3e:67:32:91:58:12:cf:b0:73:28:32:83:c7:ea:
         8f:90:cf:d8:5a:ee:88:93:ce:f6:25:eb:4f:03:e3:26:31:bd:
         4c:25:2c:8a:19:bb:f1:b8:f2:50:47:2f:60:e1:46:00:a4:12:
         28:42:c5:6d:fe:e1:c8:94:94:d7:75:39:9a:26:19:30:b1:4a:
         7c:8d:4c:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 19:32:19 2026 by rpki-client