Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.mft
File:                     FoQVwME0AcDXcVcd-G-M1fhQOxQ.mft (raw, json)
Hash identifier:          UtDOO4y43IqK0FgCwX2AA0Eqov/WiV0HBHpQTrOTkgQ=
Subject key identifier:   83:AC:43:61:D1:06:CE:25:81:57:22:A5:8C:C5:3A:D2:9A:9C:71:A4
Authority key identifier: 16:84:15:C0:C1:34:01:C0:D7:71:57:1D:F8:6F:8C:D5:F8:50:3B:14
Certificate issuer:       /CN=A91314BC/serialNumber=168415C0C13401C0D771571DF86F8CD5F8503B14
Certificate serial:       029F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FoQVwME0AcDXcVcd-G-M1fhQOxQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.mft
Manifest number:          0289
Signing time:             Sun 05 Apr 2026 01:23:37 +0000
Manifest this update:     Sun 05 Apr 2026 01:23:37 +0000
Manifest next update:     Sun 12 Apr 2026 01:23:37 +0000
Files and hashes:         1: FoQVwME0AcDXcVcd-G-M1fhQOxQ.crl (hash: eMvNUWwY3ppcQp0a5v22VQOq3nJboR154xmBD1CWWlg=)
                          2: 7DD0E8845A3211EDB637E665C4F9AE02.roa (hash: eg3pUwfwQDE+9YQzOG9BMq0Bkyet7crQzC1+mV0wngc=)
                          3: 1083BE64499711EE86AE452DC4F9AE02.roa (hash: 9LFaLc8meqLBp289mlYACBm+5v+NFT6EUQrjqf3aYig=)
                          4: 7D0DFE0A5A3211EDB637E665C4F9AE02.roa (hash: EgHfoXDPWkSf9EMELvfB9wprgOdP6M6i5C22XOX+eIg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.crl
                          rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FoQVwME0AcDXcVcd-G-M1fhQOxQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 01:23:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 671 (0x29f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91314BC, serialNumber=168415C0C13401C0D771571DF86F8CD5F8503B14
        Validity
            Not Before: Apr  5 01:23:37 2026 GMT
            Not After : Apr 12 01:23:37 2026 GMT
        Subject: CN=69d1b999-5375
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:24:8d:59:79:12:d7:9a:86:b2:1e:92:87:7d:
                    da:0c:40:b7:57:d1:c6:06:42:a2:b8:8b:1f:50:eb:
                    88:9a:5f:5a:d9:98:bb:f4:ec:3a:0d:76:cf:ac:e3:
                    f7:04:c0:20:ac:63:3f:b7:d6:82:fd:f8:56:b3:3c:
                    09:4b:d8:39:eb:6c:ff:c1:87:c5:8e:2d:87:a0:1a:
                    d7:0d:fc:66:7b:a4:08:e4:3a:d2:4d:ad:54:ec:5d:
                    d2:ef:11:6b:8c:d0:d9:1a:47:a5:02:7e:6b:f5:a4:
                    3b:2d:85:5a:d2:97:c9:18:e2:94:42:91:0e:56:36:
                    08:e8:b8:c1:1a:13:a0:49:98:0c:f8:7d:2e:48:62:
                    36:52:06:6e:98:b5:22:8c:2e:53:52:4e:72:18:41:
                    b3:20:bd:d9:97:d8:8b:34:7c:10:f4:2e:d8:e2:fc:
                    ed:5b:1d:44:d8:de:99:4b:e6:5c:94:8f:e3:ef:94:
                    08:1b:10:cf:be:ad:43:33:3c:11:0a:97:73:67:5f:
                    ee:c0:b2:05:ae:bf:3d:5e:a2:39:d0:19:89:bb:03:
                    8f:a0:40:09:aa:c0:80:5a:e7:1c:5e:7a:7a:0f:5d:
                    b0:99:be:01:11:63:2f:d9:92:3b:30:37:bc:38:45:
                    4f:2a:0e:59:14:08:81:96:3f:1a:74:82:c4:4f:d4:
                    0a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:AC:43:61:D1:06:CE:25:81:57:22:A5:8C:C5:3A:D2:9A:9C:71:A4
            X509v3 Authority Key Identifier:
                keyid:16:84:15:C0:C1:34:01:C0:D7:71:57:1D:F8:6F:8C:D5:F8:50:3B:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FoQVwME0AcDXcVcd-G-M1fhQOxQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:7e:f3:8c:c1:01:19:c9:be:c4:e7:91:51:4a:68:98:04:7e:
         5c:5c:8a:77:cc:e3:a8:95:40:d9:fa:0a:3b:39:f2:24:4e:4c:
         e1:29:3b:77:73:29:7d:57:a3:a2:ca:3e:b4:73:55:5c:bd:ef:
         a7:36:b7:8c:d1:6c:ad:4a:f9:06:34:28:85:68:ad:3c:72:46:
         89:fe:f6:ad:51:b9:da:23:c5:32:d5:2c:bc:30:3a:68:7c:90:
         ff:28:84:e0:12:60:51:5e:24:37:bb:28:e6:8c:84:c8:c2:ca:
         39:cb:00:a1:7d:fa:c9:0a:5a:24:62:a0:d8:b3:f7:ed:c2:63:
         92:bc:7d:e6:84:02:e4:7c:86:76:ab:23:99:d7:bb:28:0c:1d:
         e1:b3:64:d0:2a:36:54:56:c1:02:ce:9e:33:91:db:7f:bd:3a:
         50:b0:01:e0:3d:c5:1d:b2:96:f7:8b:78:96:ab:2f:dd:1c:e3:
         15:14:c2:6f:10:05:3c:8b:18:ac:30:26:a7:df:ef:63:f7:4e:
         c1:84:96:10:dc:69:9f:5c:3e:ff:98:a4:58:5c:61:b6:d4:5a:
         23:54:b7:fb:42:eb:fd:dd:a6:d4:f5:19:5d:a9:b4:f5:72:0d:
         ed:2c:8c:69:00:07:49:f3:85:3b:b2:84:1b:a1:d0:21:0d:f7:
         04:42:e2:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:48:52 2026 by rpki-client