Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91352D1/64A5AB84C0EA11F09BA9DB74C4F9AE02/fTWFKD3zPrULnDiNWc14bLudw54.mft
File:                     fTWFKD3zPrULnDiNWc14bLudw54.mft (raw, json)
Hash identifier:          u3/i3A4tCCG995dr6KLz54ARyQtU/xsbsqxujYWbv0U=
Subject key identifier:   ED:B3:2D:55:45:20:95:9F:76:9C:36:11:78:BB:17:1A:50:58:83:46
Authority key identifier: 7D:35:85:28:3D:F3:3E:B5:0B:9C:38:8D:59:CD:78:6C:BB:9D:C3:9E
Certificate issuer:       /CN=A91352D1/serialNumber=7D3585283DF33EB50B9C388D59CD786CBB9DC39E
Certificate serial:       43
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fTWFKD3zPrULnDiNWc14bLudw54.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91352D1/64A5AB84C0EA11F09BA9DB74C4F9AE02/fTWFKD3zPrULnDiNWc14bLudw54.mft
Manifest number:          3F
Signing time:             Tue 03 Mar 2026 08:07:20 +0000
Manifest this update:     Tue 03 Mar 2026 08:07:19 +0000
Manifest next update:     Tue 10 Mar 2026 08:07:19 +0000
Files and hashes:         1: fTWFKD3zPrULnDiNWc14bLudw54.crl (hash: KLZD/wzgXmDxf+vZKqn9rWNYKAMyJ6trbSzZDrE6H6Q=)
                          2: F0F521DEC10B11F0B1AC197FC4F9AE02.roa (hash: GOuUl8j+KrJKN/gcw/cqwqcTvAUg8ALJCq8KS5t0JeI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91352D1/64A5AB84C0EA11F09BA9DB74C4F9AE02/fTWFKD3zPrULnDiNWc14bLudw54.crl
                          rsync://rpki.apnic.net/member_repository/A91352D1/64A5AB84C0EA11F09BA9DB74C4F9AE02/fTWFKD3zPrULnDiNWc14bLudw54.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fTWFKD3zPrULnDiNWc14bLudw54.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 08:07:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 67 (0x43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91352D1, serialNumber=7D3585283DF33EB50B9C388D59CD786CBB9DC39E
        Validity
            Not Before: Mar  3 08:07:19 2026 GMT
            Not After : Mar 10 08:07:19 2026 GMT
        Subject: CN=69a696b7-6e0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2f:87:c0:86:ce:24:fe:70:2b:c6:ba:85:dd:
                    c2:b9:af:43:82:74:a3:dd:b2:5d:50:e5:12:6a:b6:
                    fb:54:7b:c0:58:7a:1c:5f:04:d0:15:fd:36:9d:e5:
                    c9:2b:f6:0e:a4:87:cd:53:f1:89:ad:9e:8e:16:8d:
                    87:bd:8a:81:db:15:c8:8d:0d:82:01:f3:87:7d:5d:
                    d3:db:4e:de:db:9e:5f:50:52:1e:98:fa:4a:e4:1b:
                    4c:df:c7:db:68:fa:c9:95:fb:d7:f2:44:d3:4b:f2:
                    f9:20:b9:4a:9b:74:76:79:bb:d7:1b:07:82:ab:55:
                    b5:1c:1e:9b:d9:4b:75:ec:c5:4a:2b:e0:d5:8e:4f:
                    61:e1:09:d3:57:36:b2:e1:e3:39:50:98:42:cb:b6:
                    c1:05:15:4a:50:37:bf:74:bb:a5:20:f6:86:58:e8:
                    5f:f6:1b:41:82:ae:db:fd:4b:53:d8:62:7e:65:0a:
                    62:66:f6:fe:4e:1c:73:d9:86:86:8e:49:ee:f9:59:
                    de:4d:f6:83:c5:f9:94:fc:22:4d:c7:23:57:d4:9b:
                    19:b3:fe:b2:a6:80:58:29:6d:6d:0b:0d:37:1f:9b:
                    0c:60:71:1d:bb:7c:3f:a0:79:d3:86:b0:1c:1b:e2:
                    6f:2f:3e:c7:4f:d9:7c:1e:57:f1:ba:d1:36:30:64:
                    32:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:B3:2D:55:45:20:95:9F:76:9C:36:11:78:BB:17:1A:50:58:83:46
            X509v3 Authority Key Identifier:
                keyid:7D:35:85:28:3D:F3:3E:B5:0B:9C:38:8D:59:CD:78:6C:BB:9D:C3:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91352D1/64A5AB84C0EA11F09BA9DB74C4F9AE02/fTWFKD3zPrULnDiNWc14bLudw54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fTWFKD3zPrULnDiNWc14bLudw54.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91352D1/64A5AB84C0EA11F09BA9DB74C4F9AE02/fTWFKD3zPrULnDiNWc14bLudw54.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:95:c9:a9:fe:f3:67:99:6d:06:f5:5b:86:a2:89:85:4f:34:
         46:54:47:7c:7c:60:ed:58:a0:de:76:bd:77:45:5c:bd:a4:b5:
         6a:1a:88:4c:de:5d:f8:8f:e2:c8:ac:4e:7b:c2:35:d9:fc:f2:
         5f:e2:ad:e0:00:d8:78:45:b7:51:6b:43:1b:55:4a:a8:aa:5e:
         c0:d8:e1:18:bb:cd:68:c7:a0:11:ad:b6:79:c3:0f:24:86:37:
         8a:0c:8c:86:ff:70:0c:96:81:dd:fa:b5:0f:29:f7:1e:ab:2c:
         bf:cd:c6:f2:26:a9:1a:91:14:10:aa:ab:8e:6f:28:ed:3c:bb:
         ba:f5:4d:c6:28:e5:b7:06:2c:1b:0e:7f:16:01:47:28:50:c8:
         91:5e:fc:02:5f:7c:c8:f2:db:4c:75:da:44:c8:be:d5:14:ac:
         15:23:3b:90:83:4a:e2:44:b0:f8:2c:7e:97:a5:28:37:cb:81:
         24:53:34:75:12:c7:59:37:db:0a:0a:77:80:4a:72:1b:91:05:
         75:36:1f:67:58:8e:89:37:15:f3:a1:f3:88:7c:8f:0e:e3:84:
         7f:99:7c:37:a4:b1:b1:7a:ef:79:43:95:4c:8c:f8:ab:23:b6:
         29:87:3f:22:9b:13:db:1e:b8:33:c4:78:1c:e7:b3:a6:f8:9a:
         95:c7:b2:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:20:02 2026 by rpki-client