Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/fjqkjWfrmWmcArgfcWlt9GWopuU.mft
File:                     fjqkjWfrmWmcArgfcWlt9GWopuU.mft (raw, json)
Hash identifier:          dIDIx2JJrjLR7LhY8acMo+nOPdtaDAokBU2wkmmDV4g=
Subject key identifier:   00:27:9B:58:AF:05:DE:57:F9:CF:50:52:48:4E:26:4D:93:BE:4E:FE
Authority key identifier: 7E:3A:A4:8D:67:EB:99:69:9C:02:B8:1F:71:69:6D:F4:65:A8:A6:E5
Certificate issuer:       /CN=A9142420/serialNumber=7E3AA48D67EB99699C02B81F71696DF465A8A6E5
Certificate serial:       F7
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fjqkjWfrmWmcArgfcWlt9GWopuU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/fjqkjWfrmWmcArgfcWlt9GWopuU.mft
Manifest number:          EF
Signing time:             Tue 03 Mar 2026 05:58:02 +0000
Manifest this update:     Tue 03 Mar 2026 05:58:02 +0000
Manifest next update:     Tue 10 Mar 2026 05:58:02 +0000
Files and hashes:         1: fjqkjWfrmWmcArgfcWlt9GWopuU.crl (hash: Kl60awq0BDFjJv3XUS+CmK6HyAhGocxfRNxXr1pzKfk=)
                          2: E010D234AC8D11EF93B1CB46C4F9AE02.roa (hash: pMb/fzhxQo8B4/8r3buBhCAOx+HEOaBzUhA5CpNJUgw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/fjqkjWfrmWmcArgfcWlt9GWopuU.crl
                          rsync://rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/fjqkjWfrmWmcArgfcWlt9GWopuU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fjqkjWfrmWmcArgfcWlt9GWopuU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 05:58:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 247 (0xf7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142420, serialNumber=7E3AA48D67EB99699C02B81F71696DF465A8A6E5
        Validity
            Not Before: Mar  3 05:58:02 2026 GMT
            Not After : Mar 10 05:58:02 2026 GMT
        Subject: CN=69a6786a-01c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ec:af:fb:d0:84:87:e6:b4:c2:3e:e9:de:4b:
                    3a:7e:ff:7a:b7:38:59:26:a2:9f:b1:1a:ad:67:33:
                    8f:1d:f6:c4:49:93:a0:06:18:f9:20:69:1e:ef:41:
                    70:5b:45:3d:16:06:ac:52:0c:db:a4:fd:3e:d0:63:
                    6f:d8:4c:5f:5e:40:48:92:9d:be:f3:9d:b9:67:5c:
                    fd:31:d3:b5:1d:aa:47:cb:6a:7d:d2:f0:c8:00:f0:
                    5f:31:14:81:59:c5:15:51:bb:67:67:78:49:25:fa:
                    7b:94:50:dc:ea:c9:e1:c4:2c:26:e2:10:03:48:32:
                    45:d3:7e:15:d7:52:b5:2d:8f:78:d0:54:3e:eb:21:
                    4f:f0:59:00:33:17:7c:23:99:f7:66:c4:34:ee:63:
                    37:eb:8f:7a:2e:33:67:3d:86:5e:f4:81:d9:e3:29:
                    86:d3:53:e1:46:3e:0d:c6:f3:e2:e9:3c:be:f9:33:
                    66:ae:f9:08:78:2b:7d:60:26:25:d0:3a:0e:34:f1:
                    d5:0b:e3:c9:4d:64:09:1f:35:51:26:b8:dc:d6:d3:
                    3a:61:d3:da:7c:65:5b:18:a0:97:f6:de:a4:08:86:
                    ae:9b:e8:8d:3d:62:15:7b:8d:33:5e:90:d2:f5:52:
                    75:4b:f0:20:0a:db:e2:77:a8:6c:b4:5a:b5:06:62:
                    a6:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:27:9B:58:AF:05:DE:57:F9:CF:50:52:48:4E:26:4D:93:BE:4E:FE
            X509v3 Authority Key Identifier:
                keyid:7E:3A:A4:8D:67:EB:99:69:9C:02:B8:1F:71:69:6D:F4:65:A8:A6:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/fjqkjWfrmWmcArgfcWlt9GWopuU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fjqkjWfrmWmcArgfcWlt9GWopuU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/fjqkjWfrmWmcArgfcWlt9GWopuU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:65:d1:47:88:c1:72:a9:22:a0:5c:ed:e2:87:4a:ac:97:25:
         ab:57:ab:d7:f6:ef:ec:67:32:70:63:ea:00:c2:82:71:95:3a:
         2d:a5:47:06:ad:f3:63:b9:bd:14:6d:bf:de:ad:7c:f9:b0:99:
         aa:a0:d5:f6:6a:ea:8e:83:1f:82:23:15:35:d3:d1:67:4b:df:
         b9:a7:06:31:ca:62:0b:3e:02:54:b9:2a:8f:9d:c3:1d:a4:c4:
         71:97:c8:e8:ad:b9:33:31:78:ce:a5:55:69:c9:0b:f3:53:c5:
         09:08:b5:2b:be:47:3e:9c:21:10:d0:9c:76:99:44:f7:58:fe:
         0b:01:8d:0e:97:04:65:a9:38:f2:2b:ef:f8:97:53:c0:0f:e5:
         fe:a9:5b:e3:2e:30:92:6f:f6:6b:87:ec:c5:b6:bb:7e:7e:e9:
         c5:2f:2a:82:9a:4a:b0:2a:c8:18:5d:13:99:3e:04:69:dc:90:
         47:ec:ce:7c:a2:b5:18:cd:b5:e4:f1:31:75:76:71:50:f7:bd:
         d4:20:78:5a:41:bb:c3:76:83:e8:1f:cf:15:96:29:d4:08:40:
         28:81:b2:9c:ab:b4:24:a5:ef:2a:a5:4b:10:f6:46:fe:e3:da:
         01:75:17:4c:cb:f2:2a:8c:c9:bb:62:9a:c3:51:bc:b6:77:d6:
         07:05:09:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:22:44 2026 by rpki-client