Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9145B5E/7DD7BBBC45B511EFBA4A621EC4F9AE02/FyftFR9AiSEOw-Nopaae45SE4-Y.mft
File:                     FyftFR9AiSEOw-Nopaae45SE4-Y.mft (raw, json)
Hash identifier:          ME5QDcWoEMVCjtLQ59Lfq4rAolsfzuL67wcKPs7owBI=
Subject key identifier:   5A:93:2D:B8:C2:85:76:58:DE:F2:33:33:2E:D6:14:1A:35:D7:70:EE
Authority key identifier: 17:27:ED:15:1F:40:89:21:0E:C3:E3:68:A5:A6:9E:E3:94:84:E3:E6
Certificate issuer:       /CN=A9145B5E/serialNumber=1727ED151F4089210EC3E368A5A69EE39484E3E6
Certificate serial:       013A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FyftFR9AiSEOw-Nopaae45SE4-Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9145B5E/7DD7BBBC45B511EFBA4A621EC4F9AE02/FyftFR9AiSEOw-Nopaae45SE4-Y.mft
Manifest number:          0135
Signing time:             Tue 03 Mar 2026 05:06:00 +0000
Manifest this update:     Tue 03 Mar 2026 05:05:59 +0000
Manifest next update:     Tue 10 Mar 2026 05:05:59 +0000
Files and hashes:         1: FyftFR9AiSEOw-Nopaae45SE4-Y.crl (hash: foV6oLO/kk5MTmX8CJN5WuyKoiG8nllgvMwz0f2uVkw=)
                          2: F149E6BE45B611EFA10B0632C4F9AE02.roa (hash: bqsTbppKfYtZ0JdNe12QWrEbSqhH/2XezTCIMzAba6g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9145B5E/7DD7BBBC45B511EFBA4A621EC4F9AE02/FyftFR9AiSEOw-Nopaae45SE4-Y.crl
                          rsync://rpki.apnic.net/member_repository/A9145B5E/7DD7BBBC45B511EFBA4A621EC4F9AE02/FyftFR9AiSEOw-Nopaae45SE4-Y.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FyftFR9AiSEOw-Nopaae45SE4-Y.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 05:05:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 314 (0x13a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9145B5E, serialNumber=1727ED151F4089210EC3E368A5A69EE39484E3E6
        Validity
            Not Before: Mar  3 05:05:59 2026 GMT
            Not After : Mar 10 05:05:59 2026 GMT
        Subject: CN=69a66c38-775a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:67:ae:a9:3f:2c:f1:76:bf:03:a6:22:9b:aa:
                    7b:6f:a4:93:be:3e:d4:b7:d3:20:a5:59:9e:bd:7e:
                    07:41:43:4b:83:a2:bb:82:c0:d9:13:cc:ac:1e:df:
                    77:31:67:25:53:a9:f3:35:09:af:ee:f8:b6:f8:74:
                    5b:5d:e3:00:65:00:d7:55:43:85:31:dd:32:0f:45:
                    68:cc:0d:13:7f:b9:17:9a:10:dd:b1:3c:1f:62:db:
                    fa:ef:f9:26:e4:2c:af:f8:6f:ae:b0:5e:f4:ba:0c:
                    3d:95:91:c4:8d:82:ea:a4:90:49:4b:97:89:ff:1c:
                    fb:48:9a:78:71:1b:3c:8a:f6:59:ac:db:16:12:66:
                    25:3f:d7:90:87:0f:4f:0f:fa:3e:57:1f:69:35:c9:
                    3a:1e:ee:2c:ef:a6:1c:5c:da:cf:5b:3e:8d:54:d0:
                    fb:e2:6c:1d:b1:f9:98:cf:2e:30:54:19:9f:ab:56:
                    e7:4f:c2:5c:af:83:78:92:42:81:f0:dd:3a:42:0e:
                    f8:ad:7a:ce:02:ea:04:dc:ef:45:67:9c:37:d7:a5:
                    48:30:b8:65:09:bf:e3:e6:ff:94:f5:e2:b0:54:23:
                    f7:e0:54:5c:e0:70:58:9f:6c:38:2b:71:5c:03:4c:
                    c6:98:a7:d1:80:7d:46:81:4f:b6:74:95:e1:94:0c:
                    99:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:93:2D:B8:C2:85:76:58:DE:F2:33:33:2E:D6:14:1A:35:D7:70:EE
            X509v3 Authority Key Identifier:
                keyid:17:27:ED:15:1F:40:89:21:0E:C3:E3:68:A5:A6:9E:E3:94:84:E3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9145B5E/7DD7BBBC45B511EFBA4A621EC4F9AE02/FyftFR9AiSEOw-Nopaae45SE4-Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FyftFR9AiSEOw-Nopaae45SE4-Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145B5E/7DD7BBBC45B511EFBA4A621EC4F9AE02/FyftFR9AiSEOw-Nopaae45SE4-Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:16:93:0a:b1:de:41:89:9f:d4:a1:fa:de:20:ee:56:38:64:
         a5:6d:9f:4f:cf:49:2b:1e:93:7d:d8:f0:00:65:ae:13:55:9d:
         52:74:ec:58:de:88:c8:20:ac:2a:23:ad:a2:8b:e1:ca:6f:2a:
         5e:d1:97:75:85:f6:f7:14:01:3c:70:68:82:7e:d5:61:9b:66:
         c2:d8:45:df:06:8b:58:8f:29:95:74:95:ab:da:05:56:88:1f:
         86:15:82:f0:a3:99:a1:62:84:c9:97:51:ab:cd:bf:81:e5:2b:
         2f:9a:dd:59:b6:99:75:2c:8a:17:68:67:f3:66:14:ec:e0:4f:
         c6:d2:37:e9:7c:a3:af:7d:be:1a:83:34:0e:f0:46:81:82:4d:
         9e:59:84:84:c1:2a:37:79:97:ff:f6:61:8b:83:bd:5f:ca:18:
         4c:b9:6e:75:30:a3:30:e7:12:a1:62:d9:df:35:24:f7:8b:b6:
         ce:c4:0e:da:7f:9b:d9:db:55:3b:b4:bb:70:4d:ac:ee:7b:be:
         04:8d:09:e4:fa:01:91:29:ff:5c:2f:d9:e5:63:06:ba:57:aa:
         02:6f:e5:d3:c8:b0:80:1f:2b:6f:8b:d2:10:97:28:57:e3:c3:
         33:86:47:13:b4:b0:f5:3f:29:36:6e:bd:9e:44:51:07:ec:aa:
         fa:03:63:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:20:45 2026 by rpki-client