Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91468A1/2E1CC644511811EA9387C66BC4F9AE02/FSo7QyJc-ixfjeJ6mmiT07I_XeM.mft
File:                     FSo7QyJc-ixfjeJ6mmiT07I_XeM.mft (raw, json)
Hash identifier:          bD3BqmqaQD261mnkdWfFejRWsGuU+axxmD3ONGkrrT8=
Subject key identifier:   2C:5C:BE:C6:CE:BF:69:F5:32:9D:9E:20:55:FF:3B:05:93:79:9D:E1
Authority key identifier: 15:2A:3B:43:22:5C:FA:2C:5F:8D:E2:7A:9A:68:93:D3:B2:3F:5D:E3
Certificate issuer:       /CN=A91468A1/serialNumber=152A3B43225CFA2C5F8DE27A9A6893D3B23F5DE3
Certificate serial:       0B85
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSo7QyJc-ixfjeJ6mmiT07I_XeM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91468A1/2E1CC644511811EA9387C66BC4F9AE02/FSo7QyJc-ixfjeJ6mmiT07I_XeM.mft
Manifest number:          0B6F
Signing time:             Sat 04 Apr 2026 18:59:52 +0000
Manifest this update:     Sat 04 Apr 2026 18:59:51 +0000
Manifest next update:     Sat 11 Apr 2026 18:59:51 +0000
Files and hashes:         1: FSo7QyJc-ixfjeJ6mmiT07I_XeM.crl (hash: cNegM1HTfyyOXF57bVD4lkV8BHdy+D3LLfnsv0LXzE4=)
                          2: F0520A385DD611EAA4AD4767C4F9AE02.roa (hash: 9P/caarcdfE5fgEntnYZ7v6bJcDbToqOd+JV3OwQEFA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91468A1/2E1CC644511811EA9387C66BC4F9AE02/FSo7QyJc-ixfjeJ6mmiT07I_XeM.crl
                          rsync://rpki.apnic.net/member_repository/A91468A1/2E1CC644511811EA9387C66BC4F9AE02/FSo7QyJc-ixfjeJ6mmiT07I_XeM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSo7QyJc-ixfjeJ6mmiT07I_XeM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 18:59:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2949 (0xb85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91468A1, serialNumber=152A3B43225CFA2C5F8DE27A9A6893D3B23F5DE3
        Validity
            Not Before: Apr  4 18:59:51 2026 GMT
            Not After : Apr 11 18:59:51 2026 GMT
        Subject: CN=69d15fa8-b00f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0d:c4:f9:4e:ef:e0:09:9b:0a:04:f9:6f:b7:
                    49:10:98:e1:51:50:99:46:9b:e5:0c:88:e8:1c:41:
                    f4:c9:79:d0:38:61:cc:ab:90:60:03:4e:d1:58:9e:
                    54:0b:19:80:ba:47:03:47:dd:d1:b5:59:7a:35:c4:
                    d1:39:60:f8:de:78:4e:89:43:6e:9f:20:41:56:9f:
                    86:b4:74:33:f0:1e:ce:06:66:ad:22:cd:72:ac:f7:
                    5e:1b:c0:7e:a4:53:a5:ca:f8:3f:ed:9b:40:0e:85:
                    a0:02:e8:b5:b2:41:68:c7:82:29:21:c1:3e:82:47:
                    cd:5a:73:65:d6:81:77:98:a4:37:64:19:e4:9d:1b:
                    1f:9a:e0:96:c8:7f:cc:ae:b1:de:d0:0a:bd:74:4f:
                    48:6b:1a:33:c1:5a:41:7d:ae:00:f5:cd:9e:b4:c4:
                    d2:d2:35:39:10:3c:ec:f0:a0:67:2b:9f:35:e6:59:
                    10:24:e2:0b:a8:be:f9:23:43:12:d2:f4:76:c8:cc:
                    79:fa:45:00:51:ca:1d:0b:de:82:39:51:e9:f1:6d:
                    d5:96:25:d5:9f:12:8c:c4:23:12:71:c4:5b:8c:4f:
                    cf:51:11:e7:e6:59:1d:ac:b7:b1:4f:65:60:cb:13:
                    72:c4:99:4c:c0:6e:5d:1f:fe:70:3f:46:22:15:0c:
                    db:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:5C:BE:C6:CE:BF:69:F5:32:9D:9E:20:55:FF:3B:05:93:79:9D:E1
            X509v3 Authority Key Identifier:
                keyid:15:2A:3B:43:22:5C:FA:2C:5F:8D:E2:7A:9A:68:93:D3:B2:3F:5D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91468A1/2E1CC644511811EA9387C66BC4F9AE02/FSo7QyJc-ixfjeJ6mmiT07I_XeM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSo7QyJc-ixfjeJ6mmiT07I_XeM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91468A1/2E1CC644511811EA9387C66BC4F9AE02/FSo7QyJc-ixfjeJ6mmiT07I_XeM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:a7:9e:9c:db:a4:6e:76:06:98:4e:71:44:2f:ba:4d:3e:e4:
         70:cb:5b:6c:34:e8:8a:a3:ff:3e:b2:0f:80:ba:93:95:10:27:
         0f:be:60:20:94:11:4c:2e:a2:72:00:b1:6d:c7:3f:2a:d0:8f:
         b7:cf:bd:33:f8:65:92:11:7c:9a:b6:6b:e2:ab:7e:48:ce:b4:
         40:8d:3f:d2:3d:e1:e7:e3:20:3e:07:7d:0d:40:8c:25:e2:6f:
         ff:89:29:27:9f:86:ac:ca:0b:34:b2:be:8f:7d:23:49:ba:4e:
         77:75:37:0b:67:75:b5:d9:5c:72:79:f4:58:01:b3:21:b3:b0:
         ce:a4:12:98:5e:9f:6d:13:18:be:38:e3:82:48:55:f0:e6:c2:
         74:16:84:dc:57:80:9b:69:4a:fb:32:e7:5e:34:36:f3:6a:4e:
         b5:eb:66:f5:d2:fc:88:ce:01:b6:3d:73:d3:ad:13:23:a9:54:
         41:72:6e:cd:0c:ce:52:61:4e:cb:db:5f:ed:18:6c:33:b0:a2:
         98:b6:a9:08:01:aa:00:a7:40:20:a8:69:5d:70:db:5e:6f:19:
         dc:ae:5e:50:15:dd:8c:c9:c7:aa:b1:6b:44:af:47:25:65:ec:
         b6:aa:0c:63:b3:f9:2d:17:c2:71:b2:19:0f:45:a1:6e:17:89:
         7d:8a:2b:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:52:24 2026 by rpki-client