Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148D01/E92519FA990B11EBA355CB53C4F9AE02/fjarHARDIbdM9ngmPgUk_TQXm70.mft
File:                     fjarHARDIbdM9ngmPgUk_TQXm70.mft (raw, json)
Hash identifier:          dG6B5JbmdBi2ZIqnfux3xyzMl3KXI1QEe6lbOCXLhbY=
Subject key identifier:   29:5A:B0:6B:75:CC:60:CC:D0:DA:1C:79:F3:96:2B:07:3C:81:2F:91
Authority key identifier: 7E:36:AB:1C:04:43:21:B7:4C:F6:78:26:3E:05:24:FD:34:17:9B:BD
Certificate issuer:       /CN=A9148D01/serialNumber=7E36AB1C044321B74CF678263E0524FD34179BBD
Certificate serial:       0775
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjarHARDIbdM9ngmPgUk_TQXm70.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148D01/E92519FA990B11EBA355CB53C4F9AE02/fjarHARDIbdM9ngmPgUk_TQXm70.mft
Manifest number:          071F
Signing time:             Sat 04 Apr 2026 22:04:00 +0000
Manifest this update:     Sat 04 Apr 2026 22:03:59 +0000
Manifest next update:     Sat 11 Apr 2026 22:03:59 +0000
Files and hashes:         1: fjarHARDIbdM9ngmPgUk_TQXm70.crl (hash: WoKiAMmFNKIV9unpCxTo9nmTPRXDSrD2uD2uXlC38qI=)
                          2: 4DEF33661FBE11EF97E7974FC4F9AE02.roa (hash: n4Uw0jqs5ZcyjoPEC6zZrVjuP+W+SprZyYk5yGCTMb8=)
                          3: 4EE2265C1FBE11EF97E7974FC4F9AE02.roa (hash: wJuIPWT/SxKs5gxJb1vqmdIdSLMh3euWKwuLCZSiROE=)
                          4: 4CBCEB321FBE11EF97E7974FC4F9AE02.roa (hash: gXhaJnynENVEuNQLiabxnQm1o0GqjC1uZuFJBEwnSDE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148D01/E92519FA990B11EBA355CB53C4F9AE02/fjarHARDIbdM9ngmPgUk_TQXm70.crl
                          rsync://rpki.apnic.net/member_repository/A9148D01/E92519FA990B11EBA355CB53C4F9AE02/fjarHARDIbdM9ngmPgUk_TQXm70.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjarHARDIbdM9ngmPgUk_TQXm70.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 22:03:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1909 (0x775)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148D01, serialNumber=7E36AB1C044321B74CF678263E0524FD34179BBD
        Validity
            Not Before: Apr  4 22:03:59 2026 GMT
            Not After : Apr 11 22:03:59 2026 GMT
        Subject: CN=69d18ad0-8067
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c6:1b:93:c5:38:5f:a5:ff:0d:c8:bd:86:76:
                    f2:fb:80:e8:99:01:f0:3f:0f:70:23:e6:b1:99:cc:
                    b7:2c:d4:13:47:50:0f:ed:bc:b4:38:46:83:10:26:
                    88:62:2f:cc:28:32:db:cc:eb:1f:7b:03:b3:03:4c:
                    f5:be:77:e9:fc:af:e7:6b:39:b1:5f:9f:b9:4c:2a:
                    34:d4:7d:bc:2b:0a:03:ca:0a:fe:a0:0d:37:de:9c:
                    64:17:24:4d:91:f6:8b:c0:f1:87:72:c3:1d:5c:ee:
                    88:a7:df:a0:3c:df:33:c1:07:95:3c:3b:3c:63:fb:
                    4a:37:3c:59:c4:27:c1:d0:a6:54:cd:c3:28:73:ba:
                    34:36:30:4f:e1:11:e9:84:a3:b8:43:aa:29:be:01:
                    47:c6:ce:a7:6e:86:28:ae:43:87:f0:e1:b9:72:34:
                    0c:5e:43:67:32:6f:48:a5:7b:6f:87:43:40:0f:ad:
                    2f:86:e2:ad:8c:e5:de:6e:c6:d9:c0:3c:76:f2:db:
                    58:9c:cd:ae:26:c1:88:43:e7:ff:04:e5:db:61:35:
                    d0:b4:46:16:5b:f2:18:13:66:63:44:d7:4d:ac:05:
                    67:dc:8e:50:cc:82:8a:4e:30:1f:f6:74:7a:ad:63:
                    78:9f:24:98:cd:dc:ee:38:0a:11:d6:1e:8d:8c:b9:
                    28:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:5A:B0:6B:75:CC:60:CC:D0:DA:1C:79:F3:96:2B:07:3C:81:2F:91
            X509v3 Authority Key Identifier:
                keyid:7E:36:AB:1C:04:43:21:B7:4C:F6:78:26:3E:05:24:FD:34:17:9B:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148D01/E92519FA990B11EBA355CB53C4F9AE02/fjarHARDIbdM9ngmPgUk_TQXm70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjarHARDIbdM9ngmPgUk_TQXm70.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148D01/E92519FA990B11EBA355CB53C4F9AE02/fjarHARDIbdM9ngmPgUk_TQXm70.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:b1:73:54:66:29:e3:2d:16:94:77:3b:4d:02:77:b5:05:18:
         d6:c2:c1:17:60:17:4f:0a:08:6c:8f:1f:9e:c1:2c:b9:78:94:
         8a:fa:08:1b:fc:40:e0:e5:8b:9d:14:7b:d3:fe:6e:15:74:8a:
         28:c4:f8:5b:4a:7f:74:73:f6:21:b7:72:d4:3f:9d:ac:83:f8:
         85:ca:b0:80:99:5d:70:1f:18:ee:4c:6c:c0:20:2e:7b:b1:7a:
         55:4b:cd:88:55:7c:f0:94:7a:82:9b:b4:90:83:aa:00:a7:8c:
         3f:bc:1b:92:6e:2a:29:b3:27:6f:5d:d9:fc:0d:4e:29:9f:76:
         8b:af:a2:ee:70:d9:15:29:5d:8c:78:a3:d5:ac:d9:d8:5b:96:
         0c:11:63:82:50:c8:00:a2:54:2a:84:15:40:7b:08:b7:fb:75:
         6b:30:e4:08:4c:ef:5c:5e:b7:3e:95:f5:24:35:6b:96:14:71:
         03:9c:d8:a5:f3:e5:37:87:c4:a3:95:d6:18:7a:01:50:2b:de:
         02:65:81:5e:a2:c0:f2:80:c7:b8:04:f7:4e:6c:c7:23:e4:ba:
         96:05:48:e1:94:5a:cb:bb:7a:05:ed:0f:78:8a:f5:b6:00:58:
         e3:c0:6e:71:79:49:3b:97:9a:ba:5c:78:44:8a:42:72:d1:e8:
         3f:94:96:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 13:56:54 2026 by rpki-client