Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.mft
File:                     FfB_78oF6EbUU4USXou0J3WDAPk.mft (raw, json)
Hash identifier:          9I7tyvqNmkTFtDiN64xGS9IbQO9lrcNaknG6bGoj8kg=
Subject key identifier:   1F:A5:F8:76:2B:5A:7A:78:98:4E:B8:B8:E5:B3:CB:C7:16:A4:5E:0E
Authority key identifier: 15:F0:7F:EF:CA:05:E8:46:D4:53:85:12:5E:8B:B4:27:75:83:00:F9
Certificate issuer:       /CN=A91503BB/serialNumber=15F07FEFCA05E846D45385125E8BB427758300F9
Certificate serial:       0C5E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfB_78oF6EbUU4USXou0J3WDAPk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.mft
Manifest number:          0C54
Signing time:             Sat 04 Apr 2026 18:32:08 +0000
Manifest this update:     Sat 04 Apr 2026 18:32:08 +0000
Manifest next update:     Sat 11 Apr 2026 18:32:08 +0000
Files and hashes:         1: FfB_78oF6EbUU4USXou0J3WDAPk.crl (hash: A1hUOqr3UCBDMFdjO9hCgSYI1KgKX+M/QgrQMFQ6vLQ=)
                          2: FC90C520213411EA8D675645C4F9AE02.roa (hash: wRh3N1lkasKdB1iov51RXGczR9sD9duj3/LCNc3iLBY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.crl
                          rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfB_78oF6EbUU4USXou0J3WDAPk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 18:32:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3166 (0xc5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91503BB, serialNumber=15F07FEFCA05E846D45385125E8BB427758300F9
        Validity
            Not Before: Apr  4 18:32:08 2026 GMT
            Not After : Apr 11 18:32:08 2026 GMT
        Subject: CN=69d15928-b7b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:0a:b1:5b:59:6b:20:37:c7:70:38:2a:9a:72:
                    e6:13:04:fb:59:c2:8c:f8:31:88:96:33:94:00:cd:
                    56:33:61:e6:b2:9e:7d:ae:dc:ae:10:da:49:f3:31:
                    78:97:8d:89:42:1e:ed:0f:5b:f0:2a:59:68:2a:df:
                    1e:2a:10:38:a7:70:c7:9f:46:3d:d1:87:c0:8e:e1:
                    0b:23:de:fa:0f:3b:c2:2f:dd:2c:69:3e:64:91:a3:
                    f7:70:db:03:ef:02:da:ee:16:6b:a6:63:04:f3:8f:
                    d3:d9:e3:31:4d:4b:8c:43:75:41:3b:4e:b0:ab:3b:
                    28:9d:d5:b2:7b:ee:87:1f:95:98:9c:b5:7d:35:ac:
                    f4:01:74:fb:66:0e:03:6a:b1:66:55:0b:21:6b:41:
                    c2:3e:21:58:ed:d3:dc:51:5c:c3:bb:c0:94:a2:62:
                    52:ce:f5:1b:fb:60:95:10:b3:db:6a:1e:77:cd:0a:
                    94:90:71:6c:3e:62:8d:74:82:5f:dc:26:fb:ae:80:
                    5e:e8:97:2f:45:26:43:63:bc:1b:48:af:98:df:19:
                    2a:ed:a3:f7:b2:82:05:ae:f1:ba:74:3e:b4:2c:2f:
                    38:1f:70:ce:ef:eb:ac:84:65:47:43:a3:5d:64:aa:
                    58:40:85:2f:e4:77:e3:0d:94:59:5b:29:9f:95:2a:
                    8d:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:A5:F8:76:2B:5A:7A:78:98:4E:B8:B8:E5:B3:CB:C7:16:A4:5E:0E
            X509v3 Authority Key Identifier:
                keyid:15:F0:7F:EF:CA:05:E8:46:D4:53:85:12:5E:8B:B4:27:75:83:00:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfB_78oF6EbUU4USXou0J3WDAPk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:87:2a:a2:e0:e0:78:68:f2:12:aa:aa:0d:ab:3a:e0:5c:86:
         c0:e0:73:af:b1:cd:f9:61:2a:b9:72:0c:72:d7:8a:83:a6:19:
         80:d8:99:52:89:fc:6e:0a:c1:2c:cc:73:90:8d:5c:f4:b5:2f:
         b7:71:68:d6:c7:b3:72:81:87:13:25:03:52:2b:04:c5:e0:db:
         05:9d:83:1f:c2:c7:ab:e6:34:c9:ca:85:92:86:09:f2:88:51:
         b9:59:61:39:9f:ce:ac:56:da:19:3e:7a:3c:9a:e9:87:22:f1:
         86:08:b7:17:e1:93:0b:00:72:f9:93:5a:2f:63:b4:9e:5d:45:
         00:76:0d:83:c1:fc:9b:d4:49:49:ed:07:dc:d9:de:dc:42:84:
         91:a5:fa:93:a1:68:32:5e:a4:a5:27:63:41:06:e1:e6:35:d7:
         19:e3:88:ab:2a:c0:1f:67:b7:04:3f:5d:31:ef:a2:c1:28:03:
         aa:9c:d3:4d:d8:3e:22:4c:35:e6:e3:d8:a9:b0:c0:2b:ab:6a:
         c9:2b:a5:b0:f7:73:83:3e:e6:2a:75:e1:6b:1f:02:1e:fb:09:
         45:6d:cf:0a:e0:50:fc:e9:61:fb:42:82:85:97:b9:ce:0f:67:
         24:81:8e:4e:c8:60:dc:77:ef:6f:bf:55:94:92:14:d6:e3:81:
         df:13:f4:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 14:33:11 2026 by rpki-client