Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.mft
File:                     FN2GhClPGzOjE6-48OuhyKADeAk.mft (raw, json)
Hash identifier:          hpdSlsZ/mr9dcmW6e8qePyDhlGeg4PSAgfaRsClz75M=
Subject key identifier:   7F:0D:5E:62:E4:78:19:6C:EE:10:68:3D:10:94:31:32:9F:A3:E8:16
Authority key identifier: 14:DD:86:84:29:4F:1B:33:A3:13:AF:B8:F0:EB:A1:C8:A0:03:78:09
Certificate issuer:       /CN=A9160A05/serialNumber=14DD8684294F1B33A313AFB8F0EBA1C8A0037809
Certificate serial:       0139
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FN2GhClPGzOjE6-48OuhyKADeAk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.mft
Manifest number:          0126
Signing time:             Sun 05 Apr 2026 05:09:26 +0000
Manifest this update:     Sun 05 Apr 2026 05:09:25 +0000
Manifest next update:     Sun 12 Apr 2026 05:09:25 +0000
Files and hashes:         1: FN2GhClPGzOjE6-48OuhyKADeAk.crl (hash: AJ57SYxxoEeSeEm6MY93DgGGwTf9aqbimMyH2LD0AV4=)
                          2: E9B0903AF38811EF81B8CE39C4F9AE02.roa (hash: SSKa739rT23rOpIYYisZx12/v/K7+nclE63wWrbXXlU=)
                          3: F7981812F38811EFAC05053AC4F9AE02.roa (hash: EK3pUqrH9H4fquoX1peOlD1L2xEfn/Ee2ouiE9JS3Uk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.crl
                          rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FN2GhClPGzOjE6-48OuhyKADeAk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 05:09:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 313 (0x139)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9160A05, serialNumber=14DD8684294F1B33A313AFB8F0EBA1C8A0037809
        Validity
            Not Before: Apr  5 05:09:25 2026 GMT
            Not After : Apr 12 05:09:25 2026 GMT
        Subject: CN=69d1ee86-5a8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:1e:d5:23:60:1a:79:d1:bf:e9:ba:af:8c:97:
                    ef:c1:22:73:77:d2:fe:fe:e7:2e:5a:d7:64:57:bd:
                    c5:44:33:93:52:0a:6c:73:05:c2:41:39:11:d7:72:
                    32:53:a5:e1:df:a4:d6:22:d8:da:dc:08:eb:30:6c:
                    58:19:78:2a:04:fe:12:49:f3:20:31:31:b3:03:1d:
                    8b:1c:26:83:39:b6:ab:07:ae:d3:c6:27:e1:64:7d:
                    5d:24:19:61:78:83:48:79:0f:1f:b3:cd:bb:2e:9a:
                    44:95:b3:5a:6e:ef:3d:d3:b1:d6:ab:27:88:88:9e:
                    07:ce:88:1e:73:47:f3:9e:f1:8b:be:71:8c:5b:04:
                    35:36:7f:12:08:13:dc:ae:94:72:49:ee:46:36:c9:
                    57:0e:64:36:95:72:a5:da:5e:b2:1f:bc:7a:55:b5:
                    64:66:b3:d2:bc:6e:62:86:9d:d0:59:f9:76:c4:89:
                    7c:f6:05:64:13:eb:f9:31:12:44:92:fc:56:e7:67:
                    09:44:85:bb:d3:c8:2c:cd:27:18:93:b3:38:8f:4f:
                    0d:ae:c1:3a:0a:20:7c:60:97:b5:0e:94:ce:47:be:
                    98:21:d5:26:db:e1:f4:20:6c:5b:98:86:04:48:0c:
                    30:90:bb:38:82:1c:99:ff:7f:f0:81:b7:d5:02:15:
                    bf:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:0D:5E:62:E4:78:19:6C:EE:10:68:3D:10:94:31:32:9F:A3:E8:16
            X509v3 Authority Key Identifier:
                keyid:14:DD:86:84:29:4F:1B:33:A3:13:AF:B8:F0:EB:A1:C8:A0:03:78:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FN2GhClPGzOjE6-48OuhyKADeAk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:33:e6:77:c9:b2:ea:c7:4e:d8:5d:46:f4:22:f9:66:3c:df:
         c7:83:90:9c:c1:d1:eb:e7:f5:9b:9e:1b:68:d1:ba:59:d3:80:
         f6:1f:fa:47:eb:3c:45:84:2a:ac:b7:da:67:e0:03:74:50:0d:
         59:bf:0d:a9:94:25:99:2b:6e:4d:99:81:d3:ee:18:da:6e:6b:
         e5:ae:93:aa:a0:c5:8d:41:db:9f:dd:59:62:fa:fd:29:d0:63:
         df:3b:5e:6c:6e:c9:50:df:40:64:b9:57:ac:5f:f7:5c:0a:cc:
         44:b4:0c:c8:50:4e:21:5c:f7:e3:46:35:74:9d:9f:d1:01:da:
         f5:9a:1a:3f:58:f3:a1:51:e6:cc:d5:6d:95:3e:0a:ce:23:ce:
         86:19:03:8c:6a:e6:8b:17:ca:3e:08:c5:40:9c:66:a0:75:a5:
         17:e9:91:a5:61:6d:db:71:a5:52:0e:d9:7d:d6:fd:41:3f:d4:
         18:07:84:c7:ef:4c:f5:df:3b:e8:ca:fc:66:63:81:cd:d7:c2:
         8e:53:8b:c0:31:dd:c6:f6:5e:89:3d:8a:14:bc:52:63:ca:e1:
         c6:23:98:f2:f9:f2:2e:ce:c6:e0:a4:9e:b2:96:99:69:a4:a1:
         5a:27:e7:c1:c2:44:83:7d:43:38:94:55:75:7c:13:53:dd:36:
         1e:59:4a:25
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICATkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjBBMDUxMTAvBgNVBAUTKDE0REQ4Njg0Mjk0RjFCMzNBMzEzQUZCOEYwRUJBMUM4
QTAwMzc4MDkwHhcNMjYwNDA1MDUwOTI1WhcNMjYwNDEyMDUwOTI1WjAYMRYwFAYD
VQQDEw02OWQxZWU4Ni01YThmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2h7VI2AaedG/6bqvjJfvwSJzd9L+/ucuWtdkV73FRDOTUgpscwXCQTkR13Iy
U6Xh36TWItja3AjrMGxYGXgqBP4SSfMgMTGzAx2LHCaDObarB67TxifhZH1dJBlh
eINIeQ8fs827LppElbNabu8907HWqyeIiJ4Hzogec0fznvGLvnGMWwQ1Nn8SCBPc
rpRySe5GNslXDmQ2lXKl2l6yH7x6VbVkZrPSvG5ihp3QWfl2xIl89gVkE+v5MRJE
kvxW52cJRIW708gszScYk7M4j08NrsE6CiB8YJe1DpTOR76YIdUm2+H0IGxbmIYE
SAwwkLs4ghyZ/3/wgbfVAhW/LwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH8NXmLk
eBls7hBoPRCUMTKfo+gWMB8GA1UdIwQYMBaAFBTdhoQpTxszoxOvuPDrocigA3gJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MEEwNS9EMTdDODg2ODdD
OEExMUVGOEZBQjY5MDlDNEY5QUUwMi9GTjJHaENsUEd6T2pFNi00OE91aHlLQURl
QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0ZOMkdoQ2xQR3pPakU2LTQ4T3VoeUtBRGVBay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MEEwNS9EMTdDODg2ODdDOEExMUVGOEZBQjY5MDlDNEY5QUUwMi9GTjJHaENsUEd6
T2pFNi00OE91aHlLQURlQWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOTPmd8my6sdO2F1G9CL5Zjzfx4OQnMHR6+f1m54baNG6WdOA9h/6R+s8RYQq
rLfaZ+ADdFANWb8NqZQlmStuTZmB0+4Y2m5r5a6TqqDFjUHbn91ZYvr9KdBj3zte
bG7JUN9AZLlXrF/3XArMRLQMyFBOIVz340Y1dJ2f0QHa9ZoaP1jzoVHmzNVtlT4K
ziPOhhkDjGrmixfKPgjFQJxmoHWlF+mRpWFt23GlUg7Zfdb9QT/UGAeEx+9M9d87
6Mr8ZmOBzdfCjlOLwDHdxvZeiT2KFLxSY8rhxiOY8vnyLs7G4KSespaZaaShWifn
wcJEg31DOJRVdXwTU902HllKJQ==
-----END CERTIFICATE-----
Generated at Mon Apr 6 15:15:56 2026 by rpki-client