Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/FEfUS0n3kG3GNzGl2Y2FLsELd0U.mft
File:                     FEfUS0n3kG3GNzGl2Y2FLsELd0U.mft (raw, json)
Hash identifier:          KDWYagyIVY9LnLlD73SKW6rwmezM9tmz2CrD1H0ktEs=
Subject key identifier:   FB:09:45:EA:AA:A3:6B:CE:9C:B1:A0:8E:CA:F2:F3:EE:A9:B4:E9:28
Authority key identifier: 14:47:D4:4B:49:F7:90:6D:C6:37:31:A5:D9:8D:85:2E:C1:0B:77:45
Certificate issuer:       /CN=A9173CF2/serialNumber=1447D44B49F7906DC63731A5D98D852EC10B7745
Certificate serial:       0706
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEfUS0n3kG3GNzGl2Y2FLsELd0U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/FEfUS0n3kG3GNzGl2Y2FLsELd0U.mft
Manifest number:          06FE
Signing time:             Sat 28 Mar 2026 21:53:02 +0000
Manifest this update:     Sat 28 Mar 2026 21:53:01 +0000
Manifest next update:     Sat 04 Apr 2026 21:53:01 +0000
Files and hashes:         1: FEfUS0n3kG3GNzGl2Y2FLsELd0U.crl (hash: wVQOsBZDMTY98W3LexW9cAMKqN3mIKVBygtCcCLenEg=)
                          2: D9E7CFF681EF11EBAEE9D17AC4F9AE02.roa (hash: dTa5Sv3QyKZeyYh7kTFM/PjTqogHVEan9r70oy/WWU0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/FEfUS0n3kG3GNzGl2Y2FLsELd0U.crl
                          rsync://rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/FEfUS0n3kG3GNzGl2Y2FLsELd0U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEfUS0n3kG3GNzGl2Y2FLsELd0U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 04 Apr 2026 21:53:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1798 (0x706)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173CF2, serialNumber=1447D44B49F7906DC63731A5D98D852EC10B7745
        Validity
            Not Before: Mar 28 21:53:01 2026 GMT
            Not After : Apr  4 21:53:01 2026 GMT
        Subject: CN=69c84dbe-2ec6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:2a:44:31:4a:c7:84:83:3b:34:13:ee:7d:79:
                    90:a6:85:fd:59:df:a5:08:78:b2:23:ed:2b:78:ba:
                    ac:42:63:9d:fa:85:51:7f:17:3c:2d:df:b3:f3:80:
                    45:09:f8:bd:f8:99:98:cc:53:f8:5b:7a:87:6d:fb:
                    21:09:ab:95:9d:0c:03:b9:39:64:13:52:c8:80:e4:
                    a7:a3:20:1e:40:81:ce:df:2b:08:03:55:c8:37:41:
                    f8:9c:81:af:20:8e:94:88:30:77:10:68:13:f6:95:
                    12:52:d5:c4:e1:74:cb:cf:2d:b7:fd:52:53:18:f2:
                    e6:79:2b:27:ec:ad:a5:26:1d:a6:6e:b3:bf:60:31:
                    3f:e6:6a:77:3a:a9:e0:fe:5b:ff:57:45:c0:53:91:
                    ee:d5:77:41:2f:fa:e5:1a:f6:d9:ae:e4:c0:f5:a8:
                    27:e5:3b:9c:ac:3a:26:65:af:37:33:f0:06:25:d1:
                    18:51:71:0a:66:4a:72:7d:27:71:a2:94:51:24:1a:
                    1d:e4:11:22:d9:9b:f5:77:6d:5e:be:55:af:d3:f8:
                    4d:b8:a1:bf:b3:44:be:37:b8:cf:95:f2:86:ff:cd:
                    e2:8d:d6:95:42:1e:29:21:83:52:44:80:af:16:87:
                    9e:c6:8e:f7:00:6e:ae:8e:c6:78:38:07:06:5d:e1:
                    01:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:09:45:EA:AA:A3:6B:CE:9C:B1:A0:8E:CA:F2:F3:EE:A9:B4:E9:28
            X509v3 Authority Key Identifier:
                keyid:14:47:D4:4B:49:F7:90:6D:C6:37:31:A5:D9:8D:85:2E:C1:0B:77:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/FEfUS0n3kG3GNzGl2Y2FLsELd0U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEfUS0n3kG3GNzGl2Y2FLsELd0U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/FEfUS0n3kG3GNzGl2Y2FLsELd0U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:12:60:c7:ac:bf:88:ab:08:f6:c7:c3:2d:ba:fe:f8:0f:f8:
         67:c7:8c:b5:d1:e2:64:26:d3:58:15:d2:63:5d:e7:7a:71:d6:
         bf:06:f7:4c:27:d3:04:55:b4:d0:20:bc:18:3e:18:48:73:f7:
         ab:8b:fe:2b:c6:20:14:44:f6:db:e2:52:88:3a:f0:9b:79:94:
         8c:d9:0b:73:cd:6d:ec:22:83:f9:72:7d:fa:03:d7:fc:5c:e4:
         4c:3e:eb:b1:3a:f9:29:c3:d6:61:11:1d:75:8f:1f:24:37:21:
         05:c7:b1:a8:23:b1:33:68:8b:e2:25:95:a0:c1:08:50:43:c5:
         8f:ba:4a:26:5b:4f:5a:d7:ac:db:b6:98:49:d4:bb:2c:13:a9:
         92:38:7d:e7:1d:b6:ca:f2:9c:7e:da:4b:5c:48:88:cb:95:55:
         1d:cf:21:bf:e2:44:31:c1:55:8f:a1:82:a7:fb:93:cb:14:f5:
         48:1e:45:55:64:a6:55:6c:d3:76:58:66:82:aa:f7:4a:de:55:
         6c:9e:11:ef:df:a4:ae:a4:5c:24:24:e8:e4:b6:b3:d4:57:66:
         91:51:24:ed:78:fa:b6:7d:db:27:06:51:3a:d6:1a:fc:b3:4a:
         49:c6:7f:ba:50:54:84:ba:46:cc:69:e2:a0:df:c0:94:a8:85:
         63:cf:f2:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 23:42:49 2026 by rpki-client