Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/FMR1z9KLd-wRUsLvM-XkPhdawiE.mft
File:                     FMR1z9KLd-wRUsLvM-XkPhdawiE.mft (raw, json)
Hash identifier:          86uwltyYl4a9Hcv7hpH3SJbt8rMZhIHA1Ov5erZMcX4=
Subject key identifier:   58:65:D8:FD:45:16:43:D5:47:A7:B7:8E:F9:1B:CA:78:6F:16:3F:8F
Authority key identifier: 14:C4:75:CF:D2:8B:77:EC:11:52:C2:EF:33:E5:E4:3E:17:5A:C2:21
Certificate issuer:       /CN=A9180542/serialNumber=14C475CFD28B77EC1152C2EF33E5E43E175AC221
Certificate serial:       01C8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FMR1z9KLd-wRUsLvM-XkPhdawiE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/FMR1z9KLd-wRUsLvM-XkPhdawiE.mft
Manifest number:          14DA
Signing time:             Sat 04 Apr 2026 17:42:16 +0000
Manifest this update:     Sat 04 Apr 2026 17:42:16 +0000
Manifest next update:     Sat 11 Apr 2026 17:42:16 +0000
Files and hashes:         1: FMR1z9KLd-wRUsLvM-XkPhdawiE.crl (hash: 8U2qb03GRLDo5QjuJR4qOw8GRh0Q9raZKKYR61wAlxs=)
                          2: 07F7821E890011EEB1D8307EC4F9AE02.roa (hash: fvj++6M7rEoXfV45KCd4g5IJLFJO2MhegvYujkZMWic=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/FMR1z9KLd-wRUsLvM-XkPhdawiE.crl
                          rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/FMR1z9KLd-wRUsLvM-XkPhdawiE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FMR1z9KLd-wRUsLvM-XkPhdawiE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 17:42:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 456 (0x1c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180542, serialNumber=14C475CFD28B77EC1152C2EF33E5E43E175AC221
        Validity
            Not Before: Apr  4 17:42:16 2026 GMT
            Not After : Apr 11 17:42:16 2026 GMT
        Subject: CN=69d14d78-4924
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5d:69:07:87:32:84:f5:c7:99:2b:57:cb:c5:
                    11:a8:e9:10:8b:d7:8f:a4:23:a4:47:08:e3:d3:79:
                    e7:86:59:ba:91:bc:6f:d8:ed:34:3e:5c:f0:e3:7e:
                    0b:a1:fd:c0:67:aa:40:1e:44:8d:5c:51:07:8f:09:
                    3a:6b:f2:4c:93:72:a6:a3:97:ea:6d:9c:7c:62:8e:
                    b2:e4:41:0c:a1:83:c4:ea:c7:ec:10:c8:5b:47:a0:
                    f7:51:c3:5c:2d:84:15:12:00:af:7e:4f:fe:c4:b5:
                    03:ed:1d:a8:22:8e:d2:d5:90:56:6f:22:de:21:cb:
                    1e:4a:61:7e:70:c1:f4:02:c2:39:33:f3:76:d9:66:
                    7a:46:3c:41:f1:b1:28:7f:14:25:27:94:4d:d0:16:
                    79:24:1b:44:2c:f8:07:52:79:3b:0f:7d:f1:92:e9:
                    17:f7:cd:f2:c7:44:89:4a:2a:a2:60:eb:7f:f0:3e:
                    d0:b3:67:d2:40:f8:fc:d3:7c:73:91:51:0d:43:a6:
                    ac:bf:53:9b:e1:ca:00:2d:78:fb:11:bd:f7:94:46:
                    56:7d:f2:4c:00:ac:a7:a0:1c:78:b5:3a:67:f4:86:
                    56:3a:cc:df:05:b4:30:c3:4b:dd:a7:89:c1:76:a4:
                    f2:16:e1:8b:22:2b:ad:80:ae:13:6b:2b:b5:0c:e9:
                    01:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:65:D8:FD:45:16:43:D5:47:A7:B7:8E:F9:1B:CA:78:6F:16:3F:8F
            X509v3 Authority Key Identifier:
                keyid:14:C4:75:CF:D2:8B:77:EC:11:52:C2:EF:33:E5:E4:3E:17:5A:C2:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/FMR1z9KLd-wRUsLvM-XkPhdawiE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FMR1z9KLd-wRUsLvM-XkPhdawiE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/FMR1z9KLd-wRUsLvM-XkPhdawiE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:5e:98:fc:44:35:d3:3a:8c:62:50:a2:81:70:6a:c6:59:44:
         90:48:17:15:e4:76:ad:ac:bf:ce:e3:96:54:44:06:82:76:5f:
         c4:bc:cb:fe:eb:af:1d:d2:69:c9:2f:e4:01:fe:53:7a:55:2f:
         97:5b:6d:b9:5a:15:cb:f7:3d:4b:5c:f9:a1:0e:48:f2:07:4b:
         2b:14:2d:d6:7a:43:8b:77:c8:76:34:3e:9b:98:d0:c3:72:a7:
         12:82:9f:0c:2a:5a:c2:83:73:a3:54:79:4a:22:d4:41:50:6c:
         70:72:b7:d5:d3:6e:b6:03:b4:09:8a:ee:aa:34:ff:53:82:5f:
         5e:fd:47:0c:d9:46:3d:e9:ac:68:f5:a3:a3:ed:86:14:81:13:
         e2:c1:aa:d2:7c:e5:ec:e1:45:c8:82:5b:e4:a1:11:9d:71:86:
         38:11:94:5a:91:38:d8:1d:55:b6:16:95:b1:e7:97:87:76:ff:
         a4:1d:6b:5c:cd:fa:cf:a5:f1:44:46:bc:36:ef:70:ea:f7:93:
         a0:58:f5:c5:a8:8a:3f:40:e3:67:30:0e:5e:f0:9b:dc:3d:9b:
         3d:a6:85:60:b7:35:88:e8:ea:11:b1:7d:27:8b:08:12:71:98:
         41:01:c0:c3:e6:18:05:21:71:d0:3b:8d:a5:bd:25:e7:02:0a:
         72:e6:33:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 14:13:55 2026 by rpki-client