Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.mft
File:                     Fx7dP3eF4PU4VW-e8mvtcWaejYw.mft (raw, json)
Hash identifier:          +dMwiD1aQB5ZFTmkCP8vHhzMCsHIkTWrXLjqBK7kvGM=
Subject key identifier:   FF:84:1A:23:5D:E9:63:22:1F:67:E8:6B:19:35:DD:91:19:B4:95:A8
Authority key identifier: 17:1E:DD:3F:77:85:E0:F5:38:55:6F:9E:F2:6B:ED:71:66:9E:8D:8C
Certificate issuer:       /CN=A9186363/serialNumber=171EDD3F7785E0F538556F9EF26BED71669E8D8C
Certificate serial:       010C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fx7dP3eF4PU4VW-e8mvtcWaejYw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.mft
Manifest number:          0104
Signing time:             Fri 17 Apr 2026 05:49:24 +0000
Manifest this update:     Fri 17 Apr 2026 05:49:24 +0000
Manifest next update:     Fri 24 Apr 2026 05:49:24 +0000
Files and hashes:         1: Fx7dP3eF4PU4VW-e8mvtcWaejYw.crl (hash: 9CJn0LPefG9c5TargfCbslMZ8ZnT59S90Y23VWzdpfA=)
                          2: 0FFCC5E8AFAE11EFAC818674C4F9AE02.roa (hash: 3nD9LInONQ51DGwH1Bk1CRRWQxIMYRaBTzihhmaQ14w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.crl
                          rsync://rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fx7dP3eF4PU4VW-e8mvtcWaejYw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:49:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 268 (0x10c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186363, serialNumber=171EDD3F7785E0F538556F9EF26BED71669E8D8C
        Validity
            Not Before: Apr 17 05:49:24 2026 GMT
            Not After : Apr 24 05:49:24 2026 GMT
        Subject: CN=69e1c9e4-b265
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:1b:f9:0f:50:e6:f6:59:26:b1:82:ad:78:72:
                    bd:d9:4a:fb:0d:2a:44:93:8d:5e:a8:a4:14:25:87:
                    7b:55:a6:e8:01:5f:9d:c4:af:94:74:a4:8e:87:ee:
                    5f:7e:1c:e9:eb:96:7c:90:ab:cf:c9:88:24:74:62:
                    5a:7e:3a:6b:32:f8:84:60:fb:23:72:b7:95:60:20:
                    d4:96:eb:21:57:b9:61:22:f5:22:31:28:9f:e6:92:
                    6c:e8:1e:97:38:a7:e8:0a:e0:81:bc:a3:2a:47:c9:
                    36:2b:3c:49:a1:fe:83:81:fc:1c:0c:f6:f4:ab:3f:
                    25:92:2f:09:c7:ba:a0:73:41:eb:84:86:4f:fa:af:
                    4d:05:9d:34:c3:b0:94:0d:b5:99:d5:76:cb:8c:78:
                    dc:2a:bc:ed:27:31:34:15:cf:58:36:50:de:d2:ba:
                    f3:75:b7:14:e2:d7:12:43:a8:58:bd:8e:8e:82:61:
                    70:93:d3:46:ca:f6:d5:78:58:32:70:f8:bb:0b:55:
                    1c:af:21:db:59:93:19:59:65:88:b5:fe:5c:f1:e4:
                    39:63:e9:6b:08:e8:ca:b1:ef:a8:29:88:2b:59:39:
                    8c:0f:40:98:5e:19:9e:cf:da:6f:1e:35:76:5a:1c:
                    01:6f:81:50:63:b1:cb:22:e7:de:48:e4:71:7f:92:
                    fc:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:84:1A:23:5D:E9:63:22:1F:67:E8:6B:19:35:DD:91:19:B4:95:A8
            X509v3 Authority Key Identifier:
                keyid:17:1E:DD:3F:77:85:E0:F5:38:55:6F:9E:F2:6B:ED:71:66:9E:8D:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fx7dP3eF4PU4VW-e8mvtcWaejYw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:3f:bb:5a:81:18:00:ea:3b:12:42:c1:db:50:fa:0e:01:57:
         a1:e2:40:09:68:ad:7b:b1:18:41:8e:d6:b8:d0:cd:e3:0e:20:
         3a:66:06:88:c3:32:65:0d:d6:e9:d2:28:bb:54:1e:2c:d5:3f:
         8b:08:e2:5e:39:1f:0f:ba:b9:cb:2e:4c:ee:58:cf:33:f7:2f:
         18:f3:f8:f6:58:8d:6e:cd:51:de:6e:19:4f:1f:b3:68:f0:58:
         5f:2d:ae:8a:19:17:41:2f:fb:85:53:97:3c:2d:46:30:7e:05:
         b0:5d:d5:7d:cf:56:3f:14:fa:7f:60:8d:f5:8f:b3:7e:dd:ab:
         59:1f:57:ae:9b:af:b6:59:75:fe:ad:4d:fa:27:41:06:3a:cf:
         76:8d:e5:ef:db:0f:c0:b9:dd:09:fc:f7:a6:21:93:8b:f6:cb:
         78:1b:1c:ff:e3:43:58:de:f4:9d:2f:7b:32:68:a8:34:fc:24:
         44:d1:ec:07:a9:1c:0c:b0:80:18:61:17:17:13:d2:d4:2e:de:
         70:4f:d0:a0:69:a5:36:20:12:b0:6c:d6:94:88:83:48:59:48:
         fb:cc:4a:63:92:ff:df:eb:01:70:51:46:0f:50:3b:de:78:c1:
         22:b1:c6:99:fe:d0:e0:d3:bf:4a:55:05:b3:d4:01:91:6b:83:
         57:9a:a7:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 21:04:19 2026 by rpki-client