Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.mft
File:                     fuDGoot1n3LV3JpYlQOLurlKhhQ.mft (raw, json)
Hash identifier:          pCQB/dxS5yjeQQ/d7wfBzFbYu2oL9FtYX5ZoIeaZwAU=
Subject key identifier:   0C:D1:68:4C:8E:FD:66:E9:05:24:59:37:A2:14:70:37:EF:1D:F3:92
Authority key identifier: 7E:E0:C6:A2:8B:75:9F:72:D5:DC:9A:58:95:03:8B:BA:B9:4A:86:14
Certificate issuer:       /CN=A918AF08/serialNumber=7EE0C6A28B759F72D5DC9A5895038BBAB94A8614
Certificate serial:       0D51
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuDGoot1n3LV3JpYlQOLurlKhhQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.mft
Manifest number:          0D2B
Signing time:             Tue 28 Apr 2026 18:12:00 +0000
Manifest this update:     Tue 28 Apr 2026 18:11:59 +0000
Manifest next update:     Tue 05 May 2026 18:11:59 +0000
Files and hashes:         1: fuDGoot1n3LV3JpYlQOLurlKhhQ.crl (hash: PW2/4XQDkD5PzOTBPBdaYE0o+uO403hJTz7U3b2k4XE=)
                          2: 6E2937E456EB11EA9025542FC4F9AE02.roa (hash: JhocKoCccMA3vQrzo7LGc9jkYoorBFiSlAta4V1eE2w=)
                          3: C434BE5682EC11EAB62A4C48C4F9AE02.roa (hash: XOn6do/nmyrh8Ty5V7AmhisjkU0+Ozjx/oaV3hsloeE=)
                          4: 85521A14F2B911ECB45D2B31C4F9AE02.roa (hash: 0XzV3YxpevpkAbrm2thArWiU/3me0U85ULLJun5S+0s=)
                          5: C3A5D7A482EC11EAB62A4C48C4F9AE02.roa (hash: BsXGlLY4wS2bk2uF1XlDccW5fXft/Gdljkkqp72tseo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.crl
                          rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuDGoot1n3LV3JpYlQOLurlKhhQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 05 May 2026 18:11:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3409 (0xd51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918AF08, serialNumber=7EE0C6A28B759F72D5DC9A5895038BBAB94A8614
        Validity
            Not Before: Apr 28 18:11:59 2026 GMT
            Not After : May  5 18:11:59 2026 GMT
        Subject: CN=69f0f86f-e964
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:98:b2:cb:d5:eb:9a:97:c3:1f:3d:bf:d4:5a:
                    19:44:b5:95:6f:58:52:fb:54:82:a5:2e:34:0a:36:
                    da:07:1c:18:5e:3d:67:65:9b:e5:69:6b:ee:66:14:
                    49:25:49:e8:7d:d3:e7:eb:f6:ba:23:0d:5e:aa:b4:
                    3d:28:22:30:80:28:f4:5f:63:ed:6b:b5:61:57:ec:
                    c2:6e:a3:42:64:26:48:6d:18:40:40:c0:aa:1e:fb:
                    97:11:50:f0:41:ce:ee:ed:9f:4c:fb:1d:47:07:37:
                    f9:86:37:91:16:7f:82:bd:a5:95:38:f7:10:4f:da:
                    15:ad:b5:b2:40:92:05:ef:4f:7a:79:b3:05:e5:bf:
                    c0:e7:aa:82:94:de:bb:bb:05:44:ee:05:dd:27:ea:
                    b7:49:94:2e:84:c0:e0:1b:3d:57:4a:b3:86:3b:9e:
                    f0:87:4b:bb:71:ca:a7:bd:87:73:91:9b:89:3d:64:
                    a8:9b:78:1c:b4:cc:bb:32:82:8a:1e:e4:2a:b7:d9:
                    eb:9d:12:a4:aa:79:88:f5:77:b9:1e:db:77:85:b1:
                    de:8d:53:0b:9b:59:d7:71:47:c3:3f:74:5f:ef:bd:
                    5e:25:71:12:55:6c:43:87:12:58:24:02:46:5f:63:
                    65:b3:be:49:cf:83:c1:20:d6:6b:dd:2c:cd:ce:25:
                    8d:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:D1:68:4C:8E:FD:66:E9:05:24:59:37:A2:14:70:37:EF:1D:F3:92
            X509v3 Authority Key Identifier:
                keyid:7E:E0:C6:A2:8B:75:9F:72:D5:DC:9A:58:95:03:8B:BA:B9:4A:86:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuDGoot1n3LV3JpYlQOLurlKhhQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:ba:18:be:7a:4a:35:09:d9:12:f8:03:7e:ab:ec:16:79:1f:
         a3:27:7a:ee:58:67:ae:d6:dd:8e:ee:a0:c0:05:e0:5b:4f:40:
         73:53:e8:06:f3:00:b1:5e:d8:2f:7a:81:45:7d:3c:88:38:0a:
         77:0a:fb:2f:a2:fa:37:d5:ce:4e:e7:ad:70:44:f0:e4:19:0a:
         a0:7a:07:5a:5a:d0:13:56:80:a3:9b:a5:a0:eb:71:31:aa:b8:
         06:c0:7d:a2:56:7f:70:f9:dc:62:8d:55:f0:cf:89:df:e3:3c:
         fa:aa:2d:bc:ce:8a:b7:2e:e5:3a:5f:af:26:62:3f:40:1f:70:
         59:a3:eb:e8:b3:fc:ef:ef:e9:1c:ad:b9:7d:42:bd:26:79:a4:
         62:2c:66:d2:33:f6:88:7a:ae:70:5d:69:2d:5b:00:66:b8:42:
         f0:19:6f:77:3f:b1:b3:69:a7:11:cc:d6:20:96:fb:99:fb:b1:
         67:dd:a6:3a:bf:37:91:db:b8:c6:22:75:96:9b:4e:f6:72:01:
         19:11:5e:02:43:66:23:de:53:f9:0e:c5:60:13:8b:37:bf:65:
         e8:ef:a2:25:ab:87:09:f8:88:60:f2:44:a5:7e:bb:05:3c:33:
         6a:ff:a6:cf:a4:1c:09:18:c3:a8:89:2c:95:60:52:7a:c7:7a:
         a3:45:03:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 16:03:50 2026 by rpki-client