Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192B84/0FB4DF9C5BA011EF91D30E5EC4F9AE02/-Fr9bnRbCjR8ppbujrwWfQikT1Y.mft
File:                     -Fr9bnRbCjR8ppbujrwWfQikT1Y.mft (raw, json)
Hash identifier:          8fufKFTO/3MnXOytBDXmwx/R6UBdvzsUD7ANYFRSRhI=
Subject key identifier:   FA:51:02:68:7B:1A:47:13:BB:49:AB:91:22:03:43:5A:A9:16:12:22
Authority key identifier: F8:5A:FD:6E:74:5B:0A:34:7C:A6:96:EE:8E:BC:16:7D:08:A4:4F:56
Certificate issuer:       /CN=A9192B84/serialNumber=F85AFD6E745B0A347CA696EE8EBC167D08A44F56
Certificate serial:       013D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Fr9bnRbCjR8ppbujrwWfQikT1Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192B84/0FB4DF9C5BA011EF91D30E5EC4F9AE02/-Fr9bnRbCjR8ppbujrwWfQikT1Y.mft
Manifest number:          0132
Signing time:             Sat 21 Mar 2026 04:34:07 +0000
Manifest this update:     Sat 21 Mar 2026 04:34:06 +0000
Manifest next update:     Sat 28 Mar 2026 04:34:06 +0000
Files and hashes:         1: -Fr9bnRbCjR8ppbujrwWfQikT1Y.crl (hash: sh4Ay5p7/MefyV2rVA/h3lHf6xnqYH0arrpwkqOepUg=)
                          2: A1F4D8F6ABF111F0AC423B0DC4F9AE02.roa (hash: MyEqbG5p3sxkSR55sby3+cu91j0S0JWZ2I4F2Mc+W3Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192B84/0FB4DF9C5BA011EF91D30E5EC4F9AE02/-Fr9bnRbCjR8ppbujrwWfQikT1Y.crl
                          rsync://rpki.apnic.net/member_repository/A9192B84/0FB4DF9C5BA011EF91D30E5EC4F9AE02/-Fr9bnRbCjR8ppbujrwWfQikT1Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Fr9bnRbCjR8ppbujrwWfQikT1Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Mar 2026 04:34:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 317 (0x13d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192B84, serialNumber=F85AFD6E745B0A347CA696EE8EBC167D08A44F56
        Validity
            Not Before: Mar 21 04:34:06 2026 GMT
            Not After : Mar 28 04:34:06 2026 GMT
        Subject: CN=69be1fbe-319f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:9e:aa:9a:57:49:b0:1d:e1:dc:6a:67:62:57:
                    3d:ca:f6:9d:d9:f8:55:62:ef:24:40:ba:09:f4:51:
                    eb:c5:e3:68:dd:d5:79:63:9b:96:e0:60:18:26:52:
                    88:6d:6c:c1:6e:dd:e8:b6:ae:5d:39:98:54:e2:4d:
                    c6:1d:52:46:9d:e6:4f:da:5d:a8:92:c4:26:e4:09:
                    21:94:6f:3f:97:5b:f6:c7:9d:59:e5:a9:22:2f:68:
                    05:92:1f:eb:fe:f4:7e:65:16:6d:5c:4a:e4:20:c0:
                    01:da:d8:9e:84:a2:4c:92:b8:5d:56:c6:69:b9:e6:
                    e5:10:da:c8:ad:1f:9e:64:80:15:d3:89:51:ef:c3:
                    7f:bf:89:32:be:a9:b6:f2:69:de:d0:bb:d1:96:dd:
                    ad:e4:81:1d:8b:6a:4c:74:d3:3a:e0:b4:ff:cb:8f:
                    cd:1b:50:ad:96:ba:b8:7e:b0:32:1f:66:52:b7:9b:
                    c4:9e:1a:26:c4:6f:3f:65:29:64:1d:57:86:e7:d3:
                    36:4f:f9:66:9c:98:ca:61:0d:a1:2d:0f:87:f2:af:
                    09:df:bc:50:2e:1f:27:00:17:c3:11:a6:36:e6:86:
                    53:dd:e5:9c:28:0f:8b:78:5a:19:23:47:73:14:63:
                    d8:84:85:54:58:12:d8:de:c4:a8:78:17:18:a2:1f:
                    1c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:51:02:68:7B:1A:47:13:BB:49:AB:91:22:03:43:5A:A9:16:12:22
            X509v3 Authority Key Identifier:
                keyid:F8:5A:FD:6E:74:5B:0A:34:7C:A6:96:EE:8E:BC:16:7D:08:A4:4F:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192B84/0FB4DF9C5BA011EF91D30E5EC4F9AE02/-Fr9bnRbCjR8ppbujrwWfQikT1Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Fr9bnRbCjR8ppbujrwWfQikT1Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192B84/0FB4DF9C5BA011EF91D30E5EC4F9AE02/-Fr9bnRbCjR8ppbujrwWfQikT1Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:0d:2d:88:fd:0c:24:ed:88:1d:3a:0d:46:b2:66:ad:67:d4:
         14:92:2d:b9:74:29:80:3d:74:ee:1a:b2:01:23:44:22:63:c7:
         f4:93:96:23:df:1b:b4:f0:58:fe:73:6a:3b:4d:93:df:f0:37:
         d9:4d:3a:ae:50:33:44:2f:d7:38:97:94:aa:98:07:68:56:58:
         9a:64:19:f0:4e:36:06:08:a3:49:64:50:fc:78:e3:00:17:6e:
         e6:1f:8c:7c:e5:8c:24:5d:e5:61:ab:49:dc:08:99:9e:55:99:
         9c:00:23:99:89:e0:68:a7:77:f6:88:4c:50:1c:8a:6c:1d:fc:
         a1:c8:64:af:04:eb:15:e6:98:48:df:fb:24:09:34:3a:36:f4:
         23:bb:59:d1:e8:2e:a9:e5:a9:12:6b:71:51:94:65:90:2c:40:
         9a:8b:61:3a:d4:88:eb:f3:a5:0a:c4:e9:08:2c:5e:83:a3:fe:
         3d:40:20:de:9b:a1:0a:49:40:5a:4b:6e:2a:53:a3:0c:83:a1:
         c2:a8:bb:8f:1a:b4:d6:57:56:83:b2:45:b9:88:d3:c7:1d:88:
         57:60:b5:40:5a:31:bf:e6:8c:1d:41:57:0f:bf:38:9e:a7:13:
         0e:80:47:27:b1:48:88:55:06:47:f2:0c:4c:52:db:87:6a:c3:
         4d:1c:35:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 23:43:50 2026 by rpki-client