Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.mft
File:                     fFt0FOPMgEBZvKhsxRY6B0PkHIU.mft (raw, json)
Hash identifier:          4gIkA2PoAzOznqZqZoGxpmaYvnLz8OnuR2GIysnSuI8=
Subject key identifier:   A5:9F:A0:47:BA:E1:17:D2:FC:FC:8F:44:42:D3:12:23:0F:17:24:F0
Authority key identifier: 7C:5B:74:14:E3:CC:80:40:59:BC:A8:6C:C5:16:3A:07:43:E4:1C:85
Certificate issuer:       /CN=A9194D56/serialNumber=7C5B7414E3CC804059BCA86CC5163A0743E41C85
Certificate serial:       2417
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFt0FOPMgEBZvKhsxRY6B0PkHIU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.mft
Manifest number:          23F2
Signing time:             Sat 04 Apr 2026 15:44:52 +0000
Manifest this update:     Sat 04 Apr 2026 15:44:52 +0000
Manifest next update:     Sat 11 Apr 2026 15:44:52 +0000
Files and hashes:         1: fFt0FOPMgEBZvKhsxRY6B0PkHIU.crl (hash: PpdLU41TygyLn2wpPdkTO/NO5x3gaQDNKy1Vl/u/La8=)
                          2: AD8187A41FF511ED8DD6D661C4F9AE02.roa (hash: qLDoFJBL4tjU3a5+OgqcUODZnGFeDhknY5OqvsDbWxk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.crl
                          rsync://rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFt0FOPMgEBZvKhsxRY6B0PkHIU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 15:44:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9239 (0x2417)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194D56, serialNumber=7C5B7414E3CC804059BCA86CC5163A0743E41C85
        Validity
            Not Before: Apr  4 15:44:52 2026 GMT
            Not After : Apr 11 15:44:52 2026 GMT
        Subject: CN=69d131f4-9b68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:cd:44:ec:b9:41:03:17:a4:e1:fb:b1:ca:05:
                    f4:44:c6:46:d3:be:93:3d:26:2f:84:2e:9d:7f:fe:
                    c7:e5:00:62:c7:8b:ed:59:3a:e4:8a:e8:05:91:78:
                    dc:93:ad:40:de:31:ca:7f:d2:53:1f:cc:8e:d6:4c:
                    20:47:08:2e:31:6f:3d:98:94:cd:6f:93:ce:bf:34:
                    09:40:e4:c5:12:59:44:74:e2:b2:c5:33:e9:4c:4b:
                    71:55:3a:b1:e1:4b:f1:88:1c:20:64:38:04:23:38:
                    20:7e:fb:26:55:a2:55:aa:b7:e8:d5:2c:82:6c:24:
                    e6:f8:08:7e:11:a6:aa:75:9d:54:0a:83:6e:cf:13:
                    77:63:98:13:83:72:ce:ff:ee:a6:8f:a4:04:12:53:
                    8b:fb:4e:5e:e0:18:03:2e:65:78:e1:0d:b4:05:e7:
                    1d:36:16:4f:b3:62:25:ee:17:86:11:ec:3a:6c:bc:
                    9b:c5:4d:a7:02:23:3d:6a:41:32:a3:2c:dd:80:8f:
                    e9:a0:9b:06:5a:3d:56:e6:42:0f:1e:6c:31:3f:db:
                    b2:7c:1a:79:92:db:75:31:4b:f4:a9:d7:6a:e2:f1:
                    7c:1f:a7:af:96:bb:eb:a4:1a:a9:a5:b4:c3:27:77:
                    71:ed:90:41:09:7f:21:20:2e:96:a5:d0:de:54:3a:
                    27:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:9F:A0:47:BA:E1:17:D2:FC:FC:8F:44:42:D3:12:23:0F:17:24:F0
            X509v3 Authority Key Identifier:
                keyid:7C:5B:74:14:E3:CC:80:40:59:BC:A8:6C:C5:16:3A:07:43:E4:1C:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFt0FOPMgEBZvKhsxRY6B0PkHIU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:a9:15:ed:d0:8b:d5:01:33:91:00:56:2a:e2:83:bd:6f:7b:
         23:c5:45:76:16:5c:2e:42:a7:4f:1b:b1:08:f7:dc:e5:8d:64:
         bd:d2:5b:96:03:aa:55:b8:64:72:23:91:2a:e8:28:76:6e:ee:
         3a:f7:97:60:d7:13:4d:c5:8d:fa:e4:ec:82:0f:6d:63:c0:2b:
         ab:a2:1d:c0:8f:d8:25:e6:d3:78:f7:9f:d1:a3:e5:ae:d7:8d:
         49:86:c5:d7:f9:13:63:6b:58:dc:42:af:88:7a:1d:75:dd:d9:
         bc:3e:a0:6c:f6:4d:62:2d:f4:a5:bf:42:99:02:1c:67:c2:06:
         27:6d:a3:4a:ef:0e:15:39:8b:44:94:7a:d5:61:70:4f:b1:3a:
         43:0e:c0:03:3a:e7:eb:85:8d:6c:60:1b:55:00:5c:d9:47:0c:
         d6:57:46:d4:fc:cd:31:06:27:c8:ec:12:d8:9c:55:e6:e8:7b:
         ec:75:32:9b:17:60:b8:e4:b4:e0:29:00:5e:45:a6:9b:40:7b:
         a0:4e:ca:03:d4:f6:78:5d:ea:9c:4d:17:63:12:99:cb:66:4b:
         44:d2:9a:7c:96:82:a3:34:1d:cd:b8:de:30:11:70:60:19:54:
         98:fd:2f:32:b6:f8:f3:b5:1c:51:71:3a:cc:28:c7:55:da:20:
         41:62:cd:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:49:02 2026 by rpki-client