Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2F33/E6EC2D92809111EAABCDFF6CC4F9AE02/FOZzxKcds0p1aBNYfkghLaLnczA.mft
File:                     FOZzxKcds0p1aBNYfkghLaLnczA.mft (raw, json)
Hash identifier:          0okUbYTcvLjrO0ZTgVzOFc8waNJNAfAvLDtNaoFP2+4=
Subject key identifier:   6E:39:B8:0B:BE:39:68:26:57:49:F3:0D:E5:5F:CE:DE:3E:A2:34:DB
Authority key identifier: 14:E6:73:C4:A7:1D:B3:4A:75:68:13:58:7E:48:21:2D:A2:E7:73:30
Certificate issuer:       /CN=A91A2F33/serialNumber=14E673C4A71DB34A756813587E48212DA2E77330
Certificate serial:       0A94
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOZzxKcds0p1aBNYfkghLaLnczA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A2F33/E6EC2D92809111EAABCDFF6CC4F9AE02/FOZzxKcds0p1aBNYfkghLaLnczA.mft
Manifest number:          0A78
Signing time:             Thu 12 Mar 2026 19:21:10 +0000
Manifest this update:     Thu 12 Mar 2026 19:21:10 +0000
Manifest next update:     Thu 19 Mar 2026 19:21:10 +0000
Files and hashes:         1: FOZzxKcds0p1aBNYfkghLaLnczA.crl (hash: yUEjRYQ7aZ+Bzpo64oSUopIGFtfVEk+NjUfr99B6MU8=)
                          2: ED99CAA81DC411EF9E620C48C4F9AE02.roa (hash: aLRF4zBkBM2y6xKpL1GC5YHsO0D4qoPC3jE5KWFvB9s=)
                          3: 344644CC1DC511EF95607948C4F9AE02.roa (hash: zF+J5zFh1poif0hGxgEuq8x4MHnVNaCe2reoxnvlkL0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A2F33/E6EC2D92809111EAABCDFF6CC4F9AE02/FOZzxKcds0p1aBNYfkghLaLnczA.crl
                          rsync://rpki.apnic.net/member_repository/A91A2F33/E6EC2D92809111EAABCDFF6CC4F9AE02/FOZzxKcds0p1aBNYfkghLaLnczA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOZzxKcds0p1aBNYfkghLaLnczA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Mar 2026 19:21:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2708 (0xa94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A2F33, serialNumber=14E673C4A71DB34A756813587E48212DA2E77330
        Validity
            Not Before: Mar 12 19:21:10 2026 GMT
            Not After : Mar 19 19:21:10 2026 GMT
        Subject: CN=69b31226-6d6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2e:bb:e6:e1:01:31:90:6e:ab:01:06:0e:38:
                    b6:35:e8:85:1c:ca:e4:30:73:67:83:56:07:49:c6:
                    78:b7:be:6c:63:a1:ab:02:3c:7c:60:69:7b:cc:5c:
                    c4:77:db:2f:ad:bd:59:c8:1a:71:b5:79:5f:a5:a4:
                    f4:0b:e9:b1:39:8d:3b:15:c5:c3:11:d2:91:cc:d8:
                    d3:79:09:0c:ff:fc:3f:dd:e1:9a:4a:63:dc:5a:43:
                    1b:48:a1:e2:9a:2c:33:fc:1e:c9:18:de:99:89:1b:
                    7a:d6:f3:99:5d:14:d2:9a:58:39:0d:de:85:c0:9c:
                    4f:59:22:b8:07:9b:df:ef:ed:12:f0:85:8a:fb:12:
                    60:83:6a:4c:f0:9c:0f:b6:d1:83:7f:b3:6a:3a:45:
                    f2:78:e3:d5:97:5b:77:e5:ef:4e:7c:38:5b:19:7a:
                    9d:8f:49:f2:3a:e1:45:d9:3a:28:a9:ca:22:bf:b0:
                    3d:77:a4:2d:30:1d:f1:0d:3f:61:0c:84:63:82:c8:
                    df:d4:d2:cf:be:88:9c:68:a3:5f:d2:01:c6:2f:3d:
                    33:bd:c0:c4:e4:ac:2f:3d:ad:68:f1:2b:28:6f:20:
                    27:39:23:e6:48:95:d7:92:f7:e2:70:d2:f0:5a:83:
                    6b:b6:c8:b2:3d:a5:1a:07:5a:14:c6:3d:b4:fc:fd:
                    a9:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:39:B8:0B:BE:39:68:26:57:49:F3:0D:E5:5F:CE:DE:3E:A2:34:DB
            X509v3 Authority Key Identifier:
                keyid:14:E6:73:C4:A7:1D:B3:4A:75:68:13:58:7E:48:21:2D:A2:E7:73:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A2F33/E6EC2D92809111EAABCDFF6CC4F9AE02/FOZzxKcds0p1aBNYfkghLaLnczA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOZzxKcds0p1aBNYfkghLaLnczA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2F33/E6EC2D92809111EAABCDFF6CC4F9AE02/FOZzxKcds0p1aBNYfkghLaLnczA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:71:25:49:0f:5e:ac:bf:db:ae:44:46:01:29:47:9e:e6:1d:
         05:09:ab:c0:6b:db:fb:45:00:95:3c:ce:1c:96:6a:6e:bb:ac:
         79:36:cc:dc:25:eb:4f:6f:78:50:26:e6:45:e5:2d:87:a4:f5:
         a7:34:80:10:27:ba:5f:96:d0:8b:95:fe:ea:d6:d6:70:09:8b:
         f3:39:7c:19:fd:0e:5f:56:88:cb:53:fd:ed:35:49:43:4a:ef:
         ae:0d:25:33:9b:88:f9:1d:df:9c:cc:b0:00:31:da:0c:97:36:
         bf:8b:1e:3b:fe:91:99:eb:33:3a:b4:02:98:76:70:27:e5:d5:
         74:72:09:14:bf:d1:0c:3e:02:96:cd:62:db:84:ef:f0:66:55:
         e5:b9:12:47:e2:d6:00:a9:3b:40:c9:fa:bd:e2:b7:43:7f:f8:
         73:cf:68:7b:7f:c7:2d:5c:56:ff:cc:c1:96:3b:1e:97:29:dd:
         1d:19:56:95:f5:3a:dd:b0:51:2e:2d:ad:d0:8b:db:e6:b7:20:
         2a:3b:be:fb:62:c5:9b:97:76:4f:55:60:bd:4f:2f:d7:22:9f:
         14:57:0d:d2:5f:77:5c:d1:c4:e5:d6:fd:bf:dc:39:37:0a:29:
         97:87:91:ba:cb:3e:29:31:88:09:02:32:c6:fd:40:79:85:f7:
         f9:53:04:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 00:07:10 2026 by rpki-client