Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.mft
File:                     fd2N3PFW56GBobc5eyTUIJY1Pdg.mft (raw, json)
Hash identifier:          mxYtxuAmx9Te/pvZ2+neE+A6L5L8ZmE0T/MO2XABZYI=
Subject key identifier:   A6:98:BF:A9:BE:9E:9E:66:9F:EB:97:AD:01:A9:0C:82:3A:35:6F:CA
Authority key identifier: 7D:DD:8D:DC:F1:56:E7:A1:81:A1:B7:39:7B:24:D4:20:96:35:3D:D8
Certificate issuer:       /CN=A91A55EC/serialNumber=7DDD8DDCF156E7A181A1B7397B24D42096353DD8
Certificate serial:       04F8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd2N3PFW56GBobc5eyTUIJY1Pdg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.mft
Manifest number:          04EF
Signing time:             Sat 04 Apr 2026 23:32:30 +0000
Manifest this update:     Sat 04 Apr 2026 23:32:30 +0000
Manifest next update:     Sat 11 Apr 2026 23:32:30 +0000
Files and hashes:         1: fd2N3PFW56GBobc5eyTUIJY1Pdg.crl (hash: tEL6FVTC5SZqCQnNyx1etbbTcedx7tmLDWVtfwuy3ag=)
                          2: 8E15FBF25CFF11ECB5477E0BC4F9AE02.roa (hash: YhHbcwgSJe/eTrJM48b57657xlLdX21AQDaMzj6Ijsg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.crl
                          rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd2N3PFW56GBobc5eyTUIJY1Pdg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 23:32:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1272 (0x4f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A55EC, serialNumber=7DDD8DDCF156E7A181A1B7397B24D42096353DD8
        Validity
            Not Before: Apr  4 23:32:30 2026 GMT
            Not After : Apr 11 23:32:30 2026 GMT
        Subject: CN=69d19f8e-9ed3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:06:bd:46:8b:fe:b3:e1:0d:5c:46:7c:cd:2a:
                    05:6a:52:b6:aa:b4:da:aa:bd:af:f9:fd:2d:5a:60:
                    f6:49:9f:f8:16:04:f9:eb:c4:3f:0e:34:1f:24:95:
                    cb:5a:b9:63:17:fc:10:56:a4:2c:f0:34:46:c9:e5:
                    dc:22:9e:05:65:10:36:53:76:7a:8b:bd:c8:af:35:
                    39:2b:dc:75:99:5a:7c:5a:30:cb:be:28:28:28:38:
                    a3:4c:7a:1f:ba:3e:80:28:95:34:70:52:ab:7c:16:
                    24:94:cc:79:31:89:c1:c0:cf:d4:1e:e6:71:eb:c3:
                    cd:36:c2:e3:b7:61:a5:ce:2f:18:58:27:89:56:c8:
                    57:50:a7:84:54:c1:71:72:d1:75:0f:cf:c5:64:20:
                    f3:90:00:40:dd:3b:b0:38:95:88:26:60:12:c3:89:
                    96:2c:30:19:78:ce:21:65:cc:18:05:9b:bd:7c:eb:
                    eb:31:5d:c0:ce:95:1e:6e:e0:ec:63:76:dc:90:d1:
                    73:f7:96:fa:42:c5:62:c2:79:10:76:8c:4e:e6:d3:
                    3c:24:37:df:f8:a1:8f:2c:03:d8:0c:2b:48:40:c7:
                    ab:14:9c:18:dc:80:aa:27:d6:a2:4e:7b:e8:d0:7f:
                    1c:9f:ef:f8:3e:e2:e4:48:21:45:12:46:20:b7:3b:
                    11:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:98:BF:A9:BE:9E:9E:66:9F:EB:97:AD:01:A9:0C:82:3A:35:6F:CA
            X509v3 Authority Key Identifier:
                keyid:7D:DD:8D:DC:F1:56:E7:A1:81:A1:B7:39:7B:24:D4:20:96:35:3D:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd2N3PFW56GBobc5eyTUIJY1Pdg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:63:e9:ba:45:9f:f7:dd:86:d2:5b:ed:4d:49:49:3d:c8:ec:
         57:ee:bd:d6:06:db:45:01:b7:b7:a2:d1:47:c4:9e:2b:67:cf:
         4b:f1:eb:71:c4:b0:9c:f7:08:6c:2d:32:57:00:a7:73:31:2a:
         c7:61:70:b0:59:30:d6:db:7c:d7:e3:fe:90:3f:26:db:f0:fb:
         27:41:14:3b:f7:3d:6f:5b:89:93:3e:37:67:41:41:a8:a3:7a:
         a3:23:e6:01:c9:8c:e1:24:7b:b5:8f:3f:17:e1:d6:c1:ba:86:
         4c:b4:e2:fd:db:0a:a8:73:0e:d2:f0:57:a1:5a:00:85:85:b5:
         83:97:70:9e:b2:64:fb:57:4e:19:4d:a9:60:5d:c3:08:90:fc:
         23:2c:d6:76:d7:7d:53:c5:3d:87:76:57:e8:64:47:b4:3a:1c:
         f0:db:6f:11:b7:6f:d1:47:c4:cd:3a:56:ab:a6:8a:dc:49:b8:
         17:a9:e8:cf:d6:50:41:94:28:07:e7:8b:5b:fd:6d:64:44:19:
         db:31:39:83:f6:d0:ab:1f:e1:64:53:39:1f:a9:48:12:c2:34:
         53:7a:9c:fb:66:1f:a1:f5:95:38:52:64:ce:a6:ad:d3:d7:d0:
         08:f7:84:e0:c4:55:0a:a1:5a:3b:62:ee:8d:67:c4:c4:ae:c6:
         bb:60:21:33
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU1RUMxMTAvBgNVBAUTKDdEREQ4RERDRjE1NkU3QTE4MUExQjczOTdCMjRENDIw
OTYzNTNERDgwHhcNMjYwNDA0MjMzMjMwWhcNMjYwNDExMjMzMjMwWjAYMRYwFAYD
VQQDEw02OWQxOWY4ZS05ZWQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjwa9Rov+s+ENXEZ8zSoFalK2qrTaqr2v+f0tWmD2SZ/4FgT568Q/DjQfJJXL
WrljF/wQVqQs8DRGyeXcIp4FZRA2U3Z6i73IrzU5K9x1mVp8WjDLvigoKDijTHof
uj6AKJU0cFKrfBYklMx5MYnBwM/UHuZx68PNNsLjt2Glzi8YWCeJVshXUKeEVMFx
ctF1D8/FZCDzkABA3TuwOJWIJmASw4mWLDAZeM4hZcwYBZu9fOvrMV3AzpUebuDs
Y3bckNFz95b6QsViwnkQdoxO5tM8JDff+KGPLAPYDCtIQMerFJwY3ICqJ9aiTnvo
0H8cn+/4PuLkSCFFEkYgtzsRlwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKaYv6m+
np5mn+uXrQGpDII6NW/KMB8GA1UdIwQYMBaAFH3djdzxVuehgaG3OXsk1CCWNT3Y
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTVFQy9ERjY1REU5MjU3
ODExMUVDQjY0ODdDNTRDNEY5QUUwMi9mZDJOM1BGVzU2R0JvYmM1ZXlUVUlKWTFQ
ZGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZkMk4zUEZXNTZHQm9iYzVleVRVSUpZMVBkZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NTVFQy9ERjY1REU5MjU3ODExMUVDQjY0ODdDNTRDNEY5QUUwMi9mZDJOM1BGVzU2
R0JvYmM1ZXlUVUlKWTFQZGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAWPpukWf992G0lvtTUlJPcjsV+691gbbRQG3t6LRR8SeK2fPS/HrccSwnPcI
bC0yVwCnczEqx2FwsFkw1tt81+P+kD8m2/D7J0EUO/c9b1uJkz43Z0FBqKN6oyPm
AcmM4SR7tY8/F+HWwbqGTLTi/dsKqHMO0vBXoVoAhYW1g5dwnrJk+1dOGU2pYF3D
CJD8IyzWdtd9U8U9h3ZX6GRHtDoc8NtvEbdv0UfEzTpWq6aK3Em4F6noz9ZQQZQo
B+eLW/1tZEQZ2zE5g/bQqx/hZFM5H6lIEsI0U3qc+2YfofWVOFJkzqat09fQCPeE
4MRVCqFaO2LujWfExK7Gu2AhMw==
-----END CERTIFICATE-----
Generated at Mon Apr 6 09:01:12 2026 by rpki-client