Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.mft
File:                     fSPnXBDfZXG-rBfzVV4bmYOBQiU.mft (raw, json)
Hash identifier:          m1DcC9S/vzIq4cwUxKgDrUUHgrF2Idaym/1F2etIQMA=
Subject key identifier:   DF:B1:F1:9A:25:2F:CB:D3:D6:26:A9:95:A5:42:3D:06:13:F8:B9:25
Authority key identifier: 7D:23:E7:5C:10:DF:65:71:BE:AC:17:F3:55:5E:1B:99:83:81:42:25
Certificate issuer:       /CN=A91C6BF0/serialNumber=7D23E75C10DF6571BEAC17F3555E1B9983814225
Certificate serial:       0249
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSPnXBDfZXG-rBfzVV4bmYOBQiU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.mft
Manifest number:          10E2
Signing time:             Sat 04 Apr 2026 17:35:47 +0000
Manifest this update:     Sat 04 Apr 2026 17:35:47 +0000
Manifest next update:     Sat 11 Apr 2026 17:35:47 +0000
Files and hashes:         1: fSPnXBDfZXG-rBfzVV4bmYOBQiU.crl (hash: rBzDA32FZgMSYE1ZlzecddJ3eKdVyijUZEGZe6fF7Xw=)
                          2: 329274C4D31611EEA7F0475FC4F9AE02.roa (hash: LPlQvyP4GbUm5RG5ECEhvL2ZjD88OXS223O3hIeCkik=)
                          3: C81D36F6BEDC11F0AF08E624C4F9AE02.roa (hash: Tkxg3E9zZ6oNMWL2MvDhktoFqNUlB3qfA8SouJ2KXDk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.crl
                          rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSPnXBDfZXG-rBfzVV4bmYOBQiU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 17:35:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 585 (0x249)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6BF0, serialNumber=7D23E75C10DF6571BEAC17F3555E1B9983814225
        Validity
            Not Before: Apr  4 17:35:47 2026 GMT
            Not After : Apr 11 17:35:47 2026 GMT
        Subject: CN=69d14bf3-2925
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:da:1a:6c:95:91:b2:1b:0b:d8:6d:4a:64:2c:
                    43:a8:db:0d:df:a6:72:33:71:c2:04:c2:98:db:00:
                    f4:f1:54:07:2a:c1:5b:7b:6c:09:cf:8a:80:9d:c0:
                    39:09:da:73:35:53:3b:69:be:16:9a:55:7c:8a:58:
                    bb:7f:3f:55:da:f4:71:6d:b9:fb:d3:f1:51:03:d3:
                    9c:35:da:be:ba:cf:83:5f:1c:80:41:14:40:50:fb:
                    14:0d:27:80:09:8c:10:94:f6:52:ea:0d:89:9b:80:
                    92:05:75:b9:e9:5d:ff:14:f4:bb:64:51:03:40:37:
                    7b:dd:22:d7:71:b0:16:14:10:e4:95:53:d0:77:88:
                    bd:c8:66:65:bb:4c:f4:eb:41:64:67:38:14:ab:42:
                    02:1b:d2:f5:16:c0:29:c4:f2:c4:ce:3e:87:8d:09:
                    79:53:1f:52:0c:aa:89:a5:41:54:4b:af:d5:c9:bb:
                    73:2a:a0:93:63:54:2c:bb:8d:db:70:ff:ca:ee:5d:
                    5a:6e:c3:3c:d3:95:cb:53:95:8f:a0:4b:1c:4d:63:
                    24:7a:08:f7:5d:0f:fa:45:2d:84:9b:1a:55:76:5e:
                    70:77:5b:1b:ff:fa:47:ba:28:4d:cd:60:27:bf:b3:
                    9e:b0:1f:fe:83:25:b2:e4:54:a2:02:47:9b:df:2d:
                    17:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:B1:F1:9A:25:2F:CB:D3:D6:26:A9:95:A5:42:3D:06:13:F8:B9:25
            X509v3 Authority Key Identifier:
                keyid:7D:23:E7:5C:10:DF:65:71:BE:AC:17:F3:55:5E:1B:99:83:81:42:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSPnXBDfZXG-rBfzVV4bmYOBQiU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:0e:55:cb:b2:57:4c:66:ae:3c:d0:a8:30:c2:94:de:cf:43:
         c2:ba:a4:99:1e:cb:c5:f7:38:18:a7:35:44:0b:46:ba:4f:bd:
         fe:23:78:70:7a:17:b7:27:c6:a0:16:3e:b6:1c:7a:8a:2d:b1:
         fa:06:73:66:0b:1f:82:7d:86:26:16:24:41:ab:b4:06:21:fe:
         4e:57:0b:77:63:84:f5:7e:65:e1:81:f7:7e:20:4d:e6:2a:e7:
         41:2e:7d:11:26:6a:c9:0e:46:44:e9:7e:d3:a3:2f:8e:05:a9:
         6b:47:c9:0c:8e:aa:20:87:98:3b:fc:09:f5:99:1d:8b:05:50:
         b8:8b:84:34:c4:52:fa:10:80:d5:9e:e1:9b:8b:d2:3c:47:ca:
         34:46:fa:ee:39:86:a4:1b:5b:34:75:18:95:cd:9d:41:2e:45:
         b7:e1:9e:83:74:2e:d9:34:52:87:b5:ef:84:6c:10:f7:c3:ef:
         8b:a9:3a:b6:92:6f:1d:b6:e6:01:56:33:37:e7:76:57:c3:d2:
         cd:1f:76:73:5b:3a:0a:8d:43:be:42:7b:a0:5e:fd:3b:56:07:
         8f:a0:d2:d2:fb:74:67:01:11:1d:13:9b:de:0f:f9:36:2c:09:
         9d:2b:84:05:5a:f5:4d:a6:f6:88:ad:80:52:09:cc:17:64:1e:
         88:29:e5:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:58:01 2026 by rpki-client