Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C93EE/6858F6880E0211EAA9B1DB65C4F9AE02/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.mft
File:                     _Fbn4Hb3_QqEvsycPiKRQqCQH-w.mft (raw, json)
Hash identifier:          7/+msMZDnZF5pOj5xfGgrxBAA8aHa3jHaZgLLNsS8p0=
Subject key identifier:   57:DE:ED:A8:EB:EE:F3:91:9F:53:42:87:9F:AA:F5:C2:90:FE:CD:6C
Authority key identifier: FC:56:E7:E0:76:F7:FD:0A:84:BE:CC:9C:3E:22:91:42:A0:90:1F:EC
Certificate issuer:       /CN=A91C93EE/serialNumber=FC56E7E076F7FD0A84BECC9C3E229142A0901FEC
Certificate serial:       0D3A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C93EE/6858F6880E0211EAA9B1DB65C4F9AE02/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.mft
Manifest number:          0CFB
Signing time:             Sat 04 Apr 2026 18:18:09 +0000
Manifest this update:     Sat 04 Apr 2026 18:18:09 +0000
Manifest next update:     Sat 11 Apr 2026 18:18:09 +0000
Files and hashes:         1: _Fbn4Hb3_QqEvsycPiKRQqCQH-w.crl (hash: /SZ607jYDL1gAjAPZdkGjhYA+QMcCzHSA8N9e8qcS1k=)
                          2: 34E6B680511A11F0B256FA65C4F9AE02.roa (hash: STPsoHykGH883jZd7PHWkCRzW28Vwl2tuDcKNWuClEM=)
                          3: B256D8FC479711F09A25BE59C4F9AE02.roa (hash: GxHO9vhkZZ6yMHc2121mln0db/uLLdFiDdhvsMD2Mh4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C93EE/6858F6880E0211EAA9B1DB65C4F9AE02/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.crl
                          rsync://rpki.apnic.net/member_repository/A91C93EE/6858F6880E0211EAA9B1DB65C4F9AE02/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 18:18:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3386 (0xd3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C93EE, serialNumber=FC56E7E076F7FD0A84BECC9C3E229142A0901FEC
        Validity
            Not Before: Apr  4 18:18:09 2026 GMT
            Not After : Apr 11 18:18:09 2026 GMT
        Subject: CN=69d155e1-f5da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e4:ca:c5:0b:08:1e:25:35:77:d9:0b:d9:ca:
                    42:0f:dc:e6:2c:c2:4e:e7:97:c7:7c:b9:cb:80:af:
                    96:08:0b:4c:30:8e:7c:c0:1a:ff:b7:a8:0d:23:fc:
                    29:23:82:52:a1:0a:d8:89:1e:cf:c3:f5:e6:b1:bf:
                    03:86:bc:0e:10:c6:3c:7a:7e:75:fc:2f:a4:ec:87:
                    de:2d:2a:27:69:3d:1a:69:4b:33:f0:60:80:d8:73:
                    50:77:ff:08:d3:a9:5e:c0:b0:eb:05:65:04:a0:b5:
                    16:c5:00:70:b7:75:cf:ec:76:09:c8:19:17:3e:f6:
                    47:8e:9e:ff:b6:74:67:52:b7:3b:79:fb:92:bf:05:
                    c9:fd:a5:cc:6a:7c:3c:05:f2:07:a1:55:4b:b7:7b:
                    a1:86:30:7d:c7:f5:70:96:37:83:b9:74:bd:39:65:
                    3a:1c:7e:66:15:aa:97:33:dc:12:e4:18:c7:0e:6b:
                    0a:76:a8:79:ec:92:6c:2f:02:d9:28:cf:a3:1e:a4:
                    96:53:8a:7e:3d:a9:3a:a1:f2:8e:54:40:bb:dd:a6:
                    0e:f6:0f:56:1a:d6:2f:df:08:f5:eb:84:43:35:64:
                    0f:53:36:44:8f:62:66:14:a8:13:1e:b4:c7:2b:27:
                    0d:65:46:91:6e:a6:75:d0:a3:1a:36:2c:78:d7:93:
                    f0:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:DE:ED:A8:EB:EE:F3:91:9F:53:42:87:9F:AA:F5:C2:90:FE:CD:6C
            X509v3 Authority Key Identifier:
                keyid:FC:56:E7:E0:76:F7:FD:0A:84:BE:CC:9C:3E:22:91:42:A0:90:1F:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C93EE/6858F6880E0211EAA9B1DB65C4F9AE02/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C93EE/6858F6880E0211EAA9B1DB65C4F9AE02/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:4b:0e:39:d7:99:50:32:46:c9:59:6e:54:22:1c:80:3a:7a:
         b8:af:8a:72:a9:64:b0:e9:4e:96:aa:8e:d1:e0:c8:30:23:c0:
         5b:0a:60:ca:87:71:3a:4c:2e:af:cc:b9:19:f9:78:5e:43:56:
         aa:1c:6b:9c:f5:7c:a3:00:5a:6e:52:52:39:e3:ac:18:02:6d:
         ec:d2:eb:77:2d:b0:99:54:0b:6f:5d:2c:7c:10:25:37:49:13:
         6e:80:d9:60:7c:23:8f:14:a0:bb:fa:91:2b:46:70:13:9e:1a:
         7e:fc:98:a1:ff:0d:07:f9:7d:dd:12:5c:43:ab:29:d3:68:73:
         8d:e0:8d:f8:f0:dc:1f:e4:1f:f0:ff:4d:6f:06:69:d2:74:d6:
         81:a0:d8:f0:60:5e:1f:aa:26:4c:5b:8f:b4:1c:f5:1e:9e:30:
         e1:61:0b:e5:fe:46:93:66:5b:51:dd:35:dc:b3:8d:f0:34:b4:
         21:2d:31:f6:6a:be:54:31:90:a8:03:d3:14:6e:86:d2:0b:24:
         c5:22:76:ea:36:8c:c9:32:61:f1:ad:a2:79:4a:30:f5:c0:16:
         4f:87:f9:3e:21:d8:61:0f:7d:87:69:f3:1f:3d:26:e5:25:27:
         4b:be:ed:cf:2e:0f:66:43:0d:da:01:bb:5c:da:99:4d:11:21:
         6d:a3:c8:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:53:18 2026 by rpki-client