Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/fF4N3E9YaXR7KjWMm3wPMejY3Ys.mft
File:                     fF4N3E9YaXR7KjWMm3wPMejY3Ys.mft (raw, json)
Hash identifier:          Mr1Iln8yDRVwRYrCAlzRADjezGgrrXMm0kkoSp6DCMg=
Subject key identifier:   AF:FB:2C:BC:A9:41:CB:A6:AD:2E:4C:32:58:84:4E:AC:C6:62:12:E0
Authority key identifier: 7C:5E:0D:DC:4F:58:69:74:7B:2A:35:8C:9B:7C:0F:31:E8:D8:DD:8B
Certificate issuer:       /CN=A91CFCF8/serialNumber=7C5E0DDC4F5869747B2A358C9B7C0F31E8D8DD8B
Certificate serial:       04A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fF4N3E9YaXR7KjWMm3wPMejY3Ys.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/fF4N3E9YaXR7KjWMm3wPMejY3Ys.mft
Manifest number:          0487
Signing time:             Mon 27 Apr 2026 00:03:54 +0000
Manifest this update:     Mon 27 Apr 2026 00:03:54 +0000
Manifest next update:     Mon 04 May 2026 00:03:54 +0000
Files and hashes:         1: fF4N3E9YaXR7KjWMm3wPMejY3Ys.crl (hash: Y74URv9S95dFsDPgCP64+lWD0Bdi9G7GJ90+kK5b9K0=)
                          2: 13A285FAB19A11EF8A0E4356C4F9AE02.roa (hash: /1zPPqOprES64oKSnzNIO7onohzBHekwOoaFlHoU8GU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/fF4N3E9YaXR7KjWMm3wPMejY3Ys.crl
                          rsync://rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/fF4N3E9YaXR7KjWMm3wPMejY3Ys.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fF4N3E9YaXR7KjWMm3wPMejY3Ys.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 04 May 2026 00:03:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1186 (0x4a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CFCF8, serialNumber=7C5E0DDC4F5869747B2A358C9B7C0F31E8D8DD8B
        Validity
            Not Before: Apr 27 00:03:54 2026 GMT
            Not After : May  4 00:03:54 2026 GMT
        Subject: CN=69eea7ea-88f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:0b:ef:7e:ba:65:06:0f:18:c4:2d:bf:9c:e0:
                    01:7e:86:eb:4b:9a:2b:c7:c7:a9:4c:77:31:d0:1e:
                    96:b9:40:7d:b8:59:68:ee:70:81:57:79:d4:8c:c2:
                    a4:16:dc:4e:c1:a3:91:dc:61:05:8b:c2:c1:4a:8b:
                    6f:af:5b:77:ef:55:88:e3:aa:45:88:20:af:57:26:
                    e3:db:f1:9a:cb:d5:ae:12:23:f2:95:b7:f1:14:8c:
                    aa:3f:ab:20:b0:bf:eb:e0:f3:49:42:3f:fb:04:6f:
                    e2:01:e1:de:35:1a:2f:bc:25:ab:7f:22:dc:e7:f5:
                    db:41:0b:01:eb:2a:9b:94:82:a4:c9:90:29:97:3c:
                    7f:bd:52:d0:fe:99:b4:ae:ef:92:c4:4c:bb:10:cf:
                    6d:e7:c4:fa:0a:7b:6b:1f:08:46:82:1b:da:d0:31:
                    1b:5b:18:e3:5d:06:2e:5d:48:26:69:65:e5:db:9e:
                    df:35:28:e1:64:3f:88:9e:fa:4d:b5:14:be:af:57:
                    1c:99:c1:4c:89:04:9a:43:9d:63:b9:84:aa:f8:8e:
                    e5:96:7e:06:7c:c4:ab:fe:13:37:15:51:c0:e8:8d:
                    3e:dd:fc:82:82:49:db:7c:29:88:0b:81:03:3d:eb:
                    4f:df:ea:75:8a:03:e5:0e:df:4d:d6:1d:e8:ef:5c:
                    ba:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:FB:2C:BC:A9:41:CB:A6:AD:2E:4C:32:58:84:4E:AC:C6:62:12:E0
            X509v3 Authority Key Identifier:
                keyid:7C:5E:0D:DC:4F:58:69:74:7B:2A:35:8C:9B:7C:0F:31:E8:D8:DD:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/fF4N3E9YaXR7KjWMm3wPMejY3Ys.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fF4N3E9YaXR7KjWMm3wPMejY3Ys.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/fF4N3E9YaXR7KjWMm3wPMejY3Ys.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:6d:99:14:bb:c1:39:47:78:41:29:10:ad:b4:8a:8c:15:79:
         74:90:00:78:90:37:c2:cd:37:0a:7b:c6:32:13:b7:09:fd:74:
         3d:21:4f:14:76:57:7d:ff:46:50:24:89:5e:af:ce:e0:c6:2f:
         9e:e5:6f:bd:1a:5d:90:2f:27:7b:24:aa:52:8b:6b:55:89:77:
         57:ff:94:60:ba:ef:8b:80:3b:3a:06:bf:32:5d:2a:f8:7c:81:
         25:ff:45:3d:7f:03:7b:b1:0f:d6:ec:9c:6e:72:ca:14:84:a8:
         41:45:4b:3e:72:38:41:02:4e:6c:96:48:34:e1:65:e3:2a:7f:
         44:a8:6f:82:30:c4:61:09:b5:8a:43:f5:19:d8:85:4a:4b:b7:
         0c:22:38:70:87:11:66:05:10:8a:86:ae:71:37:b7:95:f1:72:
         a3:0c:63:e4:12:5d:92:08:c8:9b:e0:b5:a2:e1:b4:21:60:98:
         bc:6a:57:9c:17:da:70:06:46:19:3b:aa:86:cf:65:93:3a:90:
         65:34:44:2e:1f:f8:2a:6c:f2:d4:a0:78:5c:72:d1:0f:bd:97:
         7b:e8:49:80:87:ea:ed:ff:bf:3d:46:43:fe:d8:00:7b:b9:54:
         ff:fb:bd:7b:10:74:eb:ab:96:3f:1e:65:d6:18:34:7a:ac:a2:
         f1:65:6b:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 13:07:40 2026 by rpki-client