Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4B86/9306A2C4F7E311EF8ADA8A41C4F9AE02/FNWtJyKsqGrTTw-aNEcmy2aYCDE.mft
File:                     FNWtJyKsqGrTTw-aNEcmy2aYCDE.mft (raw, json)
Hash identifier:          JQzHMpajExYpqJ7KZ47+n8YhPKTFbVc1dfYNcBzoKmU=
Subject key identifier:   38:47:49:92:AD:E4:65:AD:58:D8:EF:BB:FA:22:42:E9:8F:C7:89:36
Authority key identifier: 14:D5:AD:27:22:AC:A8:6A:D3:4F:0F:9A:34:47:26:CB:66:98:08:31
Certificate issuer:       /CN=A91E4B86/serialNumber=14D5AD2722ACA86AD34F0F9A344726CB66980831
Certificate serial:       D3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FNWtJyKsqGrTTw-aNEcmy2aYCDE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4B86/9306A2C4F7E311EF8ADA8A41C4F9AE02/FNWtJyKsqGrTTw-aNEcmy2aYCDE.mft
Manifest number:          D0
Signing time:             Sun 05 Apr 2026 06:09:36 +0000
Manifest this update:     Sun 05 Apr 2026 06:09:35 +0000
Manifest next update:     Sun 12 Apr 2026 06:09:35 +0000
Files and hashes:         1: FNWtJyKsqGrTTw-aNEcmy2aYCDE.crl (hash: GU3Avjc0XBDFHCUN3WndGmiJdrtXUVqbq0pPgLnPksc=)
                          2: E2D9B7A6B32611F0BE8DF029C4F9AE02.roa (hash: E3Ke3Xy/6Z8DXkSqpxZkye2OZYgZjF6Qzh75z3050z8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4B86/9306A2C4F7E311EF8ADA8A41C4F9AE02/FNWtJyKsqGrTTw-aNEcmy2aYCDE.crl
                          rsync://rpki.apnic.net/member_repository/A91E4B86/9306A2C4F7E311EF8ADA8A41C4F9AE02/FNWtJyKsqGrTTw-aNEcmy2aYCDE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FNWtJyKsqGrTTw-aNEcmy2aYCDE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 06:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 211 (0xd3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4B86, serialNumber=14D5AD2722ACA86AD34F0F9A344726CB66980831
        Validity
            Not Before: Apr  5 06:09:35 2026 GMT
            Not After : Apr 12 06:09:35 2026 GMT
        Subject: CN=69d1fca0-f7cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:37:96:de:64:01:67:22:04:bf:9c:4e:42:55:
                    84:5c:24:33:d7:c7:3f:ea:74:05:48:de:ba:3f:db:
                    a3:f0:04:59:71:94:bb:95:d7:78:04:01:39:15:8f:
                    ac:0c:b6:22:d1:cc:c3:7f:33:45:67:ef:2b:2c:85:
                    6d:48:39:f5:c3:19:00:a9:79:f1:8a:19:31:09:2b:
                    c8:41:01:d0:78:78:36:24:2e:77:fb:1b:a7:3f:f2:
                    6e:01:2a:c7:0b:6b:df:a3:e1:61:56:13:07:76:a8:
                    1b:e0:bd:04:19:f7:eb:27:02:49:55:a4:6d:2d:d9:
                    59:42:34:a5:4c:50:0f:a8:63:11:b7:f1:b5:6b:45:
                    c4:05:39:74:11:78:2d:9b:c2:0f:b9:9c:80:1e:fe:
                    7d:f1:62:9b:9b:f7:9e:3f:e6:4c:34:5b:39:03:be:
                    0e:0e:32:e9:a8:c5:12:c1:ef:b2:13:f9:79:ad:60:
                    79:e8:39:b9:e5:9c:3d:b2:6f:5d:88:c6:c3:4d:87:
                    b6:e5:6d:78:31:a0:e1:11:1f:b2:32:1b:bf:c8:f7:
                    7a:c3:ff:c4:08:a2:fb:a9:93:06:4f:21:cb:84:5c:
                    6e:fc:b7:8b:cd:f4:01:45:f4:47:99:40:6b:76:e4:
                    3c:44:5c:f1:27:10:cb:4f:c8:a0:94:92:d7:cc:d9:
                    b0:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:47:49:92:AD:E4:65:AD:58:D8:EF:BB:FA:22:42:E9:8F:C7:89:36
            X509v3 Authority Key Identifier:
                keyid:14:D5:AD:27:22:AC:A8:6A:D3:4F:0F:9A:34:47:26:CB:66:98:08:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4B86/9306A2C4F7E311EF8ADA8A41C4F9AE02/FNWtJyKsqGrTTw-aNEcmy2aYCDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FNWtJyKsqGrTTw-aNEcmy2aYCDE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4B86/9306A2C4F7E311EF8ADA8A41C4F9AE02/FNWtJyKsqGrTTw-aNEcmy2aYCDE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:85:fa:8e:fe:14:c7:38:fd:d2:e4:f4:00:98:8a:95:d2:59:
         3e:d4:b0:6e:81:44:92:de:df:55:2e:13:93:a6:6e:32:de:df:
         0f:89:da:b6:77:17:80:48:01:5c:66:11:62:b6:6b:6f:ae:58:
         e1:85:66:7d:1b:4a:60:5c:88:ee:e9:46:41:76:b2:ae:7b:88:
         86:e7:a6:50:19:24:13:bc:ce:7e:62:96:aa:07:25:59:fd:18:
         95:6e:32:cc:85:36:6e:60:d4:1c:9d:2b:a9:11:fc:a7:75:6a:
         a8:a5:e1:cc:aa:ca:9b:bf:18:b4:ea:f5:5d:7a:64:f9:88:2d:
         53:0f:72:27:24:80:5e:5e:ff:3a:8b:c5:6e:50:b6:1b:8d:c8:
         5b:85:91:17:3d:a7:c9:58:c2:e4:78:66:f6:21:54:25:26:9d:
         c0:75:7c:59:51:b9:e5:aa:51:b9:75:4f:01:7c:e6:3a:15:61:
         12:10:7e:a8:bf:66:7c:45:a1:16:bf:6c:05:4a:ac:ad:c4:fe:
         0c:2b:30:b3:9d:97:a2:5b:5b:31:bc:1b:b0:de:34:18:1c:9f:
         8d:61:5a:08:37:6b:1b:cc:00:98:56:16:10:2e:3a:c5:d4:0d:
         99:b7:aa:ec:78:20:08:7e:e0:86:55:bf:03:6c:46:bb:b2:d8:
         f7:11:a6:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:32:20 2026 by rpki-client