Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.mft
File:                     FDm85NeiKugDbOsu5uavGPIbtZM.mft (raw, json)
Hash identifier:          TctL9iEcWtXX9a4NLyLdKH1QG5uePD5DyQhJ5chqE6c=
Subject key identifier:   4D:8F:F4:9A:5F:70:67:6B:CE:93:27:27:61:94:A0:0A:8A:88:E4:51
Authority key identifier: 14:39:BC:E4:D7:A2:2A:E8:03:6C:EB:2E:E6:E6:AF:18:F2:1B:B5:93
Certificate issuer:       /CN=A91F57D9/serialNumber=1439BCE4D7A22AE8036CEB2EE6E6AF18F21BB593
Certificate serial:       0453
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FDm85NeiKugDbOsu5uavGPIbtZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.mft
Manifest number:          0441
Signing time:             Mon 27 Apr 2026 00:14:29 +0000
Manifest this update:     Mon 27 Apr 2026 00:14:28 +0000
Manifest next update:     Mon 04 May 2026 00:14:28 +0000
Files and hashes:         1: FDm85NeiKugDbOsu5uavGPIbtZM.crl (hash: o1coKv1ViebQGrR9M+WT1txfsHZ2WBbabyE9NmX/lAk=)
                          2: F8071E24DC1111EC80AE816DC4F9AE02.roa (hash: diQEJwaRZGmvk+KKJJNr2sqtXhHrrXlc+8yBz+g5Wd0=)
                          3: CD22C9C8DC0D11ECA064B94CC4F9AE02.roa (hash: KrGSfeFezfMBfirneaLIWiJ6P58/fqAvRIXr1XydAtM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.crl
                          rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FDm85NeiKugDbOsu5uavGPIbtZM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 04 May 2026 00:14:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1107 (0x453)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F57D9, serialNumber=1439BCE4D7A22AE8036CEB2EE6E6AF18F21BB593
        Validity
            Not Before: Apr 27 00:14:28 2026 GMT
            Not After : May  4 00:14:28 2026 GMT
        Subject: CN=69eeaa65-aefa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:00:5a:0d:43:7f:6f:a5:1b:d9:12:6d:ae:10:
                    17:b9:66:96:b5:7f:6e:75:a8:4f:93:48:a3:33:b6:
                    e1:50:a3:e9:00:ed:1c:9a:41:f4:0f:7f:7d:4c:8e:
                    74:35:67:76:74:71:68:a5:5a:68:22:04:df:72:f8:
                    0c:c2:1d:55:b3:32:2b:36:3a:cc:bb:2a:3a:6c:67:
                    f8:1f:bc:9e:f6:32:e4:9d:87:e2:04:74:75:f3:69:
                    29:b2:bc:63:3a:a2:d5:a7:b7:39:a8:86:de:06:32:
                    3c:ad:59:43:19:de:62:f9:31:47:27:e0:56:04:4f:
                    c6:b0:43:55:26:d4:11:b1:1c:ea:f5:31:8d:08:d7:
                    c2:7f:e0:ba:59:69:42:29:06:8f:29:2e:a4:fc:67:
                    1e:7b:e4:9c:1b:84:5f:40:42:fb:34:f0:e3:6b:c2:
                    89:16:86:89:d3:35:15:e9:57:03:dd:de:4f:eb:52:
                    26:75:51:6b:4a:c0:1f:73:65:ee:54:70:70:e6:2e:
                    b7:89:3b:d1:15:01:2a:c5:e7:49:89:96:c1:b9:e2:
                    26:e2:05:b4:d6:f0:90:10:a2:93:39:ff:6b:f3:5c:
                    0b:6f:f4:6a:5f:6e:a6:16:ca:99:55:5b:1a:08:63:
                    c7:c8:10:7e:4a:4c:1f:b4:88:9d:0b:f2:be:72:3f:
                    24:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:8F:F4:9A:5F:70:67:6B:CE:93:27:27:61:94:A0:0A:8A:88:E4:51
            X509v3 Authority Key Identifier:
                keyid:14:39:BC:E4:D7:A2:2A:E8:03:6C:EB:2E:E6:E6:AF:18:F2:1B:B5:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FDm85NeiKugDbOsu5uavGPIbtZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:b0:6b:29:7d:3f:a4:30:ca:c9:e3:21:7a:24:ea:83:80:e5:
         a3:58:ec:56:23:a5:2f:5e:d8:16:2a:28:e8:c7:e9:11:c3:ed:
         ce:85:b3:f5:35:ff:f1:bc:42:37:a3:13:08:55:42:2f:c2:d7:
         a0:9b:e4:b9:36:38:39:37:9a:c1:62:9b:1b:e2:19:a8:37:92:
         5e:b7:5c:19:ee:bc:e4:ee:9e:81:f8:f6:f1:ad:78:3f:ff:33:
         bd:4a:cf:f1:71:4a:f4:08:bf:9d:4b:88:f7:73:80:7f:db:d0:
         25:01:f4:89:ac:4d:2c:ef:dc:f2:99:35:70:3e:b1:5d:5b:f4:
         f2:0d:b4:01:5a:96:11:b0:99:16:18:a2:a0:18:a9:6d:dd:6f:
         16:59:d9:94:dd:08:fd:74:6c:c5:28:54:80:a1:0f:2d:08:1c:
         06:0a:74:9c:56:e3:57:d8:cd:15:12:ed:c3:cf:47:39:60:92:
         51:16:67:99:5f:79:0f:d7:8c:06:38:a1:e3:97:74:63:71:08:
         1e:1c:61:55:ee:30:9b:df:74:7d:f9:8a:4c:a9:c0:7b:5a:d3:
         7c:06:39:98:01:19:6e:9c:f6:77:6e:78:a4:b4:29:a1:73:fb:
         cf:4b:c0:e9:46:b5:8a:bc:1c:ee:8f:7d:ac:c0:c5:32:ba:43:
         30:34:56:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 17:17:57 2026 by rpki-client