Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913FA2D/C91EE8A2D20411F08D4FB019C4F9AE02/fk_HuUTcgJqLHHH_IYz7mV3MlT4.mft
File:                     fk_HuUTcgJqLHHH_IYz7mV3MlT4.mft (raw, json)
Hash identifier:          H/1SofRBHPmZCG5Fyiwp5v7+LxCbyrJKVG1rqMFhT9w=
Subject key identifier:   50:99:81:93:FC:14:BA:DB:DE:ED:14:7D:D2:69:8D:B4:BD:87:C5:77
Authority key identifier: 7E:4F:C7:B9:44:DC:80:9A:8B:1C:71:FF:21:8C:FB:99:5D:CC:95:3E
Certificate issuer:       /CN=A913FA2D/serialNumber=7E4FC7B944DC809A8B1C71FF218CFB995DCC953E
Certificate serial:       35
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fk_HuUTcgJqLHHH_IYz7mV3MlT4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913FA2D/C91EE8A2D20411F08D4FB019C4F9AE02/fk_HuUTcgJqLHHH_IYz7mV3MlT4.mft
Manifest number:          33
Signing time:             Sun 01 Mar 2026 10:08:05 +0000
Manifest this update:     Sun 01 Mar 2026 10:08:05 +0000
Manifest next update:     Sun 08 Mar 2026 10:08:05 +0000
Files and hashes:         1: fk_HuUTcgJqLHHH_IYz7mV3MlT4.crl (hash: sVdhS9Qo6megY+y1rPmYaE680YuDlCXea26EvmXpj7Q=)
                          2: 08B9DE4CD40B11F0B7778216C4F9AE02.roa (hash: pQ2/r9TVxsT9sincpYfJ2ROvljz4U4zxiRmcX+U9iPk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913FA2D/C91EE8A2D20411F08D4FB019C4F9AE02/fk_HuUTcgJqLHHH_IYz7mV3MlT4.crl
                          rsync://rpki.apnic.net/member_repository/A913FA2D/C91EE8A2D20411F08D4FB019C4F9AE02/fk_HuUTcgJqLHHH_IYz7mV3MlT4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fk_HuUTcgJqLHHH_IYz7mV3MlT4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 10:08:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 53 (0x35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913FA2D, serialNumber=7E4FC7B944DC809A8B1C71FF218CFB995DCC953E
        Validity
            Not Before: Mar  1 10:08:05 2026 GMT
            Not After : Mar  8 10:08:05 2026 GMT
        Subject: CN=69a41005-83c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a4:ae:f4:02:da:6d:f3:2c:13:ac:cf:19:a2:
                    cc:93:51:75:6e:a6:cf:7d:90:8a:9b:a8:82:e1:ef:
                    0b:71:a6:52:f9:66:95:9b:39:c5:2b:86:4f:36:d8:
                    a6:ab:c1:c5:17:3a:5e:5e:28:9f:b2:6d:fb:9b:37:
                    ad:12:c4:d7:7a:1d:27:00:71:a6:49:7c:66:92:a0:
                    b0:3d:b3:27:69:c4:4e:70:91:61:6e:f9:e1:9d:54:
                    7a:3e:40:7b:dc:0d:fd:51:72:67:ef:3a:19:49:11:
                    2f:b5:c7:e4:46:48:9f:b8:cf:ef:6c:69:a0:94:20:
                    2d:0e:06:94:c0:97:69:99:f0:fc:fa:b5:30:56:71:
                    7d:03:a6:e4:33:63:fd:b0:49:12:1c:d0:84:41:11:
                    b0:a1:d0:4d:a4:a9:4e:11:ab:cc:38:c8:cd:7d:23:
                    a1:56:bc:13:bc:55:0e:06:7f:57:35:bc:5e:cd:ca:
                    b9:e2:f5:a6:32:53:75:c2:61:40:e9:5c:22:81:bd:
                    46:ea:a6:96:a9:12:9d:72:82:a7:8a:13:0f:1a:c9:
                    52:62:bd:04:62:33:aa:86:bf:02:2e:af:ef:36:f3:
                    cb:a6:65:59:b8:25:ba:5b:7e:61:82:82:b4:98:ce:
                    5e:b5:12:f7:d5:89:2d:fa:da:a3:92:c7:6d:79:e2:
                    31:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:99:81:93:FC:14:BA:DB:DE:ED:14:7D:D2:69:8D:B4:BD:87:C5:77
            X509v3 Authority Key Identifier:
                keyid:7E:4F:C7:B9:44:DC:80:9A:8B:1C:71:FF:21:8C:FB:99:5D:CC:95:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913FA2D/C91EE8A2D20411F08D4FB019C4F9AE02/fk_HuUTcgJqLHHH_IYz7mV3MlT4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fk_HuUTcgJqLHHH_IYz7mV3MlT4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FA2D/C91EE8A2D20411F08D4FB019C4F9AE02/fk_HuUTcgJqLHHH_IYz7mV3MlT4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:ab:88:13:94:b5:e2:e0:18:02:51:3c:23:0c:0a:cd:5e:d9:
         c5:a7:99:62:fa:de:5e:3d:84:7c:2f:3a:04:d9:48:e9:df:c8:
         74:b8:90:0a:6b:86:70:d0:e4:e2:3b:8f:ff:6b:6b:c5:fa:60:
         82:61:c8:d3:74:40:f8:fa:f2:b5:9a:d0:b2:c8:ee:6b:11:a9:
         88:a6:fa:d5:13:4a:6b:41:8c:41:0f:20:93:c4:43:a4:44:11:
         17:57:88:45:8c:64:18:c8:a7:ba:ea:f4:92:ea:8e:2c:ba:c6:
         e7:79:46:5b:d4:91:86:8e:13:9f:34:76:f5:9a:40:1b:65:0f:
         56:a3:82:2e:32:8c:19:a1:2b:eb:89:61:16:81:21:22:a3:36:
         f8:46:44:de:4d:05:35:e8:e2:68:a2:4c:b8:3e:5d:b3:41:45:
         a0:1c:8e:4f:4b:76:86:48:1e:ad:65:7d:f7:3e:90:44:99:72:
         02:57:7f:eb:ad:32:53:8f:c7:35:8d:a3:9a:56:f0:94:0d:3a:
         5d:ec:78:74:80:53:c7:54:83:66:32:42:0d:16:81:55:42:9d:
         94:69:dc:7b:e8:71:36:b6:8c:6e:2f:0c:ef:ab:6a:e2:8d:99:
         ef:49:be:46:86:4b:ab:2e:99:89:ac:d2:2b:6d:d3:f0:f8:5a:
         8f:71:8f:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:57:55 2026 by rpki-client