Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913FA2D/C91EE8A2D20411F08D4FB019C4F9AE02/fk_HuUTcgJqLHHH_IYz7mV3MlT4.mft
File:                     fk_HuUTcgJqLHHH_IYz7mV3MlT4.mft (raw, json)
Hash identifier:          satHwZKeja2U9RqA0bAYD2ukytn44M4hxfU353iJsHY=
Subject key identifier:   CB:B5:24:87:DC:2B:C4:0C:6C:B5:6C:37:25:B8:58:80:15:74:74:99
Authority key identifier: 7E:4F:C7:B9:44:DC:80:9A:8B:1C:71:FF:21:8C:FB:99:5D:CC:95:3E
Certificate issuer:       /CN=A913FA2D/serialNumber=7E4FC7B944DC809A8B1C71FF218CFB995DCC953E
Certificate serial:       4D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fk_HuUTcgJqLHHH_IYz7mV3MlT4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913FA2D/C91EE8A2D20411F08D4FB019C4F9AE02/fk_HuUTcgJqLHHH_IYz7mV3MlT4.mft
Manifest number:          4B
Signing time:             Fri 17 Apr 2026 08:05:02 +0000
Manifest this update:     Fri 17 Apr 2026 08:05:01 +0000
Manifest next update:     Fri 24 Apr 2026 08:05:01 +0000
Files and hashes:         1: fk_HuUTcgJqLHHH_IYz7mV3MlT4.crl (hash: sXY/aKBHcDGtsHVax40wQssuc/x98LjX0gMudqAqFAA=)
                          2: 08B9DE4CD40B11F0B7778216C4F9AE02.roa (hash: pQ2/r9TVxsT9sincpYfJ2ROvljz4U4zxiRmcX+U9iPk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913FA2D/C91EE8A2D20411F08D4FB019C4F9AE02/fk_HuUTcgJqLHHH_IYz7mV3MlT4.crl
                          rsync://rpki.apnic.net/member_repository/A913FA2D/C91EE8A2D20411F08D4FB019C4F9AE02/fk_HuUTcgJqLHHH_IYz7mV3MlT4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fk_HuUTcgJqLHHH_IYz7mV3MlT4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 08:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 77 (0x4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913FA2D, serialNumber=7E4FC7B944DC809A8B1C71FF218CFB995DCC953E
        Validity
            Not Before: Apr 17 08:05:01 2026 GMT
            Not After : Apr 24 08:05:01 2026 GMT
        Subject: CN=69e1e9ae-277d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b3:b2:35:79:b4:dc:fa:fb:e0:e3:1f:5a:52:
                    22:5e:bd:7c:89:3e:24:8e:ae:96:08:c7:ca:70:07:
                    ca:04:1b:7b:2b:2b:07:1b:1a:bb:ca:7a:2c:91:73:
                    37:97:ba:21:eb:93:d5:9d:3d:8a:92:ad:29:61:fe:
                    be:e2:45:7f:a9:a9:98:bd:c5:2f:1c:8a:fe:3f:97:
                    7b:a8:e6:bc:66:31:a2:f1:ea:27:4b:25:95:26:6d:
                    c3:3b:d1:d6:1d:1b:13:ce:87:85:86:da:db:56:84:
                    dd:71:ca:e3:95:e0:a5:0d:11:3d:51:ca:9e:d0:85:
                    e4:ad:bb:43:f5:f5:fe:5b:08:dd:e2:2d:e8:de:47:
                    e8:9c:9d:be:1d:0e:93:9b:f7:ba:3c:c7:1d:c2:8d:
                    db:bc:39:0f:1d:37:7f:47:9f:3a:ba:fa:85:a0:88:
                    32:e5:bf:d9:0e:ff:b4:de:c5:cd:02:5e:f0:02:54:
                    17:46:68:57:f9:80:00:b7:7c:c8:57:fc:fe:eb:b0:
                    6a:f6:91:63:de:ef:30:65:82:25:51:37:b8:af:03:
                    c2:d5:65:c8:d4:24:97:8c:ef:4f:65:d9:47:a6:41:
                    ea:5d:5b:ea:9f:33:98:b8:2d:93:bd:ad:e0:73:36:
                    4e:2c:0f:f8:6e:21:f6:6a:cf:a8:50:9e:0c:7c:83:
                    96:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:B5:24:87:DC:2B:C4:0C:6C:B5:6C:37:25:B8:58:80:15:74:74:99
            X509v3 Authority Key Identifier:
                keyid:7E:4F:C7:B9:44:DC:80:9A:8B:1C:71:FF:21:8C:FB:99:5D:CC:95:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913FA2D/C91EE8A2D20411F08D4FB019C4F9AE02/fk_HuUTcgJqLHHH_IYz7mV3MlT4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fk_HuUTcgJqLHHH_IYz7mV3MlT4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FA2D/C91EE8A2D20411F08D4FB019C4F9AE02/fk_HuUTcgJqLHHH_IYz7mV3MlT4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:c7:5d:28:e9:21:8d:7e:39:56:68:c1:db:f8:b8:16:31:a9:
         38:5c:40:a5:bd:e2:24:d4:47:7f:5e:3b:74:86:e6:fd:f5:23:
         55:80:ae:13:b1:69:3b:f4:f6:87:51:b8:61:3c:6e:db:e1:35:
         e8:b8:c6:ac:c3:b3:44:a0:32:39:ae:83:62:f3:51:49:3c:81:
         14:c8:c0:b9:95:44:5b:b6:64:41:88:5c:cd:d0:16:62:c1:fa:
         5c:26:e9:98:a5:57:7a:4b:df:c6:c6:35:a6:c6:41:5e:8b:6e:
         35:cd:21:44:5e:20:f9:c0:9c:92:ac:9d:d2:d5:47:12:82:de:
         fb:54:75:91:79:89:03:aa:4b:90:4f:c2:00:c3:58:07:f2:3c:
         f3:2c:99:66:39:74:70:6d:5d:c2:a0:19:1a:42:a0:ec:d7:95:
         45:82:c9:f3:d9:26:ea:a6:b1:7e:dc:fc:d0:f3:69:ba:e3:1f:
         c3:83:5b:62:83:10:25:f3:6b:4f:e2:bb:48:4b:3d:4b:53:5d:
         3d:fc:76:0c:8f:2c:51:d6:ae:c1:a3:45:e8:93:5c:f7:ee:82:
         21:ce:ec:c3:5d:60:8f:a6:3e:ee:5f:23:39:84:19:03:b6:f9:
         a6:39:c8:c6:85:f3:fe:96:ca:08:2f:ce:7d:ec:f9:96:09:b0:
         e0:71:02:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:02:22 2026 by rpki-client