Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91444E5/2E822DAA1B9111EC9E7A3114C4F9AE02/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.mft
File:                     Fgi_RiSn4bcjIotGYd1mHnCu8_Q.mft (raw, json)
Hash identifier:          726XEAgkhHMsPtoNz2POf0AhStTF0vLumjapnBSCE0A=
Subject key identifier:   BB:DC:3A:A1:4A:26:96:E6:60:BD:0E:75:CD:C0:C8:C3:3B:D2:A9:A5
Authority key identifier: 16:08:BF:46:24:A7:E1:B7:23:22:8B:46:61:DD:66:1E:70:AE:F3:F4
Certificate issuer:       /CN=A91444E5/serialNumber=1608BF4624A7E1B723228B4661DD661E70AEF3F4
Certificate serial:       057B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91444E5/2E822DAA1B9111EC9E7A3114C4F9AE02/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.mft
Manifest number:          0571
Signing time:             Mon 02 Mar 2026 00:56:49 +0000
Manifest this update:     Mon 02 Mar 2026 00:56:48 +0000
Manifest next update:     Mon 09 Mar 2026 00:56:48 +0000
Files and hashes:         1: Fgi_RiSn4bcjIotGYd1mHnCu8_Q.crl (hash: vKX9QwEixUK4FZ+pq1A5FWXc2czz+nddHND7Sh9SLlk=)
                          2: 90AB89E4547511EEB44F391AC4F9AE02.roa (hash: HFHAqZaEtAW52D1hUPhZmJHncyLuC7GnGgQ2YVfhigw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91444E5/2E822DAA1B9111EC9E7A3114C4F9AE02/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.crl
                          rsync://rpki.apnic.net/member_repository/A91444E5/2E822DAA1B9111EC9E7A3114C4F9AE02/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:56:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1403 (0x57b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91444E5, serialNumber=1608BF4624A7E1B723228B4661DD661E70AEF3F4
        Validity
            Not Before: Mar  2 00:56:48 2026 GMT
            Not After : Mar  9 00:56:48 2026 GMT
        Subject: CN=69a4e051-5082
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:72:36:1b:2e:c8:58:fc:ef:bf:e7:69:7f:0f:
                    b0:d5:f0:92:6c:6d:59:0c:77:37:6f:35:ad:29:e9:
                    4a:05:7e:29:66:64:12:f6:d7:ec:18:f0:31:2b:43:
                    8d:5d:be:eb:cf:53:44:a0:30:fa:cb:2b:f0:89:9e:
                    53:33:a4:67:3f:a5:4c:4c:a0:63:75:77:85:ee:0f:
                    78:23:d6:31:d5:c7:0d:df:cd:0d:d9:15:47:eb:70:
                    46:fe:4f:d6:37:ee:c9:c5:72:2e:0e:6c:b8:ef:97:
                    59:27:5e:9e:ad:e5:34:a8:c0:60:9d:fd:58:92:c9:
                    d3:a9:5d:3a:e2:bd:06:07:94:6b:b5:06:5a:01:17:
                    1f:95:f6:7b:37:a2:ee:4e:0d:07:47:2d:81:0b:f7:
                    85:d6:36:2d:9d:9b:96:b5:4a:3c:92:b1:85:ec:6e:
                    3d:82:ce:86:ae:6c:81:25:a7:2e:f9:a6:e6:0a:ca:
                    56:b0:53:34:f9:0b:a1:03:cf:74:3c:66:fa:e5:1e:
                    dd:71:7d:ae:76:c9:2b:3e:ad:7a:0f:5c:74:94:b5:
                    08:3a:b7:9b:e1:b7:47:c5:14:bb:6f:c2:c1:c5:b8:
                    b1:60:8f:25:d1:23:d2:52:94:98:17:f3:a8:51:d8:
                    45:e6:e8:d1:6c:d4:d0:8c:66:2d:3a:2c:c9:2c:4d:
                    e8:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:DC:3A:A1:4A:26:96:E6:60:BD:0E:75:CD:C0:C8:C3:3B:D2:A9:A5
            X509v3 Authority Key Identifier:
                keyid:16:08:BF:46:24:A7:E1:B7:23:22:8B:46:61:DD:66:1E:70:AE:F3:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91444E5/2E822DAA1B9111EC9E7A3114C4F9AE02/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91444E5/2E822DAA1B9111EC9E7A3114C4F9AE02/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:1d:52:85:0a:e4:d7:cf:78:30:a8:60:1b:be:6a:aa:83:99:
         46:97:9e:91:38:45:8d:a6:17:7b:ab:31:de:7d:36:0c:0b:89:
         6c:1b:50:d9:92:4e:2b:fa:1d:2a:59:fb:86:c6:9b:dd:b3:fa:
         12:4a:4e:7c:2b:e7:d2:72:38:18:62:5d:fd:89:b6:0a:00:ed:
         4a:2a:f2:45:20:1f:09:b5:90:ab:76:a8:72:48:27:97:20:0a:
         b0:3d:cb:c5:a5:ea:95:aa:2e:bb:c7:d9:5f:45:fe:f5:63:9b:
         ec:5d:26:00:cd:ef:a4:be:da:e9:16:1f:26:54:80:54:aa:86:
         4c:a7:a5:69:cf:7b:b2:ef:d0:bb:23:cb:5b:d0:75:89:41:68:
         5d:80:43:70:f9:ba:1e:ed:ef:2a:33:0d:80:d7:fe:6b:2c:79:
         41:a6:9d:0d:38:46:21:da:48:19:50:3e:73:fe:81:b8:02:83:
         c8:ab:0d:9c:cf:4c:01:1e:67:f0:ca:f7:de:04:6c:d5:db:03:
         97:fc:14:23:3a:bb:24:80:a1:97:95:b8:cb:6d:3d:8b:2d:4e:
         7e:cf:45:ed:0f:ef:42:5d:dd:83:18:6a:a6:72:08:58:df:df:
         46:d6:c6:87:05:ab:05:2b:d9:73:47:41:d6:9d:24:26:0d:26:
         2e:1c:35:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:11:26 2026 by rpki-client