Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914F5BA/049DCD22AD6111EA8F1A8D63C4F9AE02/FCD4Bwnd09_D9RFWVQPO9ERL7cM.mft
File:                     FCD4Bwnd09_D9RFWVQPO9ERL7cM.mft (raw, json)
Hash identifier:          BNQhYbiifIZvQLG3s5Q/pHWlQxPI9gNUtpc3ftdH3ZU=
Subject key identifier:   00:DA:D0:29:CE:B0:E4:B5:4A:98:65:E3:13:A4:B6:67:DF:45:CA:14
Authority key identifier: 14:20:F8:07:09:DD:D3:DF:C3:F5:11:56:55:03:CE:F4:44:4B:ED:C3
Certificate issuer:       /CN=A914F5BA/serialNumber=1420F80709DDD3DFC3F511565503CEF4444BEDC3
Certificate serial:       0979
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FCD4Bwnd09_D9RFWVQPO9ERL7cM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914F5BA/049DCD22AD6111EA8F1A8D63C4F9AE02/FCD4Bwnd09_D9RFWVQPO9ERL7cM.mft
Manifest number:          0972
Signing time:             Sat 28 Feb 2026 20:21:59 +0000
Manifest this update:     Sat 28 Feb 2026 20:21:58 +0000
Manifest next update:     Sat 07 Mar 2026 20:21:58 +0000
Files and hashes:         1: FCD4Bwnd09_D9RFWVQPO9ERL7cM.crl (hash: D5hDZ8vgIo4CKC+6ZC9JCAhvRibkVT4pMcnHcKEjsFk=)
                          2: E9E80356AD6211EABEDF046AC4F9AE02.roa (hash: aOqwloZ9sT/M1OqrjBKZ/MpZ3Pwla48CsTsMrgUxXsk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914F5BA/049DCD22AD6111EA8F1A8D63C4F9AE02/FCD4Bwnd09_D9RFWVQPO9ERL7cM.crl
                          rsync://rpki.apnic.net/member_repository/A914F5BA/049DCD22AD6111EA8F1A8D63C4F9AE02/FCD4Bwnd09_D9RFWVQPO9ERL7cM.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FCD4Bwnd09_D9RFWVQPO9ERL7cM.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 20:21:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2425 (0x979)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914F5BA, serialNumber=1420F80709DDD3DFC3F511565503CEF4444BEDC3
        Validity
            Not Before: Feb 28 20:21:58 2026 GMT
            Not After : Mar  7 20:21:58 2026 GMT
        Subject: CN=69a34e67-6945
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:51:1d:9b:b1:5b:ed:6d:51:b4:c3:c9:a0:ea:
                    b0:33:55:f3:d7:bf:17:a1:f2:36:bd:17:8e:5a:6c:
                    ae:37:6d:73:e9:b3:86:b0:64:7f:92:57:fc:01:9a:
                    c1:1a:56:77:18:a7:48:14:fb:54:a5:01:8b:58:ab:
                    c2:8a:0c:17:8f:d5:49:ea:11:f2:bf:49:a1:c1:09:
                    82:d0:72:b2:5e:48:39:db:09:03:ee:9e:b5:79:b2:
                    3f:7c:ba:63:d1:e8:c3:a0:cf:9f:90:1d:64:03:e5:
                    ae:c8:bd:be:52:f9:ac:43:4e:1c:d1:e3:60:33:2f:
                    1a:25:2c:e8:cb:9a:14:11:96:c9:53:e5:dd:c1:be:
                    dd:11:21:96:25:7a:29:ac:a4:c9:fc:84:36:b9:de:
                    60:4d:4b:cf:3e:17:2e:06:15:95:46:92:27:3b:98:
                    5a:01:95:4d:9d:64:4a:22:6c:d5:6f:34:cc:fd:5d:
                    ab:ec:b4:8a:77:16:9c:10:e5:ae:0f:45:8a:c4:47:
                    0a:3b:e2:92:e9:bb:b0:5b:a3:ba:5b:30:ac:18:84:
                    a4:db:54:8d:91:12:e7:8e:96:d9:e9:5d:86:ee:9e:
                    2a:d2:93:2a:9c:0d:65:a7:73:a5:cf:30:b4:4c:2f:
                    b4:6a:e3:ef:af:c8:31:24:ae:39:aa:1f:90:ec:e0:
                    88:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:DA:D0:29:CE:B0:E4:B5:4A:98:65:E3:13:A4:B6:67:DF:45:CA:14
            X509v3 Authority Key Identifier:
                keyid:14:20:F8:07:09:DD:D3:DF:C3:F5:11:56:55:03:CE:F4:44:4B:ED:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914F5BA/049DCD22AD6111EA8F1A8D63C4F9AE02/FCD4Bwnd09_D9RFWVQPO9ERL7cM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FCD4Bwnd09_D9RFWVQPO9ERL7cM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F5BA/049DCD22AD6111EA8F1A8D63C4F9AE02/FCD4Bwnd09_D9RFWVQPO9ERL7cM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:5a:d3:0b:0d:56:99:f2:21:fd:41:08:df:71:21:f3:67:43:
         5c:24:4b:61:c4:e8:aa:e8:e9:5b:07:ef:21:f0:d8:bc:84:80:
         4e:45:f2:76:b8:e9:e4:ba:eb:3c:e5:69:37:17:7f:10:44:2b:
         6d:da:54:99:06:9c:51:53:8b:b8:de:06:92:22:a2:61:76:5a:
         a8:ad:c0:57:bf:3f:de:ca:00:a1:26:24:1c:cf:aa:1a:37:20:
         62:1a:71:11:69:94:04:16:8e:ed:9a:da:75:e8:90:20:f6:18:
         5c:8b:60:c0:77:f4:6a:3e:56:7b:5e:2f:2f:17:27:19:3a:a2:
         c8:04:bd:e4:42:d0:60:59:fc:0b:56:3f:a4:3a:4d:b3:7f:3a:
         81:32:d8:93:01:88:f0:fe:a3:79:5a:4f:bc:24:c5:be:bd:5e:
         42:fe:2a:63:35:db:94:ca:88:a9:09:18:b6:db:97:1f:ae:d2:
         04:3c:dd:0d:16:43:33:8e:7b:3b:88:64:8a:10:03:d7:8c:30:
         92:af:9e:de:34:9d:80:b9:0a:0b:3e:00:e7:74:a2:8d:5f:35:
         f2:2d:c1:e7:e1:a1:92:c4:0b:3d:75:57:d2:22:30:d9:78:6d:
         37:79:9a:7f:22:4b:f9:8c:2d:98:0c:a8:47:4a:47:d4:ce:2e:
         0e:32:52:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:16:18 2026 by rpki-client