Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915280B/97BC1DB8EDEF11EC896AE740C4F9AE02/FGXcLLcCU-31FM1DdyZi_zu49uA.mft
File:                     FGXcLLcCU-31FM1DdyZi_zu49uA.mft (raw, json)
Hash identifier:          4l+a7M1xIDudhHQNuVj2fNgPSccn9oNm4Ty9SKTPiQ4=
Subject key identifier:   4E:FB:B5:C0:F7:6E:76:62:93:0D:CD:4D:60:B5:57:CA:98:BC:12:D7
Authority key identifier: 14:65:DC:2C:B7:02:53:ED:F5:14:CD:43:77:26:62:FF:3B:B8:F6:E0
Certificate issuer:       /CN=A915280B/serialNumber=1465DC2CB70253EDF514CD43772662FF3BB8F6E0
Certificate serial:       0387
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FGXcLLcCU-31FM1DdyZi_zu49uA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915280B/97BC1DB8EDEF11EC896AE740C4F9AE02/FGXcLLcCU-31FM1DdyZi_zu49uA.mft
Manifest number:          037A
Signing time:             Fri 17 Apr 2026 00:45:56 +0000
Manifest this update:     Fri 17 Apr 2026 00:45:55 +0000
Manifest next update:     Fri 24 Apr 2026 00:45:55 +0000
Files and hashes:         1: FGXcLLcCU-31FM1DdyZi_zu49uA.crl (hash: yYT/qc1Ml4fMCZWlHeaiIOrR3CzZI8xh4MDjABnIu64=)
                          2: 27EECF18EDF811ECBCAF5567C4F9AE02.roa (hash: gkL9IgqrwOkZIyg24mdNbqROTtOYERD4H34jArPhYAs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915280B/97BC1DB8EDEF11EC896AE740C4F9AE02/FGXcLLcCU-31FM1DdyZi_zu49uA.crl
                          rsync://rpki.apnic.net/member_repository/A915280B/97BC1DB8EDEF11EC896AE740C4F9AE02/FGXcLLcCU-31FM1DdyZi_zu49uA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FGXcLLcCU-31FM1DdyZi_zu49uA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 00:45:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 903 (0x387)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915280B, serialNumber=1465DC2CB70253EDF514CD43772662FF3BB8F6E0
        Validity
            Not Before: Apr 17 00:45:55 2026 GMT
            Not After : Apr 24 00:45:55 2026 GMT
        Subject: CN=69e182c4-1307
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:99:59:ef:15:5e:e8:7c:c2:e4:66:4f:98:6d:
                    23:a2:ab:31:4d:1a:43:6d:78:e0:4d:7c:bc:47:9e:
                    f9:da:4a:5c:8c:14:e0:7d:b4:c7:37:9d:a5:59:36:
                    cf:0f:12:69:bc:ac:6b:c2:8c:ff:10:67:64:9e:7e:
                    59:2b:f9:c4:a5:81:a8:a7:9b:27:ee:41:53:6a:af:
                    cb:39:39:31:da:88:ad:09:69:04:15:57:02:8e:1b:
                    fc:d3:08:a4:77:be:84:d0:ce:49:10:f0:4b:47:9d:
                    be:6d:b1:88:94:cb:76:de:61:11:89:86:5c:25:2b:
                    9c:e7:88:77:eb:56:cc:32:53:d0:9a:28:9a:92:e8:
                    c9:b1:05:e3:c8:80:8e:fb:32:4c:e8:13:f8:bd:52:
                    03:ff:11:3f:10:f4:4e:00:cf:08:d9:86:f5:97:63:
                    3b:09:03:14:fb:a6:1e:fb:ad:e3:c1:99:ec:45:d3:
                    0e:8f:f7:21:a8:e5:22:07:37:40:82:d3:b7:39:60:
                    42:45:af:fa:d7:06:ff:b8:ca:d4:87:f4:3f:20:8a:
                    5d:eb:fa:93:2d:cd:1d:65:fb:4a:69:49:4f:c8:9c:
                    f4:e6:88:ed:d5:6f:42:1b:7d:67:c1:06:b7:03:52:
                    0f:71:3b:9d:7f:4a:f5:60:47:26:70:8e:dd:d6:a6:
                    79:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:FB:B5:C0:F7:6E:76:62:93:0D:CD:4D:60:B5:57:CA:98:BC:12:D7
            X509v3 Authority Key Identifier:
                keyid:14:65:DC:2C:B7:02:53:ED:F5:14:CD:43:77:26:62:FF:3B:B8:F6:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915280B/97BC1DB8EDEF11EC896AE740C4F9AE02/FGXcLLcCU-31FM1DdyZi_zu49uA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FGXcLLcCU-31FM1DdyZi_zu49uA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915280B/97BC1DB8EDEF11EC896AE740C4F9AE02/FGXcLLcCU-31FM1DdyZi_zu49uA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:a5:71:aa:1a:10:d2:bb:7c:22:1e:21:9b:3a:57:b5:fb:25:
         4c:45:5b:9a:d3:02:7e:6a:1c:0d:44:e0:3b:5c:cd:d6:74:1c:
         e2:6e:c2:24:be:70:1b:12:bd:24:6f:0a:82:29:b7:34:06:38:
         ae:4b:d3:c2:cc:42:65:e8:88:0a:aa:01:b4:4e:f9:dd:f4:cb:
         4f:23:87:1e:ab:26:1f:15:65:b6:6b:e3:07:00:bb:64:08:91:
         10:b4:c9:d3:ca:ba:38:0e:10:9b:02:84:2b:fb:44:cd:77:c7:
         44:21:d1:31:24:cd:73:75:f9:e8:69:88:d7:eb:3e:b6:fb:57:
         b9:cd:84:b5:b9:b1:db:4b:e4:a2:6a:11:24:b7:68:0c:c5:fe:
         11:5b:42:fe:98:65:2f:0c:ec:15:ad:7c:fa:f2:2b:46:92:83:
         a1:ec:aa:d8:36:ea:3e:ae:d4:53:1e:d5:5c:99:23:58:3d:9a:
         0d:5c:a9:48:39:5b:b1:02:66:9c:85:37:3d:ea:c5:60:c4:b6:
         3d:7c:bc:2e:df:79:f1:2a:fa:bd:db:ba:a2:c6:ce:a4:75:f9:
         fc:33:2b:a5:5b:e6:9f:44:dc:d2:91:13:c3:6a:a6:bc:12:6e:
         a4:27:f5:b2:c3:f3:96:81:8d:54:f6:13:0c:69:92:ed:36:f5:
         b5:b4:89:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:05:58 2026 by rpki-client