Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.mft
File:                     fXPvEVsCxeAQI4R6kbCw8Hi18Cs.mft (raw, json)
Hash identifier:          29NY6ez1VhmI31ZyPcA1e7gnVsHktnAmgdDpKvSeqDs=
Subject key identifier:   BA:BD:72:BE:BC:BF:BB:AD:31:51:59:29:BB:DD:55:09:11:05:1E:AD
Authority key identifier: 7D:73:EF:11:5B:02:C5:E0:10:23:84:7A:91:B0:B0:F0:78:B5:F0:2B
Certificate issuer:       /CN=A9152A4E/serialNumber=7D73EF115B02C5E01023847A91B0B0F078B5F02B
Certificate serial:       06CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.mft
Manifest number:          06C4
Signing time:             Sat 28 Feb 2026 22:48:01 +0000
Manifest this update:     Sat 28 Feb 2026 22:48:01 +0000
Manifest next update:     Sat 07 Mar 2026 22:48:01 +0000
Files and hashes:         1: fXPvEVsCxeAQI4R6kbCw8Hi18Cs.crl (hash: 8AXzut4iv22AE1L3a/oNXe9PLrOdA+B4v9Oc4pSFXVg=)
                          2: AB791BEE7BC711F0B0A56A74C4F9AE02.roa (hash: lK7bGVCygyPQRcWZjT3XlPriu2CyfUJlUxTwi2dzB50=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.crl
                          rsync://rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 22:48:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1739 (0x6cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9152A4E, serialNumber=7D73EF115B02C5E01023847A91B0B0F078B5F02B
        Validity
            Not Before: Feb 28 22:48:01 2026 GMT
            Not After : Mar  7 22:48:01 2026 GMT
        Subject: CN=69a370a1-7972
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:31:38:84:9b:d0:3a:b9:9d:63:b5:5f:b5:9d:
                    12:ac:90:e7:e7:d4:8a:1b:70:a7:cb:54:78:b4:fd:
                    8f:e6:85:ce:f7:29:08:18:32:35:43:62:72:6f:d0:
                    23:84:a4:e4:a7:f0:ae:90:49:41:8f:17:d5:f7:db:
                    7d:8a:25:73:d0:87:e9:1e:6f:e7:3a:f3:13:27:18:
                    16:7b:4d:0d:63:02:6b:2b:a2:38:46:d3:43:be:16:
                    8c:ab:d0:58:7d:e7:5e:ec:ab:c7:d7:16:90:e4:b7:
                    82:79:12:75:8d:8b:1e:9a:7b:a4:7c:16:17:5c:4f:
                    9a:ab:01:9b:0b:d9:9c:59:1f:57:6f:af:13:24:a6:
                    4d:4f:69:38:79:22:cb:c7:41:81:73:5a:84:8e:cf:
                    17:e3:c3:35:1b:72:23:b7:c1:3e:58:4f:4c:dc:94:
                    83:72:b0:58:6f:75:72:1f:f9:c6:d9:7a:92:e7:ce:
                    6b:54:19:39:77:1d:04:7f:2f:1d:99:42:a1:c6:b9:
                    ef:0b:6b:38:36:43:de:84:2d:9f:3f:fa:16:9b:69:
                    ef:7c:0f:12:38:9f:ee:c5:2d:87:72:59:14:66:8c:
                    a4:35:c7:3c:6a:c2:31:68:aa:6a:9d:93:75:36:c5:
                    09:21:ef:a9:a3:74:9a:a3:14:10:95:c6:a6:b2:ed:
                    03:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:BD:72:BE:BC:BF:BB:AD:31:51:59:29:BB:DD:55:09:11:05:1E:AD
            X509v3 Authority Key Identifier:
                keyid:7D:73:EF:11:5B:02:C5:E0:10:23:84:7A:91:B0:B0:F0:78:B5:F0:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:3a:c4:e2:ab:32:89:1c:12:84:ed:c2:a4:0c:5c:9e:99:fa:
         cb:d1:96:98:32:37:a1:30:18:5d:a7:d0:70:d8:b1:aa:36:da:
         77:56:95:68:59:a0:6d:0e:92:06:4f:dc:cd:ef:dd:50:37:b6:
         26:62:f7:e2:21:fb:bd:1e:7b:a1:c3:eb:ad:5f:21:88:36:9c:
         c0:94:24:90:8b:13:2d:21:b5:62:ce:22:63:ad:d5:a8:29:90:
         0b:ac:3d:4b:f7:6a:20:5b:31:dc:4b:88:37:ff:07:22:c7:61:
         30:23:ff:77:c1:e2:71:d8:df:17:a0:05:dc:b9:f4:7c:d7:f3:
         57:ac:9f:fe:5f:6a:92:3d:fc:53:ec:e4:a1:8c:d3:91:33:de:
         79:22:ea:2a:cf:27:ea:d0:53:90:c1:23:c6:92:23:45:cf:e3:
         b4:c0:79:ed:cb:80:89:a0:78:ef:f0:39:91:ce:9e:48:9a:aa:
         71:1f:04:e4:de:2c:d7:f6:e3:31:21:26:70:9e:71:5c:82:b3:
         6f:5b:a6:ad:ed:9e:bf:aa:41:20:f5:a2:a0:b4:c4:4a:c0:84:
         d3:1f:e7:db:82:d1:96:30:1f:e4:f8:0e:6b:27:fc:0d:0d:79:
         14:ab:94:93:8a:2a:2f:8e:65:3c:b5:25:0c:18:82:e4:16:7d:
         e4:0d:a1:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:30:29 2026 by rpki-client