Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915DB9F/B88F4252545011E6A3A6D466C4F9AE02/fgqozSvoYXAaXKfPudRQ09kYJ-g.mft
File:                     fgqozSvoYXAaXKfPudRQ09kYJ-g.mft (raw, json)
Hash identifier:          PGCOwZkIY+3R8TRjcDD0IfMBoOPY2e4YpAg6MoAKVhw=
Subject key identifier:   95:A2:7D:3E:D8:27:A8:0F:D2:35:19:8F:D6:E1:50:56:E9:40:93:3A
Authority key identifier: 7E:0A:A8:CD:2B:E8:61:70:1A:5C:A7:CF:B9:D4:50:D3:D9:18:27:E8
Certificate issuer:       /CN=A915DB9F/serialNumber=7E0AA8CD2BE861701A5CA7CFB9D450D3D91827E8
Certificate serial:       1FD4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fgqozSvoYXAaXKfPudRQ09kYJ-g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915DB9F/B88F4252545011E6A3A6D466C4F9AE02/fgqozSvoYXAaXKfPudRQ09kYJ-g.mft
Manifest number:          1FC5
Signing time:             Sat 18 Apr 2026 15:54:58 +0000
Manifest this update:     Sat 18 Apr 2026 15:54:58 +0000
Manifest next update:     Sat 25 Apr 2026 15:54:58 +0000
Files and hashes:         1: fgqozSvoYXAaXKfPudRQ09kYJ-g.crl (hash: q59LGsMx4E8NhyPJEUQHcTeVnqGKBjFms5FxeuIPE7A=)
                          2: 4D94E0D6545211E6A367BC68C4F9AE02.roa (hash: nzLMDhvvKl6G16FEG2gICFkWdz4KTK6PcIX/fg8UQKE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915DB9F/B88F4252545011E6A3A6D466C4F9AE02/fgqozSvoYXAaXKfPudRQ09kYJ-g.crl
                          rsync://rpki.apnic.net/member_repository/A915DB9F/B88F4252545011E6A3A6D466C4F9AE02/fgqozSvoYXAaXKfPudRQ09kYJ-g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fgqozSvoYXAaXKfPudRQ09kYJ-g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Apr 2026 15:54:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8148 (0x1fd4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915DB9F, serialNumber=7E0AA8CD2BE861701A5CA7CFB9D450D3D91827E8
        Validity
            Not Before: Apr 18 15:54:58 2026 GMT
            Not After : Apr 25 15:54:58 2026 GMT
        Subject: CN=69e3a952-aec7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5f:91:ab:98:22:42:d4:5b:33:36:ec:ce:1c:
                    c6:eb:8d:63:26:75:11:dc:8e:6e:17:3c:04:3a:3b:
                    77:dc:bb:a8:3c:d1:af:46:cf:b9:bd:db:3c:4b:dd:
                    9b:69:26:6a:55:52:f9:ab:37:2c:e7:ea:5a:14:2a:
                    f9:c3:6b:86:de:f0:ab:2b:b1:f0:bb:85:dc:e1:ff:
                    11:95:8d:2e:95:ac:f2:d8:51:f2:af:b5:22:c3:9f:
                    60:bf:c9:45:eb:91:e7:47:86:e6:db:3a:50:d8:c4:
                    7f:6e:55:9a:ce:11:59:00:e5:a1:a9:82:d4:43:1f:
                    85:46:58:7d:dd:2d:07:1c:07:3e:51:a4:b1:48:f6:
                    34:c8:31:c0:77:77:8d:7f:06:f3:be:dc:ac:5a:d5:
                    e1:41:1f:45:0a:ff:dc:d0:18:eb:43:70:1a:94:38:
                    25:8b:dd:75:1c:08:dc:a5:bc:0c:45:49:a6:51:12:
                    40:d2:02:b2:eb:19:48:84:f2:8e:93:52:13:d8:ac:
                    07:ef:92:d5:7d:52:47:da:40:5c:52:57:bc:68:56:
                    d5:4d:07:35:9d:3f:b6:3e:0b:56:91:e3:49:fa:a3:
                    fd:c5:84:8f:a5:f5:d9:3d:3d:29:09:86:68:be:92:
                    5c:12:a4:e1:75:bc:8d:33:a5:90:39:8e:86:b1:af:
                    74:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:A2:7D:3E:D8:27:A8:0F:D2:35:19:8F:D6:E1:50:56:E9:40:93:3A
            X509v3 Authority Key Identifier:
                keyid:7E:0A:A8:CD:2B:E8:61:70:1A:5C:A7:CF:B9:D4:50:D3:D9:18:27:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915DB9F/B88F4252545011E6A3A6D466C4F9AE02/fgqozSvoYXAaXKfPudRQ09kYJ-g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fgqozSvoYXAaXKfPudRQ09kYJ-g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DB9F/B88F4252545011E6A3A6D466C4F9AE02/fgqozSvoYXAaXKfPudRQ09kYJ-g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:84:c3:31:f4:73:1f:d6:d5:fa:41:5c:a0:56:a7:3f:b5:e6:
         b2:59:4b:f4:de:d9:f6:60:90:65:e8:50:ec:f9:f3:69:a7:e0:
         29:2d:bf:22:5e:71:56:c6:b0:c0:af:d9:55:ac:aa:04:c5:0a:
         2b:a3:7c:bb:5b:01:3b:16:67:e9:4d:d7:c5:f5:1e:75:48:08:
         81:e2:bf:38:40:aa:d0:96:6c:7c:70:01:d4:3c:28:3e:e7:3d:
         71:22:82:5f:57:5b:ed:ca:dc:c3:48:be:1d:f0:1b:d3:7b:09:
         5c:55:05:11:28:27:08:17:a0:48:44:51:da:27:be:fe:cf:d7:
         0a:76:0a:3a:5a:be:83:33:f6:a5:5b:66:3a:0c:a3:dd:db:77:
         67:fe:2c:0d:c6:6f:c6:3e:17:92:4e:10:34:0a:f0:5e:c8:05:
         9c:69:c2:39:8a:18:1a:7b:05:0c:fb:14:53:86:10:c6:b7:c8:
         fa:48:93:cc:3d:3e:1e:c6:e0:3f:a4:c6:0c:e8:ed:cf:73:93:
         a8:e3:90:ab:d5:88:24:a0:37:87:d4:ab:a7:bc:1e:88:97:43:
         5b:79:05:6a:16:68:a8:01:fe:a6:3f:34:4b:29:56:8b:44:5e:
         32:1c:54:31:92:83:c2:4e:04:fd:ab:4d:ec:72:d2:c9:91:2d:
         11:cb:79:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:20:47 2026 by rpki-client