Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171845/8675BE8020CA11ECB66C1452C4F9AE02/fJsp8fVuh-6usb90B2lNtO3a1Ts.mft
File:                     fJsp8fVuh-6usb90B2lNtO3a1Ts.mft (raw, json)
Hash identifier:          yVpPALFsYaZzLO8aEd+0wP4+j7EX+kd9WgFealM41uw=
Subject key identifier:   3B:04:B5:1A:05:D9:9B:D4:F3:B1:EA:7C:CD:9B:97:6A:3D:B4:C2:BF
Authority key identifier: 7C:9B:29:F1:F5:6E:87:EE:AE:B1:BF:74:07:69:4D:B4:ED:DA:D5:3B
Certificate issuer:       /CN=A9171845/serialNumber=7C9B29F1F56E87EEAEB1BF7407694DB4EDDAD53B
Certificate serial:       0585
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fJsp8fVuh-6usb90B2lNtO3a1Ts.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171845/8675BE8020CA11ECB66C1452C4F9AE02/fJsp8fVuh-6usb90B2lNtO3a1Ts.mft
Manifest number:          057C
Signing time:             Thu 16 Apr 2026 23:12:00 +0000
Manifest this update:     Thu 16 Apr 2026 23:12:00 +0000
Manifest next update:     Thu 23 Apr 2026 23:12:00 +0000
Files and hashes:         1: fJsp8fVuh-6usb90B2lNtO3a1Ts.crl (hash: /FlfUjJmTyO5xdPyn2np+xP8800A2Y0oLOIsTCtyINw=)
                          2: FE5E15E2216911EC82319078C4F9AE02.roa (hash: g3gsNvkXAeD0LqTvPButkL1dsuXDCkq774OmJJkZZZ8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171845/8675BE8020CA11ECB66C1452C4F9AE02/fJsp8fVuh-6usb90B2lNtO3a1Ts.crl
                          rsync://rpki.apnic.net/member_repository/A9171845/8675BE8020CA11ECB66C1452C4F9AE02/fJsp8fVuh-6usb90B2lNtO3a1Ts.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fJsp8fVuh-6usb90B2lNtO3a1Ts.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 23:11:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1413 (0x585)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171845, serialNumber=7C9B29F1F56E87EEAEB1BF7407694DB4EDDAD53B
        Validity
            Not Before: Apr 16 23:12:00 2026 GMT
            Not After : Apr 23 23:12:00 2026 GMT
        Subject: CN=69e16cc0-8ec6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9a:a5:45:2a:77:7c:e1:91:aa:33:65:03:18:
                    9d:18:28:54:14:b2:9f:93:38:c1:3a:f2:6b:38:80:
                    8c:35:a1:58:64:25:0f:a4:8f:6a:fd:f3:ac:56:8b:
                    6c:be:8a:57:de:ac:f3:ed:e6:36:6a:2e:f5:8f:1c:
                    95:d3:4e:12:56:7a:8a:75:ee:1f:0d:61:55:4e:e8:
                    d4:df:81:6d:36:8e:82:9a:30:be:25:2a:f8:a8:79:
                    95:39:5c:6a:08:4a:b2:92:71:11:59:eb:a9:50:3f:
                    28:9b:2a:c5:3f:83:3b:45:3f:0e:57:f7:2d:3c:6a:
                    bd:50:d8:cd:9d:ca:48:1f:0d:33:ba:20:48:ef:58:
                    97:41:41:90:c0:cc:9b:cf:9d:a9:87:e3:d9:6a:d5:
                    35:fa:2f:ad:ed:0d:5e:2d:e3:e9:35:19:b4:c5:d3:
                    50:d4:01:2d:cb:53:2a:63:70:95:80:ed:97:68:68:
                    20:19:5c:46:c8:3a:61:4a:1c:8c:27:12:46:83:c8:
                    7f:cd:50:c5:40:7b:9f:d7:40:48:fc:0d:de:12:18:
                    b2:dc:4c:a6:66:4b:e2:d3:b5:b4:60:37:6a:2f:f8:
                    5b:ee:2f:3f:7e:2d:07:7d:0f:e9:55:65:d6:76:f3:
                    86:76:5e:0f:06:ff:a3:d2:c2:d1:09:3f:c9:0f:fd:
                    45:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:04:B5:1A:05:D9:9B:D4:F3:B1:EA:7C:CD:9B:97:6A:3D:B4:C2:BF
            X509v3 Authority Key Identifier:
                keyid:7C:9B:29:F1:F5:6E:87:EE:AE:B1:BF:74:07:69:4D:B4:ED:DA:D5:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171845/8675BE8020CA11ECB66C1452C4F9AE02/fJsp8fVuh-6usb90B2lNtO3a1Ts.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fJsp8fVuh-6usb90B2lNtO3a1Ts.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171845/8675BE8020CA11ECB66C1452C4F9AE02/fJsp8fVuh-6usb90B2lNtO3a1Ts.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:c0:d8:4a:ae:30:5e:21:13:03:56:38:61:9e:d0:36:2c:d3:
         1b:75:d4:92:ef:8f:f3:36:5e:90:6d:c0:37:19:8f:a4:aa:1f:
         4f:dd:cb:b4:8d:15:b7:07:7b:ae:b9:03:73:6f:51:30:81:56:
         29:75:65:7b:d8:ef:84:54:54:fa:e0:5f:7e:7b:ec:cc:f8:7f:
         5f:07:4d:84:21:4c:d7:0d:56:e5:3f:4d:ad:30:8f:08:23:9b:
         b5:ef:9d:90:da:bf:16:2a:d7:ae:0d:17:91:be:51:26:e2:f9:
         d5:6a:bd:3c:83:57:9a:2d:77:82:15:a1:89:bc:8e:2f:7e:f4:
         f5:65:13:a9:52:f6:c6:eb:a3:dc:8b:ce:1d:26:24:74:aa:e1:
         fd:db:85:b3:50:80:94:cb:ce:0a:57:97:38:19:03:0d:05:d7:
         76:bf:88:f5:a1:ed:65:a0:71:ad:ca:0f:29:f2:4b:ba:e2:2a:
         73:76:5d:d7:af:c9:ce:22:97:43:54:d9:d4:77:8e:c3:cc:31:
         f2:e5:71:19:56:a3:3b:33:c7:4f:dc:41:c7:7e:04:f3:f4:a6:
         5a:14:1a:39:77:5d:4c:6b:16:b7:eb:90:2d:4e:7f:e7:48:c1:
         76:be:20:a1:0a:4c:09:92:e7:d8:92:a2:ff:a2:14:a0:e3:a7:
         91:24:c3:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:54:53 2026 by rpki-client