Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91810B4/77D52AA016B511ED9803A272C4F9AE02/FTtjqTdzsliYghhmVd7zBEbdhg0.mft
File:                     FTtjqTdzsliYghhmVd7zBEbdhg0.mft (raw, json)
Hash identifier:          UmL0vvQ4lRSYkVSu96nSjtRQflyvlVlifSmBvvmQXNE=
Subject key identifier:   25:27:BF:4B:64:09:E6:C0:9B:52:D3:B4:E5:26:C7:65:E2:87:DF:3E
Authority key identifier: 15:3B:63:A9:37:73:B2:58:98:82:18:66:55:DE:F3:04:46:DD:86:0D
Certificate issuer:       /CN=A91810B4/serialNumber=153B63A93773B2589882186655DEF30446DD860D
Certificate serial:       030F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FTtjqTdzsliYghhmVd7zBEbdhg0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91810B4/77D52AA016B511ED9803A272C4F9AE02/FTtjqTdzsliYghhmVd7zBEbdhg0.mft
Manifest number:          0308
Signing time:             Sun 19 Apr 2026 01:07:56 +0000
Manifest this update:     Sun 19 Apr 2026 01:07:55 +0000
Manifest next update:     Sun 26 Apr 2026 01:07:55 +0000
Files and hashes:         1: FTtjqTdzsliYghhmVd7zBEbdhg0.crl (hash: fpOcuHJd53yMoQP+e/p76QzhNWP+iUnBRtN3wgxKeGw=)
                          2: 27A32D7A16BA11EDB0E9E464C4F9AE02.roa (hash: uTY9Mx19zYpw6CO6HqYxOp2zXgWkOsB7x9EURMKFBhA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91810B4/77D52AA016B511ED9803A272C4F9AE02/FTtjqTdzsliYghhmVd7zBEbdhg0.crl
                          rsync://rpki.apnic.net/member_repository/A91810B4/77D52AA016B511ED9803A272C4F9AE02/FTtjqTdzsliYghhmVd7zBEbdhg0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FTtjqTdzsliYghhmVd7zBEbdhg0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 01:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 783 (0x30f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91810B4, serialNumber=153B63A93773B2589882186655DEF30446DD860D
        Validity
            Not Before: Apr 19 01:07:55 2026 GMT
            Not After : Apr 26 01:07:55 2026 GMT
        Subject: CN=69e42aeb-7a94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ab:da:c0:4a:46:d2:65:ce:7b:f5:81:f1:df:
                    35:f9:49:6d:27:b1:0c:de:b0:1b:c3:26:0a:02:ae:
                    48:75:ae:9b:20:18:d8:c2:4b:1c:f2:a4:72:a0:71:
                    1f:82:ef:78:48:b1:ce:16:ef:28:b6:dd:58:7c:f3:
                    74:75:4e:12:eb:88:35:a6:25:57:18:e2:e0:dc:90:
                    b3:57:1c:51:72:bf:d3:dd:5a:c6:9f:0a:36:e3:0d:
                    14:43:3c:5d:16:e1:1d:35:fa:8d:ab:5c:c2:04:2e:
                    c5:e8:70:a4:c7:b9:c6:cf:9f:7e:49:72:5c:ed:a1:
                    62:8e:fe:44:02:94:c6:01:58:68:48:64:eb:f8:96:
                    0e:22:72:00:01:21:bb:79:b1:b9:55:b0:b2:f6:f3:
                    2a:57:76:b6:83:66:6d:8d:c3:5f:84:e9:16:25:4c:
                    4c:10:98:0f:df:0f:0c:75:38:c4:21:18:35:21:79:
                    ec:67:41:49:68:52:01:62:f7:14:1b:a8:5b:5f:be:
                    ea:05:0e:6b:59:35:10:a3:23:de:c0:ef:1d:de:62:
                    b9:8a:f5:86:fb:5f:6b:95:d7:3d:52:12:43:3e:35:
                    33:22:86:07:54:b1:fc:47:90:07:78:b5:bc:b0:5d:
                    cd:0b:de:e9:88:78:28:09:56:5b:a9:f6:76:81:a1:
                    c8:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:27:BF:4B:64:09:E6:C0:9B:52:D3:B4:E5:26:C7:65:E2:87:DF:3E
            X509v3 Authority Key Identifier:
                keyid:15:3B:63:A9:37:73:B2:58:98:82:18:66:55:DE:F3:04:46:DD:86:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91810B4/77D52AA016B511ED9803A272C4F9AE02/FTtjqTdzsliYghhmVd7zBEbdhg0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FTtjqTdzsliYghhmVd7zBEbdhg0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91810B4/77D52AA016B511ED9803A272C4F9AE02/FTtjqTdzsliYghhmVd7zBEbdhg0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:2f:4a:24:0b:32:58:af:06:f7:5f:df:92:3b:c7:98:52:b1:
         58:90:f5:9b:40:dc:9b:6c:e7:bb:6c:43:b5:75:04:a6:72:e5:
         17:bb:13:96:bb:e4:3d:e5:81:4b:11:c9:51:26:17:6b:fb:15:
         a8:4d:9e:20:96:55:8c:da:bf:70:71:d3:74:f7:c2:10:35:4f:
         e4:20:11:92:37:d2:b8:c0:3b:a3:d3:b6:5e:43:5b:83:e4:6d:
         03:a4:e0:24:10:a0:3a:8a:50:4d:3f:82:a0:8e:2a:d7:b6:23:
         c9:b0:2c:c2:b6:f8:88:7e:62:42:d0:e7:fe:15:e7:7c:c6:c3:
         a1:21:f9:86:ba:76:4e:8c:cf:71:fc:bf:1e:29:09:04:6e:b1:
         06:e5:e8:9a:0f:24:c4:0e:7e:76:d1:f7:57:9b:8a:78:9b:0c:
         91:19:ca:99:71:66:50:cd:f3:59:96:99:d4:c4:a7:f6:a0:cd:
         2d:7e:43:e1:55:2d:f9:4f:00:30:28:90:fb:cd:10:e3:7d:2f:
         93:10:ce:96:0a:52:7a:fa:a9:fd:b0:78:db:1d:9e:6e:63:e1:
         71:7b:01:1f:2f:0a:9c:11:fc:f7:60:95:c3:04:42:be:72:5f:
         0a:27:ae:a5:07:95:83:93:8a:d3:c4:a0:85:7d:e6:2b:82:67:
         29:9c:96:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:17:04 2026 by rpki-client