Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193267/8966D6FE6EE111EDB45FF360C4F9AE02/FggPXxr0qlYST_cZXRPoW5OllSE.mft
File:                     FggPXxr0qlYST_cZXRPoW5OllSE.mft (raw, json)
Hash identifier:          bV8k326RnhJhwg7+97fqGzA5Ie38fvgTTq7kk9p2Kfo=
Subject key identifier:   D2:03:29:8E:55:D1:16:2B:B4:62:08:B9:18:91:2C:7F:96:6F:35:13
Authority key identifier: 16:08:0F:5F:1A:F4:AA:56:12:4F:F7:19:5D:13:E8:5B:93:A5:95:21
Certificate issuer:       /CN=A9193267/serialNumber=16080F5F1AF4AA56124FF7195D13E85B93A59521
Certificate serial:       027F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FggPXxr0qlYST_cZXRPoW5OllSE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193267/8966D6FE6EE111EDB45FF360C4F9AE02/FggPXxr0qlYST_cZXRPoW5OllSE.mft
Manifest number:          027A
Signing time:             Fri 17 Apr 2026 01:40:51 +0000
Manifest this update:     Fri 17 Apr 2026 01:40:50 +0000
Manifest next update:     Fri 24 Apr 2026 01:40:50 +0000
Files and hashes:         1: FggPXxr0qlYST_cZXRPoW5OllSE.crl (hash: tqo7mhAKTpd+OY9Mk7o5s889arq7fxcWmLT6Ad0f7wE=)
                          2: F29D0E026EE311ED94338E61C4F9AE02.roa (hash: c6WyHsBn28zLxAPslj/mtPb6e/zIB82d9kY7lKbn8V0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193267/8966D6FE6EE111EDB45FF360C4F9AE02/FggPXxr0qlYST_cZXRPoW5OllSE.crl
                          rsync://rpki.apnic.net/member_repository/A9193267/8966D6FE6EE111EDB45FF360C4F9AE02/FggPXxr0qlYST_cZXRPoW5OllSE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FggPXxr0qlYST_cZXRPoW5OllSE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 01:40:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 639 (0x27f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193267, serialNumber=16080F5F1AF4AA56124FF7195D13E85B93A59521
        Validity
            Not Before: Apr 17 01:40:50 2026 GMT
            Not After : Apr 24 01:40:50 2026 GMT
        Subject: CN=69e18fa3-bcb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:91:b1:16:bc:97:c9:06:99:02:6a:85:0c:ab:
                    07:9c:f4:d3:d1:95:61:d9:50:87:95:77:78:41:c9:
                    81:e1:6a:e7:26:c6:c8:ff:e7:f7:63:7c:e7:c3:a8:
                    c2:33:10:6e:20:3c:81:ff:7f:8d:fa:05:83:ab:f5:
                    14:0d:5d:dd:22:86:fc:02:fd:25:e0:03:17:a4:ab:
                    63:d8:95:da:07:68:dc:14:ad:55:47:dc:cc:65:a3:
                    fb:3a:d7:c5:93:dc:1f:9c:14:68:db:2a:b4:93:ef:
                    10:87:58:e7:8e:95:88:5c:f5:c6:eb:c2:1d:0a:c6:
                    a8:8b:5e:27:c7:89:95:fb:54:6a:92:43:21:1f:4a:
                    1b:5b:4a:d5:cd:92:e0:3f:24:c1:a4:74:36:8a:33:
                    7c:e4:7d:8f:3f:bc:f2:5d:5e:eb:f8:5b:32:f2:84:
                    ef:c4:24:56:1d:92:a8:fd:96:8a:10:49:e6:19:69:
                    41:4a:1b:18:72:9c:a7:7b:9a:f6:3b:f9:32:0e:a0:
                    25:7b:bb:39:b7:b1:34:22:e9:91:c0:92:80:5f:e9:
                    07:49:02:8e:20:35:dd:4b:27:c0:fc:97:b8:fa:cc:
                    ca:60:28:c8:f0:70:84:82:d1:96:96:d8:fd:11:67:
                    be:14:56:7c:44:00:75:1a:9a:4a:48:a9:da:11:aa:
                    bd:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:03:29:8E:55:D1:16:2B:B4:62:08:B9:18:91:2C:7F:96:6F:35:13
            X509v3 Authority Key Identifier:
                keyid:16:08:0F:5F:1A:F4:AA:56:12:4F:F7:19:5D:13:E8:5B:93:A5:95:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193267/8966D6FE6EE111EDB45FF360C4F9AE02/FggPXxr0qlYST_cZXRPoW5OllSE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FggPXxr0qlYST_cZXRPoW5OllSE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193267/8966D6FE6EE111EDB45FF360C4F9AE02/FggPXxr0qlYST_cZXRPoW5OllSE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:f1:ea:41:35:d9:04:09:69:99:9d:08:c3:9e:de:41:ba:b6:
         b7:34:7a:ad:30:81:40:7f:f4:6f:50:60:94:77:a2:2b:2e:a2:
         78:9c:86:48:69:6b:b3:ac:3a:5e:f5:6d:f5:e7:b7:96:24:6e:
         a8:16:b0:1c:d6:2b:58:90:88:cc:98:d8:90:08:af:7c:72:85:
         74:6a:6e:a7:c3:a5:57:39:ad:ea:7b:42:d7:d3:09:49:1d:5c:
         04:e9:71:8f:9f:ea:9d:d3:f3:45:6d:4a:ea:ed:86:1b:e2:0c:
         a4:c1:f2:79:42:3c:6b:dc:c0:11:41:99:21:12:50:81:db:cf:
         04:0e:51:c3:bf:fd:f8:af:02:3e:a1:8d:85:e5:c9:3c:15:24:
         f6:49:3b:7f:56:da:89:ae:5b:89:22:b1:56:3b:8b:fe:a5:56:
         da:35:a5:0b:cb:90:4a:7e:5f:a3:86:44:2e:29:3c:4b:2f:51:
         9c:1d:21:e9:d1:64:95:45:c4:a8:da:32:2f:24:53:72:4e:14:
         fc:cb:f0:ea:ad:bd:f7:1c:56:18:c6:db:8e:89:39:bb:a0:a5:
         a6:cb:71:01:ee:04:e2:e1:5b:41:a2:70:f4:10:de:5b:84:15:
         35:86:6b:c9:ff:94:58:01:dc:07:a9:42:0b:d1:24:9a:ed:d1:
         a4:ab:52:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:46:01 2026 by rpki-client