Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.mft
File:                     FiENxlKhYN7k5AFbvLQJ-odyRkA.mft (raw, json)
Hash identifier:          3oQuCbHZeE/Ga03zGI5u8smWECo7MClqBdFeIe62KOk=
Subject key identifier:   18:CC:4A:C9:D7:FB:A6:2B:C5:A1:0B:AA:0C:C4:7D:C8:41:08:82:91
Authority key identifier: 16:21:0D:C6:52:A1:60:DE:E4:E4:01:5B:BC:B4:09:FA:87:72:46:40
Certificate issuer:       /CN=A91983BD/serialNumber=16210DC652A160DEE4E4015BBCB409FA87724640
Certificate serial:       3514
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FiENxlKhYN7k5AFbvLQJ-odyRkA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.mft
Manifest number:          39D9
Signing time:             Sat 28 Feb 2026 14:38:44 +0000
Manifest this update:     Sat 28 Feb 2026 14:38:43 +0000
Manifest next update:     Sat 07 Mar 2026 14:38:43 +0000
Files and hashes:         1: FiENxlKhYN7k5AFbvLQJ-odyRkA.crl (hash: 7J048xzZyrS21kj1RqU4IizCHXUYCfn21oVBzCgUZQU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.crl
                          rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FiENxlKhYN7k5AFbvLQJ-odyRkA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 14:38:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13588 (0x3514)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91983BD, serialNumber=16210DC652A160DEE4E4015BBCB409FA87724640
        Validity
            Not Before: Feb 28 14:38:43 2026 GMT
            Not After : Mar  7 14:38:43 2026 GMT
        Subject: CN=69a2fdf4-5315
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:db:50:c8:72:b2:1b:91:06:f0:2c:3f:6a:ff:
                    94:98:a6:9d:f7:00:13:b8:dc:32:30:50:8e:c6:5f:
                    7c:44:ef:a6:cb:8a:13:97:f5:29:bf:03:a9:da:fd:
                    b7:03:89:79:0e:e0:bc:0c:04:78:4a:c2:b6:0b:4d:
                    3c:cd:08:e1:a8:45:8a:0a:c0:72:fa:43:a7:1c:f6:
                    62:56:7d:e9:70:52:32:fc:08:71:1d:8e:be:46:36:
                    bd:fd:8b:dd:d1:82:44:d6:bd:02:75:da:9b:87:95:
                    e2:54:77:d3:ef:b8:b2:99:f4:86:ca:0b:96:5c:b8:
                    b2:f9:ab:11:e6:02:1d:b4:2d:a1:ab:0c:96:dc:c7:
                    19:61:7d:d2:43:ab:a0:61:75:62:24:fd:5d:33:51:
                    2b:08:81:e2:40:72:6e:28:84:de:5a:bf:ab:fc:97:
                    3c:41:e6:c4:70:21:8e:6d:12:6b:18:e5:1d:fd:5c:
                    b4:37:05:87:7d:67:a2:71:36:2d:4f:d1:e3:30:f1:
                    63:28:7e:13:7b:93:df:58:fc:c4:d7:79:13:a3:14:
                    c9:31:83:cd:78:e9:27:06:c8:48:2d:3f:e3:12:ce:
                    9d:bf:0b:f2:f9:0f:04:cd:72:df:d9:d5:38:9c:f3:
                    21:b4:5f:b2:7c:8a:c3:07:be:37:d5:a8:f5:74:34:
                    2b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:CC:4A:C9:D7:FB:A6:2B:C5:A1:0B:AA:0C:C4:7D:C8:41:08:82:91
            X509v3 Authority Key Identifier:
                keyid:16:21:0D:C6:52:A1:60:DE:E4:E4:01:5B:BC:B4:09:FA:87:72:46:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FiENxlKhYN7k5AFbvLQJ-odyRkA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:b3:2c:cb:a3:c6:6c:7b:d5:20:1a:64:3d:ea:2b:0d:b3:7c:
         f5:d9:71:8d:72:c7:f2:1b:76:f8:7a:06:ec:19:dd:17:fd:b9:
         b9:cd:7f:bd:ac:92:4e:d6:c0:09:23:f7:87:c9:57:06:cc:5c:
         78:ab:54:83:da:6a:57:7a:3f:e8:91:36:85:7d:1f:8f:d6:04:
         dd:f3:ef:8e:6a:5e:52:99:24:73:7b:84:53:c1:6f:77:65:ba:
         fb:f7:0b:e8:aa:1e:c7:5b:24:92:bb:df:42:d7:7f:95:84:c5:
         cf:59:cd:55:b3:1f:87:05:71:2a:c1:d5:75:c5:38:bc:07:81:
         e9:fc:67:71:57:23:9b:1d:9b:86:5e:34:9e:dc:a1:60:7d:cc:
         2d:eb:2b:63:a3:e0:e5:f7:d0:15:90:26:98:32:7c:5c:a9:75:
         4b:00:e3:a0:3e:c6:21:92:44:64:10:40:fb:36:d2:f1:08:f8:
         7e:32:5c:65:65:99:02:35:fc:5b:52:6c:05:90:75:fb:7a:47:
         0e:c5:06:a9:24:43:0d:df:0d:0a:29:36:70:0d:26:98:06:05:
         8a:65:4b:b0:4a:ee:99:17:2e:69:9f:35:d4:1d:54:9e:3b:1c:
         b1:70:f6:22:a9:60:2d:79:b1:de:d2:81:c5:90:03:a3:6e:40:
         40:f8:1a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:08:32 2026 by rpki-client