Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.mft
File:                     ftCxNhmz84MH3uG0Dn8neTItvm4.mft (raw, json)
Hash identifier:          hq/rrTojC6s9KftQMnacLs1QdixFWVzpS7a7Gawb6bE=
Subject key identifier:   A8:62:FF:86:C5:1E:CB:7D:6B:94:CC:11:37:47:20:F9:DD:50:52:42
Authority key identifier: 7E:D0:B1:36:19:B3:F3:83:07:DE:E1:B4:0E:7F:27:79:32:2D:BE:6E
Certificate issuer:       /CN=A91A7EA5/serialNumber=7ED0B13619B3F38307DEE1B40E7F2779322DBE6E
Certificate serial:       0D0C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ftCxNhmz84MH3uG0Dn8neTItvm4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.mft
Manifest number:          0CF4
Signing time:             Sat 28 Feb 2026 18:21:45 +0000
Manifest this update:     Sat 28 Feb 2026 18:21:45 +0000
Manifest next update:     Sat 07 Mar 2026 18:21:45 +0000
Files and hashes:         1: ftCxNhmz84MH3uG0Dn8neTItvm4.crl (hash: gZPmAnBXBGiUd5WqQk1yKUUpGfuYXYRfe48voHlHpLk=)
                          2: 93E73ABE833811ECA0A7120DC4F9AE02.roa (hash: LsQk9aanYlIg6yy97QMmvJfUl0SRjOnoT5f0BpMoHh0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.crl
                          rsync://rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ftCxNhmz84MH3uG0Dn8neTItvm4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 18:21:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3340 (0xd0c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7EA5, serialNumber=7ED0B13619B3F38307DEE1B40E7F2779322DBE6E
        Validity
            Not Before: Feb 28 18:21:45 2026 GMT
            Not After : Mar  7 18:21:45 2026 GMT
        Subject: CN=69a33239-48c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9b:52:fa:af:54:8e:05:47:0c:98:32:ae:17:
                    9c:8a:6a:b8:d7:7d:59:1e:a0:3e:11:9b:38:2f:f5:
                    f8:c1:28:27:5d:17:7f:ad:92:9c:6e:a1:e0:d7:43:
                    f7:89:2b:b2:77:37:e1:f1:7b:d0:d2:10:33:4c:d7:
                    06:e7:0c:4a:77:50:e8:ce:11:02:c6:f1:75:40:79:
                    c6:d0:bc:35:e2:ca:72:c3:fc:6a:e9:3c:66:6f:65:
                    3c:6a:14:1d:d7:08:0d:ae:84:f6:35:65:c9:8f:f8:
                    f1:68:44:8f:bd:ee:e2:dd:2e:ec:83:de:51:07:e2:
                    07:50:6c:49:6e:77:db:e7:af:1d:ef:e0:39:f4:f9:
                    f0:21:c8:06:5a:51:2d:da:9e:66:f9:c6:69:6e:79:
                    53:62:8e:1a:b4:f3:d4:f1:c2:51:c0:c2:de:c7:72:
                    4c:18:b5:8a:73:aa:0f:88:ba:41:d4:41:53:82:0e:
                    22:32:55:4e:c6:04:3e:db:29:79:bc:24:aa:1b:dd:
                    ca:c2:f5:9c:1c:cb:6c:d6:da:50:43:e8:a1:57:34:
                    7e:39:04:b3:ce:d8:ed:ac:91:4e:f0:5a:97:4e:7a:
                    c1:80:cb:06:93:a0:22:cb:c4:9a:7a:cc:cd:24:e6:
                    72:d5:71:31:63:bc:89:61:ab:e2:cf:0b:93:7f:61:
                    40:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:62:FF:86:C5:1E:CB:7D:6B:94:CC:11:37:47:20:F9:DD:50:52:42
            X509v3 Authority Key Identifier:
                keyid:7E:D0:B1:36:19:B3:F3:83:07:DE:E1:B4:0E:7F:27:79:32:2D:BE:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ftCxNhmz84MH3uG0Dn8neTItvm4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:32:25:31:49:a9:4c:5f:53:25:d5:42:19:3a:4c:cd:2e:51:
         90:1a:2e:35:15:cf:95:33:8a:bc:09:f4:92:e1:9d:83:ff:74:
         64:6a:91:1f:e7:5a:fd:83:1a:13:7c:97:b2:d1:e2:62:6a:70:
         d8:71:a8:7d:8b:48:04:4e:e3:00:da:0e:1a:0b:6c:fe:c9:fc:
         13:62:55:4c:66:d1:be:1b:c4:0c:e6:82:ae:81:f9:9c:fc:41:
         41:45:db:13:e9:de:79:d1:d5:0d:cf:fc:6c:51:27:f8:93:d8:
         72:74:fe:ac:69:29:6a:b8:fb:a0:b4:df:be:cc:95:40:a2:ec:
         bb:e7:fc:63:62:ce:de:e9:17:cb:9e:63:50:37:7b:1a:35:a6:
         76:64:9c:3f:61:c8:a6:03:9c:be:5b:24:4f:bc:17:bb:ba:f0:
         7f:36:87:54:7c:40:85:45:96:be:0f:3d:77:9d:23:39:48:a7:
         83:d5:0b:f8:da:1d:e8:d0:53:1c:61:e1:9e:24:53:e1:85:8c:
         3b:70:d6:fa:84:31:a6:e8:30:30:ce:d5:77:07:bf:fd:6f:3b:
         17:1d:33:a9:55:fe:a5:e7:4d:a0:b9:55:48:64:69:54:bb:04:
         ff:aa:55:34:8f:c3:9d:3a:5c:68:c6:62:8f:15:cb:6f:cd:9e:
         2e:0b:b5:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:35:38 2026 by rpki-client