Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.mft
File:                     ftCxNhmz84MH3uG0Dn8neTItvm4.mft (raw, json)
Hash identifier:          v1VfPZdwOlsI1KE2lPfGwePAieIs6w4BIBezfT/ukdU=
Subject key identifier:   0E:2F:0E:B4:E8:55:21:A3:8C:0B:C4:2C:16:37:03:6E:F9:75:F6:69
Authority key identifier: 7E:D0:B1:36:19:B3:F3:83:07:DE:E1:B4:0E:7F:27:79:32:2D:BE:6E
Certificate issuer:       /CN=A91A7EA5/serialNumber=7ED0B13619B3F38307DEE1B40E7F2779322DBE6E
Certificate serial:       0D28
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ftCxNhmz84MH3uG0Dn8neTItvm4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.mft
Manifest number:          0D0E
Signing time:             Thu 16 Apr 2026 18:06:25 +0000
Manifest this update:     Thu 16 Apr 2026 18:06:25 +0000
Manifest next update:     Thu 23 Apr 2026 18:06:25 +0000
Files and hashes:         1: ftCxNhmz84MH3uG0Dn8neTItvm4.crl (hash: hufFJpeh5d2868SWFJZsV+e6zCSDtI2U3mIfksu/eYU=)
                          2: 93E73ABE833811ECA0A7120DC4F9AE02.roa (hash: fNaidmYlOzWHjrBiA/U1bBlqdgJlWr5NlKnTyGVkvtg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.crl
                          rsync://rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ftCxNhmz84MH3uG0Dn8neTItvm4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 18:06:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3368 (0xd28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7EA5, serialNumber=7ED0B13619B3F38307DEE1B40E7F2779322DBE6E
        Validity
            Not Before: Apr 16 18:06:25 2026 GMT
            Not After : Apr 23 18:06:25 2026 GMT
        Subject: CN=69e12521-b528
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:39:3c:e4:b0:8e:28:59:c0:68:1b:fb:92:de:
                    91:4c:e6:71:c1:08:f9:3d:50:81:f4:bb:32:62:74:
                    3a:7f:be:78:b6:79:2f:81:49:7f:4b:d9:aa:bc:54:
                    78:50:98:4a:de:bd:bb:29:29:b2:84:04:db:32:30:
                    2b:71:e1:87:ea:48:61:a0:68:81:de:4e:28:04:33:
                    cc:5e:22:49:7e:0c:f3:a8:09:38:2b:3f:d9:e3:02:
                    3c:02:3b:33:b5:14:af:f3:8a:06:03:5f:49:d2:5e:
                    98:3c:5d:ec:be:19:86:d4:16:30:c5:45:a5:d8:c6:
                    eb:a6:f8:79:c8:07:34:de:bc:2c:75:a7:49:40:ba:
                    4f:1d:0a:0c:9d:98:13:e6:76:cd:2a:2b:4e:ce:8a:
                    81:5d:8a:78:2b:fa:b2:44:13:07:85:1b:c3:d2:61:
                    71:88:96:0b:41:72:7c:31:38:5a:40:fb:a9:13:8d:
                    08:da:94:ab:f4:c5:25:5d:53:e2:5f:47:19:69:c8:
                    c7:d5:81:b7:e0:ec:57:3e:26:a3:3f:8e:0a:af:9e:
                    fa:d6:32:3e:5c:16:88:50:13:2e:36:e4:c2:1e:6e:
                    c3:ed:11:33:4c:b1:ab:11:d6:6d:d7:21:f2:6d:6f:
                    dc:8c:3b:6a:fc:5a:1c:d8:17:28:af:03:e5:2a:46:
                    fe:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:2F:0E:B4:E8:55:21:A3:8C:0B:C4:2C:16:37:03:6E:F9:75:F6:69
            X509v3 Authority Key Identifier:
                keyid:7E:D0:B1:36:19:B3:F3:83:07:DE:E1:B4:0E:7F:27:79:32:2D:BE:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ftCxNhmz84MH3uG0Dn8neTItvm4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:ba:9f:04:0d:a1:7c:f7:a9:26:37:10:fc:1b:05:06:32:42:
         7f:d2:e3:ba:94:b1:1b:f5:be:c7:50:7d:a9:2d:f6:b0:ee:b1:
         51:eb:be:e9:e1:03:dc:7b:02:ce:58:54:c7:2e:92:53:58:34:
         9d:84:2c:ff:10:c6:ba:b0:53:d5:05:17:bb:74:74:98:01:13:
         25:61:a1:62:09:31:f6:5d:26:09:43:ed:01:31:c1:c1:2e:b7:
         06:5e:99:ba:6f:45:d0:1c:d5:46:f4:7d:c1:06:3a:b2:e5:97:
         a0:81:ed:a8:5d:75:1c:d1:21:c6:0b:49:aa:77:7a:ef:23:ae:
         83:c4:eb:21:7a:01:05:1b:ea:63:58:e7:cf:0c:36:67:47:42:
         1e:14:13:30:e1:4f:08:22:7d:eb:7e:b1:08:40:96:e9:70:cb:
         30:ac:11:ef:28:ab:09:a7:2a:23:36:b4:93:1f:2a:99:16:ed:
         f7:45:57:e3:bf:89:44:69:ad:51:6c:85:ac:35:61:ba:85:fa:
         eb:04:bc:fb:8a:6a:e9:19:92:73:a0:f7:0f:f8:e2:59:9e:1e:
         48:1f:51:e7:55:dd:9a:1b:e8:a3:73:db:56:d0:71:33:47:0a:
         76:09:f6:57:93:63:76:d4:71:29:46:33:4d:a3:63:ce:a7:d8:
         2e:20:7c:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:07:10 2026 by rpki-client