Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.mft
File:                     FjMWdiEa7mdzSFtlIzxiw6RYev0.mft (raw, json)
Hash identifier:          7+Ex1knOFswMBkUdW61i3XMBJe52ScqJw9zHFLwtp7s=
Subject key identifier:   4F:2A:C4:CD:C8:F2:05:31:0E:96:2F:FD:45:94:31:C9:75:00:93:7E
Authority key identifier: 16:33:16:76:21:1A:EE:67:73:48:5B:65:23:3C:62:C3:A4:58:7A:FD
Certificate issuer:       /CN=A91A86D0/serialNumber=16331676211AEE6773485B65233C62C3A4587AFD
Certificate serial:       0CCC
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FjMWdiEa7mdzSFtlIzxiw6RYev0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.mft
Manifest number:          0CB8
Signing time:             Mon 02 Mar 2026 00:34:49 +0000
Manifest this update:     Mon 02 Mar 2026 00:34:47 +0000
Manifest next update:     Mon 09 Mar 2026 00:34:47 +0000
Files and hashes:         1: FjMWdiEa7mdzSFtlIzxiw6RYev0.crl (hash: JhfT1hmIdCwZ5HQ5DPjiee9A/KORsZ+EYTp2PJ+5ndg=)
                          2: CF1B3152CCE111EB90AF2C7AC4F9AE02.roa (hash: twJcU0dvcEBMbuiZq5Wi1cC3xSMhYlFvAN7WKpOcESs=)
                          3: DD004670C39711F0A241F86DC4F9AE02.roa (hash: ILb2f5MFl0hmYnyJlCFO6BUBR2uQox0knIxNniHNGBA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.crl
                          rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FjMWdiEa7mdzSFtlIzxiw6RYev0.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:34:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3276 (0xccc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A86D0, serialNumber=16331676211AEE6773485B65233C62C3A4587AFD
        Validity
            Not Before: Mar  2 00:34:47 2026 GMT
            Not After : Mar  9 00:34:47 2026 GMT
        Subject: CN=69a4db28-68c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:0e:0c:6c:55:a9:b7:dd:13:82:d5:a3:8e:f3:
                    cd:cc:c8:77:51:f4:ac:91:96:cd:3b:ad:52:70:ef:
                    e6:d1:bb:62:3b:2a:7e:a3:e1:da:56:47:5c:5c:99:
                    38:26:db:19:6f:1a:76:d1:45:a8:55:b2:01:60:ee:
                    56:d6:66:0e:d9:90:e7:b7:da:ab:63:b2:24:29:8c:
                    0e:b9:49:b1:aa:99:26:b8:40:b7:dd:11:0e:f0:9b:
                    f2:8b:23:66:90:b7:36:c3:82:f1:9e:b5:2a:01:03:
                    3d:53:83:e8:b4:ed:3e:d0:11:ab:4b:da:76:ba:8b:
                    3e:d1:89:d6:3b:57:11:28:8c:d5:60:bb:fb:a9:3a:
                    a5:fd:19:74:e3:cd:b1:13:e8:f2:8b:be:51:57:60:
                    b4:b2:a5:79:8f:08:e6:fc:77:df:6b:31:35:84:c8:
                    3c:8a:57:dd:97:c2:29:0d:76:4e:81:61:72:22:59:
                    56:02:50:ac:fe:8d:29:41:a3:61:14:b2:ec:b8:b0:
                    a7:60:ec:bb:06:d3:64:1b:97:2e:04:39:51:4c:53:
                    18:ce:af:d0:a5:de:52:6c:ff:2e:8f:13:f2:94:b0:
                    21:4e:7f:5b:40:45:14:6c:ee:b7:5f:86:c1:a2:61:
                    d2:c9:0f:42:14:7e:ff:33:dc:0c:d6:74:aa:57:14:
                    22:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:2A:C4:CD:C8:F2:05:31:0E:96:2F:FD:45:94:31:C9:75:00:93:7E
            X509v3 Authority Key Identifier:
                keyid:16:33:16:76:21:1A:EE:67:73:48:5B:65:23:3C:62:C3:A4:58:7A:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FjMWdiEa7mdzSFtlIzxiw6RYev0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:75:b3:33:77:41:b2:f4:21:56:7c:f4:98:b4:4c:c8:ba:64:
         39:80:1c:96:2d:2c:c5:65:06:1e:75:2c:98:9b:2b:d9:67:0c:
         96:ee:60:0b:19:05:ea:9a:df:9d:41:9a:9a:dc:d2:5e:1d:81:
         03:80:50:7f:56:fe:8b:e7:85:32:1c:91:f9:36:25:77:0b:9d:
         17:89:fb:26:42:ac:f2:0b:c6:43:b6:8d:2f:aa:99:e2:78:a8:
         2d:c5:6b:01:50:ff:f9:97:40:87:7f:b7:98:f8:7c:3d:9c:3a:
         39:85:5b:c4:c4:05:0a:61:13:63:d7:41:08:7b:98:cd:48:d9:
         ea:86:ed:52:63:59:c3:b3:8b:fe:01:46:1d:3c:fb:2e:8e:75:
         1d:e0:04:c9:cc:2a:61:5d:87:49:50:fb:a3:c9:0e:49:21:32:
         9c:21:1c:8e:d8:44:44:66:d1:7b:7d:ed:aa:04:8c:54:8b:cf:
         d8:8d:09:7a:ed:2a:f6:df:be:ed:44:f5:d3:51:41:ea:9c:5e:
         13:c4:a6:50:e6:60:04:fd:96:f6:07:de:c6:a1:d9:74:b6:e6:
         d1:93:05:3f:59:68:ee:a1:c4:06:f4:a5:9b:f3:16:94:01:84:
         dc:91:ab:21:bd:0d:33:0f:7e:ea:04:eb:05:f9:4c:51:18:8d:
         13:3a:ed:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:41:00 2026 by rpki-client