Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/fmfojMQDeKlwRj3y0LBgiOZdubA.mft
File:                     fmfojMQDeKlwRj3y0LBgiOZdubA.mft (raw, json)
Hash identifier:          1BtNnso4gSw+g/lVaFzTb4avbxsKkYkxx9tXkHMD8+Y=
Subject key identifier:   A3:DF:CB:4A:27:6B:29:A2:0A:A6:0B:14:B3:B4:F2:27:BD:AF:8E:13
Authority key identifier: 7E:67:E8:8C:C4:03:78:A9:70:46:3D:F2:D0:B0:60:88:E6:5D:B9:B0
Certificate issuer:       /CN=A91C9D04/serialNumber=7E67E88CC40378A970463DF2D0B06088E65DB9B0
Certificate serial:       09A7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fmfojMQDeKlwRj3y0LBgiOZdubA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/fmfojMQDeKlwRj3y0LBgiOZdubA.mft
Manifest number:          2000
Signing time:             Mon 02 Mar 2026 02:52:33 +0000
Manifest this update:     Mon 02 Mar 2026 02:52:32 +0000
Manifest next update:     Mon 09 Mar 2026 02:52:32 +0000
Files and hashes:         1: fmfojMQDeKlwRj3y0LBgiOZdubA.crl (hash: 4Nsqs9QWlTjChgDCSgdp8vFtesaj7M/pKZbmBENX6OY=)
                          2: A1DFD796A65511EABDAED713C4F9AE02.roa (hash: YyKcKSJ7S51a2fFSdQw73Pts8nXvTGeoBxsVn9SkZSo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/fmfojMQDeKlwRj3y0LBgiOZdubA.crl
                          rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/fmfojMQDeKlwRj3y0LBgiOZdubA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fmfojMQDeKlwRj3y0LBgiOZdubA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:52:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2471 (0x9a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9D04, serialNumber=7E67E88CC40378A970463DF2D0B06088E65DB9B0
        Validity
            Not Before: Mar  2 02:52:32 2026 GMT
            Not After : Mar  9 02:52:32 2026 GMT
        Subject: CN=69a4fb71-dfb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d2:c5:d6:b3:4f:a9:0f:eb:c1:ba:c2:cd:a3:
                    34:aa:9c:5f:1c:2c:d4:db:81:7c:4c:6d:26:97:c7:
                    d5:87:a2:0c:d7:65:bb:f8:9d:49:f8:a5:30:2c:54:
                    6d:ad:75:56:1a:a2:d9:5a:b1:14:e9:49:6d:dc:81:
                    3e:77:7e:fd:ce:40:f1:7d:a9:57:23:ba:0d:4d:58:
                    15:be:ab:35:a6:e4:93:6a:77:43:da:70:55:2c:ac:
                    c9:a6:05:0d:c3:0e:23:48:ba:9c:4e:1b:2a:95:c7:
                    1c:58:22:67:65:fa:77:fa:72:03:62:50:d6:52:c7:
                    32:76:3a:4a:88:8f:f8:e8:83:55:82:fd:f2:9f:14:
                    9f:94:79:33:c7:63:6b:3c:70:ca:7d:38:60:e8:eb:
                    53:0f:6a:dd:c3:46:2d:b4:df:1b:c4:14:6d:6f:f0:
                    b3:f4:68:0e:63:64:38:6c:cd:c4:b0:a2:02:7d:21:
                    de:86:de:98:e0:b4:b3:98:30:51:71:c8:ad:e4:52:
                    bf:44:47:09:a5:ed:3d:b9:f7:19:ea:3f:de:98:ba:
                    05:38:79:10:03:0e:9c:78:0b:29:0a:7c:7f:f8:48:
                    dc:37:56:3b:ba:bb:cf:c8:17:22:d3:bb:2b:03:12:
                    46:37:7a:d5:e9:6b:2a:82:72:16:18:3d:4b:24:88:
                    e1:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:DF:CB:4A:27:6B:29:A2:0A:A6:0B:14:B3:B4:F2:27:BD:AF:8E:13
            X509v3 Authority Key Identifier:
                keyid:7E:67:E8:8C:C4:03:78:A9:70:46:3D:F2:D0:B0:60:88:E6:5D:B9:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/fmfojMQDeKlwRj3y0LBgiOZdubA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fmfojMQDeKlwRj3y0LBgiOZdubA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/fmfojMQDeKlwRj3y0LBgiOZdubA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:29:54:fc:6a:66:ff:96:fa:1d:e1:5e:4c:c6:66:3e:cd:74:
         f4:24:ff:8d:f8:11:0d:b4:4b:54:f5:68:8d:05:bc:fd:db:7b:
         2e:fc:86:e0:36:48:af:78:4a:c5:a1:f4:44:88:ee:b2:83:15:
         1a:8c:ca:77:e2:73:4d:c5:bb:e5:65:63:46:63:68:93:ca:32:
         19:9d:94:fd:b6:68:97:d9:54:53:37:64:7a:ed:23:9f:3f:49:
         d5:c9:54:71:7c:71:97:76:b8:d2:97:b6:9a:a7:73:1e:e8:65:
         82:eb:20:85:8d:a9:8f:7d:6c:f2:f7:8e:f9:fa:14:b0:01:d8:
         31:45:cc:5c:6e:1f:87:50:61:80:cf:95:ce:14:ff:d7:57:6c:
         66:69:c4:73:d5:4a:22:bb:f3:96:a3:05:76:41:82:e9:56:ca:
         96:3d:b2:3c:e5:6d:a5:8e:05:53:34:a4:20:3b:d2:30:a5:7e:
         d4:57:a0:5c:a7:1b:0c:e6:cd:18:84:e0:08:c9:ce:4d:6b:2b:
         b4:ff:f0:ab:82:18:0a:fa:7a:3d:a6:87:a6:bf:c1:97:ce:00:
         63:6d:11:06:42:fa:52:a9:41:86:bd:51:59:0c:86:ed:96:36:
         70:26:6f:b6:21:db:26:d1:2f:f6:47:2c:34:30:38:fc:6d:37:
         86:72:da:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:43:34 2026 by rpki-client