Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/fmfojMQDeKlwRj3y0LBgiOZdubA.mft
File:                     fmfojMQDeKlwRj3y0LBgiOZdubA.mft (raw, json)
Hash identifier:          JCXEX5gvTgVqvJyGedbOzyXBb9esRwvZ/SUF4C28jyg=
Subject key identifier:   CE:60:BC:21:CF:2E:07:EE:1A:C8:DB:3A:76:D0:62:BF:2C:F3:99:73
Authority key identifier: 7E:67:E8:8C:C4:03:78:A9:70:46:3D:F2:D0:B0:60:88:E6:5D:B9:B0
Certificate issuer:       /CN=A91C9D04/serialNumber=7E67E88CC40378A970463DF2D0B06088E65DB9B0
Certificate serial:       09C2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fmfojMQDeKlwRj3y0LBgiOZdubA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/fmfojMQDeKlwRj3y0LBgiOZdubA.mft
Manifest number:          2033
Signing time:             Thu 16 Apr 2026 16:38:48 +0000
Manifest this update:     Thu 16 Apr 2026 16:38:47 +0000
Manifest next update:     Thu 23 Apr 2026 16:38:47 +0000
Files and hashes:         1: fmfojMQDeKlwRj3y0LBgiOZdubA.crl (hash: I+ZLSBtUYq9IjIeeqG2LHoqtjPBtOvFarVEs7kpJWRg=)
                          2: A1DFD796A65511EABDAED713C4F9AE02.roa (hash: m4DYqNviRswbFR7fGEs+RlqfCBi1sLTXNU77Vhy5SsE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/fmfojMQDeKlwRj3y0LBgiOZdubA.crl
                          rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/fmfojMQDeKlwRj3y0LBgiOZdubA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fmfojMQDeKlwRj3y0LBgiOZdubA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 16:38:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2498 (0x9c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9D04, serialNumber=7E67E88CC40378A970463DF2D0B06088E65DB9B0
        Validity
            Not Before: Apr 16 16:38:47 2026 GMT
            Not After : Apr 23 16:38:47 2026 GMT
        Subject: CN=69e11098-3b95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ed:61:e7:69:73:01:0e:3d:26:60:19:27:23:
                    f6:f5:9f:14:ed:46:d3:ca:71:e0:bd:e7:a9:fe:4e:
                    33:e8:4e:d2:8e:57:96:b1:aa:ba:db:2d:47:f4:ba:
                    65:79:19:0d:6c:72:93:4c:39:ec:c4:64:2a:05:67:
                    0f:21:51:03:51:fb:1e:ed:67:6d:a1:07:b2:96:8e:
                    33:c3:29:62:60:eb:dc:f7:af:71:dc:c4:0e:19:d4:
                    67:2a:88:6d:54:69:70:17:7f:b1:d3:ee:58:d1:12:
                    af:12:d4:76:cb:b9:f8:c1:50:e2:8b:17:4e:d6:a2:
                    97:a9:2a:de:27:c4:01:47:04:e0:bd:0e:f2:30:39:
                    22:9a:8a:43:26:11:f9:1f:b7:f7:d1:81:70:3b:f5:
                    20:71:ee:4b:1d:ac:62:31:48:f5:97:b4:a6:92:da:
                    56:78:84:38:19:fd:48:d5:ec:76:59:5b:16:96:ec:
                    f8:19:be:ac:98:7d:66:bb:2a:66:dc:42:89:50:df:
                    a8:a7:37:61:6b:c9:6d:b5:b1:73:13:28:c7:f3:f3:
                    40:aa:d0:f2:41:7b:5f:45:f9:5b:dc:4b:8f:34:8e:
                    6a:71:73:e1:fc:41:2e:41:8c:b0:c9:d0:59:a1:09:
                    71:3e:9e:49:71:ce:cb:5f:2d:ac:4b:fc:ba:14:32:
                    59:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:60:BC:21:CF:2E:07:EE:1A:C8:DB:3A:76:D0:62:BF:2C:F3:99:73
            X509v3 Authority Key Identifier:
                keyid:7E:67:E8:8C:C4:03:78:A9:70:46:3D:F2:D0:B0:60:88:E6:5D:B9:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/fmfojMQDeKlwRj3y0LBgiOZdubA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fmfojMQDeKlwRj3y0LBgiOZdubA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/fmfojMQDeKlwRj3y0LBgiOZdubA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:3b:f9:b7:59:9a:e1:b9:13:0e:a5:99:c6:44:10:28:c1:1d:
         89:79:a9:73:80:87:24:b2:e8:92:1c:eb:fc:bc:e2:ed:3b:a3:
         79:50:45:38:18:f6:1c:7e:67:19:e0:b1:67:56:2d:39:1e:b9:
         db:e8:4c:3b:be:ac:bd:2d:67:b3:47:93:20:15:a5:28:75:58:
         38:1f:79:a1:57:7d:41:41:0d:38:02:b0:db:37:20:7d:ca:be:
         19:8d:6d:11:cd:d1:ba:1e:2c:27:51:3a:ae:e1:62:2e:d3:01:
         79:38:c2:bc:73:ca:9d:89:36:36:2d:d8:d0:4f:57:7d:78:6b:
         55:3d:ed:fc:2d:35:bc:80:91:2a:fe:99:3f:f7:f5:77:cf:3d:
         bd:b5:e7:e1:1b:4b:23:87:d8:7e:f4:25:00:6a:1f:a0:d6:34:
         07:3d:19:93:15:ff:9d:39:31:a0:fa:0a:9d:60:cc:5a:6f:2e:
         14:d6:cc:3a:f1:13:a1:f6:db:62:09:e6:97:fe:3e:26:72:37:
         8f:c7:cd:94:bb:a6:47:f3:28:b7:39:62:86:c6:4e:64:9a:56:
         07:b4:7e:04:6b:c2:06:60:9a:be:df:50:1d:23:1b:cd:88:aa:
         91:54:34:f0:e6:30:0b:05:fc:9c:6b:dd:ca:b3:34:08:cc:51:
         68:3b:4f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:14:04 2026 by rpki-client