Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.mft
File:                     Fb8hC3N4HVzAvpm9OdcLL-tOuGw.mft (raw, json)
Hash identifier:          HPTdUg5eyjzH0zHy3UGmvgQWGlv6POdRvx0Naww82CU=
Subject key identifier:   6D:F5:53:FF:B4:59:F5:44:04:A0:0A:CA:40:85:6D:F6:88:4D:CE:D0
Authority key identifier: 15:BF:21:0B:73:78:1D:5C:C0:BE:99:BD:39:D7:0B:2F:EB:4E:B8:6C
Certificate issuer:       /CN=A91D61DF/serialNumber=15BF210B73781D5CC0BE99BD39D70B2FEB4EB86C
Certificate serial:       021A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.mft
Manifest number:          0212
Signing time:             Sun 19 Apr 2026 02:43:03 +0000
Manifest this update:     Sun 19 Apr 2026 02:43:03 +0000
Manifest next update:     Sun 26 Apr 2026 02:43:03 +0000
Files and hashes:         1: Fb8hC3N4HVzAvpm9OdcLL-tOuGw.crl (hash: tVlHnOzcFomN6etaH62KyfJ1TrOfX9XObKQyGO73h0k=)
                          2: 1D52E8E860D711EEA524AE64C4F9AE02.roa (hash: YPR3t0pxNxAAfmPwqIL7jliMlrBzhQ9gLXu93RnHlOs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.crl
                          rsync://rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 02:43:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 538 (0x21a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D61DF, serialNumber=15BF210B73781D5CC0BE99BD39D70B2FEB4EB86C
        Validity
            Not Before: Apr 19 02:43:03 2026 GMT
            Not After : Apr 26 02:43:03 2026 GMT
        Subject: CN=69e44137-af7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b2:74:2d:9d:6e:ed:f4:ef:98:06:7d:e5:ff:
                    24:2a:a1:12:6d:ce:58:29:f2:7a:8a:2e:f8:cb:44:
                    66:fe:03:5c:69:0c:81:05:fa:b7:d6:83:e5:33:f2:
                    3c:60:00:9a:0d:3f:e8:e4:b1:0f:95:0e:ef:d4:c5:
                    74:70:95:85:06:fb:f0:ad:69:25:e9:24:51:65:aa:
                    4e:6e:ac:6a:d2:3c:d2:35:24:98:23:fa:4a:8c:4f:
                    87:bb:59:cc:93:33:94:07:ce:78:50:55:43:21:a4:
                    72:de:d8:0f:24:02:25:06:17:ae:1e:93:27:e4:ee:
                    d1:bc:a7:0a:68:2a:88:92:a9:74:57:6b:80:a1:39:
                    28:54:c0:a6:eb:8f:0a:9a:c9:54:d9:07:a8:08:5e:
                    1f:3d:b1:f2:33:49:34:2f:ef:8e:d8:48:18:f1:cd:
                    7d:44:bc:66:5f:dd:01:91:db:67:8e:f2:23:57:76:
                    7a:86:0a:8e:80:89:1c:19:d0:ad:c1:e1:3d:4c:6f:
                    07:ea:7a:72:14:90:25:ab:6e:cb:13:05:15:8c:cd:
                    45:ec:de:1c:c7:e2:26:77:1e:db:1c:98:a5:ba:a5:
                    41:41:f7:85:58:cc:9d:fa:31:00:5b:74:4d:2e:72:
                    dc:5b:16:fa:d7:47:3b:b6:88:b1:7b:65:6f:e7:96:
                    db:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:F5:53:FF:B4:59:F5:44:04:A0:0A:CA:40:85:6D:F6:88:4D:CE:D0
            X509v3 Authority Key Identifier:
                keyid:15:BF:21:0B:73:78:1D:5C:C0:BE:99:BD:39:D7:0B:2F:EB:4E:B8:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:7a:1c:35:7f:04:55:09:c8:c2:5c:a7:2a:59:10:1a:ca:69:
         02:72:0d:dc:be:9f:f9:a3:67:b4:e7:c7:a4:e1:03:81:b6:f2:
         90:e1:a9:a2:e5:3a:16:8a:85:68:67:78:d1:be:b7:4d:fb:e2:
         f9:06:19:de:80:ed:be:ef:15:fa:24:1a:38:2f:03:38:0d:b0:
         c9:d8:b6:d6:a3:89:7b:48:16:30:c3:32:14:0e:6f:5b:b4:ec:
         a4:7b:d7:95:d0:a0:0d:f7:55:6b:92:14:c7:67:23:68:c7:0d:
         a4:05:fe:83:03:d6:8d:12:46:1a:9d:67:9f:2e:17:f7:78:05:
         41:87:8c:99:51:61:8c:60:29:5a:6d:b8:98:a7:54:75:73:8d:
         c4:61:5c:83:06:24:51:18:bf:e1:7b:ec:bd:bb:90:e7:85:67:
         61:0a:58:60:68:65:85:d7:d4:22:b2:46:f3:bb:f2:7f:1e:9d:
         39:64:73:43:81:1f:e0:54:65:2a:85:9d:59:94:e3:44:07:28:
         ed:80:56:fd:9b:5d:d4:09:89:76:ec:00:0e:51:1b:c1:7a:fa:
         5e:54:2c:a9:aa:85:9a:df:ce:b1:9e:d6:f0:61:ba:f4:d2:85:
         42:9d:ca:35:b5:28:c9:5a:37:c3:c2:8f:0e:d4:cb:7a:8d:00:
         7a:96:e6:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:45:10 2026 by rpki-client