Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD0A4/95D5E392AA7311EAA10ACC84C4F9AE02/ficJop5GIOVCf3NfN8A0c-NrWXo.mft
File:                     ficJop5GIOVCf3NfN8A0c-NrWXo.mft (raw, json)
Hash identifier:          sdX4rpdcKTpZUfBpDz47gjJdKmQAQDXohDAjzJxAeFU=
Subject key identifier:   75:14:CC:0E:D5:67:89:CD:53:B0:1E:51:2E:EC:90:0A:FA:B3:D9:6A
Authority key identifier: 7E:27:09:A2:9E:46:20:E5:42:7F:73:5F:37:C0:34:73:E3:6B:59:7A
Certificate issuer:       /CN=A91DD0A4/serialNumber=7E2709A29E4620E5427F735F37C03473E36B597A
Certificate serial:       09BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ficJop5GIOVCf3NfN8A0c-NrWXo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DD0A4/95D5E392AA7311EAA10ACC84C4F9AE02/ficJop5GIOVCf3NfN8A0c-NrWXo.mft
Manifest number:          09AE
Signing time:             Thu 16 Apr 2026 19:53:32 +0000
Manifest this update:     Thu 16 Apr 2026 19:53:32 +0000
Manifest next update:     Thu 23 Apr 2026 19:53:32 +0000
Files and hashes:         1: ficJop5GIOVCf3NfN8A0c-NrWXo.crl (hash: Ysa/T5/rfAOUzXrE20L/Vwf65knRzH2RmrOPDju79wQ=)
                          2: C8CCE2CCAA7411EA9DF2E685C4F9AE02.roa (hash: MxcRCOMDVxWYLuz/1DuRHNURRxOV2Q55QL6ZvvYDCSE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DD0A4/95D5E392AA7311EAA10ACC84C4F9AE02/ficJop5GIOVCf3NfN8A0c-NrWXo.crl
                          rsync://rpki.apnic.net/member_repository/A91DD0A4/95D5E392AA7311EAA10ACC84C4F9AE02/ficJop5GIOVCf3NfN8A0c-NrWXo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ficJop5GIOVCf3NfN8A0c-NrWXo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 19:53:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2490 (0x9ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DD0A4, serialNumber=7E2709A29E4620E5427F735F37C03473E36B597A
        Validity
            Not Before: Apr 16 19:53:32 2026 GMT
            Not After : Apr 23 19:53:32 2026 GMT
        Subject: CN=69e13e3c-3456
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:50:35:df:51:b5:99:4f:6a:8d:b8:38:07:7c:
                    ab:aa:83:5b:66:9c:c4:ce:2a:7d:dd:ce:79:45:8d:
                    d2:e3:45:13:0d:e1:11:7e:67:f9:fa:61:7e:46:0c:
                    33:78:23:c3:af:78:8e:a4:53:2c:0a:8f:b1:0b:c0:
                    2b:25:bb:a1:9a:b7:2b:bb:6c:7e:b6:98:10:45:88:
                    82:12:0c:6d:8c:c3:9a:a3:ac:ad:1c:25:9e:26:18:
                    5f:f4:8b:c6:e0:09:20:23:22:eb:4c:ea:50:10:3d:
                    2b:37:bf:c6:43:74:9c:ba:3a:a4:11:75:0c:11:ce:
                    ae:92:0d:53:23:d9:92:7e:d4:38:ff:c4:fa:d3:35:
                    f7:95:f1:58:fd:6b:14:20:39:85:cf:23:00:fd:ad:
                    02:e5:0d:09:6a:5c:fc:db:fe:b5:c1:7f:81:b5:97:
                    c9:ca:84:88:73:8a:01:6a:ee:63:45:d4:48:67:e6:
                    3d:59:de:13:40:d3:07:45:56:87:24:4a:fe:63:3a:
                    c9:d9:21:9e:47:d5:c4:f4:9d:67:5b:fd:56:5e:32:
                    81:31:7f:e7:3c:c4:a2:4e:eb:a2:42:e3:c6:44:99:
                    d9:de:4f:29:d5:23:08:98:8e:93:86:5c:27:37:8b:
                    03:83:87:f0:46:ff:0b:5c:09:2f:c8:a4:97:18:58:
                    32:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:14:CC:0E:D5:67:89:CD:53:B0:1E:51:2E:EC:90:0A:FA:B3:D9:6A
            X509v3 Authority Key Identifier:
                keyid:7E:27:09:A2:9E:46:20:E5:42:7F:73:5F:37:C0:34:73:E3:6B:59:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DD0A4/95D5E392AA7311EAA10ACC84C4F9AE02/ficJop5GIOVCf3NfN8A0c-NrWXo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ficJop5GIOVCf3NfN8A0c-NrWXo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD0A4/95D5E392AA7311EAA10ACC84C4F9AE02/ficJop5GIOVCf3NfN8A0c-NrWXo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:39:64:89:6f:e7:07:1f:32:d5:08:ca:91:a8:c7:1e:76:48:
         f9:4c:77:d0:75:a2:d2:e5:fb:98:57:70:23:ff:fd:d0:a6:05:
         ab:62:ce:db:92:0b:d9:95:e5:10:9a:09:c1:53:9e:f5:54:7c:
         85:7f:f5:8c:65:25:0b:a7:2b:28:87:c2:e2:73:8c:1a:2b:44:
         ca:bd:33:0e:88:52:4c:7c:c8:b4:7d:33:11:37:c0:5f:52:22:
         7a:fa:ee:57:fc:0b:56:9d:10:4e:ef:f5:fc:63:41:81:b3:07:
         79:3a:d9:f5:22:43:ae:0a:30:e1:0c:c8:71:dc:d8:cc:bc:7b:
         49:3e:af:09:e3:2b:ea:48:2a:e7:17:e8:09:61:e8:0a:57:0b:
         0f:83:5b:c2:92:27:93:bb:cc:b8:58:ae:af:70:87:5c:35:00:
         34:ba:b1:15:e5:ba:dc:b3:87:1f:1e:d2:e9:bb:60:cc:d6:d1:
         bc:92:00:45:65:01:a0:e6:9f:08:f0:07:86:a6:fe:a5:33:ac:
         b0:6c:85:8e:39:3b:c0:03:07:69:e6:ee:19:f8:62:c5:97:39:
         3d:7f:e7:f8:26:f0:eb:1f:ed:ff:8c:86:50:a4:06:b6:e6:b0:
         b9:8d:7f:93:4b:47:d9:51:60:b8:82:d3:0c:18:8c:8c:72:56:
         5c:c9:80:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:19:04 2026 by rpki-client