Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD4A6/6A5969A87E9511EC82EE520AC4F9AE02/FwBKozEFsKDm0-tOR8UTBj2SzsI.mft
File:                     FwBKozEFsKDm0-tOR8UTBj2SzsI.mft (raw, json)
Hash identifier:          Dr9g4vUGGRuxv1rGVkSQF+nua4Tn44txKCNS8MHwkWs=
Subject key identifier:   05:EE:22:04:D1:BE:6D:65:B5:C3:64:0D:77:BD:71:14:18:DB:6A:87
Authority key identifier: 17:00:4A:A3:31:05:B0:A0:E6:D3:EB:4E:47:C5:13:06:3D:92:CE:C2
Certificate issuer:       /CN=A91DD4A6/serialNumber=17004AA33105B0A0E6D3EB4E47C513063D92CEC2
Certificate serial:       04E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FwBKozEFsKDm0-tOR8UTBj2SzsI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DD4A6/6A5969A87E9511EC82EE520AC4F9AE02/FwBKozEFsKDm0-tOR8UTBj2SzsI.mft
Manifest number:          04B6
Signing time:             Sun 01 Mar 2026 00:49:17 +0000
Manifest this update:     Sun 01 Mar 2026 00:49:16 +0000
Manifest next update:     Sun 08 Mar 2026 00:49:16 +0000
Files and hashes:         1: FwBKozEFsKDm0-tOR8UTBj2SzsI.crl (hash: /ClN5mvN2wpal/bjNN10aRkTVleiCzr0nop4cQyp9ZM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DD4A6/6A5969A87E9511EC82EE520AC4F9AE02/FwBKozEFsKDm0-tOR8UTBj2SzsI.crl
                          rsync://rpki.apnic.net/member_repository/A91DD4A6/6A5969A87E9511EC82EE520AC4F9AE02/FwBKozEFsKDm0-tOR8UTBj2SzsI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FwBKozEFsKDm0-tOR8UTBj2SzsI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 00:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1253 (0x4e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DD4A6, serialNumber=17004AA33105B0A0E6D3EB4E47C513063D92CEC2
        Validity
            Not Before: Mar  1 00:49:16 2026 GMT
            Not After : Mar  8 00:49:16 2026 GMT
        Subject: CN=69a38d0d-a3a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:23:5e:a7:9f:01:bc:8b:a3:e3:0e:e0:6c:98:
                    7b:7b:36:17:f6:6b:15:eb:d8:ec:d3:2c:3d:a9:fc:
                    30:7a:d5:04:c9:cc:5d:22:16:fd:93:ef:45:0e:32:
                    4c:45:e5:6f:2a:34:d5:6a:93:b3:ef:b2:ac:f0:9a:
                    64:dd:21:6c:7b:ff:09:d6:b6:02:96:77:b7:84:7c:
                    6c:4a:5a:80:6a:b5:ae:df:dc:e0:21:f7:49:e2:6f:
                    d5:64:f0:67:e6:47:0f:75:2c:e3:f8:cb:41:ec:02:
                    1f:3d:82:d9:7e:2b:f3:56:c7:2b:6b:73:ab:f3:95:
                    ad:ec:0e:1d:7c:ec:21:06:97:e2:da:9b:2f:c9:ae:
                    af:36:ed:d6:5e:1a:af:a6:db:6f:6c:0f:f4:62:d3:
                    2a:b0:88:5d:3d:b9:54:cc:44:0a:7c:96:c8:c5:19:
                    72:08:fa:3e:ff:c3:98:9a:e9:04:fb:1d:ba:d5:02:
                    8c:02:c9:d5:66:4e:65:e0:7a:bf:a6:81:b0:35:30:
                    a3:89:f5:26:3e:5a:27:bf:e2:6b:ad:7a:b9:d7:96:
                    db:1d:57:72:01:45:c1:d5:3b:d0:15:b3:16:54:8c:
                    24:24:9f:ca:d4:ec:d2:dd:e5:7c:e6:d6:e8:54:0e:
                    15:4c:48:78:86:4b:7a:e2:72:26:f0:df:a4:fc:ab:
                    22:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:EE:22:04:D1:BE:6D:65:B5:C3:64:0D:77:BD:71:14:18:DB:6A:87
            X509v3 Authority Key Identifier:
                keyid:17:00:4A:A3:31:05:B0:A0:E6:D3:EB:4E:47:C5:13:06:3D:92:CE:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DD4A6/6A5969A87E9511EC82EE520AC4F9AE02/FwBKozEFsKDm0-tOR8UTBj2SzsI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FwBKozEFsKDm0-tOR8UTBj2SzsI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD4A6/6A5969A87E9511EC82EE520AC4F9AE02/FwBKozEFsKDm0-tOR8UTBj2SzsI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:b4:f5:05:f5:46:b8:54:55:80:7d:47:e6:94:67:07:65:ca:
         f1:61:07:e8:dc:1c:48:93:22:b7:22:37:d2:f6:9b:75:aa:71:
         c2:51:9a:18:9b:53:9d:f3:ec:bd:8e:d1:7b:69:ee:03:16:b8:
         1b:09:c0:b8:d9:d1:45:d8:c8:5c:34:61:8b:73:02:0c:42:c9:
         0d:68:26:17:c7:91:84:48:4d:53:60:a1:2d:d6:ca:a8:d2:62:
         35:b3:9d:fe:62:44:ea:a0:68:1c:c4:dc:f6:a5:f5:58:58:ac:
         bf:f1:f8:d6:8e:3d:25:59:c2:30:b5:a0:9a:d6:bc:c3:db:04:
         a8:89:4f:ba:cf:4e:96:0f:f0:bd:09:5d:7f:d1:82:9a:5f:f5:
         d0:9e:34:ea:07:3e:94:12:0a:f2:8c:3c:71:15:94:7b:e2:56:
         ab:0a:aa:7b:eb:b7:9d:c3:23:40:32:cb:56:42:6f:cb:78:bc:
         8c:e9:1d:cb:4c:0b:4a:8e:8d:62:fe:70:c6:2f:d6:92:be:66:
         bf:6c:7a:e7:30:b7:89:8a:f7:7b:8f:3b:92:cb:0a:4f:09:c4:
         78:53:a9:eb:25:21:d9:02:0d:69:9b:e3:fc:0f:58:16:bd:e5:
         16:c0:fc:76:bb:0d:80:f7:99:12:62:a7:15:3a:e0:25:4e:e0:
         43:c9:0b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:46:03 2026 by rpki-client