Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.mft
File:                     fNSu5HyyHa6Yd-_0HwS-ldlzaG0.mft (raw, json)
Hash identifier:          gusTPSMpo6Jw1scgR7s7eUgCzVx3dNF5OhwOirqhXnM=
Subject key identifier:   9B:1F:7A:CA:10:90:F2:8C:8D:1B:4E:C1:12:FD:D0:43:FC:02:BB:C6
Authority key identifier: 7C:D4:AE:E4:7C:B2:1D:AE:98:77:EF:F4:1F:04:BE:95:D9:73:68:6D
Certificate issuer:       /CN=A91DF26F/serialNumber=7CD4AEE47CB21DAE9877EFF41F04BE95D973686D
Certificate serial:       3538
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.mft
Manifest number:          3532
Signing time:             Thu 16 Apr 2026 14:39:05 +0000
Manifest this update:     Thu 16 Apr 2026 14:39:04 +0000
Manifest next update:     Thu 23 Apr 2026 14:39:04 +0000
Files and hashes:         1: fNSu5HyyHa6Yd-_0HwS-ldlzaG0.crl (hash: Svit+OjIDpxah4BjnymBOCux0q1BOrw5387Cv7jgODI=)
                          2: 3AF0F3E028CB11F195C91CE1BF833773.roa (hash: u52MWF5tX/svUqxjvLk6vmWrJaUj9BbcKl4QUhfj+Tw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.crl
                          rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 14:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13624 (0x3538)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DF26F, serialNumber=7CD4AEE47CB21DAE9877EFF41F04BE95D973686D
        Validity
            Not Before: Apr 16 14:39:04 2026 GMT
            Not After : Apr 23 14:39:04 2026 GMT
        Subject: CN=69e0f489-7a9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ec:14:d0:19:7e:f4:70:ca:1b:d4:bb:4f:85:
                    17:ff:16:dc:a8:ec:8c:8b:f8:00:79:78:56:7e:16:
                    a8:d5:1d:a9:32:40:67:92:07:38:25:ed:cc:a6:db:
                    9c:d2:0d:5f:ab:45:c6:76:43:91:62:46:ff:fc:44:
                    e2:a0:c5:61:71:ed:e1:0e:82:f5:3c:b2:a0:63:cb:
                    4e:6a:8d:c8:98:d8:ca:ed:74:24:e2:0a:52:37:18:
                    7e:23:74:70:c1:1b:c4:3d:28:cc:b0:35:16:59:2b:
                    4e:bf:8f:e4:82:b6:1c:2a:77:82:80:41:7b:aa:ee:
                    9e:9f:a2:8d:cc:31:74:54:64:64:1a:0f:ec:7d:31:
                    79:24:d1:5e:09:4f:29:7b:0b:e4:e1:69:0b:20:77:
                    8a:9d:c7:d5:88:e2:3d:6c:b4:ed:6a:53:1d:57:eb:
                    3e:fd:7a:ba:12:92:ac:e5:2e:3b:c2:59:32:47:d7:
                    6a:7d:d7:15:ad:c5:61:ab:29:c0:0c:36:a4:52:71:
                    67:2e:b3:4b:aa:2f:cc:20:b8:a6:34:7f:68:cf:24:
                    fc:72:dd:2c:73:36:0c:5b:09:d6:69:e2:40:eb:81:
                    2b:37:96:8e:7e:35:11:c4:cd:77:47:84:39:75:7e:
                    ce:4f:9d:ce:ce:b8:1a:54:ca:ba:ee:54:86:7f:9e:
                    ca:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:1F:7A:CA:10:90:F2:8C:8D:1B:4E:C1:12:FD:D0:43:FC:02:BB:C6
            X509v3 Authority Key Identifier:
                keyid:7C:D4:AE:E4:7C:B2:1D:AE:98:77:EF:F4:1F:04:BE:95:D9:73:68:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:2e:89:49:2b:e4:3b:ce:1e:67:b2:fb:b1:73:c4:80:be:73:
         06:83:13:69:a1:13:c5:03:64:80:39:0b:27:91:95:8c:3e:5c:
         77:9d:af:09:9a:73:3d:b2:e8:31:0f:5e:91:12:4d:97:5e:00:
         70:1b:e3:48:46:b8:d0:d1:c8:92:2b:23:a6:86:0b:da:c3:dd:
         6d:99:a8:cb:1b:08:ef:0b:1e:dd:e8:f9:5e:d0:52:43:c2:76:
         de:36:31:ef:fd:49:2f:83:b3:bb:35:62:66:ad:1e:c3:bb:2a:
         14:ba:fb:4c:16:81:c5:4f:a5:21:82:41:f0:8e:39:0d:82:6e:
         37:b8:e8:5c:89:df:60:f3:a7:f1:5d:ec:b4:e0:4b:2d:ed:be:
         51:5e:c2:c5:ec:86:92:c2:3c:dd:3d:cd:d2:94:57:53:23:91:
         3c:ec:74:5e:e3:e1:dd:b9:c4:2a:c1:26:a3:ad:54:b0:fb:5f:
         f8:b6:ad:c7:0c:60:2b:82:7e:83:56:3e:66:55:7c:62:c6:02:
         08:9a:47:37:ca:84:3e:36:2a:d4:d1:f0:b8:d9:7c:a9:05:24:
         a7:f6:97:dc:c9:a8:4b:27:b0:17:7f:2b:1d:8b:35:22:6e:32:
         ee:4d:86:e2:96:78:c0:24:a1:68:81:fa:18:05:e2:a2:99:8e:
         97:ae:ff:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:00:12 2026 by rpki-client