Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE769/C5D6A57E604C11F090816A15C4F9AE02/FOFy6-ntnDEE1U8RqpdiI-s3aQc.mft
File:                     FOFy6-ntnDEE1U8RqpdiI-s3aQc.mft (raw, json)
Hash identifier:          OBbA8002KhSJ8ONLBSaJUo48z5gDzzVIP03m2kTG+O8=
Subject key identifier:   A6:42:A9:42:1E:F0:DF:41:54:66:08:F4:85:4F:A5:5F:5B:C8:97:59
Authority key identifier: 14:E1:72:EB:E9:ED:9C:31:04:D5:4F:11:AA:97:62:23:EB:37:69:07
Certificate issuer:       /CN=A91FE769/serialNumber=14E172EBE9ED9C3104D54F11AA976223EB376907
Certificate serial:       7E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOFy6-ntnDEE1U8RqpdiI-s3aQc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FE769/C5D6A57E604C11F090816A15C4F9AE02/FOFy6-ntnDEE1U8RqpdiI-s3aQc.mft
Manifest number:          7A
Signing time:             Sun 01 Mar 2026 09:07:18 +0000
Manifest this update:     Sun 01 Mar 2026 09:07:17 +0000
Manifest next update:     Sun 08 Mar 2026 09:07:17 +0000
Files and hashes:         1: FOFy6-ntnDEE1U8RqpdiI-s3aQc.crl (hash: weF5E2KVIYs1nY/JRuxN/NC9Ia2yq2uYITDct1PsgYc=)
                          2: D63D48DE604F11F0B5D8E73CC4F9AE02.roa (hash: GzEU2vPIPXvKY5i0weDDpP3E/LtJoH+OnTw04IroV1I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FE769/C5D6A57E604C11F090816A15C4F9AE02/FOFy6-ntnDEE1U8RqpdiI-s3aQc.crl
                          rsync://rpki.apnic.net/member_repository/A91FE769/C5D6A57E604C11F090816A15C4F9AE02/FOFy6-ntnDEE1U8RqpdiI-s3aQc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOFy6-ntnDEE1U8RqpdiI-s3aQc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:07:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126 (0x7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FE769, serialNumber=14E172EBE9ED9C3104D54F11AA976223EB376907
        Validity
            Not Before: Mar  1 09:07:17 2026 GMT
            Not After : Mar  8 09:07:17 2026 GMT
        Subject: CN=69a401c5-62b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0e:d7:ab:ab:33:42:3a:fb:42:2a:e7:bf:4c:
                    55:d3:c5:aa:ab:d6:a5:ff:d4:11:b0:d6:08:3a:85:
                    28:65:a3:7a:c1:16:2d:ff:a8:60:77:6c:cb:20:ad:
                    a7:62:a1:c1:60:8a:e2:e5:23:f9:bf:eb:c0:d6:4c:
                    af:ea:44:58:f1:98:26:d4:f1:82:97:5b:f7:9e:51:
                    c8:30:10:f0:f6:b2:7f:6e:11:d3:e6:33:30:db:70:
                    00:a4:6e:ef:98:72:a9:af:49:0f:59:e8:f7:54:1a:
                    1a:a8:14:91:c3:a8:29:0c:ed:8f:38:88:ce:4e:30:
                    7a:85:42:6a:1f:44:90:c2:63:69:d4:ef:71:cf:3e:
                    87:1e:46:98:11:8a:d3:f7:2d:c0:e1:98:87:49:eb:
                    e8:86:2a:26:3c:e0:e7:7b:7b:88:03:f6:89:2b:18:
                    68:f9:6b:4b:5f:2c:9f:57:45:de:29:63:6d:f9:90:
                    8f:e9:b0:14:80:b4:30:55:64:e2:dd:a9:77:58:aa:
                    57:33:b9:bd:29:57:ce:a5:d8:a9:27:63:6b:0b:14:
                    5a:7f:39:9e:a2:e7:f5:72:b7:39:70:b4:f0:fe:f0:
                    e4:8e:c4:b8:35:1f:55:3a:b6:c4:57:71:fc:6f:c5:
                    fd:b1:a9:2a:06:03:19:81:05:b9:80:2e:76:0c:2f:
                    ea:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:42:A9:42:1E:F0:DF:41:54:66:08:F4:85:4F:A5:5F:5B:C8:97:59
            X509v3 Authority Key Identifier:
                keyid:14:E1:72:EB:E9:ED:9C:31:04:D5:4F:11:AA:97:62:23:EB:37:69:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FE769/C5D6A57E604C11F090816A15C4F9AE02/FOFy6-ntnDEE1U8RqpdiI-s3aQc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOFy6-ntnDEE1U8RqpdiI-s3aQc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE769/C5D6A57E604C11F090816A15C4F9AE02/FOFy6-ntnDEE1U8RqpdiI-s3aQc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:cf:10:f1:13:09:80:78:24:d2:df:70:e2:aa:19:7c:60:91:
         28:94:72:8b:4e:79:12:1b:99:4c:5c:11:b6:c3:d2:33:d6:ff:
         80:61:55:e9:a8:6e:6c:e4:3b:a6:15:b8:f9:57:97:1b:8a:d9:
         e5:7a:95:10:0c:92:40:2a:70:51:b2:bd:de:85:44:d3:19:5c:
         7e:8f:05:e7:f0:22:34:6e:e8:ed:bd:43:39:c8:bc:21:c1:eb:
         6e:a9:c0:2c:c4:12:14:e1:ff:b5:1e:46:29:e7:08:95:b5:df:
         9c:c2:72:a8:b8:f4:56:7a:95:69:fc:fd:ec:7f:97:9f:14:f5:
         c8:e0:f6:0b:54:3e:53:e4:f2:66:e4:b8:b6:52:cf:e9:24:83:
         6c:7f:88:38:33:0d:9d:0d:60:3b:23:c9:6e:28:ba:1c:da:56:
         6e:e1:73:26:45:83:03:72:32:25:24:7c:4e:74:26:5b:43:31:
         88:f5:5b:fa:72:65:c9:35:16:b5:7e:b8:16:ba:4e:d1:5c:5b:
         b0:c4:76:58:8b:ba:91:0d:fb:82:89:b5:f0:86:47:83:17:b7:
         6c:13:27:e7:66:0e:7d:fd:24:cd:fd:49:d9:22:aa:b7:7a:77:
         62:64:f8:db:c8:d1:1c:49:1f:b5:bd:41:37:96:4b:66:30:22:
         00:99:8e:5b
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBfjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
RTc2OTExMC8GA1UEBRMoMTRFMTcyRUJFOUVEOUMzMTA0RDU0RjExQUE5NzYyMjNF
QjM3NjkwNzAeFw0yNjAzMDEwOTA3MTdaFw0yNjAzMDgwOTA3MTdaMBgxFjAUBgNV
BAMTDTY5YTQwMWM1LTYyYjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC5DterqzNCOvtCKue/TFXTxaqr1qX/1BGw1gg6hShlo3rBFi3/qGB3bMsgradi
ocFgiuLlI/m/68DWTK/qRFjxmCbU8YKXW/eeUcgwEPD2sn9uEdPmMzDbcACkbu+Y
cqmvSQ9Z6PdUGhqoFJHDqCkM7Y84iM5OMHqFQmofRJDCY2nU73HPPoceRpgRitP3
LcDhmIdJ6+iGKiY84Od7e4gD9okrGGj5a0tfLJ9XRd4pY235kI/psBSAtDBVZOLd
qXdYqlczub0pV86l2KknY2sLFFp/OZ6i5/VytzlwtPD+8OSOxLg1H1U6tsRXcfxv
xf2xqSoGAxmBBbmALnYML+p1AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUpkKpQh7w
30FUZgj0hU+lX1vIl1kwHwYDVR0jBBgwFoAUFOFy6+ntnDEE1U8RqpdiI+s3aQcw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZFNzY5L0M1RDZBNTdFNjA0
QzExRjA5MDgxNkExNUM0RjlBRTAyL0ZPRnk2LW50bkRFRTFVOFJxcGRpSS1zM2FR
Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvRk9GeTYtbnRuREVFMVU4UnFwZGlJLXMzYVFjLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZF
NzY5L0M1RDZBNTdFNjA0QzExRjA5MDgxNkExNUM0RjlBRTAyL0ZPRnk2LW50bkRF
RTFVOFJxcGRpSS1zM2FRYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAezxDxEwmAeCTS33Diqhl8YJEolHKLTnkSG5lMXBG2w9Iz1v+AYVXpqG5s5Dum
Fbj5V5cbitnlepUQDJJAKnBRsr3ehUTTGVx+jwXn8CI0bujtvUM5yLwhwetuqcAs
xBIU4f+1HkYp5wiVtd+cwnKouPRWepVp/P3sf5efFPXI4PYLVD5T5PJm5Li2Us/p
JINsf4g4Mw2dDWA7I8luKLoc2lZu4XMmRYMDcjIlJHxOdCZbQzGI9Vv6cmXJNRa1
frgWuk7RXFuwxHZYi7qRDfuCibXwhkeDF7dsEyfnZg59/STN/UnZIqq3endiZPjb
yNEcSR+1vUE3lktmMCIAmY5b
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:17:44 2026 by rpki-client