Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.mft
File:                     FSDys0q93K6U-pIu9HV802FA8lQ.mft (raw, json)
Hash identifier:          41py0vkTdggUCT9vNQiHuFVGmgESVsV48WK1D1IEC8s=
Subject key identifier:   4B:BE:0B:74:AA:3D:5D:4C:02:5D:95:D3:D8:29:06:95:66:34:C3:D3
Authority key identifier: 15:20:F2:B3:4A:BD:DC:AE:94:FA:92:2E:F4:75:7C:D3:61:40:F2:54
Certificate issuer:       /CN=A9143FE9/serialNumber=1520F2B34ABDDCAE94FA922EF4757CD36140F254
Certificate serial:       07B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSDys0q93K6U-pIu9HV802FA8lQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.mft
Manifest number:          07A8
Signing time:             Sat 04 Apr 2026 21:17:42 +0000
Manifest this update:     Sat 04 Apr 2026 21:17:42 +0000
Manifest next update:     Sat 11 Apr 2026 21:17:42 +0000
Files and hashes:         1: FSDys0q93K6U-pIu9HV802FA8lQ.crl (hash: wO/w7RaIL6WoylMlZ00Rv/VqKXB2h3Co1FcUsUTAygY=)
                          2: A6864ACE7BA911EDB41A851EC4F9AE02.roa (hash: +mWQDhR0SQRE9fYy6utyEy97LqtAqWWlca4RF6I7GEw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.crl
                          rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSDys0q93K6U-pIu9HV802FA8lQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 21:17:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1976 (0x7b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9143FE9, serialNumber=1520F2B34ABDDCAE94FA922EF4757CD36140F254
        Validity
            Not Before: Apr  4 21:17:42 2026 GMT
            Not After : Apr 11 21:17:42 2026 GMT
        Subject: CN=69d17ff6-64d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:16:13:77:ae:55:ed:99:82:f7:6d:6a:52:5a:
                    eb:d9:43:6a:71:9a:7a:3f:63:5f:90:76:18:52:71:
                    84:c1:6d:44:e0:6a:33:9b:da:ea:87:e5:0b:ea:8d:
                    7f:26:b4:ae:9f:8a:f5:17:58:39:8d:e6:4f:16:17:
                    05:55:3b:77:35:a3:a1:d8:5e:33:69:2f:80:ce:8e:
                    3b:76:ac:00:fa:c6:a6:d1:1e:6f:a7:74:85:3f:62:
                    de:14:20:9f:2e:69:bd:46:03:63:22:ad:09:dd:f1:
                    a4:27:02:c3:25:3d:87:3d:9f:1e:e2:7c:af:6f:1a:
                    ad:d3:d4:17:84:55:5d:7d:0a:c8:6b:59:b4:cb:c5:
                    ca:4e:c6:4e:f7:87:2c:b6:a2:c5:65:f4:03:6c:46:
                    a8:f6:00:7a:6e:9f:a3:f1:d1:d1:6c:ec:ba:b8:22:
                    98:71:91:a4:0d:c6:95:00:81:28:cb:d7:ec:fc:b7:
                    0e:fc:fc:a4:11:52:48:37:d0:29:a3:7f:6b:8e:78:
                    b3:37:da:01:77:da:a7:4e:ad:58:30:91:67:fc:d8:
                    ac:7f:9f:dc:5c:bb:6f:ed:c2:41:f3:c1:01:cc:2a:
                    dc:e1:60:23:cc:03:9f:26:1b:c5:92:e6:95:1b:f2:
                    81:30:17:ce:db:64:06:b7:a4:a4:33:21:80:95:73:
                    85:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:BE:0B:74:AA:3D:5D:4C:02:5D:95:D3:D8:29:06:95:66:34:C3:D3
            X509v3 Authority Key Identifier:
                keyid:15:20:F2:B3:4A:BD:DC:AE:94:FA:92:2E:F4:75:7C:D3:61:40:F2:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSDys0q93K6U-pIu9HV802FA8lQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:c2:42:a3:43:52:cb:b6:55:5c:71:40:c3:d5:f2:29:9a:5f:
         3a:b0:fd:1e:17:a7:22:ff:ff:9d:40:cb:b5:59:9d:b9:8e:a1:
         b1:42:79:2b:65:5e:3e:e5:82:11:bd:c2:08:d4:a4:4d:37:30:
         9b:3d:6b:5f:6a:7b:6a:56:ec:4c:1a:fb:98:20:14:db:fb:3b:
         f7:85:22:1c:d7:40:b0:2d:08:72:b2:b6:18:b1:fd:8d:64:0a:
         5b:64:cb:09:41:a8:17:cc:13:09:76:81:ad:45:a9:d3:47:cc:
         af:b6:27:50:ec:37:1f:a4:73:44:fa:a6:69:d4:7a:66:c4:df:
         b6:c1:f3:26:60:6a:4d:09:0b:b4:63:a3:99:6d:3a:b1:d8:bc:
         3a:81:21:b5:e2:b4:92:04:57:a4:8f:d0:0b:7d:de:45:f5:9e:
         b6:4f:85:9a:41:d4:f1:49:1c:2e:7a:fd:8e:9b:db:79:e1:00:
         9c:ca:d3:6a:d9:1f:63:0c:d9:d5:d7:db:92:f6:19:7c:20:ba:
         59:b0:7e:82:6c:19:c1:9a:3e:66:f5:50:a7:93:05:21:58:64:
         4f:7f:93:9f:2d:16:3e:dd:53:c4:e4:12:bf:af:b1:7d:d9:d7:
         2c:16:8a:1a:3f:12:fc:ad:cf:a9:43:73:45:0e:58:56:69:f4:
         ca:bd:5b:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:51:14 2026 by rpki-client