Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.mft
File:                     FrmIQthhrv6AMEAgDJqqiVYPK8o.mft (raw, json)
Hash identifier:          +jxsm+ku0R5DE9pxD1fx8hS1si4OWwkNfaBRhZS0RJs=
Subject key identifier:   59:55:CB:C5:81:32:CD:CB:25:01:5D:0A:F2:88:67:C9:5E:8B:0A:C9
Authority key identifier: 16:B9:88:42:D8:61:AE:FE:80:30:40:20:0C:9A:AA:89:56:0F:2B:CA
Certificate issuer:       /CN=A91EABCB/serialNumber=16B98842D861AEFE803040200C9AAA89560F2BCA
Certificate serial:       0737
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrmIQthhrv6AMEAgDJqqiVYPK8o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.mft
Manifest number:          0722
Signing time:             Sat 04 Apr 2026 21:39:19 +0000
Manifest this update:     Sat 04 Apr 2026 21:39:19 +0000
Manifest next update:     Sat 11 Apr 2026 21:39:19 +0000
Files and hashes:         1: FrmIQthhrv6AMEAgDJqqiVYPK8o.crl (hash: eMeNgbg8opS+puM0aFxVxS2GEstwjNkoTd/H6KjOU20=)
                          2: 0F0EC4A67A8811EB95169F62C4F9AE02.roa (hash: 7vpCi6tiC+nYwk1GKGUUszYv1YKzqefKr3Cq0hLOpLI=)
                          3: 2E248E2CAD8511F08469DF53C4F9AE02.roa (hash: WTkCXMD4s9+pTdAVOc0KZG2ehtUBwPP4uPitEquEFeQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.crl
                          rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrmIQthhrv6AMEAgDJqqiVYPK8o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 21:39:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1847 (0x737)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EABCB, serialNumber=16B98842D861AEFE803040200C9AAA89560F2BCA
        Validity
            Not Before: Apr  4 21:39:19 2026 GMT
            Not After : Apr 11 21:39:19 2026 GMT
        Subject: CN=69d18507-defb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e0:8a:4b:d5:a2:1a:7d:88:ca:ba:92:ea:a6:
                    e6:98:5a:1e:cc:b9:07:3c:93:93:a7:44:d5:1a:4f:
                    69:a7:44:35:c1:35:77:a0:d1:43:8d:15:54:7c:74:
                    a2:a0:9c:c0:22:4d:a3:14:7e:97:3c:d2:4c:47:dd:
                    b8:68:8e:59:af:f9:bf:96:7f:62:62:a2:ba:53:8c:
                    77:3d:f5:1c:aa:89:ce:78:76:31:79:2b:d5:28:79:
                    60:29:66:dd:24:c5:f0:d8:e3:e0:a0:0f:bf:a4:22:
                    8d:14:2c:06:02:31:f5:f6:3e:5e:05:ec:28:3a:6b:
                    6f:ff:0c:98:ff:66:a2:fb:02:4a:c5:40:8c:84:8e:
                    f9:9e:46:5f:03:27:e3:e2:bd:00:66:d6:04:01:0f:
                    cb:f2:b8:df:09:69:04:55:c8:04:21:7d:54:a1:5d:
                    c5:c3:10:d2:e2:5f:c0:ab:7a:58:d3:35:bd:fb:31:
                    14:9e:c2:21:b5:36:74:c5:a6:4e:41:b0:8a:53:e3:
                    82:a8:f1:2e:00:91:97:15:f6:a5:d0:ef:c4:fb:c7:
                    15:1b:5e:c8:f3:ce:8c:40:0c:d4:62:ab:0d:2f:91:
                    2e:2a:46:48:36:16:d6:3d:3d:1d:8f:32:02:08:02:
                    c5:5e:aa:74:f0:5a:0d:2d:a6:97:0e:b0:18:13:8a:
                    a7:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:55:CB:C5:81:32:CD:CB:25:01:5D:0A:F2:88:67:C9:5E:8B:0A:C9
            X509v3 Authority Key Identifier:
                keyid:16:B9:88:42:D8:61:AE:FE:80:30:40:20:0C:9A:AA:89:56:0F:2B:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrmIQthhrv6AMEAgDJqqiVYPK8o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:36:10:8a:84:8f:27:36:38:b3:f4:88:8c:58:b6:22:d5:c7:
         2d:f4:a3:b7:02:2a:f5:98:f3:12:ab:60:09:37:04:b6:ff:8c:
         f5:a6:aa:c7:c2:09:36:da:9d:a0:79:6f:86:4f:f8:85:8f:1d:
         6c:ba:57:d2:8d:97:af:c3:9c:af:d1:df:48:ca:da:09:66:f3:
         0b:af:7a:1f:42:2c:24:b5:d2:d9:82:79:53:a6:7c:22:96:84:
         37:44:51:c6:03:90:ee:c2:57:a1:78:58:5b:e4:78:5a:fa:1b:
         56:a6:91:1f:c3:fb:3d:f2:35:7c:52:ee:68:9d:7e:2b:3f:3c:
         4c:95:9b:9d:fc:0d:8d:0d:39:2d:a4:a4:78:27:13:26:04:98:
         8a:a4:60:bb:64:2d:02:f1:ea:dc:67:1d:94:8f:26:41:99:ea:
         45:96:01:14:68:11:dd:7c:d2:46:65:cb:32:38:67:24:92:c4:
         15:14:aa:b0:70:99:cb:b3:29:73:72:89:40:7c:25:89:85:60:
         83:01:d1:21:4a:43:d5:97:03:96:0b:4a:10:f7:a8:a3:6f:3f:
         be:b2:34:47:e8:0a:b3:d6:f8:d0:ca:d3:cc:54:a7:bb:1f:2a:
         8c:c6:01:49:2b:9e:fd:71:f9:19:df:57:c3:78:94:87:c0:c8:
         39:40:89:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:59:22 2026 by rpki-client