Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/FgZOq4GuGHOhAZ0JKJb5Inpe70U.mft
File:                     FgZOq4GuGHOhAZ0JKJb5Inpe70U.mft (raw, json)
Hash identifier:          0JjD9ufUtyxmlaHtXYVeQqDCgrik91IO0NOChvtVCvU=
Subject key identifier:   43:1F:B8:D7:AC:7A:15:7B:A6:2D:65:B7:0E:75:FA:2D:A3:F5:8A:39
Authority key identifier: 16:06:4E:AB:81:AE:18:73:A1:01:9D:09:28:96:F9:22:7A:5E:EF:45
Certificate issuer:       /CN=A911A0C0/serialNumber=16064EAB81AE1873A1019D092896F9227A5EEF45
Certificate serial:       19BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgZOq4GuGHOhAZ0JKJb5Inpe70U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/FgZOq4GuGHOhAZ0JKJb5Inpe70U.mft
Manifest number:          19AE
Signing time:             Sat 04 Apr 2026 16:18:04 +0000
Manifest this update:     Sat 04 Apr 2026 16:18:04 +0000
Manifest next update:     Sat 11 Apr 2026 16:18:04 +0000
Files and hashes:         1: FgZOq4GuGHOhAZ0JKJb5Inpe70U.crl (hash: lIiTlCPMF2CI7zQS4Mm0arWygLmv66amZKD+mixVZng=)
                          2: 543AF5B283D911E78F2FA066C4F9AE02.roa (hash: VmS/Q3+6coESHGoEMtOrtTGznEUVw0iY/NUTCTx6zGg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/FgZOq4GuGHOhAZ0JKJb5Inpe70U.crl
                          rsync://rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/FgZOq4GuGHOhAZ0JKJb5Inpe70U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgZOq4GuGHOhAZ0JKJb5Inpe70U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 16:18:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6590 (0x19be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911A0C0, serialNumber=16064EAB81AE1873A1019D092896F9227A5EEF45
        Validity
            Not Before: Apr  4 16:18:04 2026 GMT
            Not After : Apr 11 16:18:04 2026 GMT
        Subject: CN=69d139bc-955e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:64:d0:64:b8:d4:a5:fa:8c:46:5a:63:01:9a:
                    41:35:27:12:b6:94:8f:21:e4:f2:a5:89:58:d5:ae:
                    94:82:a8:a1:ac:19:2c:32:ea:1c:00:6b:a9:d1:ac:
                    68:5f:a6:8f:a1:08:12:44:a4:d7:0e:15:04:9d:0d:
                    c6:72:4a:79:c1:09:f0:5e:fb:d0:b4:c9:27:e1:7c:
                    6e:f6:10:21:aa:a3:4e:31:c9:fd:44:be:20:a1:7b:
                    6d:aa:b5:f4:b3:eb:f4:4c:0b:b2:29:18:0b:ac:ec:
                    d9:3c:bf:41:8b:55:14:d4:4d:38:08:6a:33:cf:ce:
                    c2:ca:af:ea:8b:af:67:80:b2:2d:36:c3:64:04:bf:
                    c4:87:d0:82:0d:1b:2a:c2:5b:7e:94:64:ca:00:4f:
                    5c:6f:b6:82:11:1e:f9:87:75:b3:55:3a:8b:a2:67:
                    37:a3:ce:a0:75:e6:4d:95:a5:f8:87:c9:ef:a6:8e:
                    d8:07:af:72:35:99:b3:05:38:51:33:ba:9e:74:54:
                    ea:12:22:50:7e:e8:1e:fb:18:22:57:0e:37:9e:d6:
                    73:a0:1e:6d:5f:13:b6:e8:1c:a9:3a:2c:72:68:cc:
                    04:67:9a:bc:a4:04:87:c4:c0:97:d4:ce:86:f5:90:
                    a9:02:46:bd:f5:7b:2e:b5:95:c6:27:cb:47:51:0c:
                    d4:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:1F:B8:D7:AC:7A:15:7B:A6:2D:65:B7:0E:75:FA:2D:A3:F5:8A:39
            X509v3 Authority Key Identifier:
                keyid:16:06:4E:AB:81:AE:18:73:A1:01:9D:09:28:96:F9:22:7A:5E:EF:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/FgZOq4GuGHOhAZ0JKJb5Inpe70U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgZOq4GuGHOhAZ0JKJb5Inpe70U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/FgZOq4GuGHOhAZ0JKJb5Inpe70U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:b3:9f:c8:1b:36:7c:c9:ac:71:db:a7:f7:6e:83:a9:7e:cf:
         01:c7:4e:b9:b6:72:6b:84:5a:69:6f:ee:33:30:51:cf:bd:02:
         f6:62:7f:09:29:b5:60:10:bd:c5:0d:c3:4a:a5:a8:e4:c5:b4:
         85:93:e9:b1:24:b6:18:98:98:32:43:b7:32:45:49:fc:72:87:
         0a:95:3c:67:62:9f:d9:80:a2:24:2e:ca:48:80:d6:86:c5:a9:
         bb:85:87:a2:37:10:1d:31:26:cb:94:c3:ea:e2:8c:e4:ea:58:
         28:d4:12:40:46:46:11:ad:29:7a:ed:cd:e6:fd:03:68:5e:5b:
         f3:99:8a:9f:da:4d:89:3b:74:32:aa:1f:eb:14:c4:ce:ef:33:
         40:02:c9:4f:13:05:4f:d8:21:62:b6:7b:6a:b8:e7:64:af:ae:
         f0:ef:98:f0:12:25:ab:b6:94:57:73:ee:ba:2d:37:7c:48:26:
         00:3e:d0:ac:bb:1e:da:7c:41:95:99:6c:f2:ec:c0:5b:7f:59:
         68:b9:d1:87:cd:2b:c8:a6:45:30:2a:4d:2e:e0:8d:e6:03:f6:
         36:e4:c0:6d:f1:08:30:fa:52:87:8e:0e:ee:b2:b3:56:7c:fb:
         ff:5d:30:f8:c8:2c:13:d7:3e:40:34:5c:52:bb:c5:18:29:56:
         b0:2b:25:0a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICGb4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUEwQzAxMTAvBgNVBAUTKDE2MDY0RUFCODFBRTE4NzNBMTAxOUQwOTI4OTZGOTIy
N0E1RUVGNDUwHhcNMjYwNDA0MTYxODA0WhcNMjYwNDExMTYxODA0WjAYMRYwFAYD
VQQDEw02OWQxMzliYy05NTVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw2TQZLjUpfqMRlpjAZpBNScStpSPIeTypYlY1a6UgqihrBksMuocAGup0axo
X6aPoQgSRKTXDhUEnQ3Gckp5wQnwXvvQtMkn4Xxu9hAhqqNOMcn9RL4goXttqrX0
s+v0TAuyKRgLrOzZPL9Bi1UU1E04CGozz87Cyq/qi69ngLItNsNkBL/Eh9CCDRsq
wlt+lGTKAE9cb7aCER75h3WzVTqLomc3o86gdeZNlaX4h8nvpo7YB69yNZmzBThR
M7qedFTqEiJQfuge+xgiVw43ntZzoB5tXxO26BypOixyaMwEZ5q8pASHxMCX1M6G
9ZCpAka99XsutZXGJ8tHUQzU3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEMfuNes
ehV7pi1ltw51+i2j9Yo5MB8GA1UdIwQYMBaAFBYGTquBrhhzoQGdCSiW+SJ6Xu9F
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTBDMC8wQjMwNDY3MDgz
RDgxMUU3Qjc1RjI1NjVDNEY5QUUwMi9GZ1pPcTRHdUdIT2hBWjBKS0piNUlucGU3
MFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZnWk9xNEd1R0hPaEFaMEpLSmI1SW5wZTcwVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QTBDMC8wQjMwNDY3MDgzRDgxMUU3Qjc1RjI1NjVDNEY5QUUwMi9GZ1pPcTRHdUdI
T2hBWjBKS0piNUlucGU3MFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUbOfyBs2fMmscdun926DqX7PAcdOubZya4RaaW/uMzBRz70C9mJ/CSm1YBC9
xQ3DSqWo5MW0hZPpsSS2GJiYMkO3MkVJ/HKHCpU8Z2Kf2YCiJC7KSIDWhsWpu4WH
ojcQHTEmy5TD6uKM5OpYKNQSQEZGEa0peu3N5v0DaF5b85mKn9pNiTt0Mqof6xTE
zu8zQALJTxMFT9ghYrZ7arjnZK+u8O+Y8BIlq7aUV3Puui03fEgmAD7QrLse2nxB
lZls8uzAW39ZaLnRh80ryKZFMCpNLuCN5gP2NuTAbfEIMPpSh44O7rKzVnz7/10w
+MgsE9c+QDRcUrvFGClWsCslCg==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:31:45 2026 by rpki-client