Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft
File:                     FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft (raw, json)
Hash identifier:          2A1CUtKx6aiZHmOsiG0o8lEuKVvu7MGRl2yPYbhEApo=
Subject key identifier:   09:DF:D8:1A:FE:06:A4:BA:7E:F5:0C:68:2F:D8:12:9C:EF:56:B1:C1
Authority key identifier: 14:66:40:77:58:A8:D7:B9:35:69:48:96:D5:02:75:28:06:79:AF:29
Certificate issuer:       /CN=A9121188/serialNumber=1466407758A8D7B935694896D50275280679AF29
Certificate serial:       01C5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FGZAd1io17k1aUiW1QJ1KAZ5ryk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft
Manifest number:          01C0
Signing time:             Sun 05 Apr 2026 03:18:13 +0000
Manifest this update:     Sun 05 Apr 2026 03:18:13 +0000
Manifest next update:     Sun 12 Apr 2026 03:18:13 +0000
Files and hashes:         1: FGZAd1io17k1aUiW1QJ1KAZ5ryk.crl (hash: a/X1dq0dXnEg7dCqasXhWyTPJxpaanI04QwbfV2Db2Q=)
                          2: 91FC411C836411EE80C08641C4F9AE02.roa (hash: y7rF5vkt8RhtipSe8v56RC2oUIIDL8ARxP+tAlU5uD0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.crl
                          rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FGZAd1io17k1aUiW1QJ1KAZ5ryk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 03:18:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 453 (0x1c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9121188, serialNumber=1466407758A8D7B935694896D50275280679AF29
        Validity
            Not Before: Apr  5 03:18:13 2026 GMT
            Not After : Apr 12 03:18:13 2026 GMT
        Subject: CN=69d1d475-8a25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3d:68:1a:78:7c:cb:e0:92:12:4d:67:ff:40:
                    22:c1:95:c9:9e:e7:94:45:8a:73:af:2d:82:98:fb:
                    cb:1e:63:b0:ff:6b:bc:bb:3f:d5:be:d6:94:0b:e7:
                    49:a7:8a:c9:ba:99:fb:3d:6a:20:aa:ca:8b:0e:0b:
                    8d:4d:86:d3:d1:78:6b:d4:c5:28:6e:99:db:30:4b:
                    12:2e:d0:58:86:8f:88:23:f0:41:03:c0:7e:72:de:
                    a8:33:7a:ca:13:53:75:f9:25:41:6b:82:25:58:a7:
                    66:af:89:49:7b:4c:5c:9c:77:24:f4:69:84:62:c1:
                    6b:14:1b:31:bc:8b:79:c0:59:a0:af:67:c6:21:f7:
                    83:d9:ac:2a:9a:e9:bb:97:e4:65:43:8f:4d:11:e0:
                    78:e9:c0:87:8e:22:69:4a:65:a8:9c:b5:e8:d2:ec:
                    6a:fc:1c:64:56:8d:ff:1c:93:e4:ae:de:ca:a0:02:
                    5d:de:06:ff:94:ed:57:30:e0:bb:49:a5:66:d4:ac:
                    af:b6:1c:e4:e3:d0:d6:3a:0b:f1:75:2b:f9:04:70:
                    cf:16:b8:6e:1f:94:b0:a9:db:c9:35:d5:04:48:3d:
                    c9:d0:94:55:c4:94:56:bc:73:89:3c:ff:38:39:cd:
                    d0:c1:ac:47:75:23:b9:ac:e3:9f:b3:09:ff:6c:42:
                    84:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:DF:D8:1A:FE:06:A4:BA:7E:F5:0C:68:2F:D8:12:9C:EF:56:B1:C1
            X509v3 Authority Key Identifier:
                keyid:14:66:40:77:58:A8:D7:B9:35:69:48:96:D5:02:75:28:06:79:AF:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FGZAd1io17k1aUiW1QJ1KAZ5ryk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:a7:f9:2f:36:2f:2c:b7:1d:56:97:62:74:a0:31:7d:12:ed:
         ca:10:31:a4:b3:65:b0:58:50:be:c0:6a:59:e8:73:1c:b2:5a:
         c9:ad:21:cf:a7:74:29:e0:a5:b5:0f:b4:2f:35:c3:84:6b:e6:
         0f:3c:c6:e7:a3:f6:a7:44:bf:e2:0c:f5:6e:ba:15:49:1d:0c:
         38:6f:a7:d4:d9:ab:3f:98:28:76:5a:66:2f:e1:f1:76:c8:84:
         82:c9:3f:57:19:7c:4d:0a:48:1a:8c:ef:4a:a0:7c:07:59:f6:
         c7:56:19:00:26:94:b3:c4:eb:f7:c7:7e:b6:92:de:eb:fc:45:
         ba:6c:ad:54:12:99:25:2c:6d:ed:d5:36:b3:fb:1e:17:87:82:
         97:4e:b3:e7:19:84:69:2f:87:0b:e9:19:07:1b:ff:18:8e:46:
         0a:bd:8f:2d:b8:66:32:f7:71:f0:f6:51:5d:62:ed:aa:1b:63:
         bb:44:f1:0c:dd:de:d0:a7:9e:41:6e:b3:9d:ba:10:3c:48:8c:
         a7:49:0f:f7:4c:06:8d:e5:ec:38:34:4a:6d:f7:84:b6:05:c8:
         e7:0a:4a:cb:a0:cc:9a:e4:8f:21:89:3e:f3:56:c8:c6:3d:cb:
         2b:35:9f:c9:f5:f4:9a:b4:ab:34:67:22:b8:cf:0e:ac:f4:8d:
         dc:4f:00:1a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAcUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjExODgxMTAvBgNVBAUTKDE0NjY0MDc3NThBOEQ3QjkzNTY5NDg5NkQ1MDI3NTI4
MDY3OUFGMjkwHhcNMjYwNDA1MDMxODEzWhcNMjYwNDEyMDMxODEzWjAYMRYwFAYD
VQQDEw02OWQxZDQ3NS04YTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvD1oGnh8y+CSEk1n/0AiwZXJnueURYpzry2CmPvLHmOw/2u8uz/VvtaUC+dJ
p4rJupn7PWogqsqLDguNTYbT0Xhr1MUobpnbMEsSLtBYho+II/BBA8B+ct6oM3rK
E1N1+SVBa4IlWKdmr4lJe0xcnHck9GmEYsFrFBsxvIt5wFmgr2fGIfeD2awqmum7
l+RlQ49NEeB46cCHjiJpSmWonLXo0uxq/BxkVo3/HJPkrt7KoAJd3gb/lO1XMOC7
SaVm1Kyvthzk49DWOgvxdSv5BHDPFrhuH5SwqdvJNdUESD3J0JRVxJRWvHOJPP84
Oc3QwaxHdSO5rOOfswn/bEKEqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAnf2Br+
BqS6fvUMaC/YEpzvVrHBMB8GA1UdIwQYMBaAFBRmQHdYqNe5NWlIltUCdSgGea8p
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTE4OC84NEJBQTA2Qzgz
NjMxMUVFQkMxOTFCMUVDNEY5QUUwMi9GR1pBZDFpbzE3azFhVWlXMVFKMUtBWjVy
eWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZHWkFkMWlvMTdrMWFVaVcxUUoxS0FaNXJ5ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MTE4OC84NEJBQTA2QzgzNjMxMUVFQkMxOTFCMUVDNEY5QUUwMi9GR1pBZDFpbzE3
azFhVWlXMVFKMUtBWjVyeWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAEqf5LzYvLLcdVpdidKAxfRLtyhAxpLNlsFhQvsBqWehzHLJaya0hz6d0KeCl
tQ+0LzXDhGvmDzzG56P2p0S/4gz1broVSR0MOG+n1NmrP5godlpmL+HxdsiEgsk/
Vxl8TQpIGozvSqB8B1n2x1YZACaUs8Tr98d+tpLe6/xFumytVBKZJSxt7dU2s/se
F4eCl06z5xmEaS+HC+kZBxv/GI5GCr2PLbhmMvdx8PZRXWLtqhtju0TxDN3e0Kee
QW6znboQPEiMp0kP90wGjeXsODRKbfeEtgXI5wpKy6DMmuSPIYk+81bIxj3LKzWf
yfX0mrSrNGciuM8OrPSN3E8AGg==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:30:53 2026 by rpki-client