Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91444E5/2E822DAA1B9111EC9E7A3114C4F9AE02/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.mft
File:                     Fgi_RiSn4bcjIotGYd1mHnCu8_Q.mft (raw, json)
Hash identifier:          dIG38nmuf3euNbhp7eElVFCzXLLYhubuC5R5qKkK80Y=
Subject key identifier:   95:FC:32:66:D5:46:9E:A1:38:AF:5D:AC:46:78:D0:95:DF:3E:1D:F9
Authority key identifier: 16:08:BF:46:24:A7:E1:B7:23:22:8B:46:61:DD:66:1E:70:AE:F3:F4
Certificate issuer:       /CN=A91444E5/serialNumber=1608BF4624A7E1B723228B4661DD661E70AEF3F4
Certificate serial:       058D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91444E5/2E822DAA1B9111EC9E7A3114C4F9AE02/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.mft
Manifest number:          0583
Signing time:             Sat 04 Apr 2026 23:03:17 +0000
Manifest this update:     Sat 04 Apr 2026 23:03:16 +0000
Manifest next update:     Sat 11 Apr 2026 23:03:16 +0000
Files and hashes:         1: Fgi_RiSn4bcjIotGYd1mHnCu8_Q.crl (hash: E1E+fNFLZW58C/WP14wAxlpRq1m6clkou3kYcG5bwQg=)
                          2: 90AB89E4547511EEB44F391AC4F9AE02.roa (hash: HFHAqZaEtAW52D1hUPhZmJHncyLuC7GnGgQ2YVfhigw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91444E5/2E822DAA1B9111EC9E7A3114C4F9AE02/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.crl
                          rsync://rpki.apnic.net/member_repository/A91444E5/2E822DAA1B9111EC9E7A3114C4F9AE02/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 23:03:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1421 (0x58d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91444E5, serialNumber=1608BF4624A7E1B723228B4661DD661E70AEF3F4
        Validity
            Not Before: Apr  4 23:03:16 2026 GMT
            Not After : Apr 11 23:03:16 2026 GMT
        Subject: CN=69d198b5-4269
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b4:ef:69:e1:38:a5:19:aa:d8:16:f7:60:d6:
                    9e:79:ad:8e:b5:2a:cb:ed:4a:45:c5:59:48:2f:0b:
                    fa:c3:da:74:48:2c:35:bc:a3:48:f5:fd:83:03:f5:
                    fc:5a:d1:0d:75:a3:a8:6e:f9:1a:6f:0c:8d:d6:62:
                    7f:3a:ce:29:85:24:34:af:72:86:c3:e7:bc:68:1c:
                    d2:77:22:a8:a7:93:13:e8:74:fc:75:fa:7b:ce:01:
                    85:63:fc:d4:4f:e4:20:2b:0c:e0:41:ec:9c:0c:5e:
                    cb:bd:dd:42:f4:b2:30:1b:fc:ee:3c:c7:4c:43:4a:
                    54:db:0b:40:79:38:bc:46:60:36:8e:6b:9f:c1:1d:
                    30:44:c0:da:26:84:52:16:44:c8:1c:fd:d4:11:1d:
                    ca:0e:71:7b:5e:8d:14:0f:bf:e9:5e:58:23:b7:8a:
                    b6:13:fa:76:f6:c3:f1:f7:c0:5c:af:b8:02:bd:82:
                    dd:7e:b5:d8:49:df:e0:d0:3e:87:66:d1:31:96:d3:
                    4a:2d:89:94:f1:5f:b9:a5:6c:a8:59:c5:d9:96:a8:
                    09:e8:df:8b:5d:5a:1a:d7:c0:37:6b:87:f9:15:1f:
                    57:b4:e7:74:2a:b2:1e:cf:fa:35:29:ca:c3:cb:8f:
                    7e:b5:c9:d5:46:01:a1:ba:87:cd:10:6e:b0:d4:12:
                    4e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:FC:32:66:D5:46:9E:A1:38:AF:5D:AC:46:78:D0:95:DF:3E:1D:F9
            X509v3 Authority Key Identifier:
                keyid:16:08:BF:46:24:A7:E1:B7:23:22:8B:46:61:DD:66:1E:70:AE:F3:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91444E5/2E822DAA1B9111EC9E7A3114C4F9AE02/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91444E5/2E822DAA1B9111EC9E7A3114C4F9AE02/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:4a:9b:5e:84:0b:cb:98:c4:a2:32:d9:29:53:ee:31:8b:15:
         25:4f:fc:47:db:5e:1a:da:4b:75:1f:62:fa:5a:7d:c9:ea:5c:
         5e:5f:9a:7f:0c:62:ff:de:44:50:4e:60:e1:7a:1d:03:a3:41:
         30:bd:61:43:f7:a7:02:05:b5:1a:1b:87:0a:8b:b5:42:f1:b5:
         67:44:fc:dc:c8:b6:01:ae:26:e0:3d:b2:62:aa:81:70:16:9d:
         a3:95:0f:46:29:00:b6:3e:0c:3e:b9:f9:1d:45:ad:cf:c8:e6:
         23:56:e3:d3:4a:61:57:e3:88:ed:d7:d9:7c:77:f9:8a:6e:89:
         b8:91:e9:5b:eb:ac:e5:fa:f4:58:52:2e:d3:d5:82:23:57:23:
         d4:7a:fe:b6:99:cb:08:13:a0:91:da:88:4b:16:b3:89:36:f8:
         83:2f:3d:f2:f6:44:c8:63:39:24:7e:09:41:95:d3:da:cd:d6:
         89:a8:07:8c:37:40:a5:56:ae:96:68:97:3e:34:bf:34:a1:e7:
         5c:2e:1b:38:f2:e5:98:f7:81:a3:42:53:4b:70:f3:cc:6d:ff:
         66:25:3e:83:57:29:2c:1c:38:79:c1:6f:77:fb:8f:54:d6:4d:
         22:33:90:02:47:86:3c:e1:85:3e:ef:22:51:95:2f:48:fe:a5:
         f9:11:cd:0b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBY0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDQ0RTUxMTAvBgNVBAUTKDE2MDhCRjQ2MjRBN0UxQjcyMzIyOEI0NjYxREQ2NjFF
NzBBRUYzRjQwHhcNMjYwNDA0MjMwMzE2WhcNMjYwNDExMjMwMzE2WjAYMRYwFAYD
VQQDEw02OWQxOThiNS00MjY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqrTvaeE4pRmq2Bb3YNaeea2OtSrL7UpFxVlILwv6w9p0SCw1vKNI9f2DA/X8
WtENdaOobvkabwyN1mJ/Os4phSQ0r3KGw+e8aBzSdyKop5MT6HT8dfp7zgGFY/zU
T+QgKwzgQeycDF7Lvd1C9LIwG/zuPMdMQ0pU2wtAeTi8RmA2jmufwR0wRMDaJoRS
FkTIHP3UER3KDnF7Xo0UD7/pXlgjt4q2E/p29sPx98Bcr7gCvYLdfrXYSd/g0D6H
ZtExltNKLYmU8V+5pWyoWcXZlqgJ6N+LXVoa18A3a4f5FR9XtOd0KrIez/o1KcrD
y49+tcnVRgGhuofNEG6w1BJOjQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJX8MmbV
Rp6hOK9drEZ40JXfPh35MB8GA1UdIwQYMBaAFBYIv0Ykp+G3IyKLRmHdZh5wrvP0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDRFNS8yRTgyMkRBQTFC
OTExMUVDOUU3QTMxMTRDNEY5QUUwMi9GZ2lfUmlTbjRiY2pJb3RHWWQxbUhuQ3U4
X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZnaV9SaVNuNGJjaklvdEdZZDFtSG5DdThfUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NDRFNS8yRTgyMkRBQTFCOTExMUVDOUU3QTMxMTRDNEY5QUUwMi9GZ2lfUmlTbjRi
Y2pJb3RHWWQxbUhuQ3U4X1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATUqbXoQLy5jEojLZKVPuMYsVJU/8R9teGtpLdR9i+lp9yepcXl+afwxi/95E
UE5g4XodA6NBML1hQ/enAgW1GhuHCou1QvG1Z0T83Mi2Aa4m4D2yYqqBcBado5UP
RikAtj4MPrn5HUWtz8jmI1bj00phV+OI7dfZfHf5im6JuJHpW+us5fr0WFIu09WC
I1cj1Hr+tpnLCBOgkdqISxaziTb4gy898vZEyGM5JH4JQZXT2s3WiagHjDdApVau
lmiXPjS/NKHnXC4bOPLlmPeBo0JTS3DzzG3/ZiU+g1cpLBw4ecFvd/uPVNZNIjOQ
AkeGPOGFPu8iUZUvSP6l+RHNCw==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:30:33 2026 by rpki-client