Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.mft
File:                     FZbEu-cy2oXLg-incIc-o0E3AaU.mft (raw, json)
Hash identifier:          2azMXfzoJey07HcpJMMj9wl6NAqTdeiw9ORdhXNpK34=
Subject key identifier:   76:58:DF:51:92:0C:82:37:6E:2C:AE:6D:6C:70:E3:BA:22:32:42:E2
Authority key identifier: 15:96:C4:BB:E7:32:DA:85:CB:83:E8:A7:70:87:3E:A3:41:37:01:A5
Certificate issuer:       /CN=A91771E3/serialNumber=1596C4BBE732DA85CB83E8A770873EA3413701A5
Certificate serial:       140C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FZbEu-cy2oXLg-incIc-o0E3AaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.mft
Manifest number:          13D7
Signing time:             Sat 04 Apr 2026 16:51:12 +0000
Manifest this update:     Sat 04 Apr 2026 16:51:12 +0000
Manifest next update:     Sat 11 Apr 2026 16:51:12 +0000
Files and hashes:         1: FZbEu-cy2oXLg-incIc-o0E3AaU.crl (hash: E8rqB+eg0JDt4JFY4v/51Gxagng0P/syIAus5mgfi30=)
                          2: 56094384320611EA84C94231C4F9AE02.roa (hash: XDtAQp9b5mDKow63ETAdi74o5CpTFjvFQYx58JxRZGs=)
                          3: 443241A0321B11EA83044473C4F9AE02.roa (hash: HX+aYGof6uuUT5n6qyG5744PYZCEJDrFxYbRkwQ0maE=)
                          4: 1FD07ED231FB11EAA335E10FC4F9AE02.roa (hash: YJF7+er3dbDA0eaKTlwDNbJtYejMK42xL43RXDF6IfQ=)
                          5: 4B18BBA8A9F811EEB85DBD24C4F9AE02.roa (hash: UwKIxZZ+vZaGeU7IZRtNE/Cd4EONSN52pyGN0S6FpMI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.crl
                          rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FZbEu-cy2oXLg-incIc-o0E3AaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 16:51:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5132 (0x140c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91771E3, serialNumber=1596C4BBE732DA85CB83E8A770873EA3413701A5
        Validity
            Not Before: Apr  4 16:51:12 2026 GMT
            Not After : Apr 11 16:51:12 2026 GMT
        Subject: CN=69d14180-27dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:d3:3e:78:b5:90:de:c8:64:c0:cf:21:07:ee:
                    54:2b:42:69:77:db:3b:14:8d:db:03:dd:b8:c9:5c:
                    5d:88:a3:6a:0d:c9:71:f6:14:8b:73:6d:3f:6d:ea:
                    ac:6d:03:6c:c2:4b:ff:5e:f9:2b:ec:ef:0d:a4:b0:
                    fe:ef:ba:75:9d:4e:27:34:15:0d:40:6f:09:5d:f3:
                    eb:32:06:dd:6c:5d:e1:f4:f8:e0:07:84:4f:62:45:
                    ca:c7:ef:44:78:fe:9d:c4:4b:1d:02:87:b6:82:84:
                    00:8a:e3:db:97:d3:66:8f:52:7f:5c:9b:7b:a5:5f:
                    7e:e4:96:8a:47:d2:44:e9:0b:d2:c9:33:0d:ca:a2:
                    f7:27:3a:f9:fe:2f:62:ba:47:c1:9c:4a:ae:38:e4:
                    cc:d4:0c:2b:ef:ac:15:b1:d0:12:42:75:bc:00:00:
                    3f:29:d2:af:7d:ff:c0:e9:77:55:17:69:90:4d:70:
                    14:86:12:44:93:eb:d4:30:fd:0b:2d:fa:1c:74:03:
                    4a:39:7c:35:10:57:0f:c4:5d:7f:85:2b:a3:80:eb:
                    81:2d:a6:25:50:d5:9d:c2:7e:eb:bd:14:29:b4:f0:
                    92:ac:80:aa:37:94:d5:97:ef:6d:2e:b0:ac:cc:ad:
                    c4:17:14:0c:dc:5f:b5:75:d7:1d:92:6d:95:7a:da:
                    db:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:58:DF:51:92:0C:82:37:6E:2C:AE:6D:6C:70:E3:BA:22:32:42:E2
            X509v3 Authority Key Identifier:
                keyid:15:96:C4:BB:E7:32:DA:85:CB:83:E8:A7:70:87:3E:A3:41:37:01:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FZbEu-cy2oXLg-incIc-o0E3AaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:8c:a9:a3:d1:93:bc:02:37:72:89:d1:79:35:b3:d6:80:b4:
         13:04:23:f4:99:a2:24:9d:59:5f:56:6e:5a:55:64:45:32:2d:
         62:9e:b1:d4:5a:2a:5a:5e:99:bf:d3:f2:5b:48:b4:b6:8a:9e:
         0c:2a:15:3d:eb:38:c3:b7:d4:a4:79:d2:ef:f9:6f:40:5a:fa:
         13:c2:1d:d1:c7:87:69:50:b6:0b:3f:2b:93:69:02:80:d5:34:
         fc:c7:63:46:04:2b:17:0f:6e:04:7d:6c:78:7e:da:ba:a9:7e:
         53:6d:8c:dc:b9:35:94:cb:e1:93:ce:02:85:f5:06:68:ba:5a:
         4c:b6:be:2c:b6:8f:4c:f4:8a:b9:01:2a:89:7f:ac:87:1b:13:
         5d:4c:ef:30:f0:3b:b1:73:8a:5b:0d:3b:60:bf:66:63:43:f2:
         17:de:05:04:32:96:7d:e7:9a:03:8b:e9:14:0b:67:b2:58:38:
         1f:19:68:54:95:30:67:3a:65:6a:64:4b:d7:63:a2:3e:f8:ea:
         9a:c4:c1:fd:eb:33:cb:4a:5c:7c:87:7f:c9:d0:0d:b9:43:89:
         58:d4:0d:61:f1:6f:40:07:38:9c:4b:f0:26:5e:b4:14:da:90:
         60:bf:34:bc:9e:32:72:33:6e:bc:52:58:36:0c:05:95:2b:f9:
         65:ec:ad:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:05:32 2026 by rpki-client