Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.mft
File:                     FY-z7-6O9vuaWnxOSaOMnWm8LzQ.mft (raw, json)
Hash identifier:          n8qhzbsu8CDIFpK2r50h8LD45onIJep6fjvNkTfFEzA=
Subject key identifier:   00:AE:70:FC:B3:50:3A:EE:85:1D:04:5C:B3:39:98:84:19:FD:86:07
Authority key identifier: 15:8F:B3:EF:EE:8E:F6:FB:9A:5A:7C:4E:49:A3:8C:9D:69:BC:2F:34
Certificate issuer:       /CN=A91A8259/serialNumber=158FB3EFEE8EF6FB9A5A7C4E49A38C9D69BC2F34
Certificate serial:       0C7B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.mft
Manifest number:          0C70
Signing time:             Sat 04 Apr 2026 18:29:00 +0000
Manifest this update:     Sat 04 Apr 2026 18:29:00 +0000
Manifest next update:     Sat 11 Apr 2026 18:29:00 +0000
Files and hashes:         1: FY-z7-6O9vuaWnxOSaOMnWm8LzQ.crl (hash: Xm2J/N4KtOTDnxquNWZ7YKfaOFpljl6UqEUp75pZ5xI=)
                          2: 776893761C9F11EAB9B84F25C4F9AE02.roa (hash: 4ablXLJzigDQjMav8RJlsCl5xohBbLZT5yMn2LFHDVg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.crl
                          rsync://rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 18:28:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3195 (0xc7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A8259, serialNumber=158FB3EFEE8EF6FB9A5A7C4E49A38C9D69BC2F34
        Validity
            Not Before: Apr  4 18:29:00 2026 GMT
            Not After : Apr 11 18:29:00 2026 GMT
        Subject: CN=69d1586c-758f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:51:f1:1d:7e:f5:79:74:ac:cf:05:16:b8:f4:
                    34:22:11:a9:69:bc:55:92:ef:97:d6:5c:53:6b:1c:
                    89:22:71:d9:3e:33:9b:65:ee:76:50:59:82:5b:88:
                    bc:55:64:c8:83:46:e1:07:5a:fd:7f:ba:49:05:1b:
                    88:13:76:38:81:f5:6d:f2:67:24:5c:13:5f:01:4e:
                    a3:57:a8:63:e7:5b:59:95:d5:17:53:dd:47:03:73:
                    05:21:b9:e1:a2:90:c0:af:ed:fe:6a:bd:90:b1:a8:
                    d3:b2:e9:9f:7e:e6:e8:1b:91:b6:6d:c9:0a:10:04:
                    4f:34:58:f6:5b:e0:74:d9:98:89:8e:56:bc:4f:17:
                    7c:85:52:7c:e2:b4:65:19:2f:64:cc:4c:62:09:8d:
                    02:e1:8f:ee:9f:2f:a8:d8:6f:92:7f:c1:3e:99:e2:
                    2d:3e:6a:b1:8b:d0:69:16:68:7b:66:03:39:e3:70:
                    97:a3:5e:40:e8:b3:d0:fb:fe:87:31:57:1b:cc:3b:
                    3f:57:86:35:ab:0b:48:2b:fd:2a:87:d4:d1:15:79:
                    20:a1:e7:45:24:47:92:ae:f6:1e:7c:56:fa:ba:97:
                    cd:02:20:de:27:8d:6e:1c:84:fe:b0:c0:df:44:b4:
                    ce:23:ed:f3:90:d3:2a:5c:ed:0b:e7:a3:8b:25:a5:
                    d3:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:AE:70:FC:B3:50:3A:EE:85:1D:04:5C:B3:39:98:84:19:FD:86:07
            X509v3 Authority Key Identifier:
                keyid:15:8F:B3:EF:EE:8E:F6:FB:9A:5A:7C:4E:49:A3:8C:9D:69:BC:2F:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:00:20:1d:8c:92:25:68:74:22:e8:b9:c8:e4:3e:94:9c:0c:
         a7:7b:52:ef:11:f1:c2:09:bf:e0:bf:84:47:8a:61:c0:0b:d7:
         24:ec:53:68:41:f3:b3:19:17:e3:db:da:48:c3:2b:bf:ac:62:
         64:6f:76:69:3f:b3:ef:df:30:55:7c:63:25:1d:36:fa:bb:1f:
         3d:3f:35:5e:fc:77:de:b4:c2:9b:90:e6:f6:f2:44:54:ad:0a:
         2d:67:65:df:c0:1a:0a:04:07:b2:f0:1e:93:2a:8c:8d:61:00:
         35:42:16:a3:0d:88:81:94:1f:e0:6b:e2:39:00:0b:71:c5:7a:
         1e:db:9a:15:dd:7a:6b:f1:8f:b7:b6:7c:e8:0d:1c:4b:5b:b1:
         78:04:cc:99:0c:55:64:96:48:30:14:1c:97:57:4e:69:38:96:
         15:7f:c8:d5:1e:04:ab:79:ae:5a:71:8d:aa:58:e2:d3:63:44:
         63:39:0e:7c:72:fe:7b:7e:af:fa:b8:8c:e1:a9:32:04:8f:f3:
         12:42:50:1e:e2:bd:b4:60:07:c7:48:21:be:e3:a9:e2:f2:cf:
         a4:c4:98:ab:a6:9f:d7:9f:f9:e5:f6:0f:da:78:04:bc:2e:06:
         b5:87:5d:6f:41:a5:ec:8d:6c:b3:c1:35:d5:2b:40:e5:85:73:
         d8:31:f3:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:06:05 2026 by rpki-client