Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91187C1/2F69233C570A11F0B538CF65C4F9AE02/FVrWKB4FUMtP3WHS8RdpwmhKcAE.mft
File:                     FVrWKB4FUMtP3WHS8RdpwmhKcAE.mft (raw, json)
Hash identifier:          ij26HqLwBxPUlRY7haql+dVx2jNLMBtPeWfVa2Zqvrw=
Subject key identifier:   58:C8:90:C8:14:92:68:1B:48:12:0C:1C:BE:77:CC:2C:A5:BE:86:5B
Authority key identifier: 15:5A:D6:28:1E:05:50:CB:4F:DD:61:D2:F1:17:69:C2:68:4A:70:01
Certificate issuer:       /CN=A91187C1/serialNumber=155AD6281E0550CB4FDD61D2F11769C2684A7001
Certificate serial:       90
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FVrWKB4FUMtP3WHS8RdpwmhKcAE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91187C1/2F69233C570A11F0B538CF65C4F9AE02/FVrWKB4FUMtP3WHS8RdpwmhKcAE.mft
Manifest number:          8D
Signing time:             Wed 25 Mar 2026 06:46:17 +0000
Manifest this update:     Wed 25 Mar 2026 06:46:17 +0000
Manifest next update:     Wed 01 Apr 2026 06:46:17 +0000
Files and hashes:         1: FVrWKB4FUMtP3WHS8RdpwmhKcAE.crl (hash: dG9SQjLfl1eg2v+N/iToQhcaIaijbE5GZ/xkyvORcM8=)
                          2: 5FF0F14A5BE911F0BFE7BE3EC4F9AE02.roa (hash: 9J/jo+jCWsn913Xpfh7HW3oepiyUV90KXeyhRpM6XPc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91187C1/2F69233C570A11F0B538CF65C4F9AE02/FVrWKB4FUMtP3WHS8RdpwmhKcAE.crl
                          rsync://rpki.apnic.net/member_repository/A91187C1/2F69233C570A11F0B538CF65C4F9AE02/FVrWKB4FUMtP3WHS8RdpwmhKcAE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FVrWKB4FUMtP3WHS8RdpwmhKcAE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:46:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 144 (0x90)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91187C1, serialNumber=155AD6281E0550CB4FDD61D2F11769C2684A7001
        Validity
            Not Before: Mar 25 06:46:17 2026 GMT
            Not After : Apr  1 06:46:17 2026 GMT
        Subject: CN=69c384b9-74be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:5e:c3:72:89:70:2b:16:0b:28:6a:3d:3e:05:
                    27:fd:cb:51:f1:9e:c4:1c:8c:30:01:71:86:54:09:
                    35:38:b4:61:eb:5b:52:bb:af:cd:ad:ee:ae:12:3b:
                    ef:fe:7a:8a:2c:cd:e7:e3:6c:b3:fc:1e:61:ec:6a:
                    58:cf:b3:11:85:05:ce:7b:ab:18:33:77:ce:89:6e:
                    83:15:d0:0b:7b:91:70:9e:e1:3d:20:e5:1f:9c:0b:
                    21:a1:ee:1e:40:9c:b6:b6:42:53:0a:ae:1f:18:ba:
                    43:95:44:1d:66:38:a8:f7:9f:a5:c2:c7:86:34:13:
                    9c:2d:ad:b3:fa:8e:b7:d4:e0:29:90:fe:a6:08:59:
                    3a:e2:11:1e:df:1a:14:fa:6a:33:93:a2:ca:19:3f:
                    24:44:bb:03:e6:a7:97:63:33:1a:87:9a:b7:43:18:
                    49:24:e3:ed:71:c6:4f:90:bc:7e:62:81:74:5a:90:
                    5b:5a:ab:dc:42:97:b2:f6:f2:b1:89:b9:46:75:a2:
                    35:69:63:63:59:00:e3:87:cd:c4:f6:2c:59:0c:09:
                    7c:c8:b4:84:6f:73:56:91:1e:a2:79:78:8b:5e:1c:
                    d9:de:3b:32:a6:5f:d7:8d:98:0c:4e:e1:55:3a:b9:
                    41:ba:57:63:e8:eb:2c:17:ec:7d:ad:ae:02:48:ad:
                    84:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:C8:90:C8:14:92:68:1B:48:12:0C:1C:BE:77:CC:2C:A5:BE:86:5B
            X509v3 Authority Key Identifier:
                keyid:15:5A:D6:28:1E:05:50:CB:4F:DD:61:D2:F1:17:69:C2:68:4A:70:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91187C1/2F69233C570A11F0B538CF65C4F9AE02/FVrWKB4FUMtP3WHS8RdpwmhKcAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FVrWKB4FUMtP3WHS8RdpwmhKcAE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91187C1/2F69233C570A11F0B538CF65C4F9AE02/FVrWKB4FUMtP3WHS8RdpwmhKcAE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:5d:b4:ea:ae:59:27:00:e1:0b:c9:40:ec:ce:86:81:c2:15:
         64:c2:37:29:1a:4c:9f:d6:20:0d:bc:f8:c7:b1:74:e2:82:90:
         37:9e:48:cc:14:6b:04:2f:38:d7:8e:8e:69:63:bb:c9:09:1a:
         00:4c:18:c5:fa:76:57:56:d1:f8:a6:16:90:57:07:18:3e:9c:
         09:0a:01:2b:50:0f:31:72:81:7f:dd:d6:b5:22:c2:bb:08:e5:
         73:6d:4d:96:ac:b1:b6:bc:10:99:f6:c6:8a:3e:ec:51:67:c3:
         d2:da:e9:e8:fc:3c:21:2f:76:11:84:c9:c6:5c:d9:6e:55:94:
         26:7d:71:64:fa:95:f0:62:6a:b9:31:75:3a:a7:66:44:8b:17:
         0e:0b:bf:97:1a:e1:96:31:7f:8f:3f:3d:21:23:76:c9:bd:4b:
         65:3c:22:26:9e:5f:af:a9:75:a2:bf:52:cf:b0:ab:57:5d:db:
         d2:fa:73:07:95:df:20:c3:a7:52:e7:4a:98:aa:06:b7:cc:04:
         57:61:e5:87:cb:32:ac:03:df:9a:02:24:57:08:c9:ec:1f:70:
         29:51:02:90:32:f9:46:76:78:99:14:f0:f3:14:61:54:ec:89:
         fb:13:ff:ff:58:ff:c3:49:64:cf:98:f7:83:93:b6:7a:cb:03:
         84:2e:46:72
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTg3QzExMTAvBgNVBAUTKDE1NUFENjI4MUUwNTUwQ0I0RkRENjFEMkYxMTc2OUMy
Njg0QTcwMDEwHhcNMjYwMzI1MDY0NjE3WhcNMjYwNDAxMDY0NjE3WjAYMRYwFAYD
VQQDEw02OWMzODRiOS03NGJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApV7DcolwKxYLKGo9PgUn/ctR8Z7EHIwwAXGGVAk1OLRh61tSu6/Nre6uEjvv
/nqKLM3n42yz/B5h7GpYz7MRhQXOe6sYM3fOiW6DFdALe5FwnuE9IOUfnAshoe4e
QJy2tkJTCq4fGLpDlUQdZjio95+lwseGNBOcLa2z+o631OApkP6mCFk64hEe3xoU
+mozk6LKGT8kRLsD5qeXYzMah5q3QxhJJOPtccZPkLx+YoF0WpBbWqvcQpey9vKx
iblGdaI1aWNjWQDjh83E9ixZDAl8yLSEb3NWkR6ieXiLXhzZ3jsypl/XjZgMTuFV
OrlBuldj6OssF+x9ra4CSK2EQwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFjIkMgU
kmgbSBIMHL53zCylvoZbMB8GA1UdIwQYMBaAFBVa1igeBVDLT91h0vEXacJoSnAB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODdDMS8yRjY5MjMzQzU3
MEExMUYwQjUzOENGNjVDNEY5QUUwMi9GVnJXS0I0RlVNdFAzV0hTOFJkcHdtaEtj
QUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZWcldLQjRGVU10UDNXSFM4UmRwd21oS2NBRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
ODdDMS8yRjY5MjMzQzU3MEExMUYwQjUzOENGNjVDNEY5QUUwMi9GVnJXS0I0RlVN
dFAzV0hTOFJkcHdtaEtjQUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAH1206q5ZJwDhC8lA7M6GgcIVZMI3KRpMn9YgDbz4x7F04oKQN55IzBRrBC84
146OaWO7yQkaAEwYxfp2V1bR+KYWkFcHGD6cCQoBK1APMXKBf93WtSLCuwjlc21N
lqyxtrwQmfbGij7sUWfD0trp6Pw8IS92EYTJxlzZblWUJn1xZPqV8GJquTF1Oqdm
RIsXDgu/lxrhljF/jz89ISN2yb1LZTwiJp5fr6l1or9Sz7CrV13b0vpzB5XfIMOn
UudKmKoGt8wEV2Hlh8syrAPfmgIkVwjJ7B9wKVECkDL5RnZ4mRTw8xRhVOyJ+xP/
/1j/w0lkz5j3g5O2essDhC5Gcg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:08:30 2026 by rpki-client