Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/FnVwIM-0mowfe-H3xI1FR9_JZu8.mft
File:                     FnVwIM-0mowfe-H3xI1FR9_JZu8.mft (raw, json)
Hash identifier:          D2iZkosva5fdRw2VJ6r1GEtIouJUrrgaQ7Yvr0uLRhs=
Subject key identifier:   5B:22:EE:34:F9:81:E7:CA:DB:77:18:66:26:99:3C:9D:3C:F6:25:89
Authority key identifier: 16:75:70:20:CF:B4:9A:8C:1F:7B:E1:F7:C4:8D:45:47:DF:C9:66:EF
Certificate issuer:       /CN=A9150EAB/serialNumber=16757020CFB49A8C1F7BE1F7C48D4547DFC966EF
Certificate serial:       0780
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnVwIM-0mowfe-H3xI1FR9_JZu8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/FnVwIM-0mowfe-H3xI1FR9_JZu8.mft
Manifest number:          1309
Signing time:             Tue 24 Mar 2026 18:53:13 +0000
Manifest this update:     Tue 24 Mar 2026 18:53:12 +0000
Manifest next update:     Tue 31 Mar 2026 18:53:12 +0000
Files and hashes:         1: FnVwIM-0mowfe-H3xI1FR9_JZu8.crl (hash: Ma1P+jy1oYOD+wV4PSSbNvwgKk2ICJKa3E7PrvGue3w=)
                          2: 99871E14B32A11F0A592C451C4F9AE02.roa (hash: pyGJ4mOeSczCgBj+2gG7SOgNqNQ7xsmAyA0/QdYcFpk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/FnVwIM-0mowfe-H3xI1FR9_JZu8.crl
                          rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/FnVwIM-0mowfe-H3xI1FR9_JZu8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnVwIM-0mowfe-H3xI1FR9_JZu8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 18:53:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1920 (0x780)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150EAB, serialNumber=16757020CFB49A8C1F7BE1F7C48D4547DFC966EF
        Validity
            Not Before: Mar 24 18:53:12 2026 GMT
            Not After : Mar 31 18:53:12 2026 GMT
        Subject: CN=69c2dd99-aee6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:4e:29:56:a6:21:60:65:ac:35:f1:c7:e4:f5:
                    61:20:8e:a1:fb:ff:c6:5a:90:25:42:99:98:4d:57:
                    86:7e:da:0b:91:38:8d:26:30:16:27:9a:30:a8:d1:
                    1a:90:8e:23:c2:32:ce:8a:57:af:74:ea:33:b8:82:
                    fe:a0:b7:a3:11:fb:98:b6:85:45:fd:1d:96:d1:b5:
                    68:78:21:5c:90:05:a4:a7:4b:b5:ad:50:ef:fe:5f:
                    cd:ed:92:0d:1c:0a:55:c6:80:39:99:c8:18:c1:4a:
                    7a:12:a5:41:53:8b:52:84:21:a7:1f:e7:a8:64:72:
                    f5:cf:c4:d9:44:e5:43:8f:c1:bc:e5:56:13:16:1e:
                    a5:e5:a8:e9:9a:f3:f6:e6:7c:6e:59:43:c3:40:2f:
                    ad:31:8c:37:a0:04:5f:97:99:7f:3d:5e:30:1a:50:
                    6d:16:b8:da:a7:48:17:5d:d6:8b:60:c8:d7:c5:41:
                    6d:96:aa:5d:2f:65:a6:72:26:c3:35:89:a9:76:35:
                    44:dd:62:d5:76:90:a9:73:ac:40:30:b8:d7:dc:5e:
                    72:8f:f1:58:9f:9c:70:1d:29:8b:bc:8a:fd:96:35:
                    d0:e8:db:54:0a:0b:97:39:b5:38:03:14:e2:d8:96:
                    e4:44:09:11:8c:d4:b0:2f:b8:1b:28:6a:cc:21:03:
                    7a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:22:EE:34:F9:81:E7:CA:DB:77:18:66:26:99:3C:9D:3C:F6:25:89
            X509v3 Authority Key Identifier:
                keyid:16:75:70:20:CF:B4:9A:8C:1F:7B:E1:F7:C4:8D:45:47:DF:C9:66:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/FnVwIM-0mowfe-H3xI1FR9_JZu8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnVwIM-0mowfe-H3xI1FR9_JZu8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/FnVwIM-0mowfe-H3xI1FR9_JZu8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:d2:76:ea:33:26:2a:f0:9f:06:5b:fa:4a:d6:43:a4:68:af:
         cb:62:9a:71:fc:ab:03:19:2d:10:8c:f6:ac:a2:df:56:44:e5:
         07:67:ff:70:99:4e:93:08:70:7d:1d:39:97:13:8c:6f:42:74:
         88:b0:37:b6:d6:a7:01:ae:97:8a:f9:e8:2e:6b:77:bc:08:78:
         66:83:57:88:bc:5e:65:e0:60:15:53:e5:6a:09:94:15:ab:dc:
         c3:b4:17:86:1b:a6:36:71:e7:00:0e:5b:1a:41:04:0c:80:cc:
         bb:d9:b4:d4:38:f9:a3:d3:13:5f:83:6b:fc:59:eb:69:60:38:
         28:e2:28:33:93:35:5e:6f:2d:3a:12:ab:57:88:d1:d4:df:e8:
         d0:54:a5:a8:7b:a3:82:09:e5:e2:e9:92:83:43:77:7d:87:9c:
         dc:e9:76:79:e0:4b:fa:e9:f4:ff:31:1a:8d:91:b2:ac:6e:58:
         1e:bd:fb:ff:d3:42:88:64:3d:11:68:ab:8a:7f:be:0b:e8:1c:
         28:01:b3:f8:94:f2:e4:48:9b:e2:2b:50:6e:b3:df:a9:80:51:
         d2:59:49:97:77:1f:81:5f:9a:14:c3:97:dc:e5:b4:2f:0d:22:
         dd:ba:5b:dd:f4:96:72:75:fe:24:6c:c5:0c:45:e2:8c:80:70:
         ce:2f:5c:01
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB4AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTBFQUIxMTAvBgNVBAUTKDE2NzU3MDIwQ0ZCNDlBOEMxRjdCRTFGN0M0OEQ0NTQ3
REZDOTY2RUYwHhcNMjYwMzI0MTg1MzEyWhcNMjYwMzMxMTg1MzEyWjAYMRYwFAYD
VQQDEw02OWMyZGQ5OS1hZWU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1E4pVqYhYGWsNfHH5PVhII6h+//GWpAlQpmYTVeGftoLkTiNJjAWJ5owqNEa
kI4jwjLOilevdOozuIL+oLejEfuYtoVF/R2W0bVoeCFckAWkp0u1rVDv/l/N7ZIN
HApVxoA5mcgYwUp6EqVBU4tShCGnH+eoZHL1z8TZROVDj8G85VYTFh6l5ajpmvP2
5nxuWUPDQC+tMYw3oARfl5l/PV4wGlBtFrjap0gXXdaLYMjXxUFtlqpdL2WmcibD
NYmpdjVE3WLVdpCpc6xAMLjX3F5yj/FYn5xwHSmLvIr9ljXQ6NtUCguXObU4AxTi
2JbkRAkRjNSwL7gbKGrMIQN66wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFsi7jT5
gefK23cYZiaZPJ089iWJMB8GA1UdIwQYMBaAFBZ1cCDPtJqMH3vh98SNRUffyWbv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEVBQi8xQjJFNzA1MDQ0
NkIxMUVBOURFNTlBNTdDNEY5QUUwMi9GblZ3SU0tMG1vd2ZlLUgzeEkxRlI5X0pa
dTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZuVndJTS0wbW93ZmUtSDN4STFGUjlfSlp1OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MEVBQi8xQjJFNzA1MDQ0NkIxMUVBOURFNTlBNTdDNEY5QUUwMi9GblZ3SU0tMG1v
d2ZlLUgzeEkxRlI5X0padTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJ9J26jMmKvCfBlv6StZDpGivy2KacfyrAxktEIz2rKLfVkTlB2f/cJlOkwhw
fR05lxOMb0J0iLA3ttanAa6XivnoLmt3vAh4ZoNXiLxeZeBgFVPlagmUFavcw7QX
hhumNnHnAA5bGkEEDIDMu9m01Dj5o9MTX4Nr/FnraWA4KOIoM5M1Xm8tOhKrV4jR
1N/o0FSlqHujggnl4umSg0N3fYec3Ol2eeBL+un0/zEajZGyrG5YHr37/9NCiGQ9
EWirin++C+gcKAGz+JTy5Eib4itQbrPfqYBR0llJl3cfgV+aFMOX3OW0Lw0i3bpb
3fSWcnX+JGzFDEXijIBwzi9cAQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:47:53 2026 by rpki-client