Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.mft
File:                     fkTc6XLxPIDlNLLmhf4dKg12FRI.mft (raw, json)
Hash identifier:          KDOagOx9JshHnA/+pNYbqo7aEOmhkS/HHqSqLYMfNO8=
Subject key identifier:   62:09:D1:11:07:7C:E4:4D:40:77:66:CE:5E:DD:3A:EA:96:6A:36:ED
Authority key identifier: 7E:44:DC:E9:72:F1:3C:80:E5:34:B2:E6:85:FE:1D:2A:0D:76:15:12
Certificate issuer:       /CN=A917270F/serialNumber=7E44DCE972F13C80E534B2E685FE1D2A0D761512
Certificate serial:       0382
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fkTc6XLxPIDlNLLmhf4dKg12FRI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.mft
Manifest number:          035D
Signing time:             Wed 13 May 2026 01:10:23 +0000
Manifest this update:     Wed 13 May 2026 01:10:22 +0000
Manifest next update:     Wed 20 May 2026 01:10:22 +0000
Files and hashes:         1: fkTc6XLxPIDlNLLmhf4dKg12FRI.crl (hash: HijVh5dsJBtwYXLO17KjZfUB/8Bkydbz2mAsxZRoYs8=)
                          2: 03D6E39A824C11F0B2CA540FC4F9AE02.roa (hash: v1c/7CojEGRaNp000m+6ubWlF6Q9FwpjN3RsWsFetvU=)
                          3: D08FF4F0BB7111EFACA16B1DC4F9AE02.roa (hash: jEbU+UZ6bH7hld9QXt1qM9jJKv0SNsetGnm09iu/Csc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.crl
                          rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fkTc6XLxPIDlNLLmhf4dKg12FRI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 01:10:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 898 (0x382)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917270F, serialNumber=7E44DCE972F13C80E534B2E685FE1D2A0D761512
        Validity
            Not Before: May 13 01:10:22 2026 GMT
            Not After : May 20 01:10:22 2026 GMT
        Subject: CN=6a03cf7e-ddc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:8a:c1:57:5d:52:32:05:15:88:f1:df:7e:e1:
                    6f:f4:a5:5b:71:e9:cd:02:1f:27:77:a1:47:64:21:
                    8f:3d:1a:0f:95:88:65:a0:9f:29:83:e0:cc:40:6a:
                    56:2d:12:3d:65:3f:34:e5:53:fa:72:7a:5b:0f:ff:
                    29:ab:8f:81:ee:28:6b:a9:e9:6b:b1:4b:e8:2c:be:
                    dc:89:74:8a:8d:4a:51:0f:92:d4:c8:ea:9d:b9:bb:
                    42:e9:37:e2:1d:36:fb:31:5a:6b:06:4b:ee:c1:88:
                    3e:85:98:99:13:0b:e4:fc:5f:73:a3:d7:3a:e5:68:
                    1b:3a:a6:fc:d4:82:35:8b:af:02:0c:52:3c:19:53:
                    cd:8e:2c:ea:88:7e:d6:03:94:e0:37:d8:d9:63:55:
                    ed:b9:09:f2:25:56:ae:4f:48:2a:3d:39:db:24:c3:
                    69:a0:24:cd:88:48:8f:7f:78:55:fe:cd:9f:ea:0e:
                    c3:08:15:c5:d1:c4:01:70:c5:db:19:0b:01:08:5b:
                    94:9f:48:0d:44:ac:8b:29:02:03:40:3e:17:9c:58:
                    e4:de:ce:85:25:2b:65:75:ca:be:97:21:97:60:35:
                    a6:cf:4d:9d:f3:f6:75:2c:c7:9b:7e:5d:3e:58:c1:
                    99:a8:c8:d2:3c:f6:85:10:48:6c:ed:43:f4:64:2b:
                    da:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:09:D1:11:07:7C:E4:4D:40:77:66:CE:5E:DD:3A:EA:96:6A:36:ED
            X509v3 Authority Key Identifier:
                keyid:7E:44:DC:E9:72:F1:3C:80:E5:34:B2:E6:85:FE:1D:2A:0D:76:15:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fkTc6XLxPIDlNLLmhf4dKg12FRI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:e8:ad:98:2c:5b:41:fc:57:4d:0d:29:a6:81:a7:21:02:77:
         d6:d3:66:01:27:5a:e0:b3:24:1c:dd:85:23:91:fd:ef:6d:52:
         01:ae:e0:a3:82:5b:2d:74:bc:7e:d8:f9:42:bf:05:08:98:26:
         86:54:56:2d:ed:fd:57:7e:8a:f9:c4:1a:fb:41:47:e2:e3:f2:
         2b:ed:11:e1:ae:9f:8a:8a:7d:64:44:90:ab:8f:e3:97:04:33:
         02:37:f9:e4:3c:9d:34:8f:cd:7c:d2:98:21:0d:52:cf:ab:67:
         e5:d1:6f:5e:b2:ad:1a:71:01:95:aa:b2:c7:7d:f1:25:dd:6d:
         eb:49:bc:87:36:60:4a:f2:c6:4f:67:55:19:e1:ca:07:70:4e:
         44:80:7b:d3:9f:8b:42:a2:1e:2f:88:be:ab:20:95:af:53:92:
         b5:1d:fa:a3:8b:3c:ba:71:1f:ff:4c:74:15:a9:06:6c:1f:db:
         34:19:00:20:c5:77:2a:d4:ee:ac:0f:d4:ac:29:a1:38:18:80:
         63:7c:a4:59:3d:b7:ae:45:9d:dc:7d:2d:7b:25:48:a8:40:2d:
         bf:9e:7b:7d:55:b2:a1:4c:08:b0:68:1e:5a:1a:9f:75:ac:5f:
         3d:21:a4:e8:df:d6:7a:6e:25:6d:21:da:e4:cf:53:2b:f6:e6:
         c7:33:d9:ba
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA4IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzI3MEYxMTAvBgNVBAUTKDdFNDREQ0U5NzJGMTNDODBFNTM0QjJFNjg1RkUxRDJB
MEQ3NjE1MTIwHhcNMjYwNTEzMDExMDIyWhcNMjYwNTIwMDExMDIyWjAYMRYwFAYD
VQQDEw02YTAzY2Y3ZS1kZGMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7IrBV11SMgUViPHffuFv9KVbcenNAh8nd6FHZCGPPRoPlYhloJ8pg+DMQGpW
LRI9ZT805VP6cnpbD/8pq4+B7ihrqelrsUvoLL7ciXSKjUpRD5LUyOqdubtC6Tfi
HTb7MVprBkvuwYg+hZiZEwvk/F9zo9c65WgbOqb81II1i68CDFI8GVPNjizqiH7W
A5TgN9jZY1XtuQnyJVauT0gqPTnbJMNpoCTNiEiPf3hV/s2f6g7DCBXF0cQBcMXb
GQsBCFuUn0gNRKyLKQIDQD4XnFjk3s6FJStldcq+lyGXYDWmz02d8/Z1LMebfl0+
WMGZqMjSPPaFEEhs7UP0ZCvaqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGIJ0REH
fORNQHdmzl7dOuqWajbtMB8GA1UdIwQYMBaAFH5E3Oly8TyA5TSy5oX+HSoNdhUS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MjcwRi9EQzVFNzRDQTA4
RTgxMUVEQjlFMUI2MzNDNEY5QUUwMi9ma1RjNlhMeFBJRGxOTExtaGY0ZEtnMTJG
UkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZrVGM2WEx4UElEbE5MTG1oZjRkS2cxMkZSSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MjcwRi9EQzVFNzRDQTA4RTgxMUVEQjlFMUI2MzNDNEY5QUUwMi9ma1RjNlhMeFBJ
RGxOTExtaGY0ZEtnMTJGUkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAgeitmCxbQfxXTQ0ppoGnIQJ31tNmASda4LMkHN2FI5H9721SAa7go4JbLXS8
ftj5Qr8FCJgmhlRWLe39V36K+cQa+0FH4uPyK+0R4a6fiop9ZESQq4/jlwQzAjf5
5DydNI/NfNKYIQ1Sz6tn5dFvXrKtGnEBlaqyx33xJd1t60m8hzZgSvLGT2dVGeHK
B3BORIB705+LQqIeL4i+qyCVr1OStR36o4s8unEf/0x0FakGbB/bNBkAIMV3KtTu
rA/UrCmhOBiAY3ykWT23rkWd3H0teyVIqEAtv557fVWyoUwIsGgeWhqfdaxfPSGk
6N/Wem4lbSHa5M9TK/bmxzPZug==
-----END CERTIFICATE-----
Generated at Wed May 13 03:49:51 2026 by rpki-client