Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.mft
File:                     FZbEu-cy2oXLg-incIc-o0E3AaU.mft (raw, json)
Hash identifier:          lQMvD+gKMw8BKz6yaxIcDjPii+52IESke+j1IbNsZsM=
Subject key identifier:   6B:2D:3A:1E:16:07:A7:36:6E:F2:9A:2D:7D:DB:F6:7C:43:8F:46:76
Authority key identifier: 15:96:C4:BB:E7:32:DA:85:CB:83:E8:A7:70:87:3E:A3:41:37:01:A5
Certificate issuer:       /CN=A91771E3/serialNumber=1596C4BBE732DA85CB83E8A770873EA3413701A5
Certificate serial:       1407
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FZbEu-cy2oXLg-incIc-o0E3AaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.mft
Manifest number:          13D2
Signing time:             Thu 26 Mar 2026 16:55:23 +0000
Manifest this update:     Thu 26 Mar 2026 16:55:23 +0000
Manifest next update:     Thu 02 Apr 2026 16:55:23 +0000
Files and hashes:         1: FZbEu-cy2oXLg-incIc-o0E3AaU.crl (hash: fu4BVRyHIDZkXH914Dgom7WKLBy2oJXyoMXtth2VQ44=)
                          2: 443241A0321B11EA83044473C4F9AE02.roa (hash: HX+aYGof6uuUT5n6qyG5744PYZCEJDrFxYbRkwQ0maE=)
                          3: 1FD07ED231FB11EAA335E10FC4F9AE02.roa (hash: YJF7+er3dbDA0eaKTlwDNbJtYejMK42xL43RXDF6IfQ=)
                          4: 4B18BBA8A9F811EEB85DBD24C4F9AE02.roa (hash: UwKIxZZ+vZaGeU7IZRtNE/Cd4EONSN52pyGN0S6FpMI=)
                          5: 56094384320611EA84C94231C4F9AE02.roa (hash: XDtAQp9b5mDKow63ETAdi74o5CpTFjvFQYx58JxRZGs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.crl
                          rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FZbEu-cy2oXLg-incIc-o0E3AaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 14:54:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5127 (0x1407)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91771E3, serialNumber=1596C4BBE732DA85CB83E8A770873EA3413701A5
        Validity
            Not Before: Mar 26 16:55:23 2026 GMT
            Not After : Apr  2 16:55:23 2026 GMT
        Subject: CN=69c564fb-4fbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:40:78:81:16:48:91:0a:5f:06:a6:3a:f0:ea:
                    67:7a:59:af:85:a8:7a:2b:ad:f7:65:30:e9:f2:3e:
                    37:65:d8:ea:6f:86:bd:8d:d5:ac:39:df:f1:e6:10:
                    9a:18:11:2e:c7:8a:17:55:31:a5:fd:7d:48:1b:63:
                    59:f1:18:21:b5:df:ce:05:0e:85:9c:ac:e2:da:8b:
                    21:8e:b9:6b:9e:f2:5b:04:a4:14:a5:2a:f6:aa:ea:
                    d7:c5:cc:c1:f7:05:75:60:83:67:d2:78:b8:0d:df:
                    b2:d5:9f:af:3e:d4:94:47:74:42:2c:c3:89:13:b9:
                    de:e3:11:43:7b:e4:bd:c0:16:f0:31:42:1c:04:14:
                    4c:03:dc:4e:00:61:71:7a:71:b4:63:fe:f0:8e:11:
                    cb:6d:4d:ef:1d:61:1f:7c:c8:2a:1b:a4:2a:bb:86:
                    9c:40:60:6e:f6:63:2a:66:4f:3d:a6:71:ad:78:78:
                    1b:43:0a:d2:74:ff:20:51:ac:06:38:c5:20:7b:1d:
                    49:12:6b:93:2b:a6:18:81:ae:6b:34:96:0b:5d:70:
                    34:0a:6d:f3:b2:02:bc:91:c0:aa:42:2e:13:76:3c:
                    83:94:d3:ef:03:29:79:ad:b8:eb:81:d1:38:f0:00:
                    b0:dd:ed:c0:04:14:8e:e9:c9:ad:d1:50:1d:55:d6:
                    ff:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:2D:3A:1E:16:07:A7:36:6E:F2:9A:2D:7D:DB:F6:7C:43:8F:46:76
            X509v3 Authority Key Identifier:
                keyid:15:96:C4:BB:E7:32:DA:85:CB:83:E8:A7:70:87:3E:A3:41:37:01:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FZbEu-cy2oXLg-incIc-o0E3AaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:d5:89:63:56:66:c0:42:4e:81:47:07:c0:65:9e:29:24:82:
         ac:b5:1a:7a:ea:14:da:d2:ee:26:34:e5:f8:8d:b8:ab:03:49:
         a3:bf:2c:23:48:d4:9a:4d:8c:4c:7d:8e:25:83:68:fd:a9:d2:
         83:ed:d4:eb:64:b1:45:08:dd:e0:f5:19:79:c2:29:93:59:66:
         98:b5:3e:a3:9a:d5:7a:02:c6:eb:80:78:70:47:a9:e4:fb:4e:
         04:ed:56:d3:3c:a6:bd:2f:5f:1d:61:47:ae:ef:44:3e:dc:77:
         73:50:65:78:c9:a6:c8:23:3b:ff:2a:87:bd:fc:80:c3:3c:f8:
         b6:c4:a5:5a:1d:d6:30:e0:6d:aa:9f:f7:57:f5:11:31:a2:1a:
         10:61:d8:88:88:bc:32:5e:c8:64:1a:20:67:38:c6:cf:b5:79:
         c4:84:48:3d:ec:ab:c8:37:2f:83:28:ae:de:f9:e8:14:e4:be:
         e4:5e:60:51:77:90:ca:aa:4f:2d:3b:b9:2b:0c:39:25:dd:d6:
         7d:5f:79:a6:c6:a7:4c:be:ee:b0:0a:06:88:1f:2d:d7:65:3e:
         4d:36:53:c6:53:ec:17:e4:cc:ba:cf:54:1d:d5:68:c4:38:79:
         ca:d4:f4:04:05:c5:89:79:f7:d0:41:42:9e:39:3d:89:c5:bf:
         06:b5:68:27
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICFAcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzcxRTMxMTAvBgNVBAUTKDE1OTZDNEJCRTczMkRBODVDQjgzRThBNzcwODczRUEz
NDEzNzAxQTUwHhcNMjYwMzI2MTY1NTIzWhcNMjYwNDAyMTY1NTIzWjAYMRYwFAYD
VQQDEw02OWM1NjRmYi00ZmJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1UB4gRZIkQpfBqY68Opnelmvhah6K633ZTDp8j43Zdjqb4a9jdWsOd/x5hCa
GBEux4oXVTGl/X1IG2NZ8Rghtd/OBQ6FnKzi2oshjrlrnvJbBKQUpSr2qurXxczB
9wV1YINn0ni4Dd+y1Z+vPtSUR3RCLMOJE7ne4xFDe+S9wBbwMUIcBBRMA9xOAGFx
enG0Y/7wjhHLbU3vHWEffMgqG6Qqu4acQGBu9mMqZk89pnGteHgbQwrSdP8gUawG
OMUgex1JEmuTK6YYga5rNJYLXXA0Cm3zsgK8kcCqQi4TdjyDlNPvAyl5rbjrgdE4
8ACw3e3ABBSO6cmt0VAdVdb/QQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGstOh4W
B6c2bvKaLX3b9nxDj0Z2MB8GA1UdIwQYMBaAFBWWxLvnMtqFy4Pop3CHPqNBNwGl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzFFMy85MzgzRTY0NkFE
NjUxMUU4QUNCRDBENkFDNEY5QUUwMi9GWmJFdS1jeTJvWExnLWluY0ljLW8wRTNB
YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZaYkV1LWN5Mm9YTGctaW5jSWMtbzBFM0FhVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NzFFMy85MzgzRTY0NkFENjUxMUU4QUNCRDBENkFDNEY5QUUwMi9GWmJFdS1jeTJv
WExnLWluY0ljLW8wRTNBYVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAr9WJY1ZmwEJOgUcHwGWeKSSCrLUaeuoU2tLuJjTl+I24qwNJo78sI0jUmk2M
TH2OJYNo/anSg+3U62SxRQjd4PUZecIpk1lmmLU+o5rVegLG64B4cEep5PtOBO1W
0zymvS9fHWFHru9EPtx3c1BleMmmyCM7/yqHvfyAwzz4tsSlWh3WMOBtqp/3V/UR
MaIaEGHYiIi8Ml7IZBogZzjGz7V5xIRIPeyryDcvgyiu3vnoFOS+5F5gUXeQyqpP
LTu5Kww5Jd3WfV95psanTL7usAoGiB8t12U+TTZTxlPsF+TMus9UHdVoxDh5ytT0
BAXFiXn30EFCnjk9icW/BrVoJw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:10:19 2026 by rpki-client