Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.mft
File:                     fsx3osytqtpjQvwPRGkYdeo_koc.mft (raw, json)
Hash identifier:          g63fOwNO7Q0M5tc3jx4zn22657RiN1oknZXnl6qHhE0=
Subject key identifier:   2D:C4:0B:CA:C0:93:C8:58:0F:6E:BE:8D:7D:09:D0:6F:6A:43:CB:10
Authority key identifier: 7E:CC:77:A2:CC:AD:AA:DA:63:42:FC:0F:44:69:18:75:EA:3F:92:87
Certificate issuer:       /CN=A91B2BC9/serialNumber=7ECC77A2CCADAADA6342FC0F44691875EA3F9287
Certificate serial:       0262
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fsx3osytqtpjQvwPRGkYdeo_koc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.mft
Manifest number:          025B
Signing time:             Fri 27 Mar 2026 01:47:15 +0000
Manifest this update:     Fri 27 Mar 2026 01:47:15 +0000
Manifest next update:     Fri 03 Apr 2026 01:47:15 +0000
Files and hashes:         1: fsx3osytqtpjQvwPRGkYdeo_koc.crl (hash: /A5fefJNGL07W/+Mc1eIkA7AzIbze0EJsVN3KCdVeaw=)
                          2: 044E6658915A11ED8D2FBE43C4F9AE02.roa (hash: 6ViEjGiRPk0ms0lSl5+ohXm8W2evvF29tI66T/l8bLg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.crl
                          rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fsx3osytqtpjQvwPRGkYdeo_koc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 01:47:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 610 (0x262)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B2BC9, serialNumber=7ECC77A2CCADAADA6342FC0F44691875EA3F9287
        Validity
            Not Before: Mar 27 01:47:15 2026 GMT
            Not After : Apr  3 01:47:15 2026 GMT
        Subject: CN=69c5e1a3-1228
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:3a:cc:dd:d7:62:7e:0a:82:77:15:fa:cd:4a:
                    3b:28:cd:52:06:7b:0d:31:58:ad:00:b5:0c:31:6f:
                    d9:0c:bb:41:aa:93:7f:4d:16:f6:12:b2:5e:bf:60:
                    81:a3:22:bc:29:36:60:91:9b:13:a5:f5:3c:5c:b1:
                    91:9c:8c:bb:83:92:a5:f1:13:c1:da:f6:36:d0:99:
                    e8:2b:99:81:66:71:ad:92:58:35:52:e1:63:c3:aa:
                    08:bf:4e:38:b4:cf:27:2c:19:b9:41:d8:f7:fc:a0:
                    75:6e:9e:95:6e:42:39:22:0d:88:ca:fa:7b:ce:16:
                    a6:7e:01:18:cd:9e:25:52:27:40:55:18:16:e6:81:
                    8e:cd:b4:16:1d:a9:48:59:5a:85:78:ea:75:70:44:
                    87:d4:99:70:76:41:c7:6a:d3:12:5f:e7:da:20:dd:
                    24:c5:a9:76:f4:aa:a0:9d:4f:a5:d6:a0:e9:21:90:
                    72:8f:36:cc:23:b7:e7:2e:da:a0:7c:cd:00:e7:25:
                    ce:87:12:6c:13:bd:ee:8c:cb:5e:73:ff:68:26:35:
                    21:b5:85:63:99:47:4d:4a:fc:ed:aa:24:e0:53:46:
                    03:bd:de:05:ce:03:5e:7d:ad:a5:f7:f6:da:8d:08:
                    bb:49:18:ab:7b:52:a4:40:86:71:15:c3:6a:e5:ea:
                    ce:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:C4:0B:CA:C0:93:C8:58:0F:6E:BE:8D:7D:09:D0:6F:6A:43:CB:10
            X509v3 Authority Key Identifier:
                keyid:7E:CC:77:A2:CC:AD:AA:DA:63:42:FC:0F:44:69:18:75:EA:3F:92:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fsx3osytqtpjQvwPRGkYdeo_koc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:81:bf:d5:b9:fa:69:b6:c3:a6:70:64:90:50:19:85:3a:b6:
         4b:ce:a8:28:dd:5c:86:16:e3:11:52:dc:d9:64:5a:46:4a:e4:
         d3:7f:2b:29:d4:16:64:26:99:d3:02:7a:ca:7e:ca:5e:f2:c2:
         5c:81:3d:e3:43:fb:b9:25:4f:0a:1b:41:5f:08:4b:0d:a4:42:
         09:40:eb:96:e6:15:67:ca:87:b3:50:55:bb:ac:db:5a:87:c8:
         7a:0e:e7:0f:30:9d:7b:51:fc:6f:82:4e:ba:a1:91:bc:f2:2a:
         a0:21:c8:cc:31:9b:b8:9f:0e:18:a7:c5:55:0b:5e:d8:fb:4d:
         ba:f5:a0:cb:cb:1e:10:50:f6:1c:4b:24:89:ff:60:e5:9d:7a:
         bb:4b:d1:04:27:04:35:34:47:18:46:2c:4a:12:9c:16:2f:e2:
         e0:0b:db:80:6f:9d:c6:14:78:c6:5c:eb:2b:18:70:46:0c:e9:
         be:f0:19:12:47:83:0b:6d:b2:28:b1:ab:e7:69:fd:b8:02:ef:
         31:2d:9b:b3:51:8a:37:da:88:e3:d5:d3:d1:fa:fa:a5:23:aa:
         09:6e:d1:0a:8e:3e:5f:99:61:5c:32:0d:80:ea:b7:84:48:aa:
         01:e6:0f:5b:db:41:61:a9:82:f8:03:5a:db:46:3e:af:9c:66:
         93:a9:e2:08
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAmIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjJCQzkxMTAvBgNVBAUTKDdFQ0M3N0EyQ0NBREFBREE2MzQyRkMwRjQ0NjkxODc1
RUEzRjkyODcwHhcNMjYwMzI3MDE0NzE1WhcNMjYwNDAzMDE0NzE1WjAYMRYwFAYD
VQQDEw02OWM1ZTFhMy0xMjI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1TrM3ddifgqCdxX6zUo7KM1SBnsNMVitALUMMW/ZDLtBqpN/TRb2ErJev2CB
oyK8KTZgkZsTpfU8XLGRnIy7g5Kl8RPB2vY20JnoK5mBZnGtklg1UuFjw6oIv044
tM8nLBm5Qdj3/KB1bp6VbkI5Ig2Iyvp7zhamfgEYzZ4lUidAVRgW5oGOzbQWHalI
WVqFeOp1cESH1JlwdkHHatMSX+faIN0kxal29KqgnU+l1qDpIZByjzbMI7fnLtqg
fM0A5yXOhxJsE73ujMtec/9oJjUhtYVjmUdNSvztqiTgU0YDvd4FzgNefa2l9/ba
jQi7SRire1KkQIZxFcNq5erOOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC3EC8rA
k8hYD26+jX0J0G9qQ8sQMB8GA1UdIwQYMBaAFH7Md6LMraraY0L8D0RpGHXqP5KH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkJDOS82NkQzN0FBNjkx
NTYxMUVEOEQ0Qjc3M0RDNEY5QUUwMi9mc3gzb3N5dHF0cGpRdndQUkdrWWRlb19r
b2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZzeDNvc3l0cXRwalF2d1BSR2tZZGVvX2tvYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MkJDOS82NkQzN0FBNjkxNTYxMUVEOEQ0Qjc3M0RDNEY5QUUwMi9mc3gzb3N5dHF0
cGpRdndQUkdrWWRlb19rb2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASYG/1bn6abbDpnBkkFAZhTq2S86oKN1chhbjEVLc2WRaRkrk038rKdQWZCaZ
0wJ6yn7KXvLCXIE940P7uSVPChtBXwhLDaRCCUDrluYVZ8qHs1BVu6zbWofIeg7n
DzCde1H8b4JOuqGRvPIqoCHIzDGbuJ8OGKfFVQte2PtNuvWgy8seEFD2HEskif9g
5Z16u0vRBCcENTRHGEYsShKcFi/i4AvbgG+dxhR4xlzrKxhwRgzpvvAZEkeDC22y
KLGr52n9uALvMS2bs1GKN9qI49XT0fr6pSOqCW7RCo4+X5lhXDINgOq3hEiqAeYP
W9tBYamC+ANa20Y+r5xmk6niCA==
-----END CERTIFICATE-----
Generated at Sat Mar 28 10:37:01 2026 by rpki-client