Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D17E6/0594FAE21E5F11F09518664DC4F9AE02/FizOhuKjaX6Ri3y11W2goALHk3E.mft
File:                     FizOhuKjaX6Ri3y11W2goALHk3E.mft (raw, json)
Hash identifier:          uDBeQdau+jP7sEQBm5urmPjK2QtENmvQjBTkqnywfd4=
Subject key identifier:   06:90:5C:5A:D6:1B:B3:5E:7B:97:71:43:A2:F1:45:F1:0C:8E:59:0E
Authority key identifier: 16:2C:CE:86:E2:A3:69:7E:91:8B:7C:B5:D5:6D:A0:A0:02:C7:93:71
Certificate issuer:       /CN=A91D17E6/serialNumber=162CCE86E2A3697E918B7CB5D56DA0A002C79371
Certificate serial:       B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FizOhuKjaX6Ri3y11W2goALHk3E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D17E6/0594FAE21E5F11F09518664DC4F9AE02/FizOhuKjaX6Ri3y11W2goALHk3E.mft
Manifest number:          AE
Signing time:             Wed 25 Mar 2026 06:21:34 +0000
Manifest this update:     Wed 25 Mar 2026 06:21:34 +0000
Manifest next update:     Wed 01 Apr 2026 06:21:34 +0000
Files and hashes:         1: FizOhuKjaX6Ri3y11W2goALHk3E.crl (hash: U2V+G3JpEjVWY2rZ89Rgaq4eV6IdHu19OvXOo1wLci8=)
                          2: AF69D6BA4C0311F08D3CD93AC4F9AE02.roa (hash: PTHb8KOhzoM5eTge4HROU2y+Kqm/UI2CnopwB3CICmY=)
                          3: BA5D351C4C0311F0ABCEF33AC4F9AE02.roa (hash: VcrcI1T64xcQTIX2sf42tBKpj/RfLPTrglEhS/U0jDM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D17E6/0594FAE21E5F11F09518664DC4F9AE02/FizOhuKjaX6Ri3y11W2goALHk3E.crl
                          rsync://rpki.apnic.net/member_repository/A91D17E6/0594FAE21E5F11F09518664DC4F9AE02/FizOhuKjaX6Ri3y11W2goALHk3E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FizOhuKjaX6Ri3y11W2goALHk3E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:21:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 178 (0xb2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D17E6, serialNumber=162CCE86E2A3697E918B7CB5D56DA0A002C79371
        Validity
            Not Before: Mar 25 06:21:34 2026 GMT
            Not After : Apr  1 06:21:34 2026 GMT
        Subject: CN=69c37eee-3a60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ef:eb:f3:11:b3:62:9a:6e:b3:b7:ef:85:29:
                    26:10:8c:e7:9d:a0:98:75:c5:94:43:47:d3:03:3e:
                    1e:9b:07:67:0c:c9:10:8f:1a:eb:76:cd:87:6b:f2:
                    27:ff:8e:d0:d8:3a:87:ac:94:a7:eb:0c:93:ae:52:
                    39:d5:1c:19:78:96:6b:b6:ee:8c:69:49:3d:79:d6:
                    e3:c1:59:05:7b:1c:e1:76:04:66:30:2e:8f:1f:7e:
                    d0:04:d1:d5:f9:5e:e3:18:47:f3:e0:03:32:fc:5e:
                    20:ff:ba:2c:4a:b1:88:17:37:12:08:5e:7e:55:f7:
                    71:b7:e0:01:26:fe:bf:60:fe:9b:4e:a3:c8:87:9c:
                    5b:25:df:5d:29:73:dc:18:d0:9f:7f:94:de:52:c7:
                    7f:53:da:97:1a:cd:af:75:65:74:76:7e:ef:50:4e:
                    47:61:b8:52:77:fd:ac:30:71:4c:93:df:70:87:f4:
                    04:24:29:e6:e1:cd:43:85:f0:9d:3d:80:28:e0:f2:
                    87:a9:ab:7d:1b:20:6b:28:15:a3:11:f6:9b:16:ae:
                    35:e2:20:88:1e:aa:12:e9:9c:a5:45:54:2c:7c:22:
                    6f:91:ae:86:0a:56:c8:40:0d:12:d5:19:1a:bf:0c:
                    64:76:0f:73:b5:ab:a3:ab:38:53:1a:b7:10:56:59:
                    28:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:90:5C:5A:D6:1B:B3:5E:7B:97:71:43:A2:F1:45:F1:0C:8E:59:0E
            X509v3 Authority Key Identifier:
                keyid:16:2C:CE:86:E2:A3:69:7E:91:8B:7C:B5:D5:6D:A0:A0:02:C7:93:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D17E6/0594FAE21E5F11F09518664DC4F9AE02/FizOhuKjaX6Ri3y11W2goALHk3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FizOhuKjaX6Ri3y11W2goALHk3E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D17E6/0594FAE21E5F11F09518664DC4F9AE02/FizOhuKjaX6Ri3y11W2goALHk3E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:d9:bf:28:9c:6d:3b:d3:1a:95:29:60:32:06:66:aa:8a:ce:
         71:be:77:9c:4b:d7:c9:63:f5:4f:a7:86:a9:e6:07:fa:1e:64:
         4d:aa:78:55:f3:fa:ec:be:24:12:f4:5d:6d:83:ac:2b:a7:b5:
         d7:ab:01:00:bd:89:86:cc:da:08:92:0c:7f:50:3f:01:8b:c6:
         e7:88:0b:37:99:46:f7:65:ab:cc:7b:21:c2:3f:be:fb:b6:fa:
         25:b9:d9:30:3f:01:0a:f5:b6:f9:2e:8a:a5:b1:40:9f:84:06:
         7b:41:a7:b7:f1:78:a1:f3:8f:ac:a6:d2:4a:f0:0a:09:4a:ec:
         ab:26:1d:7f:c3:22:00:f5:7d:58:3a:a0:4f:fe:5d:ae:e4:a9:
         60:f3:68:3c:e7:34:74:f3:35:88:63:13:ee:25:49:ca:da:72:
         fe:9b:28:9f:ba:15:9f:0b:5e:ed:ba:30:eb:1a:eb:3d:6a:c4:
         e7:7f:94:3a:52:a7:85:0a:ef:d5:c9:3c:4f:26:b3:c0:72:ef:
         6c:e1:7c:f0:38:07:d1:d5:fe:2e:a8:35:30:17:bb:17:06:f4:
         34:f3:c9:de:e3:c1:c7:98:ee:3a:d3:7b:5b:d7:81:8a:5e:13:
         f7:3c:8a:64:87:58:4a:3c:30:0e:e9:49:9a:0b:3f:f9:01:78:
         d8:cb:3f:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:01:51 2026 by rpki-client