Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/FgZOq4GuGHOhAZ0JKJb5Inpe70U.mft
File:                     FgZOq4GuGHOhAZ0JKJb5Inpe70U.mft (raw, json)
Hash identifier:          Cq1a/ULevec2uD300mkiAZ+TLVS+5NipIGqn6yZejWU=
Subject key identifier:   27:60:C6:A3:26:B8:CE:38:F8:7D:F8:2A:1F:4E:D3:8D:9D:F6:A8:D6
Authority key identifier: 16:06:4E:AB:81:AE:18:73:A1:01:9D:09:28:96:F9:22:7A:5E:EF:45
Certificate issuer:       /CN=A911A0C0/serialNumber=16064EAB81AE1873A1019D092896F9227A5EEF45
Certificate serial:       19C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgZOq4GuGHOhAZ0JKJb5Inpe70U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/FgZOq4GuGHOhAZ0JKJb5Inpe70U.mft
Manifest number:          19B4
Signing time:             Thu 16 Apr 2026 16:20:16 +0000
Manifest this update:     Thu 16 Apr 2026 16:20:15 +0000
Manifest next update:     Thu 23 Apr 2026 16:20:15 +0000
Files and hashes:         1: FgZOq4GuGHOhAZ0JKJb5Inpe70U.crl (hash: TkzHH4w/btyaXtETVEBeO+6LSLnktjq2KjJGPzsSUio=)
                          2: 543AF5B283D911E78F2FA066C4F9AE02.roa (hash: VmS/Q3+6coESHGoEMtOrtTGznEUVw0iY/NUTCTx6zGg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/FgZOq4GuGHOhAZ0JKJb5Inpe70U.crl
                          rsync://rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/FgZOq4GuGHOhAZ0JKJb5Inpe70U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgZOq4GuGHOhAZ0JKJb5Inpe70U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 16:20:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6596 (0x19c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911A0C0, serialNumber=16064EAB81AE1873A1019D092896F9227A5EEF45
        Validity
            Not Before: Apr 16 16:20:15 2026 GMT
            Not After : Apr 23 16:20:15 2026 GMT
        Subject: CN=69e10c40-791e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:30:00:69:83:54:8e:87:2c:08:0f:52:36:0c:
                    2c:86:da:76:61:bb:1f:a9:97:3d:a8:40:67:2e:e4:
                    24:77:f2:29:4f:1d:bb:15:8a:0d:5a:5b:89:8b:b5:
                    a6:69:7c:05:48:34:91:71:07:fa:3c:0d:94:77:a8:
                    6c:ce:67:d5:32:04:72:5f:e7:d8:2c:24:cc:a1:80:
                    bd:ea:a0:cd:8c:30:38:12:ec:2f:e7:fc:07:62:b4:
                    b9:23:01:7a:4d:ca:89:02:c1:6d:7c:a6:37:da:f3:
                    8b:1a:7e:4e:35:1c:80:fe:2e:28:1e:c4:5e:d4:af:
                    68:2d:db:f0:3a:f9:55:28:2b:89:5b:a9:67:47:6b:
                    90:e5:78:28:fb:e2:9d:6c:4b:c4:b0:bc:4b:60:46:
                    f4:4f:4d:85:3a:74:08:bb:b2:9c:ef:29:c4:e1:05:
                    bd:e9:56:91:15:cb:e7:07:45:86:e5:52:65:5f:39:
                    a3:02:ed:b1:f1:4f:e3:bf:10:38:09:25:8f:03:f7:
                    84:d9:41:ec:bb:35:31:90:ab:72:44:3d:7c:f3:cd:
                    43:f3:6d:f6:ce:2b:fe:71:5f:a7:5b:26:95:a3:f0:
                    21:dd:7a:0e:b3:63:d8:e6:b8:05:6d:9b:a1:61:99:
                    4a:51:88:0f:6c:5f:43:8e:da:fd:ae:0e:cc:9e:8c:
                    b7:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:60:C6:A3:26:B8:CE:38:F8:7D:F8:2A:1F:4E:D3:8D:9D:F6:A8:D6
            X509v3 Authority Key Identifier:
                keyid:16:06:4E:AB:81:AE:18:73:A1:01:9D:09:28:96:F9:22:7A:5E:EF:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/FgZOq4GuGHOhAZ0JKJb5Inpe70U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgZOq4GuGHOhAZ0JKJb5Inpe70U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/FgZOq4GuGHOhAZ0JKJb5Inpe70U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:85:1b:18:83:fe:28:e6:a5:19:c9:c0:a4:1c:4e:47:a1:92:
         11:b1:46:11:f4:5a:b8:fc:07:ef:fa:b9:0a:c3:e1:92:8d:8e:
         24:c5:b9:c3:cd:be:e1:b9:06:8c:80:aa:4f:f4:01:03:1d:fd:
         e8:42:d0:4b:6f:66:9f:ca:f4:82:49:81:9a:2c:f7:b0:b4:d7:
         f6:82:f5:11:09:a4:7e:f3:ed:0b:16:ed:31:61:ed:f0:d6:c3:
         25:5b:8d:db:c8:4f:0f:52:f0:09:57:23:fb:8c:1c:d2:7f:82:
         7e:d6:33:1b:80:02:48:0b:2b:56:42:03:79:1b:12:18:b3:60:
         b7:0e:6a:68:49:de:c8:f0:2e:ab:c7:a5:0f:49:14:1d:d8:4e:
         90:f7:a4:e5:09:81:7b:b2:50:e0:98:71:40:73:26:57:01:9a:
         43:8d:c2:08:ed:5b:13:7e:76:d7:85:a8:46:6d:80:6f:29:b4:
         f4:e2:d6:2a:38:49:92:45:b1:bf:91:db:a1:40:24:f1:f0:3b:
         63:ab:49:63:18:2f:1d:54:53:7c:1b:5b:8f:05:d1:92:16:4d:
         44:13:59:1b:b6:9b:88:11:24:0e:8d:b5:9f:c4:ee:d4:fb:c2:
         1e:39:cd:ac:b2:36:a4:93:4a:c5:ab:df:0b:bc:eb:de:0f:2c:
         6c:22:5a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:02:09 2026 by rpki-client