Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/FgZOq4GuGHOhAZ0JKJb5Inpe70U.mft
File:                     FgZOq4GuGHOhAZ0JKJb5Inpe70U.mft (raw, json)
Hash identifier:          JYWXVrnhTb4rcMyE+UxuDWA9pBVBs4lJK2k3WOoYzME=
Subject key identifier:   44:0D:D9:DF:A3:1D:ED:4A:90:32:77:BF:E9:D2:46:76:85:38:94:EB
Authority key identifier: 16:06:4E:AB:81:AE:18:73:A1:01:9D:09:28:96:F9:22:7A:5E:EF:45
Certificate issuer:       /CN=A911A0C0/serialNumber=16064EAB81AE1873A1019D092896F9227A5EEF45
Certificate serial:       19A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgZOq4GuGHOhAZ0JKJb5Inpe70U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/FgZOq4GuGHOhAZ0JKJb5Inpe70U.mft
Manifest number:          1998
Signing time:             Sat 28 Feb 2026 16:26:57 +0000
Manifest this update:     Sat 28 Feb 2026 16:26:57 +0000
Manifest next update:     Sat 07 Mar 2026 16:26:57 +0000
Files and hashes:         1: FgZOq4GuGHOhAZ0JKJb5Inpe70U.crl (hash: j8FJJ9vEvw6QshTlIW8mfPwSSbJRakX0S6mUa9di2M8=)
                          2: 543AF5B283D911E78F2FA066C4F9AE02.roa (hash: XS/tQXFr6hMyKrYJ8vxPUjZePNffAHjlSJ+Stv9rn5s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/FgZOq4GuGHOhAZ0JKJb5Inpe70U.crl
                          rsync://rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/FgZOq4GuGHOhAZ0JKJb5Inpe70U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgZOq4GuGHOhAZ0JKJb5Inpe70U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 16:26:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6566 (0x19a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911A0C0, serialNumber=16064EAB81AE1873A1019D092896F9227A5EEF45
        Validity
            Not Before: Feb 28 16:26:57 2026 GMT
            Not After : Mar  7 16:26:57 2026 GMT
        Subject: CN=69a31751-be63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ea:94:d5:80:02:86:e4:59:c7:72:b4:f2:f9:
                    f6:33:78:3f:ef:18:1b:84:b3:23:c5:a9:c3:63:ba:
                    93:80:36:e5:aa:3b:7c:1d:b4:32:a8:3d:97:56:cf:
                    65:3b:92:ca:a4:f5:8c:56:22:a0:3d:58:37:25:2f:
                    9a:ba:df:92:96:6b:e4:34:48:fb:37:10:9d:8a:b9:
                    8a:a7:24:16:69:de:a9:aa:f2:d6:3c:fa:75:71:24:
                    af:46:35:8e:d4:2c:9e:ea:c1:52:3a:68:df:c5:f4:
                    59:76:44:98:cd:68:8c:98:ff:99:0c:55:f8:3e:8e:
                    7b:ec:01:ed:c0:cd:46:f8:5a:95:91:2e:37:fb:d4:
                    70:20:e3:0c:d2:18:7f:07:b2:c9:b6:f4:8e:47:18:
                    54:63:9a:93:fd:d2:bb:23:b0:dc:18:d2:cc:e2:2c:
                    4f:5c:6a:a6:71:66:d1:3e:1b:9c:93:4b:65:2b:6b:
                    22:b8:cc:4b:f6:cb:9b:8e:ff:1c:93:be:35:ed:ef:
                    1e:e8:46:e8:33:1b:40:25:10:a6:a3:cd:d1:ce:58:
                    e7:57:83:67:87:2e:43:64:f2:f5:d3:ba:31:ec:39:
                    a2:6c:88:3b:10:25:74:f9:33:42:5e:50:c1:e4:f2:
                    42:a5:8f:48:c7:3a:e5:c6:f6:ca:6a:c2:05:ac:b5:
                    a3:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:0D:D9:DF:A3:1D:ED:4A:90:32:77:BF:E9:D2:46:76:85:38:94:EB
            X509v3 Authority Key Identifier:
                keyid:16:06:4E:AB:81:AE:18:73:A1:01:9D:09:28:96:F9:22:7A:5E:EF:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/FgZOq4GuGHOhAZ0JKJb5Inpe70U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgZOq4GuGHOhAZ0JKJb5Inpe70U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/FgZOq4GuGHOhAZ0JKJb5Inpe70U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:49:2c:b9:34:0c:ed:66:ff:e0:4e:9f:db:5a:a9:42:b1:8c:
         26:fa:79:c1:d8:7c:fd:7e:46:e6:7d:86:58:29:9b:9c:00:47:
         4f:23:0f:f2:37:d4:7c:e9:9f:d9:ca:59:8b:2c:6b:f5:d8:9d:
         ef:2f:42:a9:ee:0e:12:6a:2f:e3:c8:af:f0:df:01:7f:29:ac:
         6d:3a:03:d9:1f:64:e6:d0:5f:e0:ed:84:b1:16:90:e2:72:71:
         f8:27:73:1e:c8:e5:69:08:e8:f6:a4:df:90:58:8f:91:36:5f:
         7c:65:b5:f3:2e:26:5d:e9:64:ea:7e:a8:d2:cb:ad:74:6b:ad:
         d5:41:eb:e2:37:03:89:a3:1c:57:60:4d:7f:21:bf:81:20:bd:
         ea:70:5a:3a:a5:25:e6:df:03:d0:9b:48:54:7a:14:f0:fc:39:
         98:16:9c:e5:39:cd:67:70:fd:65:94:f6:35:5a:87:5d:6e:a8:
         da:d8:cb:93:ef:7c:da:cf:3a:6f:92:c4:0f:39:29:73:f2:b8:
         cf:84:08:8d:6a:6c:16:2f:3e:a7:a3:de:98:17:b0:c8:40:df:
         86:aa:86:72:01:f2:0c:91:c4:df:38:60:87:58:d5:63:0b:01:
         12:39:24:d3:a9:cd:12:f1:35:7a:a7:7d:8f:6a:41:32:a6:2e:
         8f:44:36:a0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICGaYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUEwQzAxMTAvBgNVBAUTKDE2MDY0RUFCODFBRTE4NzNBMTAxOUQwOTI4OTZGOTIy
N0E1RUVGNDUwHhcNMjYwMjI4MTYyNjU3WhcNMjYwMzA3MTYyNjU3WjAYMRYwFAYD
VQQDDA02OWEzMTc1MS1iZTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr+qU1YAChuRZx3K08vn2M3g/7xgbhLMjxanDY7qTgDblqjt8HbQyqD2XVs9l
O5LKpPWMViKgPVg3JS+aut+SlmvkNEj7NxCdirmKpyQWad6pqvLWPPp1cSSvRjWO
1Cye6sFSOmjfxfRZdkSYzWiMmP+ZDFX4Po577AHtwM1G+FqVkS43+9RwIOMM0hh/
B7LJtvSORxhUY5qT/dK7I7DcGNLM4ixPXGqmcWbRPhuck0tlK2siuMxL9subjv8c
k7417e8e6EboMxtAJRCmo83RzljnV4Nnhy5DZPL107ox7DmibIg7ECV0+TNCXlDB
5PJCpY9IxzrlxvbKasIFrLWjCwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEQN2d+j
He1KkDJ3v+nSRnaFOJTrMB8GA1UdIwQYMBaAFBYGTquBrhhzoQGdCSiW+SJ6Xu9F
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTBDMC8wQjMwNDY3MDgz
RDgxMUU3Qjc1RjI1NjVDNEY5QUUwMi9GZ1pPcTRHdUdIT2hBWjBKS0piNUlucGU3
MFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZnWk9xNEd1R0hPaEFaMEpLSmI1SW5wZTcwVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QTBDMC8wQjMwNDY3MDgzRDgxMUU3Qjc1RjI1NjVDNEY5QUUwMi9GZ1pPcTRHdUdI
T2hBWjBKS0piNUlucGU3MFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQ0ksuTQM7Wb/4E6f21qpQrGMJvp5wdh8/X5G5n2GWCmbnABHTyMP8jfUfOmf
2cpZiyxr9did7y9Cqe4OEmov48iv8N8BfymsbToD2R9k5tBf4O2EsRaQ4nJx+Cdz
HsjlaQjo9qTfkFiPkTZffGW18y4mXelk6n6o0sutdGut1UHr4jcDiaMcV2BNfyG/
gSC96nBaOqUl5t8D0JtIVHoU8Pw5mBac5TnNZ3D9ZZT2NVqHXW6o2tjLk+982s86
b5LEDzkpc/K4z4QIjWpsFi8+p6PemBewyEDfhqqGcgHyDJHE3zhgh1jVYwsBEjkk
06nNEvE1eqd9j2pBMqYuj0Q2oA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:11:39 2026 by rpki-client