Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.mft
File:                     FWV3K3tOvoUEnSr5syrMh4AxGl0.mft (raw, json)
Hash identifier:          TShJ/qAJqhf0xRyyg49bRfynwBme0XOb3ubRk+jL9/g=
Subject key identifier:   08:D6:96:20:5C:C0:0F:12:9C:00:F7:7F:13:3D:8E:F6:81:39:07:98
Authority key identifier: 15:65:77:2B:7B:4E:BE:85:04:9D:2A:F9:B3:2A:CC:87:80:31:1A:5D
Certificate issuer:       /CN=A91251AD/serialNumber=1565772B7B4EBE85049D2AF9B32ACC8780311A5D
Certificate serial:       0465
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWV3K3tOvoUEnSr5syrMh4AxGl0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.mft
Manifest number:          0453
Signing time:             Fri 17 Apr 2026 00:07:48 +0000
Manifest this update:     Fri 17 Apr 2026 00:07:47 +0000
Manifest next update:     Fri 24 Apr 2026 00:07:47 +0000
Files and hashes:         1: FWV3K3tOvoUEnSr5syrMh4AxGl0.crl (hash: C0ZXnXhoSZubCo9TDHbemAXJ7IHQSl5IR1MgFXxd/uE=)
                          2: EB9FE0C2500C11F0AC93B675C4F9AE02.roa (hash: Q+dL2W7eAJ3DJlsw7AhajpgSkws/8wtOeo5r7hNa/fM=)
                          3: D2FE3A16501411F084311D4CC4F9AE02.roa (hash: MwkXsOYorcCOGMXvR2DJqBnlmq41YtK23RLEq86D5Jo=)
                          4: 2106E428992111EC99E0095AC4F9AE02.roa (hash: yIepWjS0oZcQGSmT9ESi5QJXbvdq+Yq0vyuRnX4kFy4=)
                          5: 412371002A5911F08EA23244C4F9AE02.roa (hash: D1yfDyTJLdVgKeV2rHlPTQBf9awpPyRXNzKhhL6qHEI=)
                          6: 812D990C282C11F194294EA0C6833773.roa (hash: wg5kaxnt1h8sr9PZA8paXY5KbEBORSUI0crLfAxJcUM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.crl
                          rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWV3K3tOvoUEnSr5syrMh4AxGl0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 00:07:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1125 (0x465)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91251AD, serialNumber=1565772B7B4EBE85049D2AF9B32ACC8780311A5D
        Validity
            Not Before: Apr 17 00:07:47 2026 GMT
            Not After : Apr 24 00:07:47 2026 GMT
        Subject: CN=69e179d4-27ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:55:52:78:d9:35:1e:17:51:09:bb:f5:8d:fc:
                    01:6f:f7:95:de:aa:d3:fa:15:6e:11:09:88:d5:01:
                    78:9c:30:83:52:30:49:ef:82:c9:89:9f:f2:e3:01:
                    27:ff:45:df:31:59:82:f2:a0:7f:4b:ae:7a:91:74:
                    55:a2:59:ba:f0:f4:17:9a:85:ff:c5:05:28:df:84:
                    3c:64:06:03:4d:b3:9e:59:dd:c0:fa:4f:ce:e5:55:
                    f7:df:22:2e:5f:69:f3:d7:58:12:f0:49:af:3d:e5:
                    75:85:97:86:a7:da:74:fa:1e:0f:69:71:bf:4e:20:
                    2d:a9:dd:bb:bf:81:16:e0:f6:a3:52:dc:9b:56:89:
                    24:68:6c:0c:d3:b0:76:89:a9:b2:a0:38:f5:47:d8:
                    6c:d0:20:fc:25:c5:df:f7:be:58:41:17:96:f0:15:
                    8f:97:84:74:a3:4a:bf:85:85:df:4f:d8:15:d3:86:
                    da:38:ea:ad:19:41:28:0d:96:f6:5a:6f:43:8e:10:
                    90:81:f9:8c:e9:64:fe:3c:33:b9:83:1b:6f:e2:50:
                    5b:21:ae:4d:cc:37:03:86:9a:38:90:2f:30:d1:62:
                    56:5e:3a:ff:61:d0:48:e2:9c:90:cc:04:aa:41:0c:
                    b4:9a:48:30:f6:dc:37:83:1a:f5:70:04:88:64:4b:
                    7d:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:D6:96:20:5C:C0:0F:12:9C:00:F7:7F:13:3D:8E:F6:81:39:07:98
            X509v3 Authority Key Identifier:
                keyid:15:65:77:2B:7B:4E:BE:85:04:9D:2A:F9:B3:2A:CC:87:80:31:1A:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWV3K3tOvoUEnSr5syrMh4AxGl0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:93:df:ce:20:3b:f4:ee:8c:09:29:65:9a:d1:45:10:cf:e1:
         04:80:d8:a9:9a:8e:d2:00:9a:33:b5:62:4b:2b:85:06:f1:c2:
         dc:9a:9a:2c:01:c7:ff:7a:99:34:6d:ff:0a:58:95:d2:05:52:
         a1:e9:c1:07:42:7c:23:75:b9:fa:da:8d:54:7e:a7:97:30:d6:
         f4:b9:bb:c9:b2:17:42:9f:e9:0f:dc:5b:2c:58:73:61:30:dc:
         32:d3:92:c0:0c:ef:3e:e5:d8:cc:9f:56:e9:58:ad:99:fd:26:
         8f:36:5a:8d:3a:b1:b3:3a:55:c6:0b:25:be:b3:69:c0:3c:25:
         bf:6c:e2:a1:75:50:1b:47:86:4d:41:f4:b1:33:e0:43:69:59:
         d6:f1:85:2d:6e:cd:d0:06:6f:8f:88:24:11:4b:e9:6c:1c:e2:
         80:cf:b3:0e:92:46:79:82:99:13:7e:8c:46:bc:ab:35:65:6b:
         19:c8:5b:37:6b:db:3e:b7:e0:1d:95:53:05:15:ab:1e:37:3a:
         bc:db:47:ba:ce:d3:92:f3:44:11:73:cc:c4:20:17:5a:bf:a0:
         55:a8:a9:d6:e9:37:f0:16:ce:2d:f4:55:55:1b:b7:4a:5c:8e:
         8b:13:70:91:9a:69:3b:2d:9f:ab:bd:c3:c0:23:a4:56:eb:a3:
         78:e2:82:71
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBGUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjUxQUQxMTAvBgNVBAUTKDE1NjU3NzJCN0I0RUJFODUwNDlEMkFGOUIzMkFDQzg3
ODAzMTFBNUQwHhcNMjYwNDE3MDAwNzQ3WhcNMjYwNDI0MDAwNzQ3WjAYMRYwFAYD
VQQDEw02OWUxNzlkNC0yN2FiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5lVSeNk1HhdRCbv1jfwBb/eV3qrT+hVuEQmI1QF4nDCDUjBJ74LJiZ/y4wEn
/0XfMVmC8qB/S656kXRVolm68PQXmoX/xQUo34Q8ZAYDTbOeWd3A+k/O5VX33yIu
X2nz11gS8EmvPeV1hZeGp9p0+h4PaXG/TiAtqd27v4EW4PajUtybVokkaGwM07B2
iamyoDj1R9hs0CD8JcXf975YQReW8BWPl4R0o0q/hYXfT9gV04baOOqtGUEoDZb2
Wm9DjhCQgfmM6WT+PDO5gxtv4lBbIa5NzDcDhpo4kC8w0WJWXjr/YdBI4pyQzASq
QQy0mkgw9tw3gxr1cASIZEt9CQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAjWliBc
wA8SnAD3fxM9jvaBOQeYMB8GA1UdIwQYMBaAFBVldyt7Tr6FBJ0q+bMqzIeAMRpd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTFBRC84RkRERjVFODk5
MUQxMUVDODA5MzlBNTRDNEY5QUUwMi9GV1YzSzN0T3ZvVUVuU3I1c3lyTWg0QXhH
bDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZXVjNLM3RPdm9VRW5TcjVzeXJNaDRBeEdsMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NTFBRC84RkRERjVFODk5MUQxMUVDODA5MzlBNTRDNEY5QUUwMi9GV1YzSzN0T3Zv
VUVuU3I1c3lyTWg0QXhHbDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAspPfziA79O6MCSllmtFFEM/hBIDYqZqO0gCaM7ViSyuFBvHC3JqaLAHH/3qZ
NG3/CliV0gVSoenBB0J8I3W5+tqNVH6nlzDW9Lm7ybIXQp/pD9xbLFhzYTDcMtOS
wAzvPuXYzJ9W6Vitmf0mjzZajTqxszpVxgslvrNpwDwlv2zioXVQG0eGTUH0sTPg
Q2lZ1vGFLW7N0AZvj4gkEUvpbBzigM+zDpJGeYKZE36MRryrNWVrGchbN2vbPrfg
HZVTBRWrHjc6vNtHus7TkvNEEXPMxCAXWr+gVaip1uk38BbOLfRVVRu3SlyOixNw
kZppOy2fq73DwCOkVuujeOKCcQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:27:49 2026 by rpki-client