Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912FEAB/FDD899EC2F8411ED98B91B0AC4F9AE02/FWZDTXxsxlkckNwnSr9z3gDrBQE.mft
File:                     FWZDTXxsxlkckNwnSr9z3gDrBQE.mft (raw, json)
Hash identifier:          Ft2TjtvOnweiT5Ae8OOAacu9g2J8kcBoQbycLIstUxA=
Subject key identifier:   8E:D4:AA:55:EA:40:D2:D1:ED:B9:64:46:91:55:8A:FD:11:F2:4A:4D
Authority key identifier: 15:66:43:4D:7C:6C:C6:59:1C:90:DC:27:4A:BF:73:DE:00:EB:05:01
Certificate issuer:       /CN=A912FEAB/serialNumber=1566434D7C6CC6591C90DC274ABF73DE00EB0501
Certificate serial:       02D1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWZDTXxsxlkckNwnSr9z3gDrBQE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912FEAB/FDD899EC2F8411ED98B91B0AC4F9AE02/FWZDTXxsxlkckNwnSr9z3gDrBQE.mft
Manifest number:          02CA
Signing time:             Fri 17 Apr 2026 01:18:16 +0000
Manifest this update:     Fri 17 Apr 2026 01:18:16 +0000
Manifest next update:     Fri 24 Apr 2026 01:18:16 +0000
Files and hashes:         1: FWZDTXxsxlkckNwnSr9z3gDrBQE.crl (hash: YodHXBiKSBwIs9mnoArpxXzJA7x/1ogMtrhkc5c94wU=)
                          2: 9082B9C42F8711ED90F1090CC4F9AE02.roa (hash: EDyKn0kWcDVHT/YkbTzVjcZ2ssAl9mljUo5MrerRei0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912FEAB/FDD899EC2F8411ED98B91B0AC4F9AE02/FWZDTXxsxlkckNwnSr9z3gDrBQE.crl
                          rsync://rpki.apnic.net/member_repository/A912FEAB/FDD899EC2F8411ED98B91B0AC4F9AE02/FWZDTXxsxlkckNwnSr9z3gDrBQE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWZDTXxsxlkckNwnSr9z3gDrBQE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 01:18:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 721 (0x2d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912FEAB, serialNumber=1566434D7C6CC6591C90DC274ABF73DE00EB0501
        Validity
            Not Before: Apr 17 01:18:16 2026 GMT
            Not After : Apr 24 01:18:16 2026 GMT
        Subject: CN=69e18a58-aea2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:b9:d4:d8:97:ad:93:69:d9:03:d4:6f:c3:f1:
                    6b:b0:d9:ab:90:b0:34:fa:f1:d3:0e:79:54:79:76:
                    ee:80:52:fc:49:5d:c3:14:a1:c8:e7:2e:85:cf:ba:
                    d1:89:cf:ef:c3:9d:f2:9b:c7:f3:db:e7:b7:0b:dd:
                    18:ec:8f:6e:12:88:e5:20:48:de:02:37:36:cf:62:
                    f7:d2:f8:3e:82:42:9b:e9:b1:f2:13:08:ca:1e:31:
                    e9:45:b6:10:2d:90:8c:51:a7:99:95:4a:ac:79:30:
                    2a:a0:6c:b4:33:7e:3d:b7:c2:93:ff:0e:81:1a:aa:
                    75:f0:b9:dd:43:b3:2d:ff:a3:93:5b:ae:bc:10:8a:
                    53:a9:90:57:5b:a0:a4:0d:c4:56:bd:43:04:ba:35:
                    53:84:cf:6b:dd:85:84:4e:a9:62:82:fb:6b:e4:49:
                    df:4e:3a:2c:22:cd:0d:83:38:ca:c1:aa:2b:f1:3d:
                    b7:67:c0:63:31:a2:97:5c:3b:7a:50:b5:44:80:f0:
                    13:7a:67:bf:95:58:b6:12:d3:7b:cd:ae:3a:60:c6:
                    a3:5a:21:ee:a4:49:12:d6:d2:18:08:8a:a9:c5:9c:
                    6f:b5:db:f9:11:45:45:6e:be:ff:fb:7c:e5:d1:c7:
                    3b:88:d6:da:1f:e6:79:c9:a6:d3:94:9c:be:a6:48:
                    e4:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:D4:AA:55:EA:40:D2:D1:ED:B9:64:46:91:55:8A:FD:11:F2:4A:4D
            X509v3 Authority Key Identifier:
                keyid:15:66:43:4D:7C:6C:C6:59:1C:90:DC:27:4A:BF:73:DE:00:EB:05:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912FEAB/FDD899EC2F8411ED98B91B0AC4F9AE02/FWZDTXxsxlkckNwnSr9z3gDrBQE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWZDTXxsxlkckNwnSr9z3gDrBQE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FEAB/FDD899EC2F8411ED98B91B0AC4F9AE02/FWZDTXxsxlkckNwnSr9z3gDrBQE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:ef:e4:8a:69:64:2a:c2:1f:94:b3:eb:b5:f3:17:28:29:ad:
         c0:85:31:cf:5a:72:72:fb:7a:6e:38:34:5c:b9:2e:e6:25:72:
         3c:31:65:19:a6:ca:71:a4:e8:65:2b:31:1b:4a:dc:c6:ab:c3:
         3c:dd:c2:51:5b:7d:80:19:23:70:9f:a8:84:4c:46:29:34:0c:
         92:fe:0e:20:bc:b1:21:33:44:95:8a:47:26:09:61:25:9a:1e:
         c8:fb:bf:d6:d5:55:fb:5f:6a:f4:f5:31:fd:4b:e6:b1:ec:f9:
         ef:b8:74:b8:85:e3:28:6d:e6:cd:57:a3:31:dc:26:ca:f7:2e:
         a3:12:ce:7b:f8:37:e7:3b:18:77:9d:95:ca:b7:9e:ba:b5:ea:
         8a:61:aa:92:f6:a6:de:87:fa:cd:17:f9:06:df:ee:72:98:36:
         f6:7b:3d:4d:8f:7b:22:a3:17:82:9d:93:1b:46:6a:36:86:f5:
         17:0e:63:0d:96:36:05:52:85:b1:4c:1d:23:4e:79:03:23:88:
         03:7a:29:3f:a8:5e:55:10:72:5e:5c:a4:95:23:92:8a:c3:a7:
         83:9e:d4:dc:66:29:ab:1c:a0:98:d2:e0:5b:c7:9b:55:4b:85:
         c8:d0:6d:dc:a5:0e:29:08:fb:3c:c7:16:89:54:8f:75:7a:da:
         8b:1c:53:0e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAtEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkZFQUIxMTAvBgNVBAUTKDE1NjY0MzREN0M2Q0M2NTkxQzkwREMyNzRBQkY3M0RF
MDBFQjA1MDEwHhcNMjYwNDE3MDExODE2WhcNMjYwNDI0MDExODE2WjAYMRYwFAYD
VQQDEw02OWUxOGE1OC1hZWEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkLnU2Jetk2nZA9Rvw/FrsNmrkLA0+vHTDnlUeXbugFL8SV3DFKHI5y6Fz7rR
ic/vw53ym8fz2+e3C90Y7I9uEojlIEjeAjc2z2L30vg+gkKb6bHyEwjKHjHpRbYQ
LZCMUaeZlUqseTAqoGy0M349t8KT/w6BGqp18LndQ7Mt/6OTW668EIpTqZBXW6Ck
DcRWvUMEujVThM9r3YWETqligvtr5EnfTjosIs0NgzjKwaor8T23Z8BjMaKXXDt6
ULVEgPATeme/lVi2EtN7za46YMajWiHupEkS1tIYCIqpxZxvtdv5EUVFbr7/+3zl
0cc7iNbaH+Z5yabTlJy+pkjkNQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI7UqlXq
QNLR7blkRpFViv0R8kpNMB8GA1UdIwQYMBaAFBVmQ018bMZZHJDcJ0q/c94A6wUB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkVBQi9GREQ4OTlFQzJG
ODQxMUVEOThCOTFCMEFDNEY5QUUwMi9GV1pEVFh4c3hsa2NrTnduU3I5ejNnRHJC
UUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZXWkRUWHhzeGxrY2tOd25Tcjl6M2dEckJRRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
RkVBQi9GREQ4OTlFQzJGODQxMUVEOThCOTFCMEFDNEY5QUUwMi9GV1pEVFh4c3hs
a2NrTnduU3I5ejNnRHJCUUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhe/kimlkKsIflLPrtfMXKCmtwIUxz1pycvt6bjg0XLku5iVyPDFlGabKcaTo
ZSsxG0rcxqvDPN3CUVt9gBkjcJ+ohExGKTQMkv4OILyxITNElYpHJglhJZoeyPu/
1tVV+19q9PUx/Uvmsez577h0uIXjKG3mzVejMdwmyvcuoxLOe/g35zsYd52Vyree
urXqimGqkvam3of6zRf5Bt/ucpg29ns9TY97IqMXgp2TG0ZqNob1Fw5jDZY2BVKF
sUwdI055AyOIA3opP6heVRByXlyklSOSisOng57U3GYpqxygmNLgW8ebVUuFyNBt
3KUOKQj7PMcWiVSPdXraixxTDg==
-----END CERTIFICATE-----
Generated at Sat Apr 18 01:15:15 2026 by rpki-client