Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913D3CE/142A2B08495E11EFBE8F2079C4F9AE02/FSUB4tXSvcrhiMNKZT5A9Amittc.mft
File:                     FSUB4tXSvcrhiMNKZT5A9Amittc.mft (raw, json)
Hash identifier:          40OSLgLNaNC+jppEWcWhWB30+YoU7Ej7VENM2u6olsI=
Subject key identifier:   15:7C:B2:8A:9B:A3:91:05:F3:72:94:C2:2C:23:F9:67:DF:82:E5:CB
Authority key identifier: 15:25:01:E2:D5:D2:BD:CA:E1:88:C3:4A:65:3E:40:F4:09:A2:B6:D7
Certificate issuer:       /CN=A913D3CE/serialNumber=152501E2D5D2BDCAE188C34A653E40F409A2B6D7
Certificate serial:       014E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FSUB4tXSvcrhiMNKZT5A9Amittc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913D3CE/142A2B08495E11EFBE8F2079C4F9AE02/FSUB4tXSvcrhiMNKZT5A9Amittc.mft
Manifest number:          0146
Signing time:             Fri 17 Apr 2026 04:57:07 +0000
Manifest this update:     Fri 17 Apr 2026 04:57:06 +0000
Manifest next update:     Fri 24 Apr 2026 04:57:06 +0000
Files and hashes:         1: FSUB4tXSvcrhiMNKZT5A9Amittc.crl (hash: I4X40MbNCsM6u59AOQcf+cF0mIetBKavr+vdjh0eO48=)
                          2: E0E7D5E6495E11EF8EE0647AC4F9AE02.roa (hash: m6TLV7iD9IeQ6WBPJFXbh64dbeehHhnGyQFezGwNIYc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913D3CE/142A2B08495E11EFBE8F2079C4F9AE02/FSUB4tXSvcrhiMNKZT5A9Amittc.crl
                          rsync://rpki.apnic.net/member_repository/A913D3CE/142A2B08495E11EFBE8F2079C4F9AE02/FSUB4tXSvcrhiMNKZT5A9Amittc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FSUB4tXSvcrhiMNKZT5A9Amittc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 334 (0x14e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913D3CE, serialNumber=152501E2D5D2BDCAE188C34A653E40F409A2B6D7
        Validity
            Not Before: Apr 17 04:57:06 2026 GMT
            Not After : Apr 24 04:57:06 2026 GMT
        Subject: CN=69e1bda3-7c55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:71:1a:6c:42:e2:1a:cf:27:6c:53:e4:7e:3f:
                    09:84:bc:64:13:09:2e:cb:ca:47:57:0c:bf:44:cf:
                    f4:c1:4e:9e:0b:58:4a:a4:c8:c5:62:86:dd:28:5d:
                    f9:fd:48:93:b2:c5:fc:9d:56:27:9f:69:dc:77:36:
                    f8:27:8f:b3:99:1d:4d:f1:41:93:ad:9d:d7:16:24:
                    89:c4:76:a4:8e:85:31:9c:b6:95:1a:76:f4:4a:ea:
                    96:f4:00:d3:2a:39:a9:c0:0e:16:59:64:f3:c0:85:
                    26:36:e0:bc:1e:ba:a4:45:84:9b:6e:ca:4f:43:d2:
                    f5:67:23:bf:fc:cb:95:a8:e4:44:87:16:8a:a1:a6:
                    40:fe:06:18:d5:1a:09:7d:fe:2b:41:8a:80:46:f1:
                    dd:d8:ec:d1:d9:75:47:0c:8c:2f:c7:8a:3b:e7:c6:
                    87:e9:fb:98:84:cb:84:8b:4d:13:73:6e:24:b5:76:
                    8f:23:85:0b:fd:97:61:08:b5:a8:3e:91:72:c3:1a:
                    3d:e1:29:bc:f2:ad:d2:03:cf:ae:a2:b2:92:a9:10:
                    7b:78:b7:fd:b5:84:aa:10:41:5b:7b:8c:02:a1:57:
                    e4:52:a1:63:ea:58:56:55:ec:7f:f4:30:a3:81:37:
                    58:07:1d:d1:3f:2c:4f:60:43:ea:5a:30:25:0d:94:
                    27:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:7C:B2:8A:9B:A3:91:05:F3:72:94:C2:2C:23:F9:67:DF:82:E5:CB
            X509v3 Authority Key Identifier:
                keyid:15:25:01:E2:D5:D2:BD:CA:E1:88:C3:4A:65:3E:40:F4:09:A2:B6:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913D3CE/142A2B08495E11EFBE8F2079C4F9AE02/FSUB4tXSvcrhiMNKZT5A9Amittc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FSUB4tXSvcrhiMNKZT5A9Amittc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D3CE/142A2B08495E11EFBE8F2079C4F9AE02/FSUB4tXSvcrhiMNKZT5A9Amittc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:cf:d5:fc:a1:99:22:34:da:e1:e4:c0:a8:f2:a1:ff:8c:bd:
         73:89:b3:2f:4b:4f:e0:d3:7f:f3:e7:33:84:3c:2f:07:a6:ac:
         52:cc:57:b5:ed:ba:74:90:c2:8b:00:a6:52:18:d3:1b:80:88:
         16:54:31:60:7b:3a:cb:3f:f6:da:8a:47:86:0a:3f:f6:9b:10:
         6f:70:24:ca:c5:2e:f2:76:c9:18:8f:31:69:67:4d:54:e5:35:
         81:a6:45:c4:e1:f4:49:e4:2f:fa:74:02:21:b9:2f:44:0b:f4:
         92:9b:fb:72:23:83:69:78:05:ee:22:08:0e:8c:cd:7a:47:54:
         a3:01:5f:23:7a:ac:86:e1:08:c7:b7:c5:ec:9e:66:fc:d9:00:
         79:72:29:f4:9e:be:f3:f2:8b:32:9e:49:cb:50:1e:55:89:fd:
         5a:73:00:4b:dd:a4:db:56:e2:8a:f6:1a:5f:7f:b4:65:4d:a7:
         e3:d7:61:a0:77:93:ea:a4:05:91:fd:37:92:23:dd:fa:e4:e4:
         0e:9e:47:bc:3b:88:ce:31:00:d3:36:31:9e:9c:73:f2:b0:22:
         e3:f4:e1:5b:aa:82:10:37:2a:f4:33:9e:55:1c:8a:66:d4:ac:
         7f:c3:a3:30:24:62:ba:6d:8d:c1:b5:c9:e5:ca:b0:bb:c2:20:
         2e:d7:5e:b9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAU4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0QzQ0UxMTAvBgNVBAUTKDE1MjUwMUUyRDVEMkJEQ0FFMTg4QzM0QTY1M0U0MEY0
MDlBMkI2RDcwHhcNMjYwNDE3MDQ1NzA2WhcNMjYwNDI0MDQ1NzA2WjAYMRYwFAYD
VQQDEw02OWUxYmRhMy03YzU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAynEabELiGs8nbFPkfj8JhLxkEwkuy8pHVwy/RM/0wU6eC1hKpMjFYobdKF35
/UiTssX8nVYnn2ncdzb4J4+zmR1N8UGTrZ3XFiSJxHakjoUxnLaVGnb0SuqW9ADT
KjmpwA4WWWTzwIUmNuC8HrqkRYSbbspPQ9L1ZyO//MuVqOREhxaKoaZA/gYY1RoJ
ff4rQYqARvHd2OzR2XVHDIwvx4o758aH6fuYhMuEi00Tc24ktXaPI4UL/ZdhCLWo
PpFywxo94Sm88q3SA8+uorKSqRB7eLf9tYSqEEFbe4wCoVfkUqFj6lhWVex/9DCj
gTdYBx3RPyxPYEPqWjAlDZQnkwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBV8soqb
o5EF83KUwiwj+WffguXLMB8GA1UdIwQYMBaAFBUlAeLV0r3K4YjDSmU+QPQJorbX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDNDRS8xNDJBMkIwODQ5
NUUxMUVGQkU4RjIwNzlDNEY5QUUwMi9GU1VCNHRYU3ZjcmhpTU5LWlQ1QTlBbWl0
dGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0ZTVUI0dFhTdmNyaGlNTktaVDVBOUFtaXR0Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
RDNDRS8xNDJBMkIwODQ5NUUxMUVGQkU4RjIwNzlDNEY5QUUwMi9GU1VCNHRYU3Zj
cmhpTU5LWlQ1QTlBbWl0dGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA1M/V/KGZIjTa4eTAqPKh/4y9c4mzL0tP4NN/8+czhDwvB6asUsxXte26dJDC
iwCmUhjTG4CIFlQxYHs6yz/22opHhgo/9psQb3AkysUu8nbJGI8xaWdNVOU1gaZF
xOH0SeQv+nQCIbkvRAv0kpv7ciODaXgF7iIIDozNekdUowFfI3qshuEIx7fF7J5m
/NkAeXIp9J6+8/KLMp5Jy1AeVYn9WnMAS92k21biivYaX3+0ZU2n49dhoHeT6qQF
kf03kiPd+uTkDp5HvDuIzjEA0zYxnpxz8rAi4/ThW6qCEDcq9DOeVRyKZtSsf8Oj
MCRium2NwbXJ5cqwu8IgLtdeuQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:29:29 2026 by rpki-client