Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.mft
File:                     FKbKvDAuwePc503pi_VYoEK-rFY.mft (raw, json)
Hash identifier:          uFoJmB1wTpNa9f+grsHSEFfsCMzwxtRWTLa6pecSf3g=
Subject key identifier:   B4:43:6B:39:37:C9:DA:A3:56:B1:A5:BC:B1:57:F5:5C:E2:F9:A2:1E
Authority key identifier: 14:A6:CA:BC:30:2E:C1:E3:DC:E7:4D:E9:8B:F5:58:A0:42:BE:AC:56
Certificate issuer:       /CN=A91409DC/serialNumber=14A6CABC302EC1E3DCE74DE98BF558A042BEAC56
Certificate serial:       090C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FKbKvDAuwePc503pi_VYoEK-rFY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.mft
Manifest number:          15C6
Signing time:             Thu 16 Apr 2026 18:16:32 +0000
Manifest this update:     Thu 16 Apr 2026 18:16:32 +0000
Manifest next update:     Thu 23 Apr 2026 18:16:32 +0000
Files and hashes:         1: FKbKvDAuwePc503pi_VYoEK-rFY.crl (hash: 7XQBXMalkU7nZ9iV3Db0xWN5E55jOxuCE8pjUkSaSg4=)
                          2: DB78B2684BCD11EE8F976B7EC4F9AE02.roa (hash: h0iyfxPuSc/36ldot8gGmUE+Lcy/qPDMQIsY5pWRses=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.crl
                          rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FKbKvDAuwePc503pi_VYoEK-rFY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 18:16:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2316 (0x90c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91409DC, serialNumber=14A6CABC302EC1E3DCE74DE98BF558A042BEAC56
        Validity
            Not Before: Apr 16 18:16:32 2026 GMT
            Not After : Apr 23 18:16:32 2026 GMT
        Subject: CN=69e12780-6abd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:55:4d:cc:26:31:b4:2f:c8:07:7f:eb:8c:f7:
                    cb:86:1c:53:95:70:a6:eb:62:1b:1e:15:12:5b:e1:
                    2a:fd:07:8d:30:84:50:cc:1e:d2:d5:34:89:22:1e:
                    44:13:4e:81:53:9d:0a:e1:00:32:7c:b7:e1:99:c9:
                    03:63:8b:cc:c7:f3:68:87:ac:ed:91:68:cd:42:e7:
                    66:fc:13:52:bb:ea:dc:46:9c:a6:d2:90:f6:37:ff:
                    c9:64:07:e6:7f:37:d3:70:a2:48:13:96:51:8a:7f:
                    77:70:c8:4d:93:b1:08:80:8c:d9:cd:f4:6c:8a:1b:
                    82:b4:43:52:fd:d5:c7:d1:53:7f:15:33:74:fe:61:
                    0e:90:b4:5c:be:8e:91:cf:a8:09:98:b8:8a:80:f3:
                    65:5e:cb:e7:28:a2:19:fa:b0:cb:a0:fe:af:09:30:
                    c0:9e:61:ef:d9:47:00:12:fe:ae:97:70:d8:59:83:
                    1f:64:ab:75:e1:27:c7:50:df:22:50:3d:2a:46:55:
                    9b:6d:88:a6:9f:67:9f:cc:61:56:44:fd:14:d9:02:
                    e5:27:93:7e:3b:55:96:92:09:b9:76:4e:37:37:24:
                    ee:25:83:6e:54:e3:42:26:20:7f:d5:6b:3c:d3:f7:
                    d0:d4:0b:47:27:0a:d3:79:a7:ad:7d:6f:39:25:7b:
                    2d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:43:6B:39:37:C9:DA:A3:56:B1:A5:BC:B1:57:F5:5C:E2:F9:A2:1E
            X509v3 Authority Key Identifier:
                keyid:14:A6:CA:BC:30:2E:C1:E3:DC:E7:4D:E9:8B:F5:58:A0:42:BE:AC:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FKbKvDAuwePc503pi_VYoEK-rFY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:cc:5a:7a:22:74:9d:d3:da:47:12:36:4e:37:47:40:5c:f6:
         79:44:50:8a:96:80:2a:da:b2:2d:74:f1:55:3d:44:71:32:8f:
         49:60:32:57:16:1c:9f:97:2e:de:0a:69:86:fb:aa:81:4e:cd:
         84:8d:a1:26:67:3d:d5:e3:89:67:5f:8f:1b:b4:99:3c:6e:eb:
         bb:18:71:95:9c:5b:97:81:57:5c:49:51:28:7c:2f:be:f0:b6:
         cc:c1:0b:36:26:6f:5f:b5:20:08:64:8d:a1:7b:55:69:5b:c3:
         2a:6c:0f:81:9e:dd:2c:f2:40:d7:75:6b:7b:18:ab:52:59:aa:
         33:cd:48:a8:4e:75:9b:86:0d:ac:d6:ad:28:9b:f3:4e:c2:df:
         7c:1e:c9:f7:9f:b4:53:61:f2:60:69:8c:ab:55:77:cc:a2:aa:
         ce:63:c9:01:b2:f0:55:17:fd:22:7b:96:de:7b:c0:b4:f9:ae:
         7b:6c:2f:0c:54:d3:f7:73:d7:81:f4:9a:7f:c2:c7:61:da:0c:
         65:08:d9:82:a7:b4:69:f1:dc:e1:88:43:3a:13:58:27:34:75:
         7f:f0:d7:60:25:88:be:d6:61:43:52:c3:f8:4c:dc:05:2d:c4:
         ee:bd:f7:83:ad:fd:02:55:b6:bd:21:52:e1:73:9f:c0:fe:e3:
         96:0c:bc:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:21:59 2026 by rpki-client