Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft
File:                     FXsL3g48rbKUg5vJgVZVZE2ybpE.mft (raw, json)
Hash identifier:          RHA86c5Q6yHiBcAizo3EvdaSSdiEwXF07VVLLdU+0Z8=
Subject key identifier:   B2:B3:7E:70:3C:F9:18:30:29:BD:7B:D3:C7:1E:EB:32:F0:98:2C:31
Authority key identifier: 15:7B:0B:DE:0E:3C:AD:B2:94:83:9B:C9:81:56:55:64:4D:B2:6E:91
Certificate issuer:       /CN=A9148BFA/serialNumber=157B0BDE0E3CADB294839BC9815655644DB26E91
Certificate serial:       0624
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft
Manifest number:          05DF
Signing time:             Thu 16 Apr 2026 23:06:06 +0000
Manifest this update:     Thu 16 Apr 2026 23:06:05 +0000
Manifest next update:     Thu 23 Apr 2026 23:06:05 +0000
Files and hashes:         1: FXsL3g48rbKUg5vJgVZVZE2ybpE.crl (hash: a0hT6NqYCu5DpQwnjA6kObE+ECKjdyk7i3pjt40Ew2c=)
                          2: B589332C498611EF90B46962C4F9AE02.roa (hash: qQDURXc4miq6wSpyJJAXvi86X+8AWTAJoPUGTUH+F/w=)
                          3: F6DBFB92B3F311F0929DA35BC4F9AE02.roa (hash: bGSs+GuQ8roH3KjNYjFOeAuN1jZZUS7buyDDBU1Jy+0=)
                          4: 48811D22EBB411F0A3585372626F56BC.roa (hash: cW9BhUWSf1eWBWfw/7wY1Z34c7OQiu9inYmolk+51Jc=)
                          5: 9DF3BC14E48011F0AC3D40BC426F56BC.roa (hash: 34Y8hUwkkH6eRmIMWTovUQbEQ5leyxSbVRWa0szDZH0=)
                          6: 06E8BCB4B3F411F0874AC55BC4F9AE02.roa (hash: HMO8+hILpX40jIXBPLdsHDVWASlEOQyWg25odthKBWQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.crl
                          rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 23:06:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1572 (0x624)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148BFA, serialNumber=157B0BDE0E3CADB294839BC9815655644DB26E91
        Validity
            Not Before: Apr 16 23:06:05 2026 GMT
            Not After : Apr 23 23:06:05 2026 GMT
        Subject: CN=69e16b5e-9ae2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:48:b0:81:ba:f2:0a:fe:36:9d:a3:f4:c2:54:
                    c2:43:ac:56:e3:1e:60:fc:8a:86:da:2f:d9:c8:0a:
                    d5:98:e0:60:25:55:cf:fc:a4:55:cf:62:b8:f8:71:
                    e2:c3:73:6f:b0:48:dc:3a:c7:e0:e8:92:e0:53:cb:
                    f6:b3:e2:59:5f:f5:4d:5c:2d:15:ec:68:db:de:13:
                    a7:08:da:c7:ae:1b:bb:67:e8:47:20:6b:49:ca:39:
                    b1:eb:04:28:d8:58:e2:21:19:f9:81:a4:8c:aa:5e:
                    5f:ff:ec:26:81:1e:b6:39:d3:00:fe:01:85:4d:d2:
                    32:75:e5:5e:32:1f:40:f3:21:74:cb:59:8f:fe:de:
                    ee:c2:e3:a9:7d:ae:6a:ab:cc:e8:cf:59:92:56:c9:
                    87:5f:db:79:1b:e7:38:3a:55:c6:58:b9:ca:21:e4:
                    40:47:69:43:66:fb:a8:5e:bc:b4:69:c2:ea:8a:1f:
                    c6:82:e4:d6:90:79:5d:25:1b:5f:bd:50:ef:11:95:
                    55:c4:97:21:6a:56:3a:e6:17:b8:9b:b3:4b:56:e0:
                    b4:81:09:f2:c9:67:a7:f9:fa:94:b4:45:80:86:34:
                    3a:73:35:d9:89:1e:93:56:f5:4a:ad:de:d3:64:3d:
                    35:a7:23:35:87:ca:f6:9c:0a:80:e8:52:d7:21:81:
                    17:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:B3:7E:70:3C:F9:18:30:29:BD:7B:D3:C7:1E:EB:32:F0:98:2C:31
            X509v3 Authority Key Identifier:
                keyid:15:7B:0B:DE:0E:3C:AD:B2:94:83:9B:C9:81:56:55:64:4D:B2:6E:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:d0:d3:4a:9d:44:c4:70:0d:9f:b9:61:12:1b:ef:22:d5:3d:
         89:f5:1f:63:6e:76:f9:96:a9:6f:31:e3:6b:9b:31:80:7d:82:
         16:b1:e8:90:0f:9c:6f:79:0c:f7:65:83:07:68:30:6a:28:92:
         31:ef:96:97:90:ca:8d:b5:30:ed:79:14:8a:f6:9c:cc:76:9f:
         30:48:2a:2c:d5:d7:d8:c4:bf:85:0e:8c:64:dd:66:7a:30:6b:
         88:ea:55:5c:73:53:e9:15:5c:b0:f4:4d:ab:b0:fc:ca:d8:3c:
         69:30:89:56:5b:67:10:9a:ec:bc:3a:77:9b:b8:7d:aa:3b:95:
         5c:44:f6:ce:dd:cd:a6:52:a9:5b:cf:0f:e4:54:1e:62:d3:9a:
         c5:3b:7c:a6:b1:9c:1d:d0:ce:ec:93:04:8f:c1:30:2f:c5:76:
         50:2e:9e:89:7a:cd:cd:bd:a3:e9:9d:99:4a:f4:bf:d2:fa:aa:
         4a:53:3f:73:79:0b:b9:09:41:eb:0a:85:ce:c2:2e:19:4b:40:
         19:51:5e:2b:8e:e7:e2:54:37:44:aa:1f:8f:32:da:36:ae:c4:
         71:86:62:85:02:5a:d3:34:83:8d:0e:c4:4e:6c:60:4a:26:12:
         94:b1:04:fb:8f:8a:35:e3:7b:5a:48:03:2e:77:37:01:52:d7:
         28:45:dc:c8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBiQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDhCRkExMTAvBgNVBAUTKDE1N0IwQkRFMEUzQ0FEQjI5NDgzOUJDOTgxNTY1NTY0
NERCMjZFOTEwHhcNMjYwNDE2MjMwNjA1WhcNMjYwNDIzMjMwNjA1WjAYMRYwFAYD
VQQDEw02OWUxNmI1ZS05YWUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwkiwgbryCv42naP0wlTCQ6xW4x5g/IqG2i/ZyArVmOBgJVXP/KRVz2K4+HHi
w3NvsEjcOsfg6JLgU8v2s+JZX/VNXC0V7Gjb3hOnCNrHrhu7Z+hHIGtJyjmx6wQo
2FjiIRn5gaSMql5f/+wmgR62OdMA/gGFTdIydeVeMh9A8yF0y1mP/t7uwuOpfa5q
q8zoz1mSVsmHX9t5G+c4OlXGWLnKIeRAR2lDZvuoXry0acLqih/GguTWkHldJRtf
vVDvEZVVxJchalY65he4m7NLVuC0gQnyyWen+fqUtEWAhjQ6czXZiR6TVvVKrd7T
ZD01pyM1h8r2nAqA6FLXIYEXLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLKzfnA8
+RgwKb1708ce6zLwmCwxMB8GA1UdIwQYMBaAFBV7C94OPK2ylIObyYFWVWRNsm6R
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEJGQS8wNEEyNEMzNDEx
NDMxMUVDOTczNjlGNzNDNEY5QUUwMi9GWHNMM2c0OHJiS1VnNXZKZ1ZaVlpFMnli
cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZYc0wzZzQ4cmJLVWc1dkpnVlpWWkUyeWJwRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
OEJGQS8wNEEyNEMzNDExNDMxMUVDOTczNjlGNzNDNEY5QUUwMi9GWHNMM2c0OHJi
S1VnNXZKZ1ZaVlpFMnlicEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGdDTSp1ExHANn7lhEhvvItU9ifUfY252+ZapbzHja5sxgH2CFrHokA+cb3kM
92WDB2gwaiiSMe+Wl5DKjbUw7XkUivaczHafMEgqLNXX2MS/hQ6MZN1mejBriOpV
XHNT6RVcsPRNq7D8ytg8aTCJVltnEJrsvDp3m7h9qjuVXET2zt3NplKpW88P5FQe
YtOaxTt8prGcHdDO7JMEj8EwL8V2UC6eiXrNzb2j6Z2ZSvS/0vqqSlM/c3kLuQlB
6wqFzsIuGUtAGVFeK47n4lQ3RKofjzLaNq7EcYZihQJa0zSDjQ7ETmxgSiYSlLEE
+4+KNeN7WkgDLnc3AVLXKEXcyA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:47:14 2026 by rpki-client