Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C243/6101B5E62CCD11F1863460AC92833773/flxEJXLUsPmrZIiClNR_qz972zQ.mft
File:                     flxEJXLUsPmrZIiClNR_qz972zQ.mft (raw, json)
Hash identifier:          h121RFbsYNrEz5mFArpBo8gZ5KiGYPsQAHng+Ij/RjI=
Subject key identifier:   9E:06:EE:7F:FC:A7:42:B1:5C:50:C0:B2:74:3B:C8:E5:41:D6:72:E8
Authority key identifier: 7E:5C:44:25:72:D4:B0:F9:AB:64:88:82:94:D4:7F:AB:3F:7B:DB:34
Certificate issuer:       /CN=A916C243/serialNumber=7E5C442572D4B0F9AB64888294D47FAB3F7BDB34
Certificate serial:       0C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/flxEJXLUsPmrZIiClNR_qz972zQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C243/6101B5E62CCD11F1863460AC92833773/flxEJXLUsPmrZIiClNR_qz972zQ.mft
Manifest number:          0B
Signing time:             Fri 17 Apr 2026 08:50:55 +0000
Manifest this update:     Fri 17 Apr 2026 08:50:54 +0000
Manifest next update:     Fri 24 Apr 2026 08:50:54 +0000
Files and hashes:         1: flxEJXLUsPmrZIiClNR_qz972zQ.crl (hash: 9zDqSG/XMX12tul89umdP1mzG0lnBGRIjUy7VgOM/iw=)
                          2: D88F5E4C2CCD11F1B45B25D792833773.roa (hash: NHqGuSO9uliHnLvlI8iIhgA57Ylal/ar0aqw9L7kdmE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916C243/6101B5E62CCD11F1863460AC92833773/flxEJXLUsPmrZIiClNR_qz972zQ.crl
                          rsync://rpki.apnic.net/member_repository/A916C243/6101B5E62CCD11F1863460AC92833773/flxEJXLUsPmrZIiClNR_qz972zQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/flxEJXLUsPmrZIiClNR_qz972zQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 08:50:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12 (0xc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C243, serialNumber=7E5C442572D4B0F9AB64888294D47FAB3F7BDB34
        Validity
            Not Before: Apr 17 08:50:54 2026 GMT
            Not After : Apr 24 08:50:54 2026 GMT
        Subject: CN=69e1f46e-ec72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:12:8c:0b:cf:f1:a2:3d:41:f2:e9:68:a3:5b:
                    ac:b3:54:61:e6:3b:00:a4:16:db:56:83:47:64:52:
                    64:bd:05:61:97:b1:61:75:de:74:85:70:77:ab:10:
                    ad:ca:b4:be:06:d2:46:d4:ba:9a:4a:ed:19:28:c0:
                    e7:2b:8c:3a:35:83:fb:c2:e2:f8:fa:c3:1b:1a:4a:
                    11:a5:ba:ec:86:5d:f5:9e:a9:7c:08:f2:fb:f3:e4:
                    06:ff:f2:00:98:69:17:36:df:69:f5:fb:80:a8:c2:
                    73:4b:f4:28:e6:e0:62:18:55:ee:7a:49:71:17:93:
                    12:7b:e1:1a:79:e2:f1:01:fe:10:bc:ff:08:40:5c:
                    05:81:df:d8:e2:20:c9:e3:88:81:40:8c:b5:d7:a1:
                    27:63:cd:28:14:96:d9:af:07:e5:39:c1:9b:a4:16:
                    a6:76:90:82:5d:db:d8:a7:46:ae:5a:ae:34:93:c1:
                    87:45:61:0d:e1:2d:bf:33:3e:db:38:38:10:96:60:
                    52:da:5e:52:1f:2c:83:c6:91:9d:45:a0:0b:3b:b8:
                    c0:43:b4:ee:4f:3b:40:38:33:c9:1c:76:75:ca:84:
                    09:71:19:5c:26:e7:73:eb:08:c6:85:bf:7a:be:5f:
                    bf:bd:ef:cd:f6:8e:17:be:85:8b:cb:3e:8a:e7:71:
                    7d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:06:EE:7F:FC:A7:42:B1:5C:50:C0:B2:74:3B:C8:E5:41:D6:72:E8
            X509v3 Authority Key Identifier:
                keyid:7E:5C:44:25:72:D4:B0:F9:AB:64:88:82:94:D4:7F:AB:3F:7B:DB:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C243/6101B5E62CCD11F1863460AC92833773/flxEJXLUsPmrZIiClNR_qz972zQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/flxEJXLUsPmrZIiClNR_qz972zQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C243/6101B5E62CCD11F1863460AC92833773/flxEJXLUsPmrZIiClNR_qz972zQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:4f:79:c4:ca:29:8d:c8:6c:d6:18:25:a7:dc:b2:bc:4a:b8:
         ac:95:e8:f9:75:2c:c3:ed:87:16:1a:de:62:47:c8:0d:2e:e2:
         76:47:71:31:ff:fc:87:f6:35:ca:21:86:e8:48:11:4a:02:e1:
         5f:e9:26:9f:28:94:e3:75:75:be:a2:e0:07:c3:c6:54:bb:a9:
         ce:b9:c4:4b:e6:95:6a:37:c8:b8:8c:aa:eb:79:92:16:ba:db:
         bf:df:d9:6f:31:3f:62:cc:62:a9:02:e4:53:e0:00:26:8c:19:
         19:eb:21:dc:2b:4c:7a:d2:2c:51:9f:23:f2:95:93:1d:72:27:
         b4:49:5a:2e:26:e0:aa:6c:50:89:1c:77:e6:9d:1f:4f:70:f8:
         0e:cd:b9:d6:24:c0:7c:c4:c1:ca:ad:b4:36:b7:b5:d2:d9:75:
         fe:da:1c:b8:8d:17:48:bb:03:f1:40:d6:95:ce:4e:e6:e1:02:
         55:1d:e0:41:ef:94:3c:20:e6:5d:68:e8:fe:78:65:35:c3:c1:
         ad:18:c9:5a:b5:6a:82:8b:a3:4d:f8:79:30:5f:9c:4b:3d:09:
         a2:06:d6:c6:e1:f8:49:a5:90:b2:b9:22:c6:64:e4:b3:c6:cc:
         ce:88:e7:9e:38:61:c9:aa:63:2c:81:5a:52:33:1e:36:6e:55:
         09:2f:23:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:30:08 2026 by rpki-client