Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916E343/3AE739AEB97E11EEB3C22955C4F9AE02/FOVew0KOPSuk3HHBWeX2Bh8WPG0.mft
File:                     FOVew0KOPSuk3HHBWeX2Bh8WPG0.mft (raw, json)
Hash identifier:          +wZd0T5xr4VtjcoAAfjGqTjcRV4RulGeju9Q570rCls=
Subject key identifier:   2E:35:EC:70:7F:B1:36:A9:B7:93:0A:04:46:32:47:64:1C:63:9A:22
Authority key identifier: 14:E5:5E:C3:42:8E:3D:2B:A4:DC:71:C1:59:E5:F6:06:1F:16:3C:6D
Certificate issuer:       /CN=A916E343/serialNumber=14E55EC3428E3D2BA4DC71C159E5F6061F163C6D
Certificate serial:       01A4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FOVew0KOPSuk3HHBWeX2Bh8WPG0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916E343/3AE739AEB97E11EEB3C22955C4F9AE02/FOVew0KOPSuk3HHBWeX2Bh8WPG0.mft
Manifest number:          01A4
Signing time:             Fri 17 Apr 2026 03:03:05 +0000
Manifest this update:     Fri 17 Apr 2026 03:03:04 +0000
Manifest next update:     Fri 24 Apr 2026 03:03:04 +0000
Files and hashes:         1: FOVew0KOPSuk3HHBWeX2Bh8WPG0.crl (hash: SSzUsul51mhWu2fipWp+bls4SPeHYeLEZsEYyhQ3ZeY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916E343/3AE739AEB97E11EEB3C22955C4F9AE02/FOVew0KOPSuk3HHBWeX2Bh8WPG0.crl
                          rsync://rpki.apnic.net/member_repository/A916E343/3AE739AEB97E11EEB3C22955C4F9AE02/FOVew0KOPSuk3HHBWeX2Bh8WPG0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FOVew0KOPSuk3HHBWeX2Bh8WPG0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 420 (0x1a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916E343, serialNumber=14E55EC3428E3D2BA4DC71C159E5F6061F163C6D
        Validity
            Not Before: Apr 17 03:03:04 2026 GMT
            Not After : Apr 24 03:03:04 2026 GMT
        Subject: CN=69e1a2e9-83cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8a:00:48:ea:e7:0b:85:3c:e2:13:45:79:ae:
                    32:b8:bf:60:7d:6f:2c:d3:56:d9:e1:e6:da:18:5d:
                    4a:34:79:7b:b2:83:e8:d2:1b:69:1a:af:2c:c9:c2:
                    b7:57:ca:e5:5a:12:67:01:eb:ac:90:14:5d:65:27:
                    6e:a7:84:a9:bf:fa:cf:ce:b2:ba:55:fc:33:80:11:
                    1b:60:e0:4b:31:91:3c:ed:34:f5:2b:a9:2e:ec:ac:
                    f9:1f:7b:e1:f1:f8:82:72:44:e2:de:43:7f:a5:ee:
                    6b:bd:cb:21:1c:6d:5e:f5:b5:8f:b2:8a:f8:99:b5:
                    66:93:cf:c0:7f:5b:3c:8f:58:bb:cc:ab:3c:07:22:
                    11:76:6c:e9:06:59:1a:99:8f:29:62:c4:50:5a:7a:
                    ae:5d:b6:91:9a:cf:19:10:49:5b:f3:17:04:f9:5c:
                    0d:38:d7:05:a4:fe:f0:a9:97:44:1b:e9:b5:39:03:
                    94:37:f9:9c:03:02:8d:3f:f2:8e:bb:87:92:b4:5d:
                    b5:8c:5b:f9:fc:d6:7a:df:f5:4c:69:75:bb:86:43:
                    33:bb:82:87:a6:b6:7c:76:ad:4e:c3:15:9a:81:12:
                    7b:e0:2d:13:36:af:49:ea:50:df:f4:f3:d2:76:6f:
                    87:98:21:54:67:f5:5a:f4:03:31:a1:14:59:07:d8:
                    5f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:35:EC:70:7F:B1:36:A9:B7:93:0A:04:46:32:47:64:1C:63:9A:22
            X509v3 Authority Key Identifier:
                keyid:14:E5:5E:C3:42:8E:3D:2B:A4:DC:71:C1:59:E5:F6:06:1F:16:3C:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916E343/3AE739AEB97E11EEB3C22955C4F9AE02/FOVew0KOPSuk3HHBWeX2Bh8WPG0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FOVew0KOPSuk3HHBWeX2Bh8WPG0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E343/3AE739AEB97E11EEB3C22955C4F9AE02/FOVew0KOPSuk3HHBWeX2Bh8WPG0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:44:57:52:17:2a:e7:df:a5:54:6f:72:c2:57:fd:e8:22:ac:
         be:a4:b4:1b:5a:b4:7e:f8:01:ef:45:4d:a1:56:52:2f:9a:e6:
         ea:00:cd:2a:a0:24:8b:ab:d2:5f:09:0f:c4:7c:c8:e5:40:1f:
         be:f6:23:3f:8c:49:00:c6:4b:c7:dd:93:a9:50:e0:b2:d1:15:
         55:da:a0:98:fb:e1:2f:9d:8c:77:de:d6:37:41:7f:47:c9:02:
         06:db:e8:56:90:4d:04:3f:0b:df:fb:3a:7c:08:6b:98:e0:07:
         2c:ee:4a:73:b5:6f:34:52:4c:15:e3:c1:48:79:f5:e7:90:66:
         33:9e:b1:a2:8c:1f:a8:be:3e:c0:4a:ac:5a:4a:a4:64:10:dd:
         9b:ae:13:75:05:de:00:ea:85:7b:21:fe:b1:d4:e5:54:f8:29:
         21:b6:85:85:5e:06:5a:e0:d6:d0:a7:f7:43:ac:fb:13:fa:72:
         a9:73:09:03:ff:31:0f:c5:32:d4:5e:6e:93:a2:66:d9:cd:d5:
         36:6d:a7:8f:ed:6d:c9:19:53:c4:16:32:a8:d4:cf:d8:fd:05:
         80:11:d1:fe:d7:0b:22:e3:10:b3:72:68:76:af:32:4f:7e:4d:
         fb:f9:7a:c2:d8:57:c7:43:30:86:ea:39:29:15:7e:89:3f:20:
         13:f3:f5:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:06:10 2026 by rpki-client