Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91757CB/4ED212DCF2F811EEA3506738C4F9AE02/FzXLqe4W_oXz0oP6W7lHnZryzIY.mft
File:                     FzXLqe4W_oXz0oP6W7lHnZryzIY.mft (raw, json)
Hash identifier:          Wyxu1iAFD03vC0T+g3Lb8uCjaK8+jAkjxBKuTaMq1P8=
Subject key identifier:   C6:E0:FE:A3:F0:74:85:7B:14:AA:50:74:CC:2D:BF:0D:FC:67:38:E7
Authority key identifier: 17:35:CB:A9:EE:16:FE:85:F3:D2:83:FA:5B:B9:47:9D:9A:F2:CC:86
Certificate issuer:       /CN=A91757CB/serialNumber=1735CBA9EE16FE85F3D283FA5BB9479D9AF2CC86
Certificate serial:       017B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FzXLqe4W_oXz0oP6W7lHnZryzIY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91757CB/4ED212DCF2F811EEA3506738C4F9AE02/FzXLqe4W_oXz0oP6W7lHnZryzIY.mft
Manifest number:          017B
Signing time:             Fri 17 Apr 2026 04:18:22 +0000
Manifest this update:     Fri 17 Apr 2026 04:18:22 +0000
Manifest next update:     Fri 24 Apr 2026 04:18:22 +0000
Files and hashes:         1: FzXLqe4W_oXz0oP6W7lHnZryzIY.crl (hash: 9aQDbXO2SeJWe2BcC7vIkfHlgo3SxUDJaIRb+7VQkVg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91757CB/4ED212DCF2F811EEA3506738C4F9AE02/FzXLqe4W_oXz0oP6W7lHnZryzIY.crl
                          rsync://rpki.apnic.net/member_repository/A91757CB/4ED212DCF2F811EEA3506738C4F9AE02/FzXLqe4W_oXz0oP6W7lHnZryzIY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FzXLqe4W_oXz0oP6W7lHnZryzIY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 04:18:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 379 (0x17b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91757CB, serialNumber=1735CBA9EE16FE85F3D283FA5BB9479D9AF2CC86
        Validity
            Not Before: Apr 17 04:18:22 2026 GMT
            Not After : Apr 24 04:18:22 2026 GMT
        Subject: CN=69e1b48e-2b71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:de:26:da:00:61:e3:20:b9:e3:0a:a8:9e:8d:
                    85:e0:dc:4a:b9:ca:75:cb:6d:a1:08:22:5d:ed:bc:
                    f0:1d:e6:9e:47:8a:eb:c1:03:e7:f0:5a:b6:7c:47:
                    53:67:4b:26:ea:8c:9c:c4:e2:bf:80:37:9c:dd:9b:
                    a9:a5:81:08:51:b4:f2:63:8d:de:cd:08:43:d3:c9:
                    45:3b:30:1e:a8:92:2d:4f:91:89:29:62:1b:07:c6:
                    f8:3b:6d:ad:2c:32:fe:53:34:e3:f5:73:15:88:c4:
                    88:f7:60:7a:84:6d:57:74:46:62:64:b7:b0:66:b2:
                    6e:a4:03:a5:ac:a2:02:40:cd:dd:b0:7b:12:68:0c:
                    66:f0:c7:5c:cd:02:0f:2b:d0:1b:44:f5:a7:47:19:
                    eb:81:8a:27:2e:27:e2:0b:30:8f:fe:3e:bc:3a:77:
                    37:37:0f:3b:93:1e:57:3d:42:ba:3c:c1:bd:28:7b:
                    85:02:08:07:34:40:92:a8:24:fc:25:d2:c6:7e:2a:
                    6d:ca:55:2a:f0:77:5b:aa:e9:b2:58:f4:f5:11:a2:
                    15:3a:fe:5e:5e:cc:fc:d8:46:5d:da:60:b9:07:56:
                    d1:fd:2b:aa:c5:82:d0:25:b5:8b:ce:85:d6:eb:6d:
                    ba:c4:7f:b0:0f:44:dc:d2:fb:c3:b0:71:07:94:0f:
                    32:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:E0:FE:A3:F0:74:85:7B:14:AA:50:74:CC:2D:BF:0D:FC:67:38:E7
            X509v3 Authority Key Identifier:
                keyid:17:35:CB:A9:EE:16:FE:85:F3:D2:83:FA:5B:B9:47:9D:9A:F2:CC:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91757CB/4ED212DCF2F811EEA3506738C4F9AE02/FzXLqe4W_oXz0oP6W7lHnZryzIY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FzXLqe4W_oXz0oP6W7lHnZryzIY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91757CB/4ED212DCF2F811EEA3506738C4F9AE02/FzXLqe4W_oXz0oP6W7lHnZryzIY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:d8:d6:fa:8b:75:85:e7:a3:c6:d7:2e:5d:8a:8e:15:6c:c1:
         b4:ca:b2:96:75:4c:f3:62:1f:7f:b4:30:04:d1:34:55:8b:cb:
         00:50:da:83:a3:06:48:b0:f8:e2:41:43:8c:24:94:41:f4:67:
         2b:50:45:9b:f9:d0:fb:35:bc:21:87:a6:fe:f8:c7:3d:42:59:
         6d:36:d3:90:7a:19:37:55:79:f7:a3:c0:e9:30:26:da:22:cd:
         77:da:d6:1d:e3:64:64:7c:6b:39:d4:90:7d:41:6c:33:bc:90:
         7c:00:f8:07:ab:6e:89:7d:d3:8c:50:eb:e5:93:c4:b5:db:01:
         8c:4d:e0:32:71:29:74:0e:42:d6:b9:d7:3f:0e:d0:58:e9:a5:
         28:fa:cd:2c:5b:22:17:31:37:ae:34:34:db:9b:d2:67:48:aa:
         e4:c6:fa:0e:23:2e:30:53:d6:ec:94:d4:02:7a:30:46:95:9f:
         56:de:c4:63:f3:13:8c:ed:14:67:86:8d:4c:0e:0a:99:e1:8f:
         d9:5f:33:14:82:47:6c:bd:fe:bb:bc:1a:25:87:ad:83:08:4d:
         33:9b:0e:d3:d9:c0:2a:ba:8b:7d:f7:1c:29:57:d5:4b:e6:5d:
         ed:ac:d8:53:bb:52:eb:37:22:24:30:b6:5a:54:ed:b0:d6:62:
         c1:10:1b:26
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAXswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzU3Q0IxMTAvBgNVBAUTKDE3MzVDQkE5RUUxNkZFODVGM0QyODNGQTVCQjk0NzlE
OUFGMkNDODYwHhcNMjYwNDE3MDQxODIyWhcNMjYwNDI0MDQxODIyWjAYMRYwFAYD
VQQDEw02OWUxYjQ4ZS0yYjcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqt4m2gBh4yC54wqono2F4NxKucp1y22hCCJd7bzwHeaeR4rrwQPn8Fq2fEdT
Z0sm6oycxOK/gDec3ZuppYEIUbTyY43ezQhD08lFOzAeqJItT5GJKWIbB8b4O22t
LDL+UzTj9XMViMSI92B6hG1XdEZiZLewZrJupAOlrKICQM3dsHsSaAxm8MdczQIP
K9AbRPWnRxnrgYonLifiCzCP/j68Onc3Nw87kx5XPUK6PMG9KHuFAggHNECSqCT8
JdLGfiptylUq8HdbqumyWPT1EaIVOv5eXsz82EZd2mC5B1bR/SuqxYLQJbWLzoXW
6226xH+wD0Tc0vvDsHEHlA8y5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMbg/qPw
dIV7FKpQdMwtvw38ZzjnMB8GA1UdIwQYMBaAFBc1y6nuFv6F89KD+lu5R52a8syG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTdDQi80RUQyMTJEQ0Yy
RjgxMUVFQTM1MDY3MzhDNEY5QUUwMi9GelhMcWU0V19vWHowb1A2VzdsSG5acnl6
SVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0Z6WExxZTRXX29YejBvUDZXN2xIblpyeXpJWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NTdDQi80RUQyMTJEQ0YyRjgxMUVFQTM1MDY3MzhDNEY5QUUwMi9GelhMcWU0V19v
WHowb1A2VzdsSG5acnl6SVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADdjW+ot1heejxtcuXYqOFWzBtMqylnVM82Iff7QwBNE0VYvLAFDag6MGSLD4
4kFDjCSUQfRnK1BFm/nQ+zW8IYem/vjHPUJZbTbTkHoZN1V596PA6TAm2iLNd9rW
HeNkZHxrOdSQfUFsM7yQfAD4B6tuiX3TjFDr5ZPEtdsBjE3gMnEpdA5C1rnXPw7Q
WOmlKPrNLFsiFzE3rjQ025vSZ0iq5Mb6DiMuMFPW7JTUAnowRpWfVt7EY/MTjO0U
Z4aNTA4KmeGP2V8zFIJHbL3+u7waJYetgwhNM5sO09nAKrqLffccKVfVS+Zd7azY
U7tS6zciJDC2WlTtsNZiwRAbJg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:50:07 2026 by rpki-client