Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917EFB8/D980A1721D9511E292150E7E08B02CD2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.mft
File:                     Fw6cdnZDw8H2BXlAhkij8NqEBFo.mft (raw, json)
Hash identifier:          V1B+O47fzkwAL1zavtEqBDBKo1MYS1M4JWba1vzT4ks=
Subject key identifier:   61:9F:2D:11:2C:5D:5C:86:37:6F:9D:50:65:2D:07:E3:D8:4A:6C:07
Authority key identifier: 17:0E:9C:76:76:43:C3:C1:F6:05:79:40:86:48:A3:F0:DA:84:04:5A
Certificate issuer:       /CN=A917EFB8/serialNumber=170E9C767643C3C1F60579408648A3F0DA84045A
Certificate serial:       353C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917EFB8/D980A1721D9511E292150E7E08B02CD2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.mft
Manifest number:          3533
Signing time:             Thu 16 Apr 2026 14:49:09 +0000
Manifest this update:     Thu 16 Apr 2026 14:49:09 +0000
Manifest next update:     Thu 23 Apr 2026 14:49:09 +0000
Files and hashes:         1: Fw6cdnZDw8H2BXlAhkij8NqEBFo.crl (hash: g1kbS33++swqq7dMsToqTMDXgYNAwhZVaPyTToJi2Zg=)
                          2: E68E0FD4077B11EB98CA5D1CC4F9AE02.roa (hash: rIwXuVAKzTQeQgdJujiwbvj/r919Ii7m2oS5MI0eTgQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917EFB8/D980A1721D9511E292150E7E08B02CD2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.crl
                          rsync://rpki.apnic.net/member_repository/A917EFB8/D980A1721D9511E292150E7E08B02CD2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 14:49:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13628 (0x353c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917EFB8, serialNumber=170E9C767643C3C1F60579408648A3F0DA84045A
        Validity
            Not Before: Apr 16 14:49:09 2026 GMT
            Not After : Apr 23 14:49:09 2026 GMT
        Subject: CN=69e0f6e5-12c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:44:32:fa:b7:23:6c:9c:69:ee:7b:4e:f4:ca:
                    01:ba:55:c5:27:f0:8d:81:d5:1d:58:3b:32:8e:62:
                    9e:35:47:76:6c:f4:06:e7:30:23:42:a5:fb:66:b8:
                    0e:c6:af:46:66:09:b5:30:8f:63:94:3b:d2:e3:83:
                    d2:f8:1c:ee:d5:cb:fc:92:ae:a8:8c:de:8e:d8:3e:
                    b1:00:84:c3:31:d5:28:75:93:dd:45:41:5d:79:2f:
                    2d:ca:d4:fb:d6:af:1d:8b:5c:c7:95:a0:ef:e4:75:
                    db:15:64:7d:87:13:81:4a:07:a2:34:e5:92:81:bb:
                    be:0d:da:9d:26:0f:4e:96:2d:8f:2b:e2:c4:dc:82:
                    35:71:f5:8a:d2:d7:a3:e6:0e:38:46:0f:a0:af:42:
                    18:75:e4:86:67:09:0f:5f:f7:5d:66:08:aa:79:01:
                    f6:a5:88:60:ed:38:1e:91:02:cd:d7:d3:32:66:65:
                    ed:12:de:34:8f:7c:6d:cb:6c:6a:d0:59:41:f3:41:
                    28:f4:95:44:0c:17:87:36:f8:74:2a:8a:95:b9:6a:
                    e8:93:32:43:45:c3:75:f6:08:76:72:3d:c9:11:ea:
                    d9:66:d7:e1:52:10:c3:b3:d1:33:40:53:17:18:3d:
                    0f:8a:b1:12:4e:96:8e:54:2b:d3:b7:9e:6a:a8:1f:
                    86:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:9F:2D:11:2C:5D:5C:86:37:6F:9D:50:65:2D:07:E3:D8:4A:6C:07
            X509v3 Authority Key Identifier:
                keyid:17:0E:9C:76:76:43:C3:C1:F6:05:79:40:86:48:A3:F0:DA:84:04:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917EFB8/D980A1721D9511E292150E7E08B02CD2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EFB8/D980A1721D9511E292150E7E08B02CD2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:ca:1a:13:40:68:fc:c0:87:a3:2a:8a:2b:e2:6d:f3:5c:a4:
         8a:c9:af:73:8a:28:a9:99:80:d5:71:9e:f2:87:9b:d6:6b:ad:
         4c:23:ef:46:86:1d:e6:0a:36:84:0d:c6:bb:ba:fe:77:74:b7:
         ff:bf:b8:73:7a:b4:fb:28:4e:8e:d1:2c:9c:12:8d:93:23:f7:
         ee:39:bb:cb:b5:5f:95:e8:52:3c:7e:dd:ed:de:4b:74:c6:6d:
         bd:1e:04:76:0f:36:2e:6d:0d:0c:d0:c9:66:e1:2a:83:7d:42:
         77:d3:70:2f:2d:c4:d0:a5:64:0b:04:8a:56:6f:df:f9:9e:72:
         c6:82:b7:59:07:7a:52:10:01:af:87:94:a1:86:f0:23:28:fc:
         cc:49:69:dc:b2:51:23:09:b1:90:4a:b0:18:39:bf:1e:fc:a2:
         6a:7a:1c:29:8a:a8:9d:fc:1d:d9:ee:16:b1:dd:da:16:f2:eb:
         14:95:ed:92:d9:e2:23:f5:7d:ef:8d:32:10:cf:3b:6a:91:86:
         db:14:1d:0c:cd:f4:b5:4e:0d:5c:d1:67:8b:40:04:26:49:ca:
         cb:e7:f1:67:ee:80:a0:c0:e1:fc:e1:4e:9e:9c:8d:97:a2:d9:
         1e:94:79:9d:a0:71:e7:f0:0a:34:0e:2e:51:8f:65:c1:43:96:
         5a:b3:c9:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:42:09 2026 by rpki-client