Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193B94/B7791622BCD911EF92AB3313C4F9AE02/FpcDHB024MQncP5r8o2uSO4TZJY.mft
File:                     FpcDHB024MQncP5r8o2uSO4TZJY.mft (raw, json)
Hash identifier:          oyfCdkLnrmCWwJ4KcfYHMwMzlNWy1quz1LeKooISP2k=
Subject key identifier:   51:78:52:DC:FE:76:69:20:85:5F:94:4B:E9:FF:FE:24:FE:B5:D0:0D
Authority key identifier: 16:97:03:1C:1D:36:E0:C4:27:70:FE:6B:F2:8D:AE:48:EE:13:64:96
Certificate issuer:       /CN=A9193B94/serialNumber=1697031C1D36E0C42770FE6BF28DAE48EE136496
Certificate serial:       FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FpcDHB024MQncP5r8o2uSO4TZJY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193B94/B7791622BCD911EF92AB3313C4F9AE02/FpcDHB024MQncP5r8o2uSO4TZJY.mft
Manifest number:          FB
Signing time:             Fri 17 Apr 2026 05:56:01 +0000
Manifest this update:     Fri 17 Apr 2026 05:56:00 +0000
Manifest next update:     Fri 24 Apr 2026 05:56:00 +0000
Files and hashes:         1: FpcDHB024MQncP5r8o2uSO4TZJY.crl (hash: IvkDsYjMOyLWe/rTP6zcWAh5GtSWVLkXfboFxr0fDfA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193B94/B7791622BCD911EF92AB3313C4F9AE02/FpcDHB024MQncP5r8o2uSO4TZJY.crl
                          rsync://rpki.apnic.net/member_repository/A9193B94/B7791622BCD911EF92AB3313C4F9AE02/FpcDHB024MQncP5r8o2uSO4TZJY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FpcDHB024MQncP5r8o2uSO4TZJY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:56:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 251 (0xfb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193B94, serialNumber=1697031C1D36E0C42770FE6BF28DAE48EE136496
        Validity
            Not Before: Apr 17 05:56:00 2026 GMT
            Not After : Apr 24 05:56:00 2026 GMT
        Subject: CN=69e1cb71-4180
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f3:52:32:25:3b:1d:c5:3f:12:28:b8:4f:8e:
                    ea:85:af:43:8e:9f:34:68:da:87:5d:6e:2c:41:cd:
                    1f:42:85:76:53:7d:2a:fc:37:f1:6c:3e:ce:f0:fd:
                    ea:b7:7a:d0:b7:74:c9:d0:54:ca:7e:46:7c:b2:36:
                    cb:06:09:32:6b:9c:e0:4e:14:5b:e9:2d:9f:2a:d1:
                    c2:21:c3:dc:b9:37:86:3b:a7:aa:21:47:85:83:2a:
                    2c:85:22:cd:5d:4f:49:30:2d:03:e2:47:b1:78:41:
                    f5:4f:52:52:28:d0:12:ca:b8:a9:86:14:10:16:f9:
                    e5:3c:88:69:0e:0d:33:2b:9e:ad:51:73:c3:dc:cd:
                    15:39:8a:01:f5:6e:ff:3b:8a:d3:ec:91:92:f0:20:
                    0b:e2:63:ad:83:33:32:d0:8a:94:18:37:63:e2:ba:
                    73:ff:24:ec:fe:72:85:85:b0:40:94:69:17:62:2f:
                    39:36:87:02:d4:ef:c8:de:1a:4c:a6:bd:1a:96:11:
                    06:99:e5:d0:19:cb:e8:18:a4:8d:87:eb:1f:c2:18:
                    74:9c:ef:5a:a0:49:8d:d6:4c:2c:74:56:3e:ee:b2:
                    3f:3a:21:ca:b4:01:87:84:c2:2c:65:d6:f8:e7:e3:
                    42:b9:7f:ac:8e:be:16:19:67:64:f6:82:42:58:0e:
                    f0:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:78:52:DC:FE:76:69:20:85:5F:94:4B:E9:FF:FE:24:FE:B5:D0:0D
            X509v3 Authority Key Identifier:
                keyid:16:97:03:1C:1D:36:E0:C4:27:70:FE:6B:F2:8D:AE:48:EE:13:64:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193B94/B7791622BCD911EF92AB3313C4F9AE02/FpcDHB024MQncP5r8o2uSO4TZJY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FpcDHB024MQncP5r8o2uSO4TZJY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193B94/B7791622BCD911EF92AB3313C4F9AE02/FpcDHB024MQncP5r8o2uSO4TZJY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:d1:73:e4:b6:49:5c:8d:30:63:0a:96:a8:37:d7:94:a5:b5:
         85:85:29:41:3c:20:f0:d6:31:9d:df:34:45:ad:f6:78:e0:0b:
         37:38:a4:8c:76:29:f8:d5:30:46:07:9c:0a:44:5d:63:d8:9c:
         77:ea:53:5e:26:22:3b:1b:2b:dd:d8:9b:bc:f1:23:f3:ba:7f:
         54:53:ee:32:12:3b:18:2a:f1:87:66:de:b1:c6:58:97:3a:9c:
         3a:f0:2f:7f:67:a4:d7:c1:51:60:c5:7e:72:0b:54:87:91:7c:
         a5:35:c4:fd:db:8f:f7:d8:ca:6e:40:25:b4:e9:68:b6:b1:05:
         68:dc:f1:4c:fe:c6:76:94:d0:06:03:b4:ad:51:c0:6a:30:d0:
         53:5e:07:fc:a2:cb:48:6b:df:9f:e2:07:87:2f:aa:6a:84:20:
         5e:33:36:38:59:b0:ee:9b:09:bd:de:70:f4:cd:9a:9b:28:33:
         c2:67:2c:85:66:4e:00:04:80:7d:5e:45:0b:ef:67:5c:b3:4a:
         04:74:92:de:0e:33:a7:ff:e4:e6:0a:9d:ae:9d:ba:a7:f6:35:
         e6:dc:84:7e:a7:6a:27:64:59:78:cd:c2:e5:63:50:4c:9c:cf:
         e6:2b:dd:ae:c5:fe:51:f5:e7:8e:34:52:8c:ae:0c:ad:e0:81:
         61:a4:df:d1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTNCOTQxMTAvBgNVBAUTKDE2OTcwMzFDMUQzNkUwQzQyNzcwRkU2QkYyOERBRTQ4
RUUxMzY0OTYwHhcNMjYwNDE3MDU1NjAwWhcNMjYwNDI0MDU1NjAwWjAYMRYwFAYD
VQQDEw02OWUxY2I3MS00MTgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0PNSMiU7HcU/Eii4T47qha9Djp80aNqHXW4sQc0fQoV2U30q/DfxbD7O8P3q
t3rQt3TJ0FTKfkZ8sjbLBgkya5zgThRb6S2fKtHCIcPcuTeGO6eqIUeFgyoshSLN
XU9JMC0D4kexeEH1T1JSKNASyriphhQQFvnlPIhpDg0zK56tUXPD3M0VOYoB9W7/
O4rT7JGS8CAL4mOtgzMy0IqUGDdj4rpz/yTs/nKFhbBAlGkXYi85NocC1O/I3hpM
pr0alhEGmeXQGcvoGKSNh+sfwhh0nO9aoEmN1kwsdFY+7rI/OiHKtAGHhMIsZdb4
5+NCuX+sjr4WGWdk9oJCWA7wVQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFF4Utz+
dmkghV+US+n//iT+tdANMB8GA1UdIwQYMBaAFBaXAxwdNuDEJ3D+a/KNrkjuE2SW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5M0I5NC9CNzc5MTYyMkJD
RDkxMUVGOTJBQjMzMTNDNEY5QUUwMi9GcGNESEIwMjRNUW5jUDVyOG8ydVNPNFRa
SlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZwY0RIQjAyNE1RbmNQNXI4bzJ1U080VFpKWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
M0I5NC9CNzc5MTYyMkJDRDkxMUVGOTJBQjMzMTNDNEY5QUUwMi9GcGNESEIwMjRN
UW5jUDVyOG8ydVNPNFRaSlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfdFz5LZJXI0wYwqWqDfXlKW1hYUpQTwg8NYxnd80Ra32eOALNzikjHYp+NUw
RgecCkRdY9icd+pTXiYiOxsr3dibvPEj87p/VFPuMhI7GCrxh2bescZYlzqcOvAv
f2ek18FRYMV+cgtUh5F8pTXE/duP99jKbkAltOlotrEFaNzxTP7GdpTQBgO0rVHA
ajDQU14H/KLLSGvfn+IHhy+qaoQgXjM2OFmw7psJvd5w9M2amygzwmcshWZOAASA
fV5FC+9nXLNKBHSS3g4zp//k5gqdrp26p/Y15tyEfqdqJ2RZeM3C5WNQTJzP5ivd
rsX+UfXnjjRSjK4MreCBYaTf0Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:55:33 2026 by rpki-client