Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A29D7/FB560B4EAD7311F0AF650254C4F9AE02/FqyT2NEGYhHwhBFq1CpDRO1RxAI.mft
File:                     FqyT2NEGYhHwhBFq1CpDRO1RxAI.mft (raw, json)
Hash identifier:          rDdOm304+rqb8LyfD+qEv0ap7jeJseC1G8VqRjZYn68=
Subject key identifier:   52:FA:EF:4E:07:59:B8:9D:C5:8B:4C:33:FA:1D:A5:66:16:57:E6:C4
Authority key identifier: 16:AC:93:D8:D1:06:62:11:F0:84:11:6A:D4:2A:43:44:ED:51:C4:02
Certificate issuer:       /CN=A91A29D7/serialNumber=16AC93D8D1066211F084116AD42A4344ED51C402
Certificate serial:       5F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FqyT2NEGYhHwhBFq1CpDRO1RxAI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A29D7/FB560B4EAD7311F0AF650254C4F9AE02/FqyT2NEGYhHwhBFq1CpDRO1RxAI.mft
Manifest number:          5F
Signing time:             Fri 17 Apr 2026 07:43:43 +0000
Manifest this update:     Fri 17 Apr 2026 07:43:42 +0000
Manifest next update:     Fri 24 Apr 2026 07:43:42 +0000
Files and hashes:         1: FqyT2NEGYhHwhBFq1CpDRO1RxAI.crl (hash: Fi/hMKwuT1o6ssqDwfNxFv4P2xt/iYVez694uBYFfOU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A29D7/FB560B4EAD7311F0AF650254C4F9AE02/FqyT2NEGYhHwhBFq1CpDRO1RxAI.crl
                          rsync://rpki.apnic.net/member_repository/A91A29D7/FB560B4EAD7311F0AF650254C4F9AE02/FqyT2NEGYhHwhBFq1CpDRO1RxAI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FqyT2NEGYhHwhBFq1CpDRO1RxAI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:43:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 95 (0x5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A29D7, serialNumber=16AC93D8D1066211F084116AD42A4344ED51C402
        Validity
            Not Before: Apr 17 07:43:42 2026 GMT
            Not After : Apr 24 07:43:42 2026 GMT
        Subject: CN=69e1e4af-f091
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1b:35:86:c2:79:54:60:96:d8:e0:2b:5a:8a:
                    be:ec:ea:8b:b6:9a:7f:45:9d:60:fd:ae:02:8f:bc:
                    c4:73:f4:53:2e:6b:51:0b:44:42:84:2e:46:1b:0b:
                    c1:f9:ef:6f:a7:05:a8:4f:75:ab:f2:b3:4e:61:4d:
                    f9:95:22:4c:58:6a:e5:42:f2:15:98:e9:c9:e2:aa:
                    3b:27:7f:33:a2:38:55:d2:52:67:d9:2f:d4:75:6d:
                    3b:0a:5e:7d:03:f3:33:a0:70:3d:a0:67:d4:fb:db:
                    94:cf:8e:bf:41:8a:9c:60:8b:a3:67:e0:23:62:28:
                    1b:24:70:8c:d7:85:d7:2a:fe:8c:2f:1d:7e:97:2e:
                    b6:2a:d5:04:66:40:8d:9c:7f:90:d5:52:06:56:28:
                    79:67:99:ec:60:33:d9:08:b6:0f:7c:29:e2:98:42:
                    ba:86:7d:11:1f:15:6a:92:a2:94:9b:32:b4:57:04:
                    46:d3:7f:17:a2:b8:a8:82:fc:fe:26:83:f0:bb:5a:
                    89:a0:4b:68:c3:70:da:ca:ff:db:e4:9d:11:bc:7c:
                    54:7c:76:09:2c:fd:30:fa:1e:ee:93:1d:5c:27:94:
                    2f:99:96:a9:50:fc:dc:2c:68:07:15:e0:d1:e9:3e:
                    f0:0f:0d:69:39:52:ac:34:e2:33:23:4e:d8:00:de:
                    c6:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:FA:EF:4E:07:59:B8:9D:C5:8B:4C:33:FA:1D:A5:66:16:57:E6:C4
            X509v3 Authority Key Identifier:
                keyid:16:AC:93:D8:D1:06:62:11:F0:84:11:6A:D4:2A:43:44:ED:51:C4:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A29D7/FB560B4EAD7311F0AF650254C4F9AE02/FqyT2NEGYhHwhBFq1CpDRO1RxAI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FqyT2NEGYhHwhBFq1CpDRO1RxAI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A29D7/FB560B4EAD7311F0AF650254C4F9AE02/FqyT2NEGYhHwhBFq1CpDRO1RxAI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:a1:0b:a0:3b:d8:dd:b3:c4:3d:05:c2:8e:46:97:2d:dc:c1:
         bb:ee:f6:51:b5:84:93:f9:9b:c2:9f:c5:97:f6:c3:b9:c7:25:
         c8:7a:5c:b2:3c:ee:4f:4a:33:92:14:33:6c:18:45:92:28:5c:
         3a:cd:25:a9:4b:e7:95:2b:95:75:48:de:ad:36:e3:49:47:02:
         e5:ca:d3:4e:01:9c:12:32:80:83:17:a8:66:c4:c1:e2:53:1b:
         52:37:d9:45:d6:5e:01:34:3f:be:33:84:a5:65:6d:fa:98:40:
         72:ec:44:ab:d8:86:d2:6c:02:1c:cc:c4:92:71:e2:08:18:1a:
         16:ba:f3:37:84:c8:d2:05:f1:45:98:09:a2:e4:28:1d:76:0d:
         4c:ae:6b:c7:f1:c3:47:f8:79:f0:d4:79:aa:c3:a3:96:02:97:
         d2:da:dd:4c:43:d7:c1:c6:b9:bd:94:c1:17:15:d7:13:ee:d2:
         47:79:4e:2a:8a:e6:ad:0a:c8:19:9c:d7:4e:40:83:c2:48:a3:
         5a:ee:98:49:5a:e5:62:e4:30:b5:4e:01:8f:47:4f:e5:85:83:
         f2:e6:fe:61:82:4c:03:1a:4e:32:4d:bf:ed:1d:77:63:de:2e:
         28:50:1d:50:13:17:33:c6:cc:12:55:b2:c0:52:ef:fa:20:da:
         87:c4:f3:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:57:02 2026 by rpki-client