Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.mft
File:                     fsx3osytqtpjQvwPRGkYdeo_koc.mft (raw, json)
Hash identifier:          ftcWy3W4ndM09FhGKukPZgXLwvOaULnurZrep1duivc=
Subject key identifier:   50:E5:E5:5D:64:E7:E6:54:62:5E:FF:B1:43:BE:69:E7:B4:E3:0A:6F
Authority key identifier: 7E:CC:77:A2:CC:AD:AA:DA:63:42:FC:0F:44:69:18:75:EA:3F:92:87
Certificate issuer:       /CN=A91B2BC9/serialNumber=7ECC77A2CCADAADA6342FC0F44691875EA3F9287
Certificate serial:       026D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fsx3osytqtpjQvwPRGkYdeo_koc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.mft
Manifest number:          0266
Signing time:             Fri 17 Apr 2026 01:55:01 +0000
Manifest this update:     Fri 17 Apr 2026 01:55:00 +0000
Manifest next update:     Fri 24 Apr 2026 01:55:00 +0000
Files and hashes:         1: fsx3osytqtpjQvwPRGkYdeo_koc.crl (hash: u7Y9s1twktf5/UpuS8JpITHa6TdrJu/ZtUR0bk9vTR0=)
                          2: 044E6658915A11ED8D2FBE43C4F9AE02.roa (hash: 6ViEjGiRPk0ms0lSl5+ohXm8W2evvF29tI66T/l8bLg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.crl
                          rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fsx3osytqtpjQvwPRGkYdeo_koc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 01:55:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 621 (0x26d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B2BC9, serialNumber=7ECC77A2CCADAADA6342FC0F44691875EA3F9287
        Validity
            Not Before: Apr 17 01:55:00 2026 GMT
            Not After : Apr 24 01:55:00 2026 GMT
        Subject: CN=69e192f5-684b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:3b:6b:4a:bb:81:ed:9e:06:06:be:f8:39:28:
                    5c:d9:eb:25:0f:13:f6:9c:f9:e1:a3:6c:cb:e3:35:
                    ac:1a:08:7c:b2:b9:46:26:ba:ee:a3:f0:9d:d7:47:
                    28:7d:49:a0:fe:fc:80:16:6b:40:df:bb:9f:b5:7d:
                    50:c3:1a:af:1d:8c:91:07:6d:fd:64:e5:96:6a:9d:
                    d4:4f:33:45:5a:49:a6:49:11:b4:2f:7f:e9:4c:12:
                    88:a8:83:02:bd:44:7a:4d:6e:0b:ac:f5:1e:ed:c4:
                    4d:f6:c7:b0:86:2c:cd:53:b2:72:14:88:20:02:bf:
                    d7:af:e6:bf:78:8d:aa:bf:7a:c8:3d:2f:54:87:13:
                    38:22:d0:43:88:1b:38:d0:e2:5e:d7:41:e0:30:24:
                    69:ea:d2:59:a3:d2:d1:10:91:92:bb:aa:ff:a3:7d:
                    fe:ae:6b:58:74:13:0b:1e:87:8d:37:ae:55:36:1a:
                    a6:6d:75:fb:70:94:66:e7:ee:63:6f:71:d2:1b:f8:
                    cb:95:86:2b:5c:1f:d5:85:0c:c3:31:fc:50:86:b2:
                    bc:20:1f:cb:1a:01:9f:d1:a3:cc:2b:39:6e:b9:68:
                    2a:a7:5a:45:34:c1:ed:42:ab:fe:3f:fb:86:c9:0b:
                    b9:d8:cc:15:77:c4:23:a0:66:ed:9c:f5:ee:1d:61:
                    41:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:E5:E5:5D:64:E7:E6:54:62:5E:FF:B1:43:BE:69:E7:B4:E3:0A:6F
            X509v3 Authority Key Identifier:
                keyid:7E:CC:77:A2:CC:AD:AA:DA:63:42:FC:0F:44:69:18:75:EA:3F:92:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fsx3osytqtpjQvwPRGkYdeo_koc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:6a:17:2d:e6:08:89:e8:41:e7:b9:91:32:fa:8c:3b:27:76:
         f0:b4:3c:01:05:73:36:cc:30:19:9e:42:3a:66:bf:ec:d8:c9:
         2b:69:57:3e:68:51:39:d3:a5:31:68:32:cd:80:bb:82:11:45:
         f3:af:5d:e5:55:24:ac:8f:38:8b:a8:cf:cd:58:98:36:e5:be:
         3d:a1:a1:4e:6c:94:0c:50:42:3b:6f:06:bc:f4:11:55:82:e3:
         be:df:b2:04:8a:c0:8f:0c:4f:a7:74:20:eb:ee:b2:37:b6:d3:
         83:ff:82:a9:70:ed:3a:42:7b:a4:57:7d:9e:2e:36:37:d6:ff:
         0b:74:5c:df:b2:25:47:ba:79:2c:f8:f7:63:c6:46:b1:34:32:
         6f:08:ed:74:74:56:28:d9:40:61:1d:8b:67:e3:20:fe:a1:1c:
         fb:6f:dd:5b:3d:0d:06:03:55:a6:5e:9d:18:50:d3:2c:ca:ab:
         da:b5:34:ba:7d:9b:eb:57:ef:3d:1e:1c:b8:57:bc:9e:3c:aa:
         fe:92:05:2c:50:13:02:6d:79:04:96:10:05:ee:e7:6f:75:0f:
         a9:3a:8e:aa:e7:ab:ff:e0:8a:10:d5:dd:80:79:64:2f:22:98:
         d4:8d:72:b2:38:07:f0:93:6a:7e:19:34:0c:11:49:f3:63:f0:
         88:a5:b5:2c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAm0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjJCQzkxMTAvBgNVBAUTKDdFQ0M3N0EyQ0NBREFBREE2MzQyRkMwRjQ0NjkxODc1
RUEzRjkyODcwHhcNMjYwNDE3MDE1NTAwWhcNMjYwNDI0MDE1NTAwWjAYMRYwFAYD
VQQDEw02OWUxOTJmNS02ODRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsjtrSruB7Z4GBr74OShc2eslDxP2nPnho2zL4zWsGgh8srlGJrruo/Cd10co
fUmg/vyAFmtA37uftX1QwxqvHYyRB239ZOWWap3UTzNFWkmmSRG0L3/pTBKIqIMC
vUR6TW4LrPUe7cRN9sewhizNU7JyFIggAr/Xr+a/eI2qv3rIPS9UhxM4ItBDiBs4
0OJe10HgMCRp6tJZo9LREJGSu6r/o33+rmtYdBMLHoeNN65VNhqmbXX7cJRm5+5j
b3HSG/jLlYYrXB/VhQzDMfxQhrK8IB/LGgGf0aPMKzluuWgqp1pFNMHtQqv+P/uG
yQu52MwVd8QjoGbtnPXuHWFBPwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFDl5V1k
5+ZUYl7/sUO+aee04wpvMB8GA1UdIwQYMBaAFH7Md6LMraraY0L8D0RpGHXqP5KH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkJDOS82NkQzN0FBNjkx
NTYxMUVEOEQ0Qjc3M0RDNEY5QUUwMi9mc3gzb3N5dHF0cGpRdndQUkdrWWRlb19r
b2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZzeDNvc3l0cXRwalF2d1BSR2tZZGVvX2tvYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MkJDOS82NkQzN0FBNjkxNTYxMUVEOEQ0Qjc3M0RDNEY5QUUwMi9mc3gzb3N5dHF0
cGpRdndQUkdrWWRlb19rb2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABWoXLeYIiehB57mRMvqMOyd28LQ8AQVzNswwGZ5COma/7NjJK2lXPmhROdOl
MWgyzYC7ghFF869d5VUkrI84i6jPzViYNuW+PaGhTmyUDFBCO28GvPQRVYLjvt+y
BIrAjwxPp3Qg6+6yN7bTg/+CqXDtOkJ7pFd9ni42N9b/C3Rc37IlR7p5LPj3Y8ZG
sTQybwjtdHRWKNlAYR2LZ+Mg/qEc+2/dWz0NBgNVpl6dGFDTLMqr2rU0un2b61fv
PR4cuFe8njyq/pIFLFATAm15BJYQBe7nb3UPqTqOquer/+CKENXdgHlkLyKY1I1y
sjgH8JNqfhk0DBFJ82PwiKW1LA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:52:44 2026 by rpki-client