Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.mft
File:                     fsx3osytqtpjQvwPRGkYdeo_koc.mft (raw, json)
Hash identifier:          FB1OV3p7pEnuAYpysk8goAZVpVL4N5HiGFd0vZCXQdc=
Subject key identifier:   36:03:C7:B2:A0:D2:2C:27:C4:5D:53:BD:C0:7F:4F:B4:C8:42:98:AD
Authority key identifier: 7E:CC:77:A2:CC:AD:AA:DA:63:42:FC:0F:44:69:18:75:EA:3F:92:87
Certificate issuer:       /CN=A91B2BC9/serialNumber=7ECC77A2CCADAADA6342FC0F44691875EA3F9287
Certificate serial:       0255
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fsx3osytqtpjQvwPRGkYdeo_koc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.mft
Manifest number:          024E
Signing time:             Mon 02 Mar 2026 02:03:14 +0000
Manifest this update:     Mon 02 Mar 2026 02:03:11 +0000
Manifest next update:     Mon 09 Mar 2026 02:03:11 +0000
Files and hashes:         1: fsx3osytqtpjQvwPRGkYdeo_koc.crl (hash: QDQ00CyW1mSjOvy9VxiLmsOWRD3lPCLKJoq4vB4vXZI=)
                          2: 044E6658915A11ED8D2FBE43C4F9AE02.roa (hash: 6ViEjGiRPk0ms0lSl5+ohXm8W2evvF29tI66T/l8bLg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.crl
                          rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fsx3osytqtpjQvwPRGkYdeo_koc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:03:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 597 (0x255)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B2BC9, serialNumber=7ECC77A2CCADAADA6342FC0F44691875EA3F9287
        Validity
            Not Before: Mar  2 02:03:11 2026 GMT
            Not After : Mar  9 02:03:11 2026 GMT
        Subject: CN=69a4efe2-1358
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:f2:cf:ee:e2:ff:29:66:93:ea:73:30:ce:31:
                    b1:f3:56:34:ca:b9:f3:1c:f5:8c:eb:7c:33:33:b3:
                    08:ef:d8:59:00:7c:06:f3:dc:2b:f9:d4:95:39:6c:
                    1b:25:30:2d:d7:bd:dc:1e:ef:42:73:6c:bb:19:02:
                    16:31:99:9e:da:73:04:fc:22:77:38:f0:56:60:f7:
                    a8:d6:2b:8c:df:a0:72:5d:e8:09:33:54:8a:62:40:
                    06:81:60:48:b4:df:58:23:a6:ef:26:fd:74:b0:39:
                    14:0c:0b:7f:10:7e:3f:3e:29:c2:82:f7:d8:c6:2c:
                    49:3c:92:bd:d5:34:52:d8:24:2e:0f:be:ff:dc:ba:
                    f3:e9:f8:41:bc:00:86:45:2c:52:2e:ad:77:f5:e3:
                    09:08:3b:4a:67:26:20:57:cc:45:59:df:b0:8a:06:
                    42:4d:80:5d:73:cf:45:9b:36:8c:c4:3e:4e:4e:e9:
                    26:d8:5d:fc:1d:13:64:5b:3a:a8:94:7b:95:d0:ca:
                    fc:03:70:45:82:71:8f:81:59:4a:10:6a:0e:b8:96:
                    c9:6d:50:45:d3:d0:af:4c:cc:17:d7:dc:f1:f3:bf:
                    ce:e6:8e:ad:d6:d3:01:b4:ed:5d:f0:81:b6:e8:2f:
                    08:7f:2f:90:6e:ff:bd:72:82:28:57:fe:0f:8b:3d:
                    ab:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:03:C7:B2:A0:D2:2C:27:C4:5D:53:BD:C0:7F:4F:B4:C8:42:98:AD
            X509v3 Authority Key Identifier:
                keyid:7E:CC:77:A2:CC:AD:AA:DA:63:42:FC:0F:44:69:18:75:EA:3F:92:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fsx3osytqtpjQvwPRGkYdeo_koc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:07:de:03:0c:02:b0:75:62:53:2f:42:14:6c:c2:ea:e2:f4:
         62:ae:2d:52:15:31:6a:08:5c:56:45:6b:59:53:05:5c:7c:fe:
         55:b2:a2:87:e3:0e:58:ed:a9:55:9b:e2:5c:b3:55:f6:75:ec:
         d2:81:e8:8e:61:47:34:f8:09:ca:5a:6f:b2:78:fc:86:bb:9d:
         9d:48:01:41:92:8e:9c:4d:e6:23:bb:e2:d0:1e:c7:1f:ec:11:
         3f:fa:2b:a6:3b:1e:3c:83:f9:b5:11:25:8d:a4:2b:41:72:d8:
         5e:7f:97:64:ca:8a:a1:d8:a0:cf:67:7d:4e:d3:54:e2:61:db:
         1a:47:79:97:46:44:84:71:76:01:22:5d:29:8e:fa:af:d9:78:
         42:16:6e:41:fb:a3:09:e8:11:02:d9:5d:15:35:57:64:15:f1:
         6c:67:ff:fb:10:97:ac:d3:e8:15:45:89:86:7a:16:7d:c7:26:
         eb:e4:ff:ad:56:aa:8a:6f:f3:ca:a4:e0:0f:85:67:66:c9:37:
         8b:04:b0:ab:e2:46:47:54:17:42:20:8c:41:18:00:19:3e:d8:
         83:51:9b:ea:15:51:db:c5:d2:52:79:a0:53:4a:9e:1b:43:da:
         ec:f1:67:ab:e0:e4:47:83:c4:de:34:16:04:c5:3d:f4:ca:7d:
         a3:cd:e1:b1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAlUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjJCQzkxMTAvBgNVBAUTKDdFQ0M3N0EyQ0NBREFBREE2MzQyRkMwRjQ0NjkxODc1
RUEzRjkyODcwHhcNMjYwMzAyMDIwMzExWhcNMjYwMzA5MDIwMzExWjAYMRYwFAYD
VQQDEw02OWE0ZWZlMi0xMzU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAhPLP7uL/KWaT6nMwzjGx81Y0yrnzHPWM63wzM7MI79hZAHwG89wr+dSVOWwb
JTAt173cHu9Cc2y7GQIWMZme2nME/CJ3OPBWYPeo1iuM36ByXegJM1SKYkAGgWBI
tN9YI6bvJv10sDkUDAt/EH4/PinCgvfYxixJPJK91TRS2CQuD77/3Lrz6fhBvACG
RSxSLq139eMJCDtKZyYgV8xFWd+wigZCTYBdc89FmzaMxD5OTukm2F38HRNkWzqo
lHuV0Mr8A3BFgnGPgVlKEGoOuJbJbVBF09CvTMwX19zx87/O5o6t1tMBtO1d8IG2
6C8Ify+Qbv+9coIoV/4Piz2r9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDYDx7Kg
0iwnxF1TvcB/T7TIQpitMB8GA1UdIwQYMBaAFH7Md6LMraraY0L8D0RpGHXqP5KH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkJDOS82NkQzN0FBNjkx
NTYxMUVEOEQ0Qjc3M0RDNEY5QUUwMi9mc3gzb3N5dHF0cGpRdndQUkdrWWRlb19r
b2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZzeDNvc3l0cXRwalF2d1BSR2tZZGVvX2tvYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MkJDOS82NkQzN0FBNjkxNTYxMUVEOEQ0Qjc3M0RDNEY5QUUwMi9mc3gzb3N5dHF0
cGpRdndQUkdrWWRlb19rb2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABwfeAwwCsHViUy9CFGzC6uL0Yq4tUhUxaghcVkVrWVMFXHz+VbKih+MOWO2p
VZviXLNV9nXs0oHojmFHNPgJylpvsnj8hrudnUgBQZKOnE3mI7vi0B7HH+wRP/or
pjsePIP5tREljaQrQXLYXn+XZMqKodigz2d9TtNU4mHbGkd5l0ZEhHF2ASJdKY76
r9l4QhZuQfujCegRAtldFTVXZBXxbGf/+xCXrNPoFUWJhnoWfccm6+T/rVaqim/z
yqTgD4VnZsk3iwSwq+JGR1QXQiCMQRgAGT7Yg1Gb6hVR28XSUnmgU0qeG0Pa7PFn
q+DkR4PE3jQWBMU99Mp9o83hsQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:42:39 2026 by rpki-client