Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/fcVok9o1SD_ZCU3wNQTeIXtuOzs.mft
File:                     fcVok9o1SD_ZCU3wNQTeIXtuOzs.mft (raw, json)
Hash identifier:          T0ixWkLOmpxpslMyDr1tdmr6je+wO/qKTWp8MS9yOt4=
Subject key identifier:   A5:39:54:EC:12:5F:51:F9:55:50:2A:DB:F4:FF:C5:C7:88:F3:C6:B1
Authority key identifier: 7D:C5:68:93:DA:35:48:3F:D9:09:4D:F0:35:04:DE:21:7B:6E:3B:3B
Certificate issuer:       /CN=A91C96A7/serialNumber=7DC56893DA35483FD9094DF03504DE217B6E3B3B
Certificate serial:       1072
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcVok9o1SD_ZCU3wNQTeIXtuOzs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/fcVok9o1SD_ZCU3wNQTeIXtuOzs.mft
Manifest number:          1063
Signing time:             Thu 16 Apr 2026 17:19:40 +0000
Manifest this update:     Thu 16 Apr 2026 17:19:40 +0000
Manifest next update:     Thu 23 Apr 2026 17:19:40 +0000
Files and hashes:         1: fcVok9o1SD_ZCU3wNQTeIXtuOzs.crl (hash: xG/w/mW3WcxSDn1nYNwI8LXKyhXn6/GpviA4xIFjrgg=)
                          2: 1BB9CAB6578011E99E80631AC4F9AE02.roa (hash: R10os2GVAU1pg56KEoXBll908hbE1lHWdHzq1cEqVa8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/fcVok9o1SD_ZCU3wNQTeIXtuOzs.crl
                          rsync://rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/fcVok9o1SD_ZCU3wNQTeIXtuOzs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcVok9o1SD_ZCU3wNQTeIXtuOzs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 17:19:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4210 (0x1072)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C96A7, serialNumber=7DC56893DA35483FD9094DF03504DE217B6E3B3B
        Validity
            Not Before: Apr 16 17:19:40 2026 GMT
            Not After : Apr 23 17:19:40 2026 GMT
        Subject: CN=69e11a2c-fb38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:86:73:a0:2f:7f:06:a4:35:e3:23:60:89:51:
                    b0:5a:64:3d:5a:06:23:ed:10:77:ba:56:3f:c7:a3:
                    5f:13:6d:c6:fa:d7:f3:24:81:d1:2a:dc:44:8e:8f:
                    6d:2a:cc:bb:15:45:49:c2:c0:75:3f:24:b4:9e:74:
                    8c:20:08:3c:fd:35:0a:be:e1:54:68:1b:ec:6f:15:
                    e8:71:fc:79:95:6f:5f:58:74:12:bd:58:aa:8f:f4:
                    7f:c7:73:42:51:55:0c:6b:72:f9:b6:84:b7:a6:bd:
                    de:80:e0:2d:90:a5:47:b3:46:df:77:ea:eb:cf:4c:
                    6c:d7:6f:6c:4c:e6:2c:af:54:d3:a7:1f:8e:73:e3:
                    2d:27:bd:25:0f:d9:26:58:b8:9a:4d:5b:ee:02:00:
                    f0:5d:2d:1d:6f:b7:00:75:a3:a1:71:1c:17:e0:73:
                    0a:82:7e:08:ff:60:96:95:26:ce:11:1e:d1:39:af:
                    cf:8c:4c:b6:2a:d0:75:8a:5b:ee:4e:33:c2:0f:53:
                    bc:bc:e3:19:f9:e0:40:f8:e9:cf:e1:88:88:09:9d:
                    e3:66:5b:14:a1:59:29:0d:5a:67:fc:ea:47:3f:f9:
                    44:b4:fb:a4:90:fc:25:1e:de:9d:27:2d:02:2c:ca:
                    fc:89:7a:c5:58:35:5a:04:c4:37:7f:c7:60:dc:97:
                    5c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:39:54:EC:12:5F:51:F9:55:50:2A:DB:F4:FF:C5:C7:88:F3:C6:B1
            X509v3 Authority Key Identifier:
                keyid:7D:C5:68:93:DA:35:48:3F:D9:09:4D:F0:35:04:DE:21:7B:6E:3B:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/fcVok9o1SD_ZCU3wNQTeIXtuOzs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcVok9o1SD_ZCU3wNQTeIXtuOzs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/fcVok9o1SD_ZCU3wNQTeIXtuOzs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:68:67:2e:df:fc:80:b4:f3:b8:e2:88:e8:3c:b8:ab:5a:56:
         13:68:38:01:3d:b3:81:79:96:31:c3:63:5e:2c:74:6a:6e:83:
         2f:c1:11:8c:b7:a3:cf:6f:7a:79:87:29:ed:22:16:b6:7a:14:
         e1:ae:de:4b:de:dc:70:ca:88:19:68:b9:82:32:e8:b4:58:5f:
         f2:47:03:41:4f:3c:22:9d:28:dd:75:17:2b:0f:9f:0a:23:26:
         23:b1:ad:b5:ed:35:53:87:c6:eb:2f:c0:cc:2f:8a:bb:fb:ec:
         01:22:c3:6a:a3:bc:49:0f:24:5d:bd:32:30:95:0c:7f:93:33:
         17:b5:bf:f5:20:17:96:4f:93:c9:e5:aa:3c:5f:c9:4d:31:86:
         4e:6a:ba:0a:6b:ae:6e:62:83:92:d0:39:90:dd:6a:12:33:5f:
         1d:59:68:51:1a:11:29:83:86:94:3a:b7:ce:c3:7f:eb:d5:ac:
         2f:f0:27:35:88:64:38:34:40:72:83:c6:70:6e:7c:ee:67:89:
         73:9c:9c:09:ab:38:9f:87:ef:ed:87:5b:15:74:c7:97:cf:69:
         27:a2:8b:af:38:88:1f:4b:57:b5:50:76:5b:c3:99:13:2b:99:
         c0:e3:63:c9:e3:4a:6f:b3:d1:a0:e1:5e:17:f9:e1:cc:f2:21:
         75:4e:98:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:10:13 2026 by rpki-client