Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D12C2/B2FE35DE378011EAB2141374C4F9AE02/FmUgpBWnVONYZSxXkM6GtLJjLdE.mft
File:                     FmUgpBWnVONYZSxXkM6GtLJjLdE.mft (raw, json)
Hash identifier:          IcmPBppnJDE6UgtQf76Ft5BTAHNfbsfD0elwoTdMy6g=
Subject key identifier:   E5:42:97:4A:69:B9:AB:DE:2E:A8:A4:69:92:21:D5:63:12:82:F4:4C
Authority key identifier: 16:65:20:A4:15:A7:54:E3:58:65:2C:57:90:CE:86:B4:B2:63:2D:D1
Certificate issuer:       /CN=A91D12C2/serialNumber=166520A415A754E358652C5790CE86B4B2632DD1
Certificate serial:       0BD3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FmUgpBWnVONYZSxXkM6GtLJjLdE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D12C2/B2FE35DE378011EAB2141374C4F9AE02/FmUgpBWnVONYZSxXkM6GtLJjLdE.mft
Manifest number:          0BCC
Signing time:             Sat 28 Feb 2026 19:08:02 +0000
Manifest this update:     Sat 28 Feb 2026 19:08:02 +0000
Manifest next update:     Sat 07 Mar 2026 19:08:02 +0000
Files and hashes:         1: FmUgpBWnVONYZSxXkM6GtLJjLdE.crl (hash: IsRUayieidFkj0FHQt9Haa+VACdoIhbZLjMGESEWvYI=)
                          2: 6C8823E2378211EA8FE81077C4F9AE02.roa (hash: HiKAMlyOzO3hjDAQ70KLboDAw8zECF7jQ0Cq/PsrM04=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D12C2/B2FE35DE378011EAB2141374C4F9AE02/FmUgpBWnVONYZSxXkM6GtLJjLdE.crl
                          rsync://rpki.apnic.net/member_repository/A91D12C2/B2FE35DE378011EAB2141374C4F9AE02/FmUgpBWnVONYZSxXkM6GtLJjLdE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FmUgpBWnVONYZSxXkM6GtLJjLdE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 19:08:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3027 (0xbd3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D12C2, serialNumber=166520A415A754E358652C5790CE86B4B2632DD1
        Validity
            Not Before: Feb 28 19:08:02 2026 GMT
            Not After : Mar  7 19:08:02 2026 GMT
        Subject: CN=69a33d12-7cf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:b3:55:73:d9:49:28:49:47:c5:72:12:82:1a:
                    38:d4:b1:b1:fd:c4:1f:05:58:72:57:e9:cc:c3:48:
                    71:0b:e5:4d:6c:b7:0b:81:48:cd:6b:73:cc:12:3f:
                    f8:bb:0f:9e:d6:b7:69:a9:53:e2:f5:91:29:e4:b4:
                    a0:be:ae:65:f3:f1:86:95:a6:87:ce:32:30:84:2b:
                    1b:b2:a8:17:38:ba:9b:b4:2e:5b:9f:99:c7:4d:fb:
                    29:06:e0:1a:39:ad:c4:83:fb:da:98:09:9c:14:bf:
                    99:da:a9:5f:a0:90:10:2c:a2:92:3c:83:a2:19:a8:
                    1e:c7:92:d3:31:bc:3b:3e:b1:7e:17:84:45:f1:ab:
                    23:97:56:34:da:c2:fc:90:88:45:86:f3:69:2a:db:
                    db:56:8a:60:69:bd:f5:97:69:15:9e:49:30:ec:21:
                    12:23:2b:67:43:83:09:8d:e7:51:1f:0e:bb:f2:45:
                    08:88:c2:e7:e2:44:1f:66:38:59:21:6c:c7:61:b0:
                    2d:3f:20:8f:2c:e5:7d:d2:2c:ca:60:f1:b1:a8:0e:
                    41:bf:b6:3b:41:b7:4e:bb:04:86:d5:f2:64:75:1a:
                    ba:6a:75:fa:d3:cd:d9:29:20:48:dc:cf:89:98:04:
                    c8:da:6c:b4:42:84:39:ec:5b:5d:e4:f6:9d:4b:2e:
                    09:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:42:97:4A:69:B9:AB:DE:2E:A8:A4:69:92:21:D5:63:12:82:F4:4C
            X509v3 Authority Key Identifier:
                keyid:16:65:20:A4:15:A7:54:E3:58:65:2C:57:90:CE:86:B4:B2:63:2D:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D12C2/B2FE35DE378011EAB2141374C4F9AE02/FmUgpBWnVONYZSxXkM6GtLJjLdE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FmUgpBWnVONYZSxXkM6GtLJjLdE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D12C2/B2FE35DE378011EAB2141374C4F9AE02/FmUgpBWnVONYZSxXkM6GtLJjLdE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:79:c3:e2:f4:bb:75:a6:41:8a:53:59:9a:0c:28:cc:a3:1b:
         e9:cc:e5:b4:cd:5b:e2:d7:b9:31:2e:90:d8:2a:a2:66:f8:f2:
         b3:98:be:91:5f:ce:ab:89:d4:05:d1:5f:b9:9f:b7:43:cd:32:
         1f:ea:e7:78:8a:a2:78:e8:2b:2a:d2:10:f0:7b:d5:88:29:cc:
         1a:be:eb:6e:2c:57:0d:93:99:6d:a4:23:2f:f7:f4:7f:3b:06:
         ce:18:39:70:52:bc:81:46:d1:cc:17:97:5d:00:7f:d4:a1:2d:
         5d:a2:38:c9:10:83:62:10:20:ba:4d:de:35:20:c8:db:c5:69:
         56:e0:31:99:07:7a:52:e4:b9:94:6e:8a:ee:38:c1:f4:19:00:
         e9:0d:cf:31:42:6d:b5:c2:9f:b3:97:4d:e6:d2:03:aa:2d:9e:
         39:9d:33:25:b2:9d:14:b0:89:d0:43:be:86:ce:1d:97:f4:81:
         54:1b:d1:2b:e9:78:bc:8e:21:d3:50:bf:8d:87:ae:40:be:5f:
         13:9f:b9:de:b0:7c:1d:0a:34:5d:67:4a:0f:10:32:76:45:08:
         98:ce:5f:c8:3e:26:37:1e:94:fd:f9:5d:5e:aa:cd:22:9f:e8:
         8d:82:d6:41:df:e8:ed:60:b0:5a:0a:65:4b:f2:02:62:3e:45:
         7f:7d:0f:9d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC9MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDEyQzIxMTAvBgNVBAUTKDE2NjUyMEE0MTVBNzU0RTM1ODY1MkM1NzkwQ0U4NkI0
QjI2MzJERDEwHhcNMjYwMjI4MTkwODAyWhcNMjYwMzA3MTkwODAyWjAYMRYwFAYD
VQQDDA02OWEzM2QxMi03Y2YyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjLNVc9lJKElHxXISgho41LGx/cQfBVhyV+nMw0hxC+VNbLcLgUjNa3PMEj/4
uw+e1rdpqVPi9ZEp5LSgvq5l8/GGlaaHzjIwhCsbsqgXOLqbtC5bn5nHTfspBuAa
Oa3Eg/vamAmcFL+Z2qlfoJAQLKKSPIOiGagex5LTMbw7PrF+F4RF8asjl1Y02sL8
kIhFhvNpKtvbVopgab31l2kVnkkw7CESIytnQ4MJjedRHw678kUIiMLn4kQfZjhZ
IWzHYbAtPyCPLOV90izKYPGxqA5Bv7Y7QbdOuwSG1fJkdRq6anX6083ZKSBI3M+J
mATI2my0QoQ57Ftd5PadSy4JpwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOVCl0pp
uaveLqikaZIh1WMSgvRMMB8GA1UdIwQYMBaAFBZlIKQVp1TjWGUsV5DOhrSyYy3R
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTJDMi9CMkZFMzVERTM3
ODAxMUVBQjIxNDEzNzRDNEY5QUUwMi9GbVVncEJXblZPTllaU3hYa002R3RMSmpM
ZEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZtVWdwQlduVk9OWVpTeFhrTTZHdExKakxkRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MTJDMi9CMkZFMzVERTM3ODAxMUVBQjIxNDEzNzRDNEY5QUUwMi9GbVVncEJXblZP
TllaU3hYa002R3RMSmpMZEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAannD4vS7daZBilNZmgwozKMb6czltM1b4te5MS6Q2CqiZvjys5i+kV/Oq4nU
BdFfuZ+3Q80yH+rneIqieOgrKtIQ8HvViCnMGr7rbixXDZOZbaQjL/f0fzsGzhg5
cFK8gUbRzBeXXQB/1KEtXaI4yRCDYhAguk3eNSDI28VpVuAxmQd6UuS5lG6K7jjB
9BkA6Q3PMUJttcKfs5dN5tIDqi2eOZ0zJbKdFLCJ0EO+hs4dl/SBVBvRK+l4vI4h
01C/jYeuQL5fE5+53rB8HQo0XWdKDxAydkUImM5fyD4mNx6U/fldXqrNIp/ojYLW
Qd/o7WCwWgplS/ICYj5Ff30PnQ==
-----END CERTIFICATE-----
Generated at Sun Mar 1 21:10:14 2026 by rpki-client