Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.mft
File:                     FrmIQthhrv6AMEAgDJqqiVYPK8o.mft (raw, json)
Hash identifier:          J/nKltZhX5EoFKUvjS8RGGj17VLRViNqZlZAcK9gVUg=
Subject key identifier:   33:79:8E:C9:D8:A8:1F:53:15:E2:0E:71:AE:D0:B7:6D:4C:2C:49:12
Authority key identifier: 16:B9:88:42:D8:61:AE:FE:80:30:40:20:0C:9A:AA:89:56:0F:2B:CA
Certificate issuer:       /CN=A91EABCB/serialNumber=16B98842D861AEFE803040200C9AAA89560F2BCA
Certificate serial:       073E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrmIQthhrv6AMEAgDJqqiVYPK8o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.mft
Manifest number:          0729
Signing time:             Sat 18 Apr 2026 21:44:50 +0000
Manifest this update:     Sat 18 Apr 2026 21:44:49 +0000
Manifest next update:     Sat 25 Apr 2026 21:44:49 +0000
Files and hashes:         1: FrmIQthhrv6AMEAgDJqqiVYPK8o.crl (hash: p+Axn6M6z63BQX512+DuWOH+WBIZFGhUAtStJ0yAqdg=)
                          2: 0F0EC4A67A8811EB95169F62C4F9AE02.roa (hash: 7vpCi6tiC+nYwk1GKGUUszYv1YKzqefKr3Cq0hLOpLI=)
                          3: 2E248E2CAD8511F08469DF53C4F9AE02.roa (hash: WTkCXMD4s9+pTdAVOc0KZG2ehtUBwPP4uPitEquEFeQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.crl
                          rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrmIQthhrv6AMEAgDJqqiVYPK8o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Apr 2026 21:44:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1854 (0x73e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EABCB, serialNumber=16B98842D861AEFE803040200C9AAA89560F2BCA
        Validity
            Not Before: Apr 18 21:44:49 2026 GMT
            Not After : Apr 25 21:44:49 2026 GMT
        Subject: CN=69e3fb52-ec69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:5e:56:6f:01:a9:6f:3d:4b:7f:a3:52:02:7e:
                    2e:08:e7:70:94:7c:53:e7:9f:04:4f:1b:25:5f:c0:
                    70:79:87:49:23:74:33:e5:40:bb:fd:09:45:23:32:
                    6b:91:d4:49:b6:3f:39:cd:b3:f8:f5:f7:c5:71:d9:
                    5b:c0:42:51:de:bc:9d:8e:c7:8c:9f:c8:95:dd:0b:
                    de:38:38:1d:c7:93:c6:d4:17:e7:3c:26:15:4f:e8:
                    7b:5a:05:74:f4:81:95:43:ba:70:d9:18:d9:41:c9:
                    3f:29:4a:3a:be:e5:57:9a:d5:40:c0:f4:ee:36:08:
                    89:61:67:f4:da:d4:7a:8a:f9:d0:70:9c:28:b6:41:
                    3b:20:48:0a:0d:d2:70:63:5f:5a:5c:b0:2e:fa:a9:
                    06:92:15:c2:7f:d6:23:6a:0a:13:cd:84:41:de:e0:
                    4f:28:b8:49:ca:f2:f0:99:c7:ca:d7:ff:ad:59:73:
                    29:61:d9:f9:f0:1f:6d:14:c5:b8:f5:eb:4d:1f:37:
                    e1:1a:f3:41:a2:f7:88:a9:66:c0:4a:5b:12:cf:6b:
                    c3:28:b3:c0:17:cb:63:bf:47:91:87:e8:a9:81:0d:
                    57:4d:79:f9:fe:1c:40:26:cf:cb:6d:2d:2c:08:7d:
                    fa:98:22:fe:b1:fd:50:c2:3d:70:d0:6b:87:c3:1a:
                    c8:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:79:8E:C9:D8:A8:1F:53:15:E2:0E:71:AE:D0:B7:6D:4C:2C:49:12
            X509v3 Authority Key Identifier:
                keyid:16:B9:88:42:D8:61:AE:FE:80:30:40:20:0C:9A:AA:89:56:0F:2B:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrmIQthhrv6AMEAgDJqqiVYPK8o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:18:7d:f6:85:99:71:89:39:e8:ff:1b:00:7d:57:66:47:75:
         54:bc:66:a1:a8:d8:6a:1d:a1:dd:28:5f:cd:68:84:16:4e:cb:
         d1:6c:68:6b:f0:dc:61:bb:de:00:1b:87:e2:48:53:a3:50:f2:
         6e:ad:de:4f:0b:28:b6:20:7b:6d:ce:75:df:e5:38:ae:8b:f7:
         a3:1d:e6:26:43:97:9b:c9:eb:d9:bb:5f:e2:44:a9:83:a4:fd:
         a5:03:fc:f0:19:b4:6b:33:99:82:3f:e6:2d:cd:a6:46:9c:3d:
         84:b6:a1:ac:3f:5a:6f:51:91:58:7c:b7:2b:1f:c1:18:ae:6d:
         79:76:a6:dc:d5:18:0c:92:e5:f6:05:9f:d1:67:9d:0c:75:51:
         f2:36:8d:ee:e7:ca:c1:02:db:22:f5:ee:c0:e9:03:58:b2:ae:
         e3:ce:57:17:6a:07:72:ad:4a:32:2e:c7:6c:9a:ab:a6:b1:f8:
         bd:d6:5f:54:8a:25:a6:95:f3:f0:b0:38:f5:46:70:4f:34:7e:
         76:97:50:9b:6c:46:2b:7d:9e:6c:6d:3d:1a:93:d7:35:16:41:
         ee:a9:7b:ab:bd:e3:ec:5b:ad:c0:53:b6:a8:6d:6d:03:00:5c:
         13:19:72:28:13:62:d0:39:55:41:e4:eb:2a:30:86:d6:a1:f9:
         26:a8:85:2d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBz4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUFCQ0IxMTAvBgNVBAUTKDE2Qjk4ODQyRDg2MUFFRkU4MDMwNDAyMDBDOUFBQTg5
NTYwRjJCQ0EwHhcNMjYwNDE4MjE0NDQ5WhcNMjYwNDI1MjE0NDQ5WjAYMRYwFAYD
VQQDEw02OWUzZmI1Mi1lYzY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0F5WbwGpbz1Lf6NSAn4uCOdwlHxT558ETxslX8BweYdJI3Qz5UC7/QlFIzJr
kdRJtj85zbP49ffFcdlbwEJR3rydjseMn8iV3QveODgdx5PG1BfnPCYVT+h7WgV0
9IGVQ7pw2RjZQck/KUo6vuVXmtVAwPTuNgiJYWf02tR6ivnQcJwotkE7IEgKDdJw
Y19aXLAu+qkGkhXCf9YjagoTzYRB3uBPKLhJyvLwmcfK1/+tWXMpYdn58B9tFMW4
9etNHzfhGvNBoveIqWbASlsSz2vDKLPAF8tjv0eRh+ipgQ1XTXn5/hxAJs/LbS0s
CH36mCL+sf1Qwj1w0GuHwxrI/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDN5jsnY
qB9TFeIOca7Qt21MLEkSMB8GA1UdIwQYMBaAFBa5iELYYa7+gDBAIAyaqolWDyvK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUJDQi8zNDJGRkYxODdB
ODYxMUVCOTdBRTUxNjBDNEY5QUUwMi9Gcm1JUXRoaHJ2NkFNRUFnREpxcWlWWVBL
OG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZybUlRdGhocnY2QU1FQWdESnFxaVZZUEs4by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QUJDQi8zNDJGRkYxODdBODYxMUVCOTdBRTUxNjBDNEY5QUUwMi9Gcm1JUXRoaHJ2
NkFNRUFnREpxcWlWWVBLOG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlRh99oWZcYk56P8bAH1XZkd1VLxmoajYah2h3ShfzWiEFk7L0Wxoa/DcYbve
ABuH4khTo1Dybq3eTwsotiB7bc513+U4rov3ox3mJkOXm8nr2btf4kSpg6T9pQP8
8Bm0azOZgj/mLc2mRpw9hLahrD9ab1GRWHy3Kx/BGK5teXam3NUYDJLl9gWf0Wed
DHVR8jaN7ufKwQLbIvXuwOkDWLKu485XF2oHcq1KMi7HbJqrprH4vdZfVIolppXz
8LA49UZwTzR+dpdQm2xGK32ebG09GpPXNRZB7ql7q73j7FutwFO2qG1tAwBcExly
KBNi0DlVQeTrKjCG1qH5JqiFLQ==
-----END CERTIFICATE-----
Generated at Sun Apr 19 11:39:53 2026 by rpki-client