Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.mft
File:                     fn476Ik3CnHlUhVXuwOgDxs5v9g.mft (raw, json)
Hash identifier:          G33rWjQksTTq5yx4ZB5DxBYHZ2jG2P6RgyJFvT2Oo/Q=
Subject key identifier:   03:8D:F9:DC:D7:59:F6:60:2F:AE:CB:62:3B:37:61:EA:F7:75:20:52
Authority key identifier: 7E:7E:3B:E8:89:37:0A:71:E5:52:15:57:BB:03:A0:0F:1B:39:BF:D8
Certificate issuer:       /CN=A911784E/serialNumber=7E7E3BE889370A71E5521557BB03A00F1B39BFD8
Certificate serial:       087C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fn476Ik3CnHlUhVXuwOgDxs5v9g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.mft
Manifest number:          086C
Signing time:             Wed 20 May 2026 20:45:43 +0000
Manifest this update:     Wed 20 May 2026 20:45:43 +0000
Manifest next update:     Wed 27 May 2026 20:45:43 +0000
Files and hashes:         1: fn476Ik3CnHlUhVXuwOgDxs5v9g.crl (hash: FMsstVLrHK/LjlcavSl8lcHduxUcU7ParJyfibbm4es=)
                          2: 211EA566FEC411EAA6579A78C4F9AE02.roa (hash: 0c3kOHhoaretnNoGmEe06A8CZn/rk8uulX8vCvx7VMs=)
                          3: 8AA99B52FEC511EABAAE7814C4F9AE02.roa (hash: 5Hpb4Eto1Y7FBhRcGpJuK1i5AkkmZjve+QlNVuZWxKs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.crl
                          rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fn476Ik3CnHlUhVXuwOgDxs5v9g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 20:45:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2172 (0x87c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911784E, serialNumber=7E7E3BE889370A71E5521557BB03A00F1B39BFD8
        Validity
            Not Before: May 20 20:45:43 2026 GMT
            Not After : May 27 20:45:43 2026 GMT
        Subject: CN=6a0e1d77-721e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:01:7b:39:67:e6:3c:83:29:db:cf:3e:31:d8:
                    c5:fa:9b:19:a3:a0:c9:b6:16:fc:3b:c5:d3:0a:5f:
                    e5:d8:f3:da:10:20:72:51:44:bc:27:18:2e:2a:0a:
                    2e:fa:6f:fc:05:4d:0c:7e:67:91:3a:f2:da:49:d3:
                    0e:a2:5a:db:32:0e:75:f8:c3:cf:0a:3f:10:8f:fa:
                    cd:23:69:d2:ed:17:d3:6f:7d:54:76:22:45:8b:3a:
                    80:8e:13:54:4a:f7:0d:e7:5c:5d:0b:0a:89:e0:dd:
                    f0:f3:d7:36:7d:bb:24:ae:41:fc:36:ce:bc:66:13:
                    0f:b3:dc:a0:de:19:78:84:c6:cf:f1:6f:ec:7f:a2:
                    5b:30:5a:63:8e:c5:88:e6:b2:79:09:4b:1c:94:0d:
                    35:50:fe:37:2a:0f:8d:cb:00:0e:76:7d:83:4b:c8:
                    e7:a1:22:d7:b8:33:8d:0c:e8:0f:b8:30:da:fb:2a:
                    2f:03:be:1e:7a:6d:de:83:7d:20:a3:8a:fa:1a:61:
                    18:3a:83:e9:0a:1c:c0:9f:f5:7c:40:6e:d0:50:03:
                    59:77:c7:cd:a5:f1:46:c3:de:d4:8d:cd:4b:f3:42:
                    bf:1d:2a:d9:99:f4:89:60:42:6e:11:26:7b:de:58:
                    d9:36:42:56:98:f9:1d:61:62:73:39:13:aa:9d:1a:
                    4f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:8D:F9:DC:D7:59:F6:60:2F:AE:CB:62:3B:37:61:EA:F7:75:20:52
            X509v3 Authority Key Identifier:
                keyid:7E:7E:3B:E8:89:37:0A:71:E5:52:15:57:BB:03:A0:0F:1B:39:BF:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fn476Ik3CnHlUhVXuwOgDxs5v9g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:13:0d:ec:22:52:a7:c5:18:f4:00:94:f9:94:93:01:a1:1a:
         4e:4a:11:1b:de:b7:0b:4a:28:94:1a:72:a1:15:6b:44:8c:21:
         0b:77:c3:e7:a9:bd:ed:e9:6a:64:aa:15:b8:ae:83:a0:cd:74:
         57:a6:88:83:ac:d9:52:c4:4f:7b:54:97:3e:51:e6:8c:7d:be:
         e1:a6:ee:a8:bc:65:f0:d2:05:d4:be:66:32:88:a1:b8:e8:c5:
         f9:c1:c8:cf:ba:57:60:27:3e:de:84:f0:42:33:ce:e7:a9:97:
         52:1e:1b:c5:d8:81:e7:15:70:46:68:a6:56:03:27:a5:5b:e6:
         f9:4f:31:bc:94:28:25:08:ad:77:59:af:3a:03:ae:61:d1:9b:
         2d:ce:18:41:0c:f7:60:91:c7:5d:21:cd:6d:1e:02:3c:93:5b:
         e6:f6:b4:a6:59:22:f9:f0:50:d8:92:4e:22:11:1e:ed:d6:14:
         34:03:27:9d:60:74:fb:d3:ea:61:54:05:7d:55:98:ef:41:bf:
         88:39:50:db:ae:49:46:50:60:d0:1c:e0:27:39:10:4b:06:b7:
         81:e6:a6:19:f0:aa:36:33:20:64:96:d4:8a:41:bd:99:58:96:
         21:89:55:55:94:af:82:26:fb:4f:31:04:8d:23:d7:c3:31:61:
         3a:0b:2c:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 11:59:19 2026 by rpki-client