Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft
File:                     FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft (raw, json)
Hash identifier:          ybf3MDaW+B//NOQJKiTaxDriERON8JCKTUkGYFwNfdM=
Subject key identifier:   75:75:E8:58:BB:68:C1:CC:4D:BA:C9:49:34:98:B0:C0:CF:95:E7:D4
Authority key identifier: 14:66:40:77:58:A8:D7:B9:35:69:48:96:D5:02:75:28:06:79:AF:29
Certificate issuer:       /CN=A9121188/serialNumber=1466407758A8D7B935694896D50275280679AF29
Certificate serial:       01DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FGZAd1io17k1aUiW1QJ1KAZ5ryk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft
Manifest number:          01D7
Signing time:             Thu 21 May 2026 03:36:00 +0000
Manifest this update:     Thu 21 May 2026 03:35:59 +0000
Manifest next update:     Thu 28 May 2026 03:35:59 +0000
Files and hashes:         1: FGZAd1io17k1aUiW1QJ1KAZ5ryk.crl (hash: Z1V6rtMy6FPGdBWx3RNeDzvBoCxA8C/mGYI8v4tWpv0=)
                          2: 91FC411C836411EE80C08641C4F9AE02.roa (hash: y7rF5vkt8RhtipSe8v56RC2oUIIDL8ARxP+tAlU5uD0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.crl
                          rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FGZAd1io17k1aUiW1QJ1KAZ5ryk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 03:35:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 476 (0x1dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9121188, serialNumber=1466407758A8D7B935694896D50275280679AF29
        Validity
            Not Before: May 21 03:35:59 2026 GMT
            Not After : May 28 03:35:59 2026 GMT
        Subject: CN=6a0e7da0-bfb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:25:9b:69:fd:a2:c1:00:6f:28:03:22:31:41:
                    23:c1:c7:35:68:50:da:d5:24:f8:10:fe:a3:cc:59:
                    aa:63:21:31:f9:75:cf:d2:aa:bc:a5:8d:c8:ce:95:
                    cc:31:49:31:31:f2:cf:ca:e4:36:67:fe:9b:20:60:
                    0d:bb:53:e0:b2:3a:91:2a:85:31:fe:0f:25:a9:f4:
                    de:42:c7:af:d9:83:28:ee:b1:bf:3e:ad:ca:75:f3:
                    14:38:49:ed:4d:63:65:4b:da:c1:2f:ed:7e:a1:a0:
                    d7:9f:d1:48:eb:8e:e4:8d:ad:ed:ac:d7:5d:70:8b:
                    13:83:a2:90:59:4d:40:a1:aa:e1:1d:6f:97:14:f5:
                    5b:23:c8:be:a8:33:4f:b8:05:8e:ab:95:3b:4e:b0:
                    39:13:bb:af:aa:d8:a1:14:53:36:94:01:1a:41:6d:
                    6c:d5:7f:c0:b5:70:19:59:b8:e1:f6:f3:ac:3e:ab:
                    45:3c:6c:66:50:2d:19:28:24:24:f6:57:32:c7:dc:
                    ac:13:93:58:f3:26:29:1f:a2:c9:34:73:51:2c:b5:
                    a1:2f:46:91:7a:ee:07:c5:52:41:fe:05:a3:29:6b:
                    09:a6:60:99:0a:38:e9:3c:19:f8:fa:b6:db:6e:1e:
                    2e:ac:b0:e3:f9:88:70:75:b0:57:82:b3:06:b2:ca:
                    8e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:75:E8:58:BB:68:C1:CC:4D:BA:C9:49:34:98:B0:C0:CF:95:E7:D4
            X509v3 Authority Key Identifier:
                keyid:14:66:40:77:58:A8:D7:B9:35:69:48:96:D5:02:75:28:06:79:AF:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FGZAd1io17k1aUiW1QJ1KAZ5ryk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:59:c7:d6:34:32:41:7e:c7:80:4a:46:5a:28:34:5a:79:a2:
         a8:98:33:3a:93:83:ac:ff:a8:61:c0:39:0c:31:4c:27:0f:3f:
         5b:18:5b:86:fa:8e:7c:77:09:b1:fe:07:61:d4:67:fc:12:4f:
         e6:56:e6:6d:02:e3:38:29:0b:cf:38:42:bf:7a:e1:39:60:d3:
         10:75:1e:7c:79:ea:58:86:db:fd:52:85:ac:16:6a:59:66:1e:
         d4:7d:5d:65:2a:b1:ef:24:77:88:2a:f1:4f:0b:e8:1c:9d:0b:
         f4:98:99:a4:28:31:fa:38:af:0e:30:e5:f1:85:1d:7a:63:6d:
         27:f4:16:57:19:22:87:53:4c:78:d3:b8:ce:e6:5d:62:6e:a0:
         55:80:63:7d:68:72:20:58:09:79:d6:c7:b7:40:f0:2f:3d:27:
         ad:7b:a6:5d:16:2d:51:90:fc:c5:24:52:8d:e6:b5:7c:85:33:
         fe:ad:cd:2d:97:c3:05:24:cd:d2:09:9b:af:76:8d:1b:37:e3:
         ab:b5:7c:fe:5e:26:64:b4:f1:93:e5:f3:bd:7b:85:68:dc:71:
         9d:ea:34:7d:f4:57:40:2b:0c:c1:de:be:f4:06:2f:eb:70:ff:
         43:19:b7:d3:af:4b:db:35:90:33:db:12:7d:30:d8:ce:f8:c2:
         84:78:4f:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:58:51 2026 by rpki-client