Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912E53C/4BD0E5F8D37D11EEBA05BD16C4F9AE02/ftznGSWL7fkKqGya6wjN0x7vV3o.mft
File:                     ftznGSWL7fkKqGya6wjN0x7vV3o.mft (raw, json)
Hash identifier:          54Cw44tFYbyEzYILq+FIvtfMR75hUdeJ9dW0oVnmO0E=
Subject key identifier:   5F:53:A2:DA:79:44:82:7E:14:82:7D:DB:7B:EF:BB:D0:B5:58:5A:90
Authority key identifier: 7E:DC:E7:19:25:8B:ED:F9:0A:A8:6C:9A:EB:08:CD:D3:1E:EF:57:7A
Certificate issuer:       /CN=A912E53C/serialNumber=7EDCE719258BEDF90AA86C9AEB08CDD31EEF577A
Certificate serial:       01C3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ftznGSWL7fkKqGya6wjN0x7vV3o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912E53C/4BD0E5F8D37D11EEBA05BD16C4F9AE02/ftznGSWL7fkKqGya6wjN0x7vV3o.mft
Manifest number:          01BD
Signing time:             Tue 23 Jun 2026 04:11:20 +0000
Manifest this update:     Tue 23 Jun 2026 04:11:19 +0000
Manifest next update:     Tue 30 Jun 2026 04:11:19 +0000
Files and hashes:         1: ftznGSWL7fkKqGya6wjN0x7vV3o.crl (hash: zpr74cf2onKv/iMzK6SEPVk5S+l0CNA4ruy6M1VHamo=)
                          2: 44CA7E22F0D811EEA8D08633C4F9AE02.roa (hash: mACnAlxntfNXXic50IKK7rq2J586XQEFkZqbNg89tv8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912E53C/4BD0E5F8D37D11EEBA05BD16C4F9AE02/ftznGSWL7fkKqGya6wjN0x7vV3o.crl
                          rsync://rpki.apnic.net/member_repository/A912E53C/4BD0E5F8D37D11EEBA05BD16C4F9AE02/ftznGSWL7fkKqGya6wjN0x7vV3o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ftznGSWL7fkKqGya6wjN0x7vV3o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Jun 2026 04:11:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 451 (0x1c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912E53C, serialNumber=7EDCE719258BEDF90AA86C9AEB08CDD31EEF577A
        Validity
            Not Before: Jun 23 04:11:19 2026 GMT
            Not After : Jun 30 04:11:19 2026 GMT
        Subject: CN=6a3a0768-4cdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c9:4a:3f:ec:e6:ba:8d:b5:04:0f:d2:ad:63:
                    71:f3:88:14:0e:b2:5c:4a:11:93:8a:53:94:f8:c9:
                    3e:45:51:34:0c:fa:a6:7a:87:32:ea:cb:5b:07:f6:
                    d2:fc:02:b5:6a:d2:c1:f6:19:a6:91:6a:f3:62:0f:
                    e5:c5:61:50:c8:c9:ac:d4:58:26:57:42:7d:fd:a9:
                    06:5b:fd:06:98:84:6b:b9:8b:a3:8a:62:1d:0c:41:
                    e2:fe:14:b3:98:6d:64:26:4e:16:c7:d1:37:10:b7:
                    55:41:d0:29:42:c9:ca:04:51:e0:37:f6:81:03:1b:
                    13:a2:ce:02:9c:4a:52:9c:c3:8b:0a:de:82:f4:48:
                    4e:41:69:b4:9d:15:e8:c1:51:0b:94:c3:91:2d:d9:
                    95:c0:72:72:8a:8b:c0:ad:9b:6d:2a:cf:dd:f6:38:
                    16:70:d4:90:7d:f5:b1:6f:87:c2:a6:bc:73:22:4a:
                    0a:eb:6c:4b:cb:91:b2:e0:c8:74:b6:fe:c9:50:ca:
                    33:39:8b:bc:6b:61:6d:a9:4f:6e:bd:86:a9:ed:df:
                    8f:83:2c:94:e0:86:e6:f2:cc:6c:32:2c:bf:56:66:
                    5f:84:61:97:7e:2c:33:2b:d3:a9:3f:bd:c3:5c:ac:
                    c9:c6:d6:5a:37:72:c3:a5:ca:5c:48:7e:6d:36:9f:
                    55:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:53:A2:DA:79:44:82:7E:14:82:7D:DB:7B:EF:BB:D0:B5:58:5A:90
            X509v3 Authority Key Identifier:
                keyid:7E:DC:E7:19:25:8B:ED:F9:0A:A8:6C:9A:EB:08:CD:D3:1E:EF:57:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912E53C/4BD0E5F8D37D11EEBA05BD16C4F9AE02/ftznGSWL7fkKqGya6wjN0x7vV3o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ftznGSWL7fkKqGya6wjN0x7vV3o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E53C/4BD0E5F8D37D11EEBA05BD16C4F9AE02/ftznGSWL7fkKqGya6wjN0x7vV3o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:e2:67:63:73:0f:d0:f6:75:57:67:0d:f0:81:45:4c:0e:ea:
         69:82:63:e0:c5:75:ab:ec:4d:44:4f:8e:70:c6:f1:8a:c0:42:
         c9:0a:67:0a:5e:58:03:8f:7c:91:c0:2c:91:b4:27:c0:3b:5b:
         f2:44:b2:c7:09:f8:e0:96:a3:bc:52:3a:3e:bd:e4:db:29:85:
         3e:39:f1:c3:60:9f:01:0f:e6:d0:c2:7a:ba:52:cb:e3:f6:e0:
         e5:2b:ac:0e:4c:04:94:32:49:46:95:9c:72:0e:19:8a:23:ad:
         e1:38:20:72:3d:f5:6b:c2:7d:a8:81:34:04:09:77:ec:b0:b5:
         e6:52:54:3c:8e:35:66:8a:3b:bd:1e:fa:5a:48:4c:85:54:77:
         5b:20:44:8c:b3:1a:7a:c9:21:bd:10:8f:c8:0a:41:f1:f1:49:
         bd:98:35:56:48:ed:85:c5:29:ac:22:63:53:6d:26:9b:6d:fb:
         6d:07:d8:d3:3d:63:1b:b9:bb:5a:ec:39:a5:7d:5b:13:a1:62:
         24:31:28:65:55:1a:d0:4f:01:00:b2:cc:d7:bb:56:05:e3:63:
         73:02:31:3d:ce:6a:a8:15:1a:a2:f0:7a:c5:0a:db:52:c8:11:
         e9:e3:ed:2b:44:18:be:0c:25:2c:23:74:4b:33:a7:68:a2:c1:
         e8:97:4d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:29:09 2026 by rpki-client