Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134FAF/8248E914449711F0A9757362C4F9AE02/FWbBYbuz41NHqXrE1YFtjt5UIY4.mft
File:                     FWbBYbuz41NHqXrE1YFtjt5UIY4.mft (raw, json)
Hash identifier:          1PHo7Fg3u2a3ctXo5iCpGqyG+idjuvBMvUpDnsOf6eY=
Subject key identifier:   E2:0D:99:43:FF:9B:91:64:9C:DE:14:9A:F2:90:5A:18:B9:63:CA:D6
Authority key identifier: 15:66:C1:61:BB:B3:E3:53:47:A9:7A:C4:D5:81:6D:8E:DE:54:21:8E
Certificate issuer:       /CN=A9134FAF/serialNumber=1566C161BBB3E35347A97AC4D5816D8EDE54218E
Certificate serial:       BF
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FWbBYbuz41NHqXrE1YFtjt5UIY4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134FAF/8248E914449711F0A9757362C4F9AE02/FWbBYbuz41NHqXrE1YFtjt5UIY4.mft
Manifest number:          BC
Signing time:             Mon 01 Jun 2026 07:47:55 +0000
Manifest this update:     Mon 01 Jun 2026 07:47:54 +0000
Manifest next update:     Mon 08 Jun 2026 07:47:54 +0000
Files and hashes:         1: FWbBYbuz41NHqXrE1YFtjt5UIY4.crl (hash: VZtNHNwCmvI2q9K6zsvoGrYnXIl497gBa5Ldq90ikoQ=)
                          2: 4CB714B644AA11F0B7FB6E72C4F9AE02.roa (hash: Kpi2lExwMtUBB90ubhO2BgOMUMkDluldZJCK6di+564=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134FAF/8248E914449711F0A9757362C4F9AE02/FWbBYbuz41NHqXrE1YFtjt5UIY4.crl
                          rsync://rpki.apnic.net/member_repository/A9134FAF/8248E914449711F0A9757362C4F9AE02/FWbBYbuz41NHqXrE1YFtjt5UIY4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FWbBYbuz41NHqXrE1YFtjt5UIY4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 191 (0xbf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134FAF, serialNumber=1566C161BBB3E35347A97AC4D5816D8EDE54218E
        Validity
            Not Before: Jun  1 07:47:54 2026 GMT
            Not After : Jun  8 07:47:54 2026 GMT
        Subject: CN=6a1d392b-57d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:a8:fe:ff:47:9f:26:bd:ba:30:ad:29:f5:cf:
                    87:5f:94:49:bd:33:fa:3c:3e:6d:f2:31:b7:c3:d2:
                    e8:dd:a3:eb:a5:7a:d5:5a:04:ab:8a:47:a6:da:a8:
                    21:07:1f:3d:84:4c:78:47:1e:ae:24:11:b6:ba:cc:
                    ad:04:5c:e9:48:8b:5f:3b:54:96:b2:74:68:f6:2d:
                    e4:0d:c6:1c:c8:07:2d:67:13:7f:16:aa:02:ee:09:
                    3a:34:fb:c3:2f:52:2d:4d:44:d6:ac:12:91:ca:a8:
                    9b:ff:3d:43:0d:50:0e:d6:fa:04:1c:e9:23:b5:ad:
                    6e:1e:4f:49:65:09:2b:07:20:f6:c7:c9:6a:6d:02:
                    29:44:ca:f9:18:de:a2:dd:d5:a6:21:9f:ee:e6:3f:
                    98:cf:b9:04:a5:da:e3:eb:51:fc:ec:c8:32:45:09:
                    2c:70:29:bc:21:e7:53:5d:ce:fa:ab:bc:c6:e6:13:
                    2d:54:13:7c:4a:e1:e2:b8:7c:51:e2:b3:87:5e:58:
                    a7:3e:24:c2:f3:b7:a0:80:8a:b0:dc:e6:5e:6e:39:
                    04:8b:7d:fb:b4:56:ab:9b:eb:2a:db:92:3d:34:00:
                    e8:3b:2d:98:51:66:56:f7:b3:c6:92:8c:ea:2b:c9:
                    1a:6b:f0:c5:bd:e1:c1:23:77:ab:41:f5:57:a9:46:
                    80:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:0D:99:43:FF:9B:91:64:9C:DE:14:9A:F2:90:5A:18:B9:63:CA:D6
            X509v3 Authority Key Identifier:
                keyid:15:66:C1:61:BB:B3:E3:53:47:A9:7A:C4:D5:81:6D:8E:DE:54:21:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134FAF/8248E914449711F0A9757362C4F9AE02/FWbBYbuz41NHqXrE1YFtjt5UIY4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FWbBYbuz41NHqXrE1YFtjt5UIY4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134FAF/8248E914449711F0A9757362C4F9AE02/FWbBYbuz41NHqXrE1YFtjt5UIY4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:c6:2f:c7:ef:08:b7:24:62:0a:9a:d5:02:c3:91:b3:82:b8:
         01:c5:f6:a6:e2:7c:90:84:29:c8:a9:7b:91:66:cf:49:2d:e1:
         fc:ce:e0:13:85:8f:fc:b4:da:7e:fe:1a:14:c7:6b:f1:9e:be:
         ba:11:14:0e:8f:c0:54:0b:83:51:92:ab:21:74:bd:f6:ff:5e:
         f6:ab:0c:70:b3:cc:41:c1:47:cc:06:51:69:99:1b:52:e8:b5:
         06:39:2b:15:61:dc:fe:d3:8f:ac:2a:2e:85:81:ac:cd:1b:2b:
         54:60:53:1d:ed:04:77:3d:4f:30:35:56:46:5b:98:95:0a:e2:
         2b:d4:db:92:9f:1d:2a:c4:b7:c7:c8:26:c8:32:fd:a2:52:8c:
         00:0c:0c:77:9d:0e:ff:e1:13:bc:38:7f:20:e0:ae:da:b6:f7:
         aa:04:da:1b:b9:91:da:d7:fa:1b:54:2c:79:11:66:69:cd:5d:
         29:6a:39:91:8d:be:5e:1a:ee:1c:fa:46:b6:a6:84:32:51:7a:
         8b:8d:dd:2e:dd:4b:88:18:b2:8c:69:c7:3b:4f:61:a9:6e:7a:
         ca:8a:6b:3b:28:c1:aa:ba:3e:19:09:14:1e:59:3b:db:f7:98:
         89:49:77:49:07:b8:8d:bf:c3:20:d1:1d:38:7a:d0:5d:bf:f9:
         75:b4:0d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:23:58 2026 by rpki-client