Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C35A/161F7FE43DE511F1AD5235459C833773/fqSkLLBXo92BKeSh4seYBQ_W1lc.mft
File:                     fqSkLLBXo92BKeSh4seYBQ_W1lc.mft (raw, json)
Hash identifier:          aKj6wkWFVeeqP/MmNAEkqkcanHMJf+wLp8n7p2cqapo=
Subject key identifier:   16:CF:61:01:D0:3E:4E:99:AC:15:37:8E:EA:A8:C8:8C:19:7A:2F:92
Authority key identifier: 7E:A4:A4:2C:B0:57:A3:DD:81:29:E4:A1:E2:C7:98:05:0F:D6:D6:57
Certificate issuer:       /CN=A913C35A/serialNumber=7EA4A42CB057A3DD8129E4A1E2C798050FD6D657
Certificate serial:       2D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fqSkLLBXo92BKeSh4seYBQ_W1lc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C35A/161F7FE43DE511F1AD5235459C833773/fqSkLLBXo92BKeSh4seYBQ_W1lc.mft
Manifest number:          2C
Signing time:             Fri 17 Jul 2026 10:00:37 +0000
Manifest this update:     Fri 17 Jul 2026 10:00:37 +0000
Manifest next update:     Fri 24 Jul 2026 10:00:37 +0000
Files and hashes:         1: fqSkLLBXo92BKeSh4seYBQ_W1lc.crl (hash: qpGcDQ3zGzM9F+m/h20G79mrMOc5zJlafGY2x3lG+HY=)
                          2: 6F2747DE3DE511F19BE7396A9C833773.roa (hash: EIFF9n7nIw8O07orwFHUSOVHnVSTRstMZzTfvLGr7aA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913C35A/161F7FE43DE511F1AD5235459C833773/fqSkLLBXo92BKeSh4seYBQ_W1lc.crl
                          rsync://rpki.apnic.net/member_repository/A913C35A/161F7FE43DE511F1AD5235459C833773/fqSkLLBXo92BKeSh4seYBQ_W1lc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fqSkLLBXo92BKeSh4seYBQ_W1lc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 10:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 45 (0x2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C35A, serialNumber=7EA4A42CB057A3DD8129E4A1E2C798050FD6D657
        Validity
            Not Before: Jul 17 10:00:37 2026 GMT
            Not After : Jul 24 10:00:37 2026 GMT
        Subject: CN=6a59fd45-532d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:7f:e0:f7:a3:ff:cd:fd:9b:fc:45:e6:86:80:
                    27:6c:a8:6f:6f:d5:8b:7d:bd:e9:9e:a3:be:4e:e9:
                    dd:06:58:63:46:26:11:7b:fc:24:3d:de:a2:f6:22:
                    80:80:85:c0:ff:b7:6e:3b:1c:fe:92:ce:60:a4:02:
                    50:3e:9c:30:b5:a8:ea:14:30:22:d0:f7:67:8e:06:
                    2b:5e:c4:cb:79:89:5f:1b:90:6f:56:e6:b9:c8:57:
                    85:3d:85:cb:c7:4d:18:f6:6c:d9:a2:65:c3:f5:fe:
                    d3:72:38:e6:6a:9c:12:f8:1a:75:06:37:d4:c5:34:
                    a4:3e:a6:05:97:fc:da:d6:39:57:60:ef:be:9f:ee:
                    12:06:35:ac:6e:db:5f:1e:3f:c1:60:43:51:5c:3c:
                    70:e9:37:f1:d2:c3:91:b7:7e:87:5b:80:51:8b:32:
                    0d:39:77:51:f3:a0:c3:b0:04:58:c8:45:e4:76:dc:
                    b7:d6:df:05:02:b8:04:87:3b:49:1d:7d:9d:e0:3b:
                    5c:8b:1e:4b:69:2f:cd:6c:31:15:3f:29:59:c2:38:
                    f8:46:06:eb:98:11:bd:16:5c:20:ec:f4:1d:71:a8:
                    e8:67:a9:b0:ce:82:30:ff:1d:fe:61:05:0e:ff:f9:
                    19:78:18:c7:9f:cd:d5:b5:f1:4f:e8:79:98:89:a4:
                    5f:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:CF:61:01:D0:3E:4E:99:AC:15:37:8E:EA:A8:C8:8C:19:7A:2F:92
            X509v3 Authority Key Identifier:
                keyid:7E:A4:A4:2C:B0:57:A3:DD:81:29:E4:A1:E2:C7:98:05:0F:D6:D6:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C35A/161F7FE43DE511F1AD5235459C833773/fqSkLLBXo92BKeSh4seYBQ_W1lc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fqSkLLBXo92BKeSh4seYBQ_W1lc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C35A/161F7FE43DE511F1AD5235459C833773/fqSkLLBXo92BKeSh4seYBQ_W1lc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:18:2e:32:62:e4:a6:db:45:83:d9:85:19:69:ce:57:c4:52:
         47:70:47:48:f3:75:90:21:2a:49:25:3b:9b:30:c0:79:63:84:
         0c:05:a3:9f:be:82:4f:f0:9b:69:8d:00:c7:a8:b1:37:e8:65:
         39:37:c7:55:ba:12:8b:fd:d0:d4:89:b8:d2:db:41:1c:53:b2:
         b5:67:0b:67:31:77:8e:f5:38:85:f1:d2:8f:97:34:1f:06:fe:
         4d:d1:0f:ae:3c:27:29:16:ec:b2:d5:19:a4:62:af:b5:cc:54:
         90:62:b2:36:b9:df:46:7e:da:73:ba:bc:90:43:ab:54:70:88:
         4c:29:28:e6:9c:d6:ea:c9:e2:1f:f4:95:03:09:7b:c0:fa:8e:
         4a:db:5d:57:01:30:88:e2:89:19:90:fd:45:68:71:e9:ea:55:
         3c:5c:a0:ac:db:2f:be:4f:e0:fe:b8:5f:b9:cb:83:04:61:bb:
         46:5f:31:ae:cd:00:ce:39:4e:11:f9:b1:f0:3e:b7:08:59:44:
         92:28:ba:fc:de:fe:eb:72:e9:97:b9:21:e2:ed:54:d1:32:b7:
         a5:40:c0:96:75:50:4f:2a:f7:78:55:3a:ab:ac:6f:49:28:b0:
         a7:4b:de:75:48:da:c8:36:45:5d:fd:9e:84:b5:ef:96:08:cc:
         2d:06:c0:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:29:56 2026 by rpki-client