Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.mft
File:                     fL-BxZ4yXvAGlzELOUX-ocEGs3g.mft (raw, json)
Hash identifier:          ZoFUgc32VpfkJsOauZ4WriSBvD1po9YGoPywjqQjn5E=
Subject key identifier:   0A:E2:1F:C6:9C:35:51:94:8E:F5:23:C9:F6:0B:10:07:5E:55:A7:38
Authority key identifier: 7C:BF:81:C5:9E:32:5E:F0:06:97:31:0B:39:45:FE:A1:C1:06:B3:78
Certificate issuer:       /CN=A913D02A/serialNumber=7CBF81C59E325EF00697310B3945FEA1C106B378
Certificate serial:       0C0C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fL-BxZ4yXvAGlzELOUX-ocEGs3g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.mft
Manifest number:          0C09
Signing time:             Wed 20 May 2026 18:50:32 +0000
Manifest this update:     Wed 20 May 2026 18:50:32 +0000
Manifest next update:     Wed 27 May 2026 18:50:32 +0000
Files and hashes:         1: fL-BxZ4yXvAGlzELOUX-ocEGs3g.crl (hash: cw3rUMHVOXWcdxcOnBbteKom/t8UbPIrgKDazrW1/Fg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.crl
                          rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fL-BxZ4yXvAGlzELOUX-ocEGs3g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 18:50:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3084 (0xc0c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913D02A, serialNumber=7CBF81C59E325EF00697310B3945FEA1C106B378
        Validity
            Not Before: May 20 18:50:32 2026 GMT
            Not After : May 27 18:50:32 2026 GMT
        Subject: CN=6a0e0278-f767
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:28:72:da:56:ad:00:5a:d8:ab:ff:3e:c4:ba:
                    9d:58:a4:ef:a6:32:c1:91:40:2a:2a:47:2d:db:07:
                    28:d4:93:d7:15:56:71:1e:0a:f3:15:92:53:03:d3:
                    00:aa:05:02:67:8a:89:21:18:b1:8f:7e:5a:0b:80:
                    85:8f:d9:97:f6:98:05:06:9e:31:eb:44:90:c0:68:
                    af:b7:ba:d1:21:fd:f0:ae:75:b4:4d:94:18:ca:98:
                    f2:a6:06:5c:29:26:f8:f2:dd:cf:d3:60:a9:9a:9f:
                    94:4c:37:37:59:bd:29:6e:4c:12:34:4d:53:23:d4:
                    dd:7b:33:89:4f:bf:c4:ec:9e:32:12:7f:db:46:b2:
                    43:5f:74:c1:c7:85:ca:3e:6c:8d:2f:09:bd:9f:0e:
                    72:f9:5d:b1:c9:c2:26:db:3d:ea:66:9c:52:dd:0d:
                    56:a7:6d:1d:0c:8d:44:41:8d:42:d9:cf:4f:23:f7:
                    82:65:25:5d:4e:c4:12:bd:71:ab:7c:01:28:fc:be:
                    6f:20:08:d1:b9:5b:ae:93:52:e1:3e:ee:f0:fc:4b:
                    45:7c:fc:e9:f1:1a:8d:3d:ed:dc:38:c5:14:c5:bd:
                    9b:57:e3:db:de:03:50:33:38:30:c6:3a:f6:7a:e8:
                    27:92:87:69:2b:e4:55:66:77:72:91:04:43:73:b4:
                    f2:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:E2:1F:C6:9C:35:51:94:8E:F5:23:C9:F6:0B:10:07:5E:55:A7:38
            X509v3 Authority Key Identifier:
                keyid:7C:BF:81:C5:9E:32:5E:F0:06:97:31:0B:39:45:FE:A1:C1:06:B3:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fL-BxZ4yXvAGlzELOUX-ocEGs3g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:b3:de:78:08:78:cf:8f:d6:b6:57:53:62:ae:c4:51:67:bf:
         27:15:d5:14:10:da:e2:a7:96:c8:b8:81:f2:89:b7:7a:56:14:
         62:24:a3:ca:49:4b:cb:f6:1a:ea:29:32:4c:6f:8d:ac:e6:6b:
         0f:dc:f6:c6:fa:16:45:0a:30:73:45:6a:bc:29:c6:f8:05:b8:
         53:f0:94:47:5a:82:13:48:a3:31:35:48:e5:5c:92:75:b4:a0:
         31:5e:a1:32:16:b9:7f:71:de:f2:33:6c:eb:a8:e1:05:62:e6:
         0f:ec:86:22:77:f7:a9:27:dc:ce:7d:ba:a9:9e:70:4d:1e:1e:
         98:94:eb:f7:fb:0e:f7:4d:2b:b3:43:6a:36:6c:08:72:f7:ab:
         d9:ec:9a:bc:70:de:25:d2:de:63:27:58:67:97:c7:a4:9b:68:
         31:3b:d0:1c:0d:44:3f:48:9d:8e:99:69:5a:4f:2a:80:08:3d:
         3f:33:b8:d4:e5:bd:46:a1:fe:ab:67:6e:ec:bf:26:c4:09:91:
         e3:63:6d:70:7f:22:d5:8c:86:a4:b5:40:01:2f:28:f5:0c:8f:
         12:4a:82:05:87:f1:0f:ad:b2:e9:49:76:46:43:40:86:71:67:
         ae:76:93:c8:a0:86:59:d4:0e:26:ff:1b:eb:cb:2a:36:d3:b3:
         b6:45:77:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 11:05:15 2026 by rpki-client