Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91468A1/2E1CC644511811EA9387C66BC4F9AE02/FSo7QyJc-ixfjeJ6mmiT07I_XeM.mft
File:                     FSo7QyJc-ixfjeJ6mmiT07I_XeM.mft (raw, json)
Hash identifier:          NEg3TcNuIcpjHHLTur7+7dRNo+knfBIxIMez0QLrdys=
Subject key identifier:   9A:34:F3:05:7D:37:90:05:52:2D:98:B8:08:5C:73:CB:A2:E3:59:FF
Authority key identifier: 15:2A:3B:43:22:5C:FA:2C:5F:8D:E2:7A:9A:68:93:D3:B2:3F:5D:E3
Certificate issuer:       /CN=A91468A1/serialNumber=152A3B43225CFA2C5F8DE27A9A6893D3B23F5DE3
Certificate serial:       0BCA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSo7QyJc-ixfjeJ6mmiT07I_XeM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91468A1/2E1CC644511811EA9387C66BC4F9AE02/FSo7QyJc-ixfjeJ6mmiT07I_XeM.mft
Manifest number:          0BB4
Signing time:             Tue 18 Aug 2026 19:21:00 +0000
Manifest this update:     Tue 18 Aug 2026 19:20:59 +0000
Manifest next update:     Tue 25 Aug 2026 19:20:59 +0000
Files and hashes:         1: FSo7QyJc-ixfjeJ6mmiT07I_XeM.crl (hash: 1cY7QHu+1bL3RkrnL/n9V40NAUhpeIgfh9Zo1rOzvdo=)
                          2: F0520A385DD611EAA4AD4767C4F9AE02.roa (hash: 9P/caarcdfE5fgEntnYZ7v6bJcDbToqOd+JV3OwQEFA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91468A1/2E1CC644511811EA9387C66BC4F9AE02/FSo7QyJc-ixfjeJ6mmiT07I_XeM.crl
                          rsync://rpki.apnic.net/member_repository/A91468A1/2E1CC644511811EA9387C66BC4F9AE02/FSo7QyJc-ixfjeJ6mmiT07I_XeM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSo7QyJc-ixfjeJ6mmiT07I_XeM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 19:20:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3018 (0xbca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91468A1, serialNumber=152A3B43225CFA2C5F8DE27A9A6893D3B23F5DE3
        Validity
            Not Before: Aug 18 19:20:59 2026 GMT
            Not After : Aug 25 19:20:59 2026 GMT
        Subject: CN=6a84b09c-21b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ce:c6:e3:26:12:d4:c3:64:d1:32:57:64:ef:
                    2a:30:06:b0:24:c2:d3:2f:9b:7d:00:ea:a8:24:cc:
                    60:6e:a3:c7:fe:78:06:56:7d:77:2a:87:4f:5d:16:
                    a9:ea:3e:49:68:73:15:62:73:dc:b4:28:2c:2e:93:
                    12:20:6a:2c:c8:e5:64:59:8a:38:91:91:9b:bb:0a:
                    25:99:1d:98:c9:c0:bc:4c:05:dd:47:ac:87:95:55:
                    53:5c:43:d2:8d:fa:97:3c:95:ef:99:2a:3e:e8:72:
                    16:26:f7:c6:65:fd:af:8a:5a:66:53:78:3e:00:50:
                    65:1d:29:58:b3:f1:ab:94:02:a2:4c:cd:ce:22:cd:
                    54:f2:7c:fb:21:55:e0:ca:ed:19:fc:50:29:ae:24:
                    71:7e:81:b3:f3:1f:59:f6:69:25:ad:ba:f0:6d:27:
                    7c:82:46:bd:4c:56:10:93:5e:8b:f0:ca:21:af:e0:
                    56:19:ce:fe:af:f6:58:35:bc:09:0a:d6:48:2c:fa:
                    4b:43:d7:d3:9e:25:81:f5:1f:81:58:bd:f9:80:aa:
                    67:3d:b0:7d:bd:b6:e7:62:7d:c4:81:9d:55:7b:17:
                    6b:61:21:56:22:ee:39:94:0d:6d:45:67:77:d7:ac:
                    7b:cf:5c:e1:ab:36:5c:13:15:90:1d:46:90:ef:e6:
                    ce:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:34:F3:05:7D:37:90:05:52:2D:98:B8:08:5C:73:CB:A2:E3:59:FF
            X509v3 Authority Key Identifier:
                keyid:15:2A:3B:43:22:5C:FA:2C:5F:8D:E2:7A:9A:68:93:D3:B2:3F:5D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91468A1/2E1CC644511811EA9387C66BC4F9AE02/FSo7QyJc-ixfjeJ6mmiT07I_XeM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSo7QyJc-ixfjeJ6mmiT07I_XeM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91468A1/2E1CC644511811EA9387C66BC4F9AE02/FSo7QyJc-ixfjeJ6mmiT07I_XeM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:a5:f1:a5:1d:9c:17:d0:d6:f8:50:1e:26:ce:0d:09:38:23:
         63:21:a1:68:0c:85:51:58:d9:d6:98:81:2f:91:27:e1:36:be:
         90:0c:34:21:b1:5d:67:c2:60:c2:53:a8:77:c5:68:d8:a5:97:
         21:5d:f6:83:10:35:9e:81:bb:66:85:76:53:88:6b:5f:59:d4:
         13:40:a1:51:2d:08:78:63:5b:7d:23:0b:8a:30:03:3f:1f:96:
         57:0f:e1:a5:32:db:be:f8:36:e9:54:b5:f8:2b:95:90:70:82:
         6b:63:d0:25:7a:9b:0f:06:81:ff:93:ba:3a:44:30:7d:b0:ab:
         9d:21:8c:63:cd:96:69:bf:d6:ef:31:0d:b5:72:a4:22:56:20:
         02:9c:cb:3e:43:d5:9e:fc:4f:7e:bb:ed:dc:91:f8:96:71:17:
         3b:e2:be:b4:ca:0f:bc:a5:a7:a5:65:8a:62:60:ca:16:02:38:
         c0:43:e2:11:ae:d9:83:83:b0:57:cd:07:7a:31:21:5d:0b:08:
         30:18:08:9a:6f:ab:e0:54:f9:46:ac:e4:ef:1c:00:05:1b:12:
         8a:c5:ca:64:96:7d:00:a3:e5:27:64:16:b1:cc:8a:c8:ed:e4:
         3f:4f:cb:4d:48:ae:f9:99:06:d7:6c:ec:7e:c2:a5:51:8c:6f:
         f2:63:2b:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:56:02 2026 by rpki-client