Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.mft
File:                     FX3bMj02U1BOMIJOaeDbA3U6aM4.mft (raw, json)
Hash identifier:          RzBCxzyd8gdcfDfS2S6oSbTXrDorBbptJ9e0HYK4HYM=
Subject key identifier:   FA:DE:D5:35:EB:45:5C:81:BA:A7:39:C4:9E:DB:BA:1C:6A:A8:EB:4C
Authority key identifier: 15:7D:DB:32:3D:36:53:50:4E:30:82:4E:69:E0:DB:03:75:3A:68:CE
Certificate issuer:       /CN=A91480B2/serialNumber=157DDB323D3653504E30824E69E0DB03753A68CE
Certificate serial:       0203
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FX3bMj02U1BOMIJOaeDbA3U6aM4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.mft
Manifest number:          01FD
Signing time:             Tue 23 Jun 2026 03:22:16 +0000
Manifest this update:     Tue 23 Jun 2026 03:22:16 +0000
Manifest next update:     Tue 30 Jun 2026 03:22:16 +0000
Files and hashes:         1: FX3bMj02U1BOMIJOaeDbA3U6aM4.crl (hash: nFglX4+mSnxt3wUnoTWZF4l4fLktW2esoF1rjDO7Kqs=)
                          2: 93151D5668F911EE9916D146C4F9AE02.roa (hash: ClVPuLcuGILWLEy5bL0EVXdV3J/UJlUtzA64dR9iTrc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.crl
                          rsync://rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FX3bMj02U1BOMIJOaeDbA3U6aM4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Jun 2026 03:22:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 515 (0x203)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91480B2, serialNumber=157DDB323D3653504E30824E69E0DB03753A68CE
        Validity
            Not Before: Jun 23 03:22:16 2026 GMT
            Not After : Jun 30 03:22:16 2026 GMT
        Subject: CN=6a39fbe8-c6c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8c:7b:d0:cd:30:dc:20:ea:ac:3b:1a:03:f3:
                    ff:ab:b7:a4:04:13:b7:2c:b7:20:4a:14:70:a4:49:
                    87:bd:cb:1c:bf:29:19:49:9c:bc:d6:96:89:d4:8b:
                    7f:72:f0:3d:94:ab:ea:65:da:31:52:79:fe:48:e9:
                    52:3f:83:ef:d9:4f:2b:0c:7c:38:93:84:c2:1c:1f:
                    1c:b7:31:79:b2:8f:b7:82:c3:bd:17:c9:b4:8c:72:
                    37:ea:e0:ea:a8:be:b7:60:3d:da:62:bf:39:23:10:
                    27:17:10:54:ab:65:96:2f:12:24:09:b9:96:7c:7e:
                    5d:a3:30:28:eb:00:64:5f:1b:46:f7:96:6c:02:e1:
                    9a:71:ee:a4:f6:8c:d4:7d:ff:f9:d8:02:4b:ce:1e:
                    25:61:03:7f:9e:f3:d9:2b:13:75:5d:cb:e8:58:d3:
                    d7:d9:62:1a:4a:14:9c:d1:00:e9:c8:c8:51:6e:58:
                    99:5a:41:9d:87:a4:f4:e3:71:9f:9c:35:26:51:94:
                    91:d5:1b:f6:16:9d:9b:c7:bf:c1:7c:e4:ec:50:76:
                    82:27:88:3e:f2:5f:60:45:0e:1c:74:f7:66:62:98:
                    eb:c4:19:4d:e0:3c:0e:e6:c3:28:eb:2b:0e:d1:4e:
                    e4:ab:e1:3f:b7:7c:20:f2:45:24:ea:51:36:d4:e1:
                    6a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:DE:D5:35:EB:45:5C:81:BA:A7:39:C4:9E:DB:BA:1C:6A:A8:EB:4C
            X509v3 Authority Key Identifier:
                keyid:15:7D:DB:32:3D:36:53:50:4E:30:82:4E:69:E0:DB:03:75:3A:68:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FX3bMj02U1BOMIJOaeDbA3U6aM4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:c4:fc:a9:93:0d:4e:22:cf:a5:61:44:79:74:ad:dc:dc:e9:
         bb:4f:a7:05:44:85:99:c8:5a:06:02:92:22:c5:15:72:4e:6e:
         fd:67:7f:af:ce:27:c5:8b:88:cb:15:02:08:b0:18:87:6c:63:
         4b:27:88:c3:51:36:cb:ab:f1:ef:ec:31:c7:af:23:49:df:db:
         15:16:e3:ef:f9:94:6f:1b:fc:7c:82:d0:ed:d4:23:44:5a:38:
         61:59:07:77:29:2b:66:e7:62:42:fd:f2:db:f0:b8:e1:28:5d:
         52:e6:d8:67:50:84:34:95:cb:0b:34:1c:81:5c:8a:87:c3:a3:
         f1:6e:9a:9c:4e:7d:ed:5c:4e:b6:51:fe:49:e6:20:c5:78:c6:
         a4:de:da:d7:2e:0b:bf:f1:f3:d8:6d:13:41:1e:a7:28:8c:c3:
         41:1f:c9:f0:1b:a3:37:ab:d3:4e:f5:17:10:b8:95:07:08:f9:
         96:57:29:bf:9a:a7:dc:08:4d:68:2e:96:50:f7:8a:c7:97:a2:
         16:78:6d:33:87:1c:0e:d6:82:fb:a4:b1:e7:80:63:12:7f:d3:
         9d:32:5b:ce:07:9d:c5:0f:fa:f5:2e:66:8e:3b:c0:a2:cd:7b:
         06:d9:dd:14:52:ea:94:5a:e8:33:14:d6:6b:1a:ca:b1:95:1d:
         92:2a:70:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 15:29:07 2026 by rpki-client