Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914F5BA/049DCD22AD6111EA8F1A8D63C4F9AE02/FCD4Bwnd09_D9RFWVQPO9ERL7cM.mft
File:                     FCD4Bwnd09_D9RFWVQPO9ERL7cM.mft (raw, json)
Hash identifier:          yV62Em+ruzqZ7USIa44ARcMoukg9QKK9PPJSigmwcCk=
Subject key identifier:   98:12:E5:14:6C:B9:2F:B0:31:22:91:97:13:A5:6A:FC:86:8B:14:78
Authority key identifier: 14:20:F8:07:09:DD:D3:DF:C3:F5:11:56:55:03:CE:F4:44:4B:ED:C3
Certificate issuer:       /CN=A914F5BA/serialNumber=1420F80709DDD3DFC3F511565503CEF4444BEDC3
Certificate serial:       09C7
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FCD4Bwnd09_D9RFWVQPO9ERL7cM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914F5BA/049DCD22AD6111EA8F1A8D63C4F9AE02/FCD4Bwnd09_D9RFWVQPO9ERL7cM.mft
Manifest number:          09BE
Signing time:             Mon 20 Jul 2026 20:21:44 +0000
Manifest this update:     Mon 20 Jul 2026 20:21:44 +0000
Manifest next update:     Mon 27 Jul 2026 20:21:44 +0000
Files and hashes:         1: FCD4Bwnd09_D9RFWVQPO9ERL7cM.crl (hash: pt8gZi97ZFaLJxX9KegIr6PZiSjBh0w7oTHJ9E1a10U=)
                          2: E9E80356AD6211EABEDF046AC4F9AE02.roa (hash: 3/DJ3hL5G9etvpvOyj7MflbEEZYKEAa9BhYU/ttjjb0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914F5BA/049DCD22AD6111EA8F1A8D63C4F9AE02/FCD4Bwnd09_D9RFWVQPO9ERL7cM.crl
                          rsync://rpki.apnic.net/member_repository/A914F5BA/049DCD22AD6111EA8F1A8D63C4F9AE02/FCD4Bwnd09_D9RFWVQPO9ERL7cM.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FCD4Bwnd09_D9RFWVQPO9ERL7cM.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 20:21:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2503 (0x9c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914F5BA, serialNumber=1420F80709DDD3DFC3F511565503CEF4444BEDC3
        Validity
            Not Before: Jul 20 20:21:44 2026 GMT
            Not After : Jul 27 20:21:44 2026 GMT
        Subject: CN=6a5e8358-ec73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:5b:79:ef:a5:a3:b4:ce:86:55:d8:8e:26:91:
                    37:79:52:b2:bb:c3:ce:be:cb:a6:4d:45:c4:55:e6:
                    9f:af:e6:3a:81:9e:1a:72:74:25:ce:3f:be:d4:67:
                    bb:38:e2:ac:dc:bd:ad:fd:1a:b6:af:91:c0:86:e2:
                    0f:f7:4b:17:6e:b9:16:1b:37:6a:2a:0b:0b:99:95:
                    d3:a6:b3:89:01:e8:74:28:56:c8:6f:4d:53:1c:89:
                    ac:a6:b1:a3:74:fe:8e:2e:da:f0:ac:11:5d:39:7c:
                    0e:20:05:5b:9a:a0:0c:67:f0:90:25:04:d0:08:6a:
                    fb:8a:c8:17:47:12:78:e1:8a:54:7c:d0:e5:b4:c5:
                    e5:c4:66:d4:0f:7d:c8:b9:59:73:87:54:f9:3e:b5:
                    1d:20:c5:1b:ea:65:cf:d2:33:f5:93:9f:13:ed:75:
                    27:1b:63:ba:bc:19:8e:92:7e:0d:7d:00:40:5a:9e:
                    59:5a:4e:46:4e:cc:55:9b:b1:3c:ea:b0:2c:33:8b:
                    9e:ba:5a:50:f9:09:c2:25:14:58:8d:61:55:a0:b6:
                    c8:ef:c1:70:ea:80:67:e2:08:1c:fc:4f:6e:de:99:
                    1b:29:24:0b:3f:f2:e2:ab:f9:07:59:26:5a:c1:90:
                    b7:be:93:75:7a:12:80:58:5d:7a:e8:8d:04:81:91:
                    e1:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:12:E5:14:6C:B9:2F:B0:31:22:91:97:13:A5:6A:FC:86:8B:14:78
            X509v3 Authority Key Identifier:
                keyid:14:20:F8:07:09:DD:D3:DF:C3:F5:11:56:55:03:CE:F4:44:4B:ED:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914F5BA/049DCD22AD6111EA8F1A8D63C4F9AE02/FCD4Bwnd09_D9RFWVQPO9ERL7cM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FCD4Bwnd09_D9RFWVQPO9ERL7cM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F5BA/049DCD22AD6111EA8F1A8D63C4F9AE02/FCD4Bwnd09_D9RFWVQPO9ERL7cM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:d1:16:cf:d8:95:7f:d1:53:35:d7:9e:62:4e:c2:c5:35:8e:
         f2:49:63:33:13:a7:d7:09:a9:5d:a3:4b:bd:93:37:ad:c2:e3:
         2e:b4:66:cc:16:78:17:4e:fc:5c:e4:dd:44:a2:a0:51:cf:fb:
         6b:e9:35:5d:26:c9:de:d1:6e:e1:57:45:7b:82:f9:68:54:dd:
         7b:01:88:ca:d0:8c:16:4b:3c:94:ce:54:a6:2b:c8:81:ab:ba:
         3c:a8:27:12:60:a1:c7:d4:70:cf:e8:aa:02:a5:7d:d9:48:14:
         2e:99:00:8d:ec:95:df:63:41:04:71:4f:d6:05:92:d5:91:42:
         af:4a:f6:c4:fd:9f:e8:b7:a3:e3:ea:49:f1:ab:c5:54:95:df:
         24:e5:9d:14:1d:71:1b:df:02:9f:c5:69:51:36:e9:92:9e:6b:
         ee:f9:4e:19:19:b8:c7:a8:90:37:b3:94:6a:3d:83:24:e0:fb:
         0e:fa:40:98:36:01:9e:52:47:4e:9d:18:49:f1:3a:7a:95:bb:
         4b:31:e4:70:97:0a:f3:9b:21:cc:cb:5b:b6:e8:3a:97:27:3e:
         d8:8f:a9:a2:9d:6a:d4:56:33:d1:25:c2:a2:41:ba:32:a2:8d:
         84:50:64:92:6e:62:ba:a9:58:b0:cf:f6:81:59:7a:62:67:72:
         35:9a:56:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 18:00:05 2026 by rpki-client