Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915280B/97BC1DB8EDEF11EC896AE740C4F9AE02/FGXcLLcCU-31FM1DdyZi_zu49uA.mft
File:                     FGXcLLcCU-31FM1DdyZi_zu49uA.mft (raw, json)
Hash identifier:          y1HBiwgVYXULf0zTw3te+QDpAOC5cpVvl2cNNS3JpWE=
Subject key identifier:   9C:6A:19:DA:2D:F5:DD:5D:A4:8F:75:05:02:19:23:00:77:DD:2D:8D
Authority key identifier: 14:65:DC:2C:B7:02:53:ED:F5:14:CD:43:77:26:62:FF:3B:B8:F6:E0
Certificate issuer:       /CN=A915280B/serialNumber=1465DC2CB70253EDF514CD43772662FF3BB8F6E0
Certificate serial:       039E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FGXcLLcCU-31FM1DdyZi_zu49uA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915280B/97BC1DB8EDEF11EC896AE740C4F9AE02/FGXcLLcCU-31FM1DdyZi_zu49uA.mft
Manifest number:          0391
Signing time:             Mon 01 Jun 2026 01:31:26 +0000
Manifest this update:     Mon 01 Jun 2026 01:31:26 +0000
Manifest next update:     Mon 08 Jun 2026 01:31:26 +0000
Files and hashes:         1: FGXcLLcCU-31FM1DdyZi_zu49uA.crl (hash: KuNEElpJjLG40dqRqRK8ptJU35HxZil5qgmnUIUOot0=)
                          2: 27EECF18EDF811ECBCAF5567C4F9AE02.roa (hash: gkL9IgqrwOkZIyg24mdNbqROTtOYERD4H34jArPhYAs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915280B/97BC1DB8EDEF11EC896AE740C4F9AE02/FGXcLLcCU-31FM1DdyZi_zu49uA.crl
                          rsync://rpki.apnic.net/member_repository/A915280B/97BC1DB8EDEF11EC896AE740C4F9AE02/FGXcLLcCU-31FM1DdyZi_zu49uA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FGXcLLcCU-31FM1DdyZi_zu49uA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 01:31:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 926 (0x39e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915280B, serialNumber=1465DC2CB70253EDF514CD43772662FF3BB8F6E0
        Validity
            Not Before: Jun  1 01:31:26 2026 GMT
            Not After : Jun  8 01:31:26 2026 GMT
        Subject: CN=6a1ce0ee-a8cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:23:6b:81:2a:75:14:8c:8f:18:18:27:c8:f5:
                    ef:01:b9:70:c1:5f:14:2e:2f:b5:e6:e8:7c:3f:ec:
                    59:fb:d1:d5:1f:dc:60:e9:33:1b:d0:4e:ee:9b:90:
                    ea:73:09:ab:f7:e3:b5:71:79:e5:59:2f:bf:4f:27:
                    9a:cd:be:25:1e:e7:80:d6:00:4b:62:3e:0b:5f:84:
                    bc:44:4e:f8:5a:c8:ca:04:c4:5b:b1:60:ca:a7:57:
                    b8:23:0c:6e:34:4c:43:cc:c1:70:27:fd:bb:90:94:
                    0c:9a:e0:dd:48:4e:f3:e3:8b:e1:ef:a5:f2:04:3f:
                    26:7e:4a:fe:90:9a:1e:2a:46:7f:2f:01:31:14:2c:
                    03:e4:29:83:d4:44:03:6b:b1:14:e6:2e:d8:1d:75:
                    fd:63:87:71:dc:40:3e:91:85:34:78:f3:3b:bc:95:
                    3d:06:cd:0a:7d:ba:3b:9c:d2:f5:e2:72:d2:ae:22:
                    27:78:ff:5b:d9:a4:03:be:99:77:bf:a6:48:30:e6:
                    0b:d7:71:45:bb:16:08:60:a2:ba:3d:7a:6f:69:cf:
                    f2:12:67:b4:a6:60:60:0a:02:ef:75:e2:ca:05:7c:
                    5d:a3:a2:55:a0:42:c9:7b:99:5c:85:39:a5:96:02:
                    26:43:a5:6b:71:a0:a0:34:db:de:43:b3:30:ed:9d:
                    a3:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:6A:19:DA:2D:F5:DD:5D:A4:8F:75:05:02:19:23:00:77:DD:2D:8D
            X509v3 Authority Key Identifier:
                keyid:14:65:DC:2C:B7:02:53:ED:F5:14:CD:43:77:26:62:FF:3B:B8:F6:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915280B/97BC1DB8EDEF11EC896AE740C4F9AE02/FGXcLLcCU-31FM1DdyZi_zu49uA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FGXcLLcCU-31FM1DdyZi_zu49uA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915280B/97BC1DB8EDEF11EC896AE740C4F9AE02/FGXcLLcCU-31FM1DdyZi_zu49uA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:ee:df:25:4b:5e:20:3c:27:94:09:8e:5b:2d:ae:89:84:3f:
         64:55:6b:ab:3e:3c:ca:f8:57:eb:71:33:f3:61:72:c2:46:37:
         2b:56:a9:cc:d7:39:09:ef:4b:f1:bd:c7:47:8c:50:05:92:76:
         6f:69:ba:30:09:82:f2:49:3f:8c:1a:7a:3b:4e:2c:d6:b7:17:
         c5:90:4e:4b:c1:41:3d:a5:3c:6d:81:04:e1:eb:2e:6b:3a:00:
         48:c9:7d:0c:d2:f4:77:76:0f:09:d8:68:cc:7e:78:9e:d9:61:
         9c:c9:9a:6c:c8:6a:d3:76:ad:e8:95:d6:1b:91:b8:40:0b:d7:
         c4:05:31:c6:42:25:40:ab:72:f0:52:59:3b:96:56:c7:8f:c2:
         86:c0:43:40:34:e0:eb:dd:6e:8a:9a:7e:d6:a6:95:81:04:19:
         82:c3:b0:5e:ae:28:3e:0c:fa:68:d3:24:d4:d2:ed:94:56:fb:
         d3:ae:6b:ca:12:8a:2a:eb:6e:6a:26:55:89:fc:17:93:34:bb:
         35:1f:97:24:20:f9:39:ab:ee:10:3d:0c:57:40:a3:bc:a6:fd:
         cf:92:01:c0:de:91:82:0f:16:9a:12:06:36:a6:03:57:49:47:
         6f:58:ea:6f:77:cd:e4:43:fe:2e:f5:48:7b:6c:3b:7b:6a:5b:
         ef:d8:3e:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 22:04:33 2026 by rpki-client