Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916223F/4EBF27B6F95C11E9B6272285C4F9AE02/Fu3IlWvEE8nFAhkosDvIUPx-ckc.mft
File:                     Fu3IlWvEE8nFAhkosDvIUPx-ckc.mft (raw, json)
Hash identifier:          uW7rIw1w1lkfAtrvXdy7hKOmF157nRHKDBH51IIo0SY=
Subject key identifier:   02:56:4B:2D:81:24:39:61:E3:84:35:BC:AC:B7:8F:EB:87:D4:3C:9A
Authority key identifier: 16:ED:C8:95:6B:C4:13:C9:C5:02:19:28:B0:3B:C8:50:FC:7E:72:47
Certificate issuer:       /CN=A916223F/serialNumber=16EDC8956BC413C9C5021928B03BC850FC7E7247
Certificate serial:       0D40
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fu3IlWvEE8nFAhkosDvIUPx-ckc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916223F/4EBF27B6F95C11E9B6272285C4F9AE02/Fu3IlWvEE8nFAhkosDvIUPx-ckc.mft
Manifest number:          0D37
Signing time:             Wed 20 May 2026 18:04:41 +0000
Manifest this update:     Wed 20 May 2026 18:04:41 +0000
Manifest next update:     Wed 27 May 2026 18:04:41 +0000
Files and hashes:         1: Fu3IlWvEE8nFAhkosDvIUPx-ckc.crl (hash: wV8BI8CONLy0rNKa6eNeunKwr5+ior6JjSYsDNnN68A=)
                          2: 80392340F95D11E9ABF14387C4F9AE02.roa (hash: ASXvIGV5XQpb47JnlEJHWDEczJ8u/zVk1fKYxytG1Yo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916223F/4EBF27B6F95C11E9B6272285C4F9AE02/Fu3IlWvEE8nFAhkosDvIUPx-ckc.crl
                          rsync://rpki.apnic.net/member_repository/A916223F/4EBF27B6F95C11E9B6272285C4F9AE02/Fu3IlWvEE8nFAhkosDvIUPx-ckc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fu3IlWvEE8nFAhkosDvIUPx-ckc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 18:04:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3392 (0xd40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916223F, serialNumber=16EDC8956BC413C9C5021928B03BC850FC7E7247
        Validity
            Not Before: May 20 18:04:41 2026 GMT
            Not After : May 27 18:04:41 2026 GMT
        Subject: CN=6a0df7b9-d2fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a8:b9:16:25:68:ff:75:d2:ca:e8:e0:ce:f8:
                    c0:9a:ba:dd:e0:e8:d1:be:fc:93:4f:fe:0c:8e:46:
                    2e:a5:33:0b:c5:c9:cc:e1:05:63:c2:33:f1:ff:7d:
                    9a:5a:73:1f:18:59:df:73:67:3c:0e:96:9f:8b:82:
                    79:be:cb:24:68:90:58:0f:45:5f:62:bd:c8:1c:80:
                    df:6d:49:90:88:0c:5f:c6:3b:f8:16:6c:20:8d:17:
                    ba:cc:04:98:29:40:ef:72:38:46:2b:b1:6d:92:d6:
                    47:a8:5a:49:75:64:7a:bc:ee:ed:ed:05:70:84:d4:
                    10:76:49:f6:96:a1:ce:22:f2:9f:4c:2f:ef:e1:dd:
                    c3:d5:58:03:9d:99:c5:ea:bc:5b:49:18:ca:6d:96:
                    28:3a:65:30:11:d5:90:ee:e2:f1:1c:8a:fd:1d:7a:
                    a6:81:99:c4:bf:b7:ef:38:e3:95:1a:77:cd:f1:73:
                    d0:1b:e5:59:1e:91:7c:4e:26:dc:08:15:5a:67:e4:
                    dd:7a:a3:f2:12:6e:36:44:99:c8:f5:f7:50:55:53:
                    18:e8:96:fe:7b:f3:90:e1:12:c1:1f:64:a2:96:bf:
                    df:d7:79:13:b2:66:1e:4e:95:60:b5:93:10:b5:8c:
                    2d:21:c7:8a:c9:b9:51:27:95:ca:74:0d:1b:10:68:
                    9f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:56:4B:2D:81:24:39:61:E3:84:35:BC:AC:B7:8F:EB:87:D4:3C:9A
            X509v3 Authority Key Identifier:
                keyid:16:ED:C8:95:6B:C4:13:C9:C5:02:19:28:B0:3B:C8:50:FC:7E:72:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916223F/4EBF27B6F95C11E9B6272285C4F9AE02/Fu3IlWvEE8nFAhkosDvIUPx-ckc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fu3IlWvEE8nFAhkosDvIUPx-ckc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916223F/4EBF27B6F95C11E9B6272285C4F9AE02/Fu3IlWvEE8nFAhkosDvIUPx-ckc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:a3:8a:e6:1b:f1:91:da:cb:1b:a4:9e:b6:0d:fe:c9:b1:39:
         17:26:75:ad:77:a1:02:71:de:c3:5a:c3:30:86:34:c3:d4:d1:
         cd:6a:90:db:78:7f:d1:ba:da:29:66:d6:36:43:d1:dd:b4:54:
         70:f3:90:5d:ba:01:64:2d:5c:6c:86:68:9f:bf:5f:dc:73:34:
         fe:d9:a8:2a:b8:fb:30:4a:5c:29:3b:90:f2:69:95:82:a4:ab:
         78:7f:e0:b8:29:73:55:f3:c6:fb:88:ba:4c:ac:36:7e:98:af:
         86:a6:87:87:28:ab:f2:c6:66:38:e2:cc:5c:79:9d:f8:8c:66:
         96:7f:07:7f:d1:3a:23:ea:97:71:54:8f:22:3d:5e:ea:a5:20:
         a2:14:91:ac:3c:c8:ef:23:3d:ea:ee:12:67:f8:e9:64:80:0a:
         8f:ab:fc:9c:ee:b2:2e:69:58:db:26:b7:ed:9e:54:c2:5e:c9:
         01:15:0a:73:82:a4:c5:6b:05:5c:3a:fb:e1:62:ca:a2:2c:12:
         8d:b1:f4:ac:3e:88:d6:10:a1:05:a4:45:dd:d8:39:21:39:98:
         a3:b2:f0:24:11:0e:30:2d:0b:9d:f5:5a:90:62:70:6c:48:01:
         07:1c:bb:4e:dd:7f:dd:e1:42:75:eb:db:2b:07:ee:72:24:8a:
         31:49:26:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:31:11 2026 by rpki-client