Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91645D3/7620BC0C0C2011EB8AE6394DC4F9AE02/fcUQye6vE3-r4XHlViRtskYeJxU.mft
File:                     fcUQye6vE3-r4XHlViRtskYeJxU.mft (raw, json)
Hash identifier:          tEvQsh87LWnQPlr3UqMOCuSTu3j184SsLCxG3OAQ+js=
Subject key identifier:   DB:65:94:A8:B2:E3:09:B0:E6:A7:D5:72:E8:4D:3C:B4:7C:AD:62:2B
Authority key identifier: 7D:C5:10:C9:EE:AF:13:7F:AB:E1:71:E5:56:24:6D:B2:46:1E:27:15
Certificate issuer:       /CN=A91645D3/serialNumber=7DC510C9EEAF137FABE171E556246DB2461E2715
Certificate serial:       0855
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcUQye6vE3-r4XHlViRtskYeJxU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91645D3/7620BC0C0C2011EB8AE6394DC4F9AE02/fcUQye6vE3-r4XHlViRtskYeJxU.mft
Manifest number:          084B
Signing time:             Wed 20 May 2026 20:54:45 +0000
Manifest this update:     Wed 20 May 2026 20:54:45 +0000
Manifest next update:     Wed 27 May 2026 20:54:45 +0000
Files and hashes:         1: fcUQye6vE3-r4XHlViRtskYeJxU.crl (hash: 9VtMwWC6u5AYRKE/53XgLqSaEt/yOKJL4nosyIuXinc=)
                          2: 58DAB5900FF311EBB0C3265EC4F9AE02.roa (hash: BTpU8dpGatUZOvwd6SbXwfQ3oVErt9SER4OTcVG1hdA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91645D3/7620BC0C0C2011EB8AE6394DC4F9AE02/fcUQye6vE3-r4XHlViRtskYeJxU.crl
                          rsync://rpki.apnic.net/member_repository/A91645D3/7620BC0C0C2011EB8AE6394DC4F9AE02/fcUQye6vE3-r4XHlViRtskYeJxU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcUQye6vE3-r4XHlViRtskYeJxU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 20:54:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2133 (0x855)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91645D3, serialNumber=7DC510C9EEAF137FABE171E556246DB2461E2715
        Validity
            Not Before: May 20 20:54:45 2026 GMT
            Not After : May 27 20:54:45 2026 GMT
        Subject: CN=6a0e1f95-f539
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:55:ed:65:05:1d:f4:03:9d:40:e6:cc:c0:93:
                    62:68:1c:95:14:2c:a6:31:0c:5f:87:5e:94:5f:e3:
                    72:8e:e4:ca:93:a0:ae:58:57:6c:b0:e6:b3:6c:5a:
                    e6:46:d5:c7:35:11:4d:73:d5:2e:60:33:83:f3:ee:
                    b1:ec:0a:52:d1:fa:ba:23:16:69:3a:a0:c1:51:fa:
                    3e:92:dd:10:39:77:18:84:8d:cf:57:fb:d8:5e:98:
                    0e:9b:87:ea:e2:03:0a:86:da:4e:78:1c:1c:5f:75:
                    01:1b:76:90:db:cc:c8:d4:f6:ca:b8:10:e9:98:a3:
                    7f:7f:a0:32:78:0b:eb:87:a5:6a:8f:94:74:93:93:
                    ac:bf:c8:b2:bd:6b:5e:8c:75:f1:91:3f:cb:08:71:
                    8c:f4:0f:9d:40:0f:46:8c:86:75:ea:da:6d:db:09:
                    2d:a6:a3:3e:05:17:4e:a6:ae:84:82:05:59:35:6a:
                    00:ff:35:56:28:8d:59:3d:ca:2f:a7:3a:ad:e9:78:
                    83:bf:9d:44:80:9b:34:ae:da:72:f4:d2:82:52:d3:
                    bf:84:f6:8b:12:40:e1:88:3b:c9:5d:91:83:3e:ed:
                    f8:f4:28:07:ca:ed:33:f0:49:f4:a6:f7:11:3e:f0:
                    bf:22:72:da:6c:ad:ed:d8:2d:7b:28:ff:d4:28:31:
                    68:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:65:94:A8:B2:E3:09:B0:E6:A7:D5:72:E8:4D:3C:B4:7C:AD:62:2B
            X509v3 Authority Key Identifier:
                keyid:7D:C5:10:C9:EE:AF:13:7F:AB:E1:71:E5:56:24:6D:B2:46:1E:27:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91645D3/7620BC0C0C2011EB8AE6394DC4F9AE02/fcUQye6vE3-r4XHlViRtskYeJxU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcUQye6vE3-r4XHlViRtskYeJxU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91645D3/7620BC0C0C2011EB8AE6394DC4F9AE02/fcUQye6vE3-r4XHlViRtskYeJxU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:a5:53:c1:88:07:f1:1b:e3:e1:3d:e0:fe:a1:7b:68:72:fa:
         ac:66:2e:82:db:76:89:c7:b2:3d:e8:9a:5c:ea:a0:ff:e7:7c:
         14:46:12:e1:37:d8:53:1f:f1:f1:69:e7:92:6c:c0:75:1e:a4:
         1d:e5:72:51:77:e1:10:44:6d:c7:b7:e4:95:36:3f:65:46:fd:
         5b:b3:b4:bb:de:1f:f7:50:aa:b8:38:c4:47:06:68:d3:67:6b:
         6c:be:fe:ec:1f:cd:ce:7d:d2:b0:52:12:a9:39:55:9f:41:16:
         72:00:db:0b:90:4a:b6:e8:5d:73:9f:8e:32:8d:5e:39:ca:dc:
         d6:ab:91:ea:05:a6:44:cf:e7:37:5d:74:97:13:00:40:76:a2:
         ee:1e:e3:e9:6a:ba:48:59:4b:e0:90:1e:56:2d:b5:54:b9:9e:
         d1:a8:e0:e5:08:7f:34:36:86:88:47:3b:38:89:54:03:12:9d:
         a9:48:eb:e1:28:3a:d4:dc:3d:ea:0a:15:cd:84:27:30:e6:86:
         54:18:e9:04:25:fd:c8:0a:42:a5:b5:5d:cd:6a:51:5d:67:95:
         a9:ad:69:e4:c0:83:e6:df:31:07:ed:3d:b7:60:83:71:43:4b:
         73:73:09:44:8b:bc:f0:51:08:45:a5:e4:bd:be:f5:3f:1f:df:
         e1:5e:fb:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:29:44 2026 by rpki-client