Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/FEfUS0n3kG3GNzGl2Y2FLsELd0U.mft
File:                     FEfUS0n3kG3GNzGl2Y2FLsELd0U.mft (raw, json)
Hash identifier:          PXSSap4C6o3L/sEtS7mh37MliY5xOWSH0FrhZ9NemxI=
Subject key identifier:   72:81:D0:E1:DD:36:A0:22:7F:A3:72:5D:7B:5E:4D:19:87:76:0B:D8
Authority key identifier: 14:47:D4:4B:49:F7:90:6D:C6:37:31:A5:D9:8D:85:2E:C1:0B:77:45
Certificate issuer:       /CN=A9173CF2/serialNumber=1447D44B49F7906DC63731A5D98D852EC10B7745
Certificate serial:       0721
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEfUS0n3kG3GNzGl2Y2FLsELd0U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/FEfUS0n3kG3GNzGl2Y2FLsELd0U.mft
Manifest number:          0719
Signing time:             Wed 20 May 2026 21:58:07 +0000
Manifest this update:     Wed 20 May 2026 21:58:06 +0000
Manifest next update:     Wed 27 May 2026 21:58:06 +0000
Files and hashes:         1: FEfUS0n3kG3GNzGl2Y2FLsELd0U.crl (hash: GN7f5N2CBRcjpTGm1v3P8SB2bTvpzrVCFKxKWGFUxGg=)
                          2: D9E7CFF681EF11EBAEE9D17AC4F9AE02.roa (hash: dTa5Sv3QyKZeyYh7kTFM/PjTqogHVEan9r70oy/WWU0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/FEfUS0n3kG3GNzGl2Y2FLsELd0U.crl
                          rsync://rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/FEfUS0n3kG3GNzGl2Y2FLsELd0U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEfUS0n3kG3GNzGl2Y2FLsELd0U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 21:58:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1825 (0x721)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173CF2, serialNumber=1447D44B49F7906DC63731A5D98D852EC10B7745
        Validity
            Not Before: May 20 21:58:06 2026 GMT
            Not After : May 27 21:58:06 2026 GMT
        Subject: CN=6a0e2e6f-6e8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:08:9d:27:04:98:58:9d:51:64:65:82:e0:67:
                    5d:ef:07:09:fd:cf:8d:2a:62:6b:9d:c7:e7:25:ad:
                    0e:fe:e2:21:5d:c4:a4:d0:ce:2e:55:bb:5e:71:80:
                    ea:c8:88:ed:20:72:60:a5:03:b2:7b:29:85:6e:64:
                    a9:25:39:60:94:e0:00:97:bf:8b:e3:df:e8:30:6c:
                    28:5c:13:41:93:a3:ac:aa:0c:c4:19:80:a7:0d:b7:
                    40:8f:bf:6d:09:40:f7:49:be:0c:b8:b3:22:c4:a7:
                    bc:55:b9:e4:2c:97:96:7c:e0:7b:cd:f9:72:30:b5:
                    92:99:42:c9:7f:5c:fa:eb:8c:26:fd:b3:bf:27:e8:
                    eb:10:f1:52:e2:e0:a2:de:4c:7f:7d:77:4f:05:b1:
                    07:f2:d3:b5:ca:87:13:f8:6b:93:81:64:4a:a7:5d:
                    37:f3:c1:92:4d:0e:a3:26:33:e4:16:13:d9:f9:66:
                    0f:b9:25:a9:6d:cb:2c:3b:96:93:3b:2b:9e:df:88:
                    bd:a2:61:46:fb:07:f8:d2:79:c8:4b:f0:9c:5f:ed:
                    e5:50:43:98:ac:55:93:0b:db:ec:86:16:f4:8f:89:
                    ff:41:f3:66:4a:e0:7f:66:bc:8b:4d:37:f5:19:5f:
                    aa:44:49:b4:8a:86:f2:9a:d8:d3:ef:c3:5a:0e:fb:
                    cc:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:81:D0:E1:DD:36:A0:22:7F:A3:72:5D:7B:5E:4D:19:87:76:0B:D8
            X509v3 Authority Key Identifier:
                keyid:14:47:D4:4B:49:F7:90:6D:C6:37:31:A5:D9:8D:85:2E:C1:0B:77:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/FEfUS0n3kG3GNzGl2Y2FLsELd0U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEfUS0n3kG3GNzGl2Y2FLsELd0U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/FEfUS0n3kG3GNzGl2Y2FLsELd0U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:f2:cd:ac:4c:c3:60:89:59:c5:42:aa:63:76:7c:04:ea:f8:
         fa:8c:5f:79:b3:a4:cd:4a:1f:91:e8:13:26:4d:6d:5a:1f:f1:
         bb:04:e1:5e:9a:2a:45:50:8c:70:a8:fa:5f:92:e1:c0:87:66:
         57:d2:ac:dd:5a:a2:0d:1c:2d:48:47:7b:cb:a0:9a:bc:3c:7e:
         95:e8:45:98:4f:2d:dd:7a:15:56:8e:89:91:6f:a9:d4:f0:64:
         3a:82:39:3c:24:44:c8:7c:bf:78:5b:ed:8f:1a:a2:b6:87:07:
         45:1d:5a:ef:de:29:9f:0c:ec:6b:2c:78:2c:1f:2f:2b:67:fd:
         64:ce:44:5d:6d:90:a8:a9:fb:3b:53:27:2a:17:a4:b1:d8:c9:
         d5:f4:68:b9:46:49:23:b8:c7:b2:4e:20:3a:27:0d:8c:30:d7:
         01:7b:10:c2:f5:4d:29:1c:12:60:e6:4c:f9:99:fa:e0:70:9a:
         fa:ed:c8:62:8f:c8:b1:b5:8d:35:71:45:ff:9a:94:b2:e6:68:
         ba:8e:e0:e5:dc:78:e8:38:64:cf:6a:ba:6f:1d:0e:4a:15:99:
         18:c3:7c:7d:e0:d5:95:27:09:40:78:2a:e7:f7:b4:62:55:6b:
         78:ed:f1:58:dc:b3:5c:c1:0e:05:12:93:e7:ef:e9:0e:de:cb:
         03:16:83:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:37:25 2026 by rpki-client