Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.mft
File:                     FtFKpRNNQRJGTXmS2_HEUvf6KaA.mft (raw, json)
Hash identifier:          I128xv8iRI2SWvuk+6SmBquMgw8PP4g4JBgZfBBbDH0=
Subject key identifier:   2E:22:4D:A5:A8:DD:FA:F1:3A:99:2C:EB:E3:99:62:46:B5:08:9E:A7
Authority key identifier: 16:D1:4A:A5:13:4D:41:12:46:4D:79:92:DB:F1:C4:52:F7:FA:29:A0
Certificate issuer:       /CN=A91A29DA/serialNumber=16D14AA5134D4112464D7992DBF1C452F7FA29A0
Certificate serial:       01AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FtFKpRNNQRJGTXmS2_HEUvf6KaA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.mft
Manifest number:          01A9
Signing time:             Thu 11 Jun 2026 06:16:17 +0000
Manifest this update:     Thu 11 Jun 2026 06:16:17 +0000
Manifest next update:     Thu 18 Jun 2026 06:16:17 +0000
Files and hashes:         1: FtFKpRNNQRJGTXmS2_HEUvf6KaA.crl (hash: LHjqjDk5/+lCs9e2Kj1kUbJrMFLEqM1q70JgZtK/0Lc=)
                          2: C1F74E665C1611F0B0B40A35C4F9AE02.roa (hash: O7Lj4yPFpwZm2VwkuRfj2gTrVG1pPTs7zZ1NbT7XSSw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.crl
                          rsync://rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FtFKpRNNQRJGTXmS2_HEUvf6KaA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 06:16:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 430 (0x1ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A29DA, serialNumber=16D14AA5134D4112464D7992DBF1C452F7FA29A0
        Validity
            Not Before: Jun 11 06:16:17 2026 GMT
            Not After : Jun 18 06:16:17 2026 GMT
        Subject: CN=6a2a52b1-165b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:d7:35:00:fb:1a:fe:35:1b:2a:20:88:3e:b1:
                    93:0c:99:c8:0a:da:89:2a:db:7c:e8:c9:c7:c2:49:
                    b6:4d:c6:c7:b8:6b:1d:e6:11:2d:3d:5e:90:e5:2c:
                    e5:c7:f3:77:69:4a:78:11:b4:8c:a7:4d:9d:b8:e1:
                    a5:98:d2:84:da:c5:bb:46:5d:10:0a:c3:a1:b5:c5:
                    25:eb:df:35:1c:50:eb:02:c7:3c:bf:03:a5:32:e2:
                    c1:34:a4:48:b0:c2:9d:38:76:00:a0:27:b2:71:a9:
                    75:0a:8f:72:82:f9:d7:ac:66:ab:8d:cd:66:d7:ac:
                    4d:95:3a:f0:f1:d1:25:20:c5:cf:a5:ed:15:f2:8c:
                    a1:42:15:d0:99:f3:1d:94:08:d4:75:3d:8d:eb:7c:
                    bc:6a:27:19:cc:a5:58:70:ba:5c:3d:97:1e:9a:52:
                    7d:9c:05:63:e8:2c:5b:b3:ac:55:45:62:2f:50:1c:
                    36:fc:f2:25:e8:db:ea:d8:7e:58:27:5f:25:21:0d:
                    a2:be:52:07:1b:42:bd:28:cb:69:80:35:e8:74:56:
                    7d:38:5e:5a:55:84:c2:2e:2d:7e:e0:37:8c:ee:de:
                    a2:4f:8c:e5:60:5f:57:eb:3f:04:9f:2e:06:f0:60:
                    3e:dd:ec:c2:16:f6:47:38:d5:23:58:30:4a:64:ef:
                    c2:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:22:4D:A5:A8:DD:FA:F1:3A:99:2C:EB:E3:99:62:46:B5:08:9E:A7
            X509v3 Authority Key Identifier:
                keyid:16:D1:4A:A5:13:4D:41:12:46:4D:79:92:DB:F1:C4:52:F7:FA:29:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FtFKpRNNQRJGTXmS2_HEUvf6KaA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:fe:ac:94:1b:c3:c1:6e:cd:23:30:aa:6c:e0:b9:2c:b2:d5:
         c8:40:ef:1f:1f:2e:fb:58:95:7a:14:c4:22:f0:62:1c:ab:12:
         8c:e7:a4:f8:64:04:44:ae:14:e3:0a:c7:ab:3b:46:f1:f5:37:
         05:87:ff:7b:2d:5e:2f:80:c0:9b:a7:58:69:c8:54:05:ae:14:
         6a:8d:0d:c2:3f:50:6d:19:27:f0:56:72:08:ba:db:49:6a:63:
         0e:2f:da:86:d4:fc:d0:e6:ff:d1:ce:66:5e:b9:b8:d3:e9:a4:
         2f:1c:54:1d:86:d0:7f:cf:80:f4:70:e3:88:9b:f6:95:6b:06:
         5e:30:58:3a:2d:b0:38:32:fb:b3:a9:29:dc:6c:9a:0b:ea:23:
         d8:72:27:aa:7d:78:27:e6:2e:e6:98:67:f7:3b:41:90:56:b2:
         80:2c:4a:9a:64:e2:66:06:73:39:47:0a:a4:59:70:c3:16:9c:
         4a:91:ac:0c:44:66:28:f3:f9:29:fc:77:9a:c0:2c:a1:6e:e0:
         69:09:9e:5d:b2:8d:cc:d9:1b:3f:c9:86:50:7b:18:25:83:09:
         e7:40:42:bc:df:0a:ce:9a:29:ee:1b:cd:79:33:63:a5:22:05:
         fb:dc:31:78:5b:ad:13:c3:fc:3c:58:49:29:21:1b:ee:46:d1:
         d1:19:61:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 21:35:11 2026 by rpki-client