Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.mft
File:                     fsx3osytqtpjQvwPRGkYdeo_koc.mft (raw, json)
Hash identifier:          ftMtM2buMYdIhrw1hsob8TLuln/Aqx7dQwUXcX5wKqg=
Subject key identifier:   31:29:F5:D2:7C:6A:F4:93:15:7A:96:4A:F0:F8:CD:4A:E5:7D:F5:24
Authority key identifier: 7E:CC:77:A2:CC:AD:AA:DA:63:42:FC:0F:44:69:18:75:EA:3F:92:87
Certificate issuer:       /CN=A91B2BC9/serialNumber=7ECC77A2CCADAADA6342FC0F44691875EA3F9287
Certificate serial:       02A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fsx3osytqtpjQvwPRGkYdeo_koc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.mft
Manifest number:          029C
Signing time:             Mon 03 Aug 2026 02:36:01 +0000
Manifest this update:     Mon 03 Aug 2026 02:36:01 +0000
Manifest next update:     Mon 10 Aug 2026 02:36:01 +0000
Files and hashes:         1: fsx3osytqtpjQvwPRGkYdeo_koc.crl (hash: Jzf5RZ4a5nEu5aBSbBkfJrt7DA2aZbVTw5KTFPPJ5uE=)
                          2: 044E6658915A11ED8D2FBE43C4F9AE02.roa (hash: 6ViEjGiRPk0ms0lSl5+ohXm8W2evvF29tI66T/l8bLg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.crl
                          rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fsx3osytqtpjQvwPRGkYdeo_koc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Aug 2026 02:36:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 675 (0x2a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B2BC9, serialNumber=7ECC77A2CCADAADA6342FC0F44691875EA3F9287
        Validity
            Not Before: Aug  3 02:36:01 2026 GMT
            Not After : Aug 10 02:36:01 2026 GMT
        Subject: CN=6a6ffe91-801d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:03:fa:03:1a:47:5c:bc:a0:e8:1c:d7:19:13:
                    68:8a:c0:d4:25:03:fb:fa:e5:83:5d:4d:c4:ad:2f:
                    4a:47:5f:1f:cf:8c:40:10:ad:31:39:6a:9b:f7:65:
                    6a:d8:59:1e:92:54:45:c5:96:13:da:1c:55:6b:51:
                    26:4d:3b:fe:ea:0b:64:83:d0:22:9a:0a:3c:b5:3d:
                    d6:f7:87:5f:c5:2a:39:f8:fd:da:51:a1:f0:a2:57:
                    5f:95:ed:58:97:6d:7b:8d:5f:36:2b:d8:f0:f3:a1:
                    ad:9b:45:8e:b9:2b:1a:a8:cf:18:6f:a7:a1:f2:21:
                    d1:57:58:43:59:99:7a:20:18:1b:d4:1d:69:c1:36:
                    a8:2e:4c:20:01:4e:4c:38:37:60:26:8a:e8:8d:9f:
                    06:ba:ee:61:5e:0f:cd:24:fd:ea:b5:4c:00:d6:2d:
                    ea:17:1d:df:65:da:e5:6b:e0:41:32:3c:12:c9:52:
                    48:1b:4e:f5:c3:22:56:92:64:08:7a:05:b5:d5:dd:
                    ef:2b:ec:c4:0e:a6:be:e4:1a:a0:10:b7:e8:c4:b7:
                    e8:4a:e3:a6:6f:c1:b9:06:4b:71:82:19:61:9d:1c:
                    a0:82:fb:f3:95:6a:85:30:d0:24:55:18:ee:82:d4:
                    24:49:29:f6:1e:ce:a3:e8:e7:4b:a3:03:3c:25:ba:
                    44:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:29:F5:D2:7C:6A:F4:93:15:7A:96:4A:F0:F8:CD:4A:E5:7D:F5:24
            X509v3 Authority Key Identifier:
                keyid:7E:CC:77:A2:CC:AD:AA:DA:63:42:FC:0F:44:69:18:75:EA:3F:92:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fsx3osytqtpjQvwPRGkYdeo_koc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:92:dc:72:ae:a8:59:3b:e7:5b:b3:2c:03:e9:4e:53:e1:47:
         75:8f:c3:e4:96:31:70:85:31:38:11:b8:e9:72:54:de:0b:03:
         e2:7c:ed:02:2f:ec:3d:53:6b:4a:f8:5a:27:45:50:d1:82:44:
         9a:6c:7f:6a:44:74:19:00:d6:6b:be:dc:82:d0:fa:e4:40:20:
         95:f9:c6:5d:36:45:a0:8a:f8:21:ab:4d:a4:df:b1:fb:cd:88:
         2c:bc:a9:1a:e9:73:b7:06:83:31:12:ae:3f:69:a5:6d:09:92:
         4a:ac:90:67:b2:11:d7:21:c0:ef:57:90:b9:d6:6f:5c:07:c5:
         e3:b4:2e:26:99:86:0c:6d:6f:de:b9:a3:25:82:dd:13:13:6b:
         54:a1:f2:f8:f1:1d:2f:62:a4:c7:3e:0f:b7:0f:8b:39:b7:c6:
         ad:c5:d4:ac:37:16:33:5b:3b:5b:82:f1:50:e1:87:20:17:2f:
         94:1b:35:d7:cd:7f:b5:53:b8:fd:91:79:90:d4:b6:bf:c2:3c:
         c6:3b:1d:d1:8a:a5:7e:01:46:09:d3:df:7e:6d:4e:a9:5d:46:
         53:69:a1:9c:35:5c:62:4a:bc:cb:69:1e:d6:2b:b0:86:ef:87:
         9e:1b:f2:99:c2:18:f3:fa:6f:96:8d:dc:e8:71:b3:5c:c9:21:
         91:12:95:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 13:38:24 2026 by rpki-client