Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B539C/58F6656E688611F1A9DD30CE6C47A888/FX-uB7MB7LSEy7gIO2gjcZIFbHk.mft
File:                     FX-uB7MB7LSEy7gIO2gjcZIFbHk.mft (raw, json)
Hash identifier:          MGt/BlQK85QkFbGSfbgtuRfFOUJ2gOWnGFCkbj0nz0g=
Subject key identifier:   1F:22:07:8A:02:F4:A8:ED:C0:8A:5E:9A:DE:06:43:52:08:17:1C:3D
Authority key identifier: 15:7F:AE:07:B3:01:EC:B4:84:CB:B8:08:3B:68:23:71:92:05:6C:79
Certificate issuer:       /CN=A91B539C/serialNumber=157FAE07B301ECB484CBB8083B68237192056C79
Certificate serial:       0D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FX-uB7MB7LSEy7gIO2gjcZIFbHk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B539C/58F6656E688611F1A9DD30CE6C47A888/FX-uB7MB7LSEy7gIO2gjcZIFbHk.mft
Manifest number:          0C
Signing time:             Sun 05 Jul 2026 09:52:59 +0000
Manifest this update:     Sun 05 Jul 2026 09:52:59 +0000
Manifest next update:     Sun 12 Jul 2026 09:52:59 +0000
Files and hashes:         1: FX-uB7MB7LSEy7gIO2gjcZIFbHk.crl (hash: 5Jk2ud9gk8fdbKbLknEBTKjbQ7Y4ZOuu7fz/Re4BsvE=)
                          2: DA76ABD0688611F19B84FAD56C47A888.roa (hash: yWiFxFgKw6kCu5u2sZNHSYxj5QrnFeWSEHXikTWB910=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B539C/58F6656E688611F1A9DD30CE6C47A888/FX-uB7MB7LSEy7gIO2gjcZIFbHk.crl
                          rsync://rpki.apnic.net/member_repository/A91B539C/58F6656E688611F1A9DD30CE6C47A888/FX-uB7MB7LSEy7gIO2gjcZIFbHk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FX-uB7MB7LSEy7gIO2gjcZIFbHk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Jul 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13 (0xd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B539C, serialNumber=157FAE07B301ECB484CBB8083B68237192056C79
        Validity
            Not Before: Jul  5 09:52:59 2026 GMT
            Not After : Jul 12 09:52:59 2026 GMT
        Subject: CN=6a4a297b-5794
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:d1:6f:e0:46:35:2b:b4:28:a0:98:ca:6c:da:
                    f4:c8:5d:6d:1c:a2:e2:b1:1a:a8:da:63:43:f3:3f:
                    d8:9f:b9:eb:f7:d7:e6:12:53:1d:01:8f:5b:cc:57:
                    e8:b0:7b:1a:19:99:b9:a6:7f:b0:96:81:cb:9b:fc:
                    9e:8c:7c:8f:bb:eb:fa:cd:d6:d5:98:9f:57:45:1b:
                    a8:c6:76:06:50:3e:1c:05:53:46:51:75:e4:56:93:
                    b0:b3:26:8e:96:3a:55:f1:a3:26:71:f3:74:5c:dc:
                    22:9c:f4:af:46:de:0f:55:08:61:87:73:2f:22:a6:
                    7d:4b:b9:2e:33:d7:cc:5e:79:62:2f:76:a0:c6:80:
                    ad:0a:fb:7c:67:cd:1d:fa:3b:47:76:a6:ce:d0:5f:
                    7d:57:83:f2:87:37:48:0a:bf:00:05:b4:cb:e7:d8:
                    15:0f:b7:47:b0:e8:f9:26:41:cf:23:10:aa:36:cb:
                    16:97:c2:83:5f:89:8b:f4:cd:05:02:be:26:f4:99:
                    88:43:92:f5:40:e9:2e:b8:00:40:56:d4:b1:e6:86:
                    91:34:23:b6:f1:a6:3e:bd:a6:04:b9:f1:67:22:ac:
                    5c:35:13:48:a8:f5:79:2a:45:9a:0a:09:35:f5:1d:
                    04:ca:28:75:95:24:60:29:1b:6c:93:d9:0a:fe:66:
                    91:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:22:07:8A:02:F4:A8:ED:C0:8A:5E:9A:DE:06:43:52:08:17:1C:3D
            X509v3 Authority Key Identifier:
                keyid:15:7F:AE:07:B3:01:EC:B4:84:CB:B8:08:3B:68:23:71:92:05:6C:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B539C/58F6656E688611F1A9DD30CE6C47A888/FX-uB7MB7LSEy7gIO2gjcZIFbHk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FX-uB7MB7LSEy7gIO2gjcZIFbHk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B539C/58F6656E688611F1A9DD30CE6C47A888/FX-uB7MB7LSEy7gIO2gjcZIFbHk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:a6:c3:c6:07:16:46:2a:11:8e:3f:2d:c7:20:3d:18:9d:76:
         86:c6:bc:13:9b:62:2b:e9:1c:b4:3a:4d:be:00:81:3e:67:f8:
         8f:76:cb:89:d6:f9:e3:de:d3:23:cf:2f:51:99:cc:98:fc:b8:
         ba:d9:47:e1:92:6c:bd:9d:e8:90:cf:16:c9:61:ca:25:e3:ce:
         1b:b6:30:cc:20:99:8e:6f:69:36:85:97:e5:bf:0a:04:14:32:
         fc:b7:76:02:21:ef:a0:bb:19:1f:6d:df:18:9e:c5:f0:04:c1:
         09:f0:bc:3f:58:ec:72:23:36:43:5f:7a:10:ce:8d:b6:05:c3:
         87:0d:2b:97:96:44:82:6f:74:b5:c8:bf:99:75:0b:39:70:c8:
         30:1c:e4:2e:98:ae:6c:6b:0d:89:e7:f7:23:50:2f:17:19:66:
         aa:d0:ff:c5:f8:0a:f9:d1:61:4f:ec:34:5a:8b:b4:77:6d:ff:
         5f:f9:52:26:ae:b8:b6:0a:cc:d4:00:bc:c4:83:c0:3c:24:ea:
         25:c5:0b:73:a5:74:eb:2e:5c:99:89:6c:7d:3f:5c:49:d8:17:
         6c:4a:4c:0e:80:c9:37:6e:5b:cf:56:73:b9:51:93:00:b0:a3:
         c7:a9:e3:06:d7:56:cf:1d:be:89:60:f2:11:7f:7f:f2:23:29:
         a7:be:cc:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 11:14:45 2026 by rpki-client