Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4C53/F285F1048B0E11F1AFE1EDC73211F970/fvwii4BsPV8oMXNZrkzZgB8sm54.mft
File:                     fvwii4BsPV8oMXNZrkzZgB8sm54.mft (raw, json)
Hash identifier:          B+s+dRHERBu7OHj+3P2T2Y4nl4CU1qqXsHUHSYBPq3A=
Subject key identifier:   03:E6:C3:17:2B:75:B9:50:91:35:F2:EB:FE:79:B1:99:32:ED:FA:A8
Authority key identifier: 7E:FC:22:8B:80:6C:3D:5F:28:31:73:59:AE:4C:D9:80:1F:2C:9B:9E
Certificate issuer:       /CN=A91C4C53/serialNumber=7EFC228B806C3D5F28317359AE4CD9801F2C9B9E
Certificate serial:       0E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fvwii4BsPV8oMXNZrkzZgB8sm54.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C4C53/F285F1048B0E11F1AFE1EDC73211F970/fvwii4BsPV8oMXNZrkzZgB8sm54.mft
Manifest number:          0D
Signing time:             Wed 19 Aug 2026 09:51:33 +0000
Manifest this update:     Wed 19 Aug 2026 09:51:32 +0000
Manifest next update:     Wed 26 Aug 2026 09:51:32 +0000
Files and hashes:         1: fvwii4BsPV8oMXNZrkzZgB8sm54.crl (hash: YlWLE57Y3vCiQTm4JuiE3/u+BKuu99+U0/GqkHQtOtY=)
                          2: 3CCF3E1E8B0F11F1BAF156F53211F970.roa (hash: ERhjgvkkK+FI20fzYDcbYiDCuBp/sf5+jz3rupzmdT4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C4C53/F285F1048B0E11F1AFE1EDC73211F970/fvwii4BsPV8oMXNZrkzZgB8sm54.crl
                          rsync://rpki.apnic.net/member_repository/A91C4C53/F285F1048B0E11F1AFE1EDC73211F970/fvwii4BsPV8oMXNZrkzZgB8sm54.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fvwii4BsPV8oMXNZrkzZgB8sm54.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 09:51:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14 (0xe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C4C53, serialNumber=7EFC228B806C3D5F28317359AE4CD9801F2C9B9E
        Validity
            Not Before: Aug 19 09:51:32 2026 GMT
            Not After : Aug 26 09:51:32 2026 GMT
        Subject: CN=6a857ca5-bb0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:fc:a5:9b:d6:e0:69:60:29:8f:88:89:14:2e:
                    fa:e3:b0:32:82:70:ee:1f:75:bb:73:4c:0c:31:ff:
                    2b:ce:14:1a:a9:59:2d:62:f4:65:c9:2f:da:47:71:
                    1e:bf:71:fc:0a:7a:da:61:44:46:77:d6:89:a8:83:
                    63:c9:dd:fc:4f:64:16:42:49:c2:53:ea:f7:bd:e2:
                    6f:4b:df:40:c2:17:ee:b7:83:ba:0c:11:c9:99:30:
                    fa:15:e1:af:61:6e:1f:8c:a2:5f:ff:39:f5:82:13:
                    f5:77:72:26:31:f4:c9:05:b3:04:90:ed:d4:1b:27:
                    24:34:d9:0b:31:0b:b3:39:01:2c:8c:f2:ef:38:8e:
                    b8:46:58:d9:9a:e9:8c:0f:db:39:48:e9:b1:95:06:
                    7f:5b:a4:ba:b1:30:07:72:99:d3:7f:ab:94:29:f0:
                    cf:aa:ed:0b:83:2d:e1:10:16:61:8b:a5:49:27:5c:
                    d7:4b:74:59:ec:b1:5c:21:6d:31:be:a5:a2:e4:c9:
                    42:2f:d5:c9:86:6b:ab:86:26:43:9c:4f:30:70:e3:
                    bf:d5:81:e6:14:ac:d0:07:67:d0:3c:50:bb:e0:47:
                    4f:cb:ae:09:bd:68:43:69:c4:ba:39:f7:0c:df:cf:
                    e3:92:cc:d2:8b:83:d1:fe:cc:8c:21:1c:ff:1d:b3:
                    8b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:E6:C3:17:2B:75:B9:50:91:35:F2:EB:FE:79:B1:99:32:ED:FA:A8
            X509v3 Authority Key Identifier:
                keyid:7E:FC:22:8B:80:6C:3D:5F:28:31:73:59:AE:4C:D9:80:1F:2C:9B:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C4C53/F285F1048B0E11F1AFE1EDC73211F970/fvwii4BsPV8oMXNZrkzZgB8sm54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fvwii4BsPV8oMXNZrkzZgB8sm54.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4C53/F285F1048B0E11F1AFE1EDC73211F970/fvwii4BsPV8oMXNZrkzZgB8sm54.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:dc:16:6a:bb:bc:89:fe:3d:b7:f6:0d:7a:6d:ed:78:65:c0:
         01:10:f2:fb:77:f1:cc:8d:65:f5:19:e6:67:4f:76:d7:a6:1b:
         ab:04:f7:52:35:55:62:53:f7:b6:ad:23:b3:49:d6:7e:f4:4b:
         9b:88:b3:e2:dd:cd:97:6c:57:ad:6a:9d:2b:b3:9a:92:a3:f4:
         2c:39:0e:f0:d3:74:03:54:1c:2a:3b:e8:d5:eb:38:e5:98:3f:
         03:11:07:88:06:9e:6c:f5:c9:5c:32:de:af:af:7b:90:c4:11:
         88:89:a6:92:d8:29:e8:4d:f9:1a:69:f0:b1:65:a9:39:b5:99:
         c6:5a:d0:d6:73:41:f8:84:c0:65:aa:54:57:71:7b:95:20:4b:
         7d:3a:2f:8a:a8:a6:58:2f:6d:4f:fa:ab:a0:05:1b:93:48:a0:
         e6:97:da:6b:98:12:6f:23:3d:b1:31:26:71:73:e4:c0:c1:9f:
         f0:1f:4e:57:51:86:cb:57:9e:a9:a4:9e:b8:c3:e0:10:69:be:
         1e:8b:36:4f:59:84:43:7e:07:4c:f3:87:26:22:0c:36:06:ff:
         26:89:2e:42:32:b8:64:df:4e:5a:a6:6f:26:d3:63:8d:ed:5f:
         4e:c8:c9:34:19:ab:6a:2c:dd:5b:1a:8d:68:51:8c:ae:fd:f9:
         5c:a8:95:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:41:58 2026 by rpki-client