Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D12C2/B2FE35DE378011EAB2141374C4F9AE02/FmUgpBWnVONYZSxXkM6GtLJjLdE.mft
File:                     FmUgpBWnVONYZSxXkM6GtLJjLdE.mft (raw, json)
Hash identifier:          32fMqlGK/wKgHt+TkvCdKosfCqOHaFQwPVIBOzKZ/jM=
Subject key identifier:   5A:62:86:02:B8:E3:A0:2D:92:80:05:28:2B:54:88:93:39:FD:53:49
Authority key identifier: 16:65:20:A4:15:A7:54:E3:58:65:2C:57:90:CE:86:B4:B2:63:2D:D1
Certificate issuer:       /CN=A91D12C2/serialNumber=166520A415A754E358652C5790CE86B4B2632DD1
Certificate serial:       0C2E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FmUgpBWnVONYZSxXkM6GtLJjLdE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D12C2/B2FE35DE378011EAB2141374C4F9AE02/FmUgpBWnVONYZSxXkM6GtLJjLdE.mft
Manifest number:          0C25
Signing time:             Tue 18 Aug 2026 19:03:29 +0000
Manifest this update:     Tue 18 Aug 2026 19:03:28 +0000
Manifest next update:     Tue 25 Aug 2026 19:03:28 +0000
Files and hashes:         1: FmUgpBWnVONYZSxXkM6GtLJjLdE.crl (hash: j+drPMaOqbd+QBmgDI8MdMTcqutwtECI+vsaORuOWb0=)
                          2: 6C8823E2378211EA8FE81077C4F9AE02.roa (hash: FpZm2QP1SUCe57Fvsf80SOu98+2+4rTMgSRz2gTn3gs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D12C2/B2FE35DE378011EAB2141374C4F9AE02/FmUgpBWnVONYZSxXkM6GtLJjLdE.crl
                          rsync://rpki.apnic.net/member_repository/A91D12C2/B2FE35DE378011EAB2141374C4F9AE02/FmUgpBWnVONYZSxXkM6GtLJjLdE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FmUgpBWnVONYZSxXkM6GtLJjLdE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 19:03:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3118 (0xc2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D12C2, serialNumber=166520A415A754E358652C5790CE86B4B2632DD1
        Validity
            Not Before: Aug 18 19:03:28 2026 GMT
            Not After : Aug 25 19:03:28 2026 GMT
        Subject: CN=6a84ac81-632c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ce:3b:64:84:a1:3f:c4:a4:28:72:dc:df:2e:
                    b0:aa:de:3c:86:1e:0f:78:a6:79:44:4e:ee:90:53:
                    25:96:8c:10:d8:41:9b:1c:78:48:77:58:e3:4e:33:
                    57:4c:ce:b6:30:56:7a:01:90:ed:fa:16:7f:f0:aa:
                    6d:ab:ae:a5:f3:3c:42:fd:6d:41:df:1a:c7:1c:04:
                    d1:62:10:0e:32:63:40:6f:11:08:4a:7c:d3:0a:75:
                    ff:20:87:5f:d5:ea:5a:15:ec:39:7c:5e:1c:e0:69:
                    0e:a3:80:a9:ae:31:50:65:c1:87:8c:67:20:99:bd:
                    2a:be:ba:65:ef:88:07:8d:04:b3:1c:7c:df:fa:57:
                    55:9a:03:e7:89:d2:ed:b1:46:24:49:e3:eb:dc:b4:
                    ac:7c:6d:bc:02:c7:3a:ea:05:88:59:65:c2:53:de:
                    64:30:e5:27:5e:d4:ca:4a:dd:25:95:c8:3d:6a:88:
                    1b:17:56:89:8d:2c:62:2e:cd:ec:ce:de:fa:31:a2:
                    ca:58:bc:2d:81:09:7a:e2:10:c5:98:29:9f:f9:57:
                    43:6e:53:24:25:bd:20:06:69:10:e8:c5:5b:55:61:
                    6d:83:98:e7:ee:27:d3:26:d6:df:bb:ac:2e:61:83:
                    ca:43:a5:88:51:8b:bf:c6:0e:ed:ae:40:f1:5a:f7:
                    af:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:62:86:02:B8:E3:A0:2D:92:80:05:28:2B:54:88:93:39:FD:53:49
            X509v3 Authority Key Identifier:
                keyid:16:65:20:A4:15:A7:54:E3:58:65:2C:57:90:CE:86:B4:B2:63:2D:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D12C2/B2FE35DE378011EAB2141374C4F9AE02/FmUgpBWnVONYZSxXkM6GtLJjLdE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FmUgpBWnVONYZSxXkM6GtLJjLdE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D12C2/B2FE35DE378011EAB2141374C4F9AE02/FmUgpBWnVONYZSxXkM6GtLJjLdE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:b2:10:cc:34:88:b8:ae:28:5e:ce:dd:31:9a:17:e5:a2:6b:
         4e:d3:88:4b:64:47:19:2c:85:23:ff:9a:9a:0b:4c:76:f4:a3:
         b1:47:bf:69:87:a8:86:a1:16:35:97:3b:b3:c5:6f:14:31:b7:
         a2:c1:41:d6:72:fe:90:d9:23:4f:d2:93:73:b5:00:f7:17:35:
         fd:a2:37:db:75:50:38:7b:ce:a5:5a:5a:f1:19:b2:e9:68:8f:
         30:15:c6:55:98:96:40:e1:e6:dd:a9:d1:5a:5c:50:e6:f9:a5:
         1d:c6:ac:ea:e0:90:64:f2:3d:97:62:c0:01:12:b9:d7:41:a1:
         b7:7d:dc:db:c9:ab:7d:18:f1:3c:92:5a:96:f3:28:de:83:93:
         f2:f9:78:64:9f:f8:87:9c:58:06:0b:bc:af:98:6b:41:bd:be:
         28:f9:38:99:ce:8e:c1:66:24:bc:b1:20:c6:94:59:2b:b3:53:
         9d:ab:81:fc:e3:e8:5d:44:e9:da:5e:da:80:82:ad:02:3d:cf:
         df:91:6b:22:c0:6a:41:b7:7f:69:a0:51:ff:8e:62:5c:8b:af:
         73:f8:59:23:ab:ed:cd:ba:da:07:cb:6a:0e:91:54:64:da:e6:
         24:48:1f:b3:5c:7d:4d:81:50:62:4a:9b:5d:10:54:07:db:24:
         bc:51:40:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:56:16 2026 by rpki-client