Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDD88/C8236AC2049011EC8CC1A386C4F9AE02/FBD9h4cUD_mXb-nB-lhE7V3R48U.mft
File:                     FBD9h4cUD_mXb-nB-lhE7V3R48U.mft (raw, json)
Hash identifier:          47INPm5pMhgkthyb0EUOsEmQggKzLvc13OqtkjQZBc8=
Subject key identifier:   1C:0A:BD:6E:95:DE:B7:C7:CE:F4:1F:ED:B5:07:A1:20:5B:BC:66:E4
Authority key identifier: 14:10:FD:87:87:14:0F:F9:97:6F:E9:C1:FA:58:44:ED:5D:D1:E3:C5
Certificate issuer:       /CN=A91FDD88/serialNumber=1410FD8787140FF9976FE9C1FA5844ED5DD1E3C5
Certificate serial:       05D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FBD9h4cUD_mXb-nB-lhE7V3R48U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FDD88/C8236AC2049011EC8CC1A386C4F9AE02/FBD9h4cUD_mXb-nB-lhE7V3R48U.mft
Manifest number:          05D0
Signing time:             Wed 20 May 2026 23:06:38 +0000
Manifest this update:     Wed 20 May 2026 23:06:38 +0000
Manifest next update:     Wed 27 May 2026 23:06:38 +0000
Files and hashes:         1: FBD9h4cUD_mXb-nB-lhE7V3R48U.crl (hash: BVZaAMzuK3lzHceCUuucinPxOS+/tScPsVnMhIel5Ng=)
                          2: A2835264049511ECB774BA31C4F9AE02.roa (hash: f4Fr0Wm4hRAjomJLBDiV5gFbrZywSJyJuObbSUgOIx0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FDD88/C8236AC2049011EC8CC1A386C4F9AE02/FBD9h4cUD_mXb-nB-lhE7V3R48U.crl
                          rsync://rpki.apnic.net/member_repository/A91FDD88/C8236AC2049011EC8CC1A386C4F9AE02/FBD9h4cUD_mXb-nB-lhE7V3R48U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FBD9h4cUD_mXb-nB-lhE7V3R48U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 23:06:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1496 (0x5d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FDD88, serialNumber=1410FD8787140FF9976FE9C1FA5844ED5DD1E3C5
        Validity
            Not Before: May 20 23:06:38 2026 GMT
            Not After : May 27 23:06:38 2026 GMT
        Subject: CN=6a0e3e7e-1b65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1d:1f:13:38:02:4d:aa:74:03:4e:45:87:dd:
                    70:52:1f:4f:12:03:70:fc:ec:fb:8d:78:97:9c:e3:
                    56:3e:ac:e5:e5:23:bb:00:a5:13:18:a7:3e:5a:df:
                    d7:17:c5:4f:0f:47:0c:e0:84:b1:7d:2b:eb:62:e8:
                    65:3d:fc:53:bb:6d:43:25:3c:8a:ee:eb:46:23:12:
                    ee:a5:8d:7e:39:db:d0:6d:41:8b:50:33:0d:6a:c0:
                    0e:de:61:7b:4d:56:35:ff:8a:f8:16:15:0d:be:d0:
                    e0:f8:75:de:35:33:87:84:6d:bc:19:76:20:36:20:
                    2b:6e:54:91:0b:cb:a7:a4:79:85:c8:13:a5:cf:a7:
                    fd:25:59:31:f4:c4:6b:c0:a0:9e:ae:4b:b5:12:18:
                    e9:03:33:1a:b1:70:21:07:31:02:ee:b1:06:5e:38:
                    cf:6d:fe:f6:38:c2:50:5c:f2:2c:ee:04:4b:b3:89:
                    9d:00:b0:dd:cc:0b:12:c9:fd:66:b3:1b:76:a9:59:
                    72:7a:0f:5d:ec:50:37:aa:18:73:dd:47:18:82:cf:
                    48:5c:bd:be:f7:52:0b:6c:20:ea:83:e0:b0:4b:6f:
                    d3:28:92:84:82:2e:fd:02:82:c6:7a:06:16:88:a5:
                    da:2d:f7:fa:9d:bb:14:78:5d:8d:38:1e:37:5f:32:
                    83:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:0A:BD:6E:95:DE:B7:C7:CE:F4:1F:ED:B5:07:A1:20:5B:BC:66:E4
            X509v3 Authority Key Identifier:
                keyid:14:10:FD:87:87:14:0F:F9:97:6F:E9:C1:FA:58:44:ED:5D:D1:E3:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FDD88/C8236AC2049011EC8CC1A386C4F9AE02/FBD9h4cUD_mXb-nB-lhE7V3R48U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FBD9h4cUD_mXb-nB-lhE7V3R48U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDD88/C8236AC2049011EC8CC1A386C4F9AE02/FBD9h4cUD_mXb-nB-lhE7V3R48U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:47:8d:0b:bb:f7:4a:53:d2:7e:b2:e7:3e:98:38:0a:09:4c:
         7c:0d:0d:8e:ee:fa:dd:a7:24:36:9d:f2:db:88:32:99:42:fc:
         db:80:6b:03:4e:8b:28:97:37:76:76:1c:47:70:0d:5c:a3:3b:
         66:64:4b:f4:2e:84:11:b6:a7:de:28:10:a1:07:a1:c6:71:06:
         e4:3d:73:9a:5f:23:34:87:27:93:30:a7:51:8a:f1:f3:03:95:
         df:56:68:84:09:a9:31:a9:1c:08:39:21:f4:43:7b:de:8d:32:
         cf:a9:0d:f2:c0:83:29:3e:25:b5:82:09:9d:94:10:f7:78:32:
         4d:e8:ec:37:9d:1f:89:2d:0a:6f:ed:55:6c:80:59:66:dc:a2:
         13:1b:e6:97:b0:a5:ff:1b:40:fe:d3:fb:72:64:42:dc:27:2c:
         f3:a5:b8:b1:a4:fe:16:4f:19:ae:70:2b:15:79:7a:93:ee:d0:
         5e:cf:fe:d9:c8:5c:ba:8c:c5:19:19:40:b6:72:cb:a3:48:69:
         35:52:c2:17:bd:3a:08:1b:af:25:9f:9a:0d:5b:db:23:c4:e8:
         e1:e8:b2:35:6d:6c:bd:4a:46:d2:37:c4:59:1d:a7:1b:64:c5:
         3a:0d:eb:7c:e1:ab:19:55:cf:08:a7:69:12:14:77:38:de:4f:
         0a:71:60:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:38:09 2026 by rpki-client