Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/FgZOq4GuGHOhAZ0JKJb5Inpe70U.mft
File:                     FgZOq4GuGHOhAZ0JKJb5Inpe70U.mft (raw, json)
Hash identifier:          2jNymsaGDDZbEEQ0gTx3ryR1+P+SqKIwJkYy5SA8UM0=
Subject key identifier:   4A:CF:3E:53:7D:8A:32:B4:82:29:85:22:C6:38:A7:29:D8:07:04:BF
Authority key identifier: 16:06:4E:AB:81:AE:18:73:A1:01:9D:09:28:96:F9:22:7A:5E:EF:45
Certificate issuer:       /CN=A911A0C0/serialNumber=16064EAB81AE1873A1019D092896F9227A5EEF45
Certificate serial:       19F8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgZOq4GuGHOhAZ0JKJb5Inpe70U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/FgZOq4GuGHOhAZ0JKJb5Inpe70U.mft
Manifest number:          19E8
Signing time:             Tue 28 Jul 2026 16:27:53 +0000
Manifest this update:     Tue 28 Jul 2026 16:27:52 +0000
Manifest next update:     Tue 04 Aug 2026 16:27:52 +0000
Files and hashes:         1: FgZOq4GuGHOhAZ0JKJb5Inpe70U.crl (hash: ZAGYEfmxnj0zZMF4h3oq+mgKdZD9VjooMnjf+1E+NlE=)
                          2: 543AF5B283D911E78F2FA066C4F9AE02.roa (hash: VmS/Q3+6coESHGoEMtOrtTGznEUVw0iY/NUTCTx6zGg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/FgZOq4GuGHOhAZ0JKJb5Inpe70U.crl
                          rsync://rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/FgZOq4GuGHOhAZ0JKJb5Inpe70U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgZOq4GuGHOhAZ0JKJb5Inpe70U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 16:27:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6648 (0x19f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911A0C0, serialNumber=16064EAB81AE1873A1019D092896F9227A5EEF45
        Validity
            Not Before: Jul 28 16:27:52 2026 GMT
            Not After : Aug  4 16:27:52 2026 GMT
        Subject: CN=6a68d889-2e92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:86:b8:75:c1:f6:56:00:fd:0c:c6:83:31:93:
                    b7:11:3e:ce:28:7b:7d:7e:07:d4:09:f7:ea:ab:b9:
                    15:a0:75:a9:b6:ed:97:9b:3e:4e:05:7b:21:e1:a8:
                    63:9e:e6:3e:3b:4d:3a:ff:94:ec:f0:f1:96:84:fa:
                    00:eb:9e:dd:ef:dc:dd:d4:c4:c6:0c:25:57:41:ce:
                    31:3f:a7:44:c0:2c:d3:97:20:82:70:4b:5a:38:4d:
                    98:80:e5:31:2b:d5:be:c4:d9:13:61:ae:e2:95:d7:
                    a2:bb:98:83:ee:3d:10:9b:f2:62:62:01:15:b3:9d:
                    f2:06:75:fa:8a:40:29:d0:18:43:63:03:e3:96:3e:
                    a8:c6:76:97:fd:1f:b2:3d:43:dd:8c:66:b3:97:fc:
                    ff:9d:13:b0:89:72:ee:8a:d4:46:ac:97:8b:73:04:
                    70:7e:ec:5b:0e:1f:08:94:be:3c:ab:f5:d0:4a:73:
                    5e:d1:86:d0:88:3a:2f:3e:5d:3d:75:5d:0f:3c:c5:
                    9f:67:65:11:97:73:bc:b3:16:4f:30:9c:14:7a:08:
                    87:ad:1e:aa:b1:0d:14:65:06:aa:8b:14:91:40:91:
                    06:bc:88:32:f1:95:df:ae:6b:f5:3e:3f:b3:8b:69:
                    14:2c:da:00:f4:4b:7d:ec:88:38:86:77:a9:a6:77:
                    50:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:CF:3E:53:7D:8A:32:B4:82:29:85:22:C6:38:A7:29:D8:07:04:BF
            X509v3 Authority Key Identifier:
                keyid:16:06:4E:AB:81:AE:18:73:A1:01:9D:09:28:96:F9:22:7A:5E:EF:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/FgZOq4GuGHOhAZ0JKJb5Inpe70U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgZOq4GuGHOhAZ0JKJb5Inpe70U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/FgZOq4GuGHOhAZ0JKJb5Inpe70U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:ab:21:6c:95:e1:46:7f:72:8b:1d:73:17:8d:78:5e:56:f3:
         7b:f5:a2:4c:0c:27:61:5c:1a:21:15:e0:73:63:2e:1b:79:cf:
         e5:04:b1:f9:3d:57:c3:40:d7:cd:a4:09:b9:a7:05:bc:6f:07:
         d4:8b:ba:87:41:ea:ba:a6:b5:15:df:e0:2b:d4:64:72:6c:91:
         b9:35:bb:dc:b1:c0:40:c5:70:5e:de:96:7a:de:56:57:1f:3e:
         ad:52:e7:7a:e7:e8:b3:ff:4f:f0:b4:86:11:d7:b5:12:32:24:
         7d:6e:8c:b9:26:5c:8b:05:be:bc:07:34:e6:09:28:a4:02:4c:
         85:0b:69:a4:39:93:cc:63:06:90:ea:c3:22:f0:f0:88:9e:03:
         ec:b4:6a:22:c6:4a:3b:22:6f:17:a3:06:1c:f8:3f:49:b7:b4:
         2b:13:67:37:74:f7:26:9b:e8:a9:36:ee:be:a6:98:dc:73:a2:
         9e:d0:5a:0c:6b:35:43:84:3a:e3:16:5d:b0:56:6e:af:36:19:
         a4:ed:73:c5:a2:20:2d:79:e6:c1:9a:92:29:f7:65:a0:04:58:
         16:2d:4e:69:a5:e9:c7:bf:45:83:76:61:1b:86:ee:70:d9:63:
         46:84:ad:f7:0b:bb:fa:f3:79:95:f2:d4:86:79:9b:97:51:e1:
         2d:6e:a0:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:59:06 2026 by rpki-client