Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911EED9/2EE37E3C43A711F1A59112E093833773/FMMrInaBES_Vu7WzaYO1aHEWc8A.mft
File:                     FMMrInaBES_Vu7WzaYO1aHEWc8A.mft (raw, json)
Hash identifier:          +FQimZVKh/edCUg32x0UMTCHAgAbt1amELqWdd7YXKs=
Subject key identifier:   B9:24:26:49:A0:04:BF:0D:56:E0:F9:F0:F9:BA:17:D3:1B:8A:07:93
Authority key identifier: 14:C3:2B:22:76:81:11:2F:D5:BB:B5:B3:69:83:B5:68:71:16:73:C0
Certificate issuer:       /CN=A911EED9/serialNumber=14C32B227681112FD5BBB5B36983B568711673C0
Certificate serial:       2D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FMMrInaBES_Vu7WzaYO1aHEWc8A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911EED9/2EE37E3C43A711F1A59112E093833773/FMMrInaBES_Vu7WzaYO1aHEWc8A.mft
Manifest number:          2D
Signing time:             Mon 27 Jul 2026 11:03:58 +0000
Manifest this update:     Mon 27 Jul 2026 11:03:58 +0000
Manifest next update:     Mon 03 Aug 2026 11:03:58 +0000
Files and hashes:         1: FMMrInaBES_Vu7WzaYO1aHEWc8A.crl (hash: dy1uKCuLnHMwnA+W0GfO31hzu0j2ulFC1HT++7XW48c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911EED9/2EE37E3C43A711F1A59112E093833773/FMMrInaBES_Vu7WzaYO1aHEWc8A.crl
                          rsync://rpki.apnic.net/member_repository/A911EED9/2EE37E3C43A711F1A59112E093833773/FMMrInaBES_Vu7WzaYO1aHEWc8A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FMMrInaBES_Vu7WzaYO1aHEWc8A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 11:03:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 45 (0x2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911EED9, serialNumber=14C32B227681112FD5BBB5B36983B568711673C0
        Validity
            Not Before: Jul 27 11:03:58 2026 GMT
            Not After : Aug  3 11:03:58 2026 GMT
        Subject: CN=6a673b1e-ee3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ea:6f:08:38:75:97:a9:1b:eb:33:5f:7c:07:
                    fa:cd:de:e8:8b:ac:1f:68:24:ce:1a:4e:f4:a3:6f:
                    c9:f5:a9:44:d2:e6:c4:d6:6a:77:85:32:e4:d3:b8:
                    c3:88:dc:dd:ca:4b:f6:21:05:57:87:91:dc:d9:e3:
                    51:fd:40:99:10:f3:06:29:a5:bb:a6:c1:9d:20:de:
                    4d:f9:93:4f:43:7f:76:71:fb:3c:c4:ee:8e:49:01:
                    e0:4f:fc:79:74:9a:f0:69:c6:8f:5f:29:62:5e:aa:
                    24:5d:b2:58:e6:b8:bf:0b:dc:03:b7:79:db:1e:8f:
                    6d:ca:14:b9:21:a2:9c:c6:d5:82:9f:7f:cb:56:37:
                    50:1c:13:c8:3b:36:44:aa:80:f9:35:f4:71:45:26:
                    17:78:41:9e:d0:d6:7f:ba:39:79:45:df:cd:41:b0:
                    d1:95:1d:04:68:c2:10:45:6b:8b:28:e4:d2:52:4f:
                    a4:c4:67:47:ce:dd:7b:a3:37:4f:65:31:18:a2:7a:
                    d5:0d:2b:23:0d:36:17:18:34:2c:f5:d3:78:e1:3b:
                    77:da:31:4d:63:76:f1:c4:eb:6a:e1:b2:15:fd:9d:
                    d7:4a:fa:2d:7a:d3:5a:60:08:29:04:6e:7d:35:58:
                    28:d4:b8:60:cb:a9:f7:6f:0a:13:d6:e1:2d:83:4f:
                    3c:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:24:26:49:A0:04:BF:0D:56:E0:F9:F0:F9:BA:17:D3:1B:8A:07:93
            X509v3 Authority Key Identifier:
                keyid:14:C3:2B:22:76:81:11:2F:D5:BB:B5:B3:69:83:B5:68:71:16:73:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911EED9/2EE37E3C43A711F1A59112E093833773/FMMrInaBES_Vu7WzaYO1aHEWc8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FMMrInaBES_Vu7WzaYO1aHEWc8A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EED9/2EE37E3C43A711F1A59112E093833773/FMMrInaBES_Vu7WzaYO1aHEWc8A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:21:8f:0c:08:5b:26:79:0a:a1:19:f5:b6:ef:83:95:bf:40:
         1e:4f:f8:e4:c4:87:2e:81:7d:17:fc:2b:4e:cd:fe:e6:f1:46:
         6b:3c:46:3e:9d:bb:9b:56:37:aa:9e:54:b0:64:66:60:d3:4a:
         7e:e7:a6:6c:bc:a1:c5:44:3c:c6:67:fa:d6:ab:4c:69:16:6f:
         0d:e5:42:5d:d6:ce:64:46:ab:dd:93:97:0f:c8:50:fc:00:dc:
         26:6a:ad:f4:c7:3c:0e:e6:07:ac:09:be:e7:57:36:af:68:ad:
         6c:97:c0:e1:7e:1c:a0:1b:90:60:3d:cd:ad:76:0c:ce:5b:75:
         f6:91:69:07:ba:d0:5f:29:0e:71:27:72:30:96:11:59:c4:85:
         12:8e:fe:66:07:24:92:c9:7c:18:d8:e4:b2:51:55:d3:6e:5c:
         ba:40:a9:b6:13:5a:e5:7b:32:b0:a9:a6:0d:b4:38:91:2a:46:
         d7:56:53:97:a0:43:1d:e5:15:a0:58:8c:bf:c4:fb:bd:e1:8b:
         5c:06:2c:f4:e1:5e:9a:3b:cf:18:15:c1:7a:91:2a:ce:52:21:
         3f:cc:28:94:45:6a:af:f2:00:f4:31:fd:78:c8:73:49:8e:9c:
         73:2d:f7:37:51:bd:a9:5d:f1:0f:94:1a:cd:98:93:62:03:97:
         48:ae:02:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:07:52 2026 by rpki-client