Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft
File:                     FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft (raw, json)
Hash identifier:          6ICC0ZOSTdp6MSZEC75vQ41jWI/zSsn6T3vBtWXHP4w=
Subject key identifier:   92:41:58:9F:0C:2B:58:38:EA:77:CC:38:34:36:72:36:CA:57:EA:7A
Authority key identifier: 14:66:40:77:58:A8:D7:B9:35:69:48:96:D5:02:75:28:06:79:AF:29
Certificate issuer:       /CN=A9121188/serialNumber=1466407758A8D7B935694896D50275280679AF29
Certificate serial:       01E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FGZAd1io17k1aUiW1QJ1KAZ5ryk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft
Manifest number:          01E2
Signing time:             Sat 13 Jun 2026 03:27:06 +0000
Manifest this update:     Sat 13 Jun 2026 03:27:05 +0000
Manifest next update:     Sat 20 Jun 2026 03:27:05 +0000
Files and hashes:         1: FGZAd1io17k1aUiW1QJ1KAZ5ryk.crl (hash: yJlzOGJ95Lc6StHcA19T3MJwyNgbvk09iro/bW225wk=)
                          2: 91FC411C836411EE80C08641C4F9AE02.roa (hash: y7rF5vkt8RhtipSe8v56RC2oUIIDL8ARxP+tAlU5uD0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.crl
                          rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FGZAd1io17k1aUiW1QJ1KAZ5ryk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 03:27:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 487 (0x1e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9121188, serialNumber=1466407758A8D7B935694896D50275280679AF29
        Validity
            Not Before: Jun 13 03:27:05 2026 GMT
            Not After : Jun 20 03:27:05 2026 GMT
        Subject: CN=6a2cce0a-db42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:74:a7:36:90:94:81:2a:50:a6:fa:f8:37:51:
                    68:4d:9c:f4:7f:4d:4b:9e:86:7c:bc:56:03:fb:7d:
                    c1:e2:49:a6:49:58:ca:3a:f2:be:2b:7d:dd:06:a2:
                    9c:e7:b6:d3:aa:05:98:3e:f2:d5:01:2a:56:3d:50:
                    62:c2:9e:89:13:8b:55:fe:a1:c9:27:f2:69:e3:b5:
                    48:76:7b:76:17:df:a2:6d:4c:75:79:a6:50:38:21:
                    74:c8:a5:b4:4c:90:2f:74:98:11:0b:bb:a8:91:7a:
                    d8:df:f6:36:da:51:cc:26:25:46:79:3a:4f:96:61:
                    a9:a8:2f:ef:50:c9:4a:1b:7c:f8:77:d9:88:87:35:
                    24:52:69:ae:87:ca:65:52:ac:3a:05:dc:b3:ee:53:
                    c4:1f:f9:28:14:76:8d:5e:85:92:d9:3c:3b:89:35:
                    78:4a:92:ac:e8:c0:5c:7b:92:6d:3c:3b:af:0f:53:
                    3a:a1:23:2d:97:49:ba:45:a8:29:49:ef:ed:8d:1d:
                    03:8a:47:ee:45:91:e8:6a:08:15:a7:8b:29:98:96:
                    3f:5d:62:c5:2f:18:f7:1c:fd:f7:d6:f1:95:62:7f:
                    3f:32:27:9d:fc:77:23:4d:b3:bd:42:0d:34:5b:f3:
                    63:c3:9a:23:e5:8a:c6:f5:39:58:d3:ce:3d:25:b3:
                    a2:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:41:58:9F:0C:2B:58:38:EA:77:CC:38:34:36:72:36:CA:57:EA:7A
            X509v3 Authority Key Identifier:
                keyid:14:66:40:77:58:A8:D7:B9:35:69:48:96:D5:02:75:28:06:79:AF:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FGZAd1io17k1aUiW1QJ1KAZ5ryk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:73:0d:32:e0:18:c0:a0:de:87:ec:3f:b6:b6:ef:bc:b1:d0:
         25:9c:14:6e:ff:d9:f2:f3:3b:76:e1:ba:98:c5:d4:fb:b5:33:
         e0:10:22:e9:79:c4:69:c4:79:38:4a:1f:a9:73:18:b0:ca:3f:
         69:c2:63:1f:1c:b1:33:91:9b:95:f7:03:0f:85:4d:22:03:51:
         14:be:e3:3f:fd:69:31:db:44:0c:4f:6b:11:ef:6c:75:d2:82:
         6b:3c:26:7a:cf:f3:0b:d2:9f:41:ac:b5:5e:2e:8f:f1:27:74:
         14:9c:04:1e:57:d3:ac:7f:c7:54:8f:e3:80:fb:d3:d0:93:9d:
         4c:8e:22:9e:da:a1:97:96:95:35:2a:c1:75:bd:b6:1a:bb:80:
         e1:e4:bf:f7:22:4d:d5:a1:f8:b1:b6:2a:12:50:22:9c:22:74:
         d5:ce:28:8e:c5:5f:8e:7c:57:e7:20:82:51:88:1b:4c:61:c9:
         0d:bd:a4:1c:0c:82:8d:fd:24:1e:74:19:35:99:2a:f4:f3:54:
         e2:b5:d3:98:52:69:8b:26:05:25:f7:0f:2d:60:a0:f1:5f:0c:
         db:e5:10:34:20:55:49:65:4d:a3:db:74:b8:c7:d6:dd:07:41:
         b3:ea:42:80:9e:60:fd:5a:ee:99:b5:49:5b:0b:e1:79:b8:83:
         b1:d9:29:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:51:46 2026 by rpki-client