Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.mft
File:                     FWV3K3tOvoUEnSr5syrMh4AxGl0.mft (raw, json)
Hash identifier:          cYj8FA1945xmKwjig/NAEOicIKMz20Fc4Yv1vxwNdbQ=
Subject key identifier:   D8:6A:D6:83:B5:69:A3:AD:25:FD:13:A7:53:2B:32:1B:76:D7:6F:5B
Authority key identifier: 15:65:77:2B:7B:4E:BE:85:04:9D:2A:F9:B3:2A:CC:87:80:31:1A:5D
Certificate issuer:       /CN=A91251AD/serialNumber=1565772B7B4EBE85049D2AF9B32ACC8780311A5D
Certificate serial:       0486
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWV3K3tOvoUEnSr5syrMh4AxGl0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.mft
Manifest number:          0473
Signing time:             Sat 13 Jun 2026 00:10:01 +0000
Manifest this update:     Sat 13 Jun 2026 00:10:00 +0000
Manifest next update:     Sat 20 Jun 2026 00:10:00 +0000
Files and hashes:         1: FWV3K3tOvoUEnSr5syrMh4AxGl0.crl (hash: TgWiILdaJmyupcNyOjuBC7k5e4smkgyb2AU1+Bctb2A=)
                          2: 32F4B5BA3F0411F1BF0D1E0CC9833773.roa (hash: 7D5axyTJpCXlvT4hwQ1+3Thr7ZRX7mL6gQ5Gjrbulvc=)
                          3: D2FE3A16501411F084311D4CC4F9AE02.roa (hash: MwkXsOYorcCOGMXvR2DJqBnlmq41YtK23RLEq86D5Jo=)
                          4: 812D990C282C11F194294EA0C6833773.roa (hash: wg5kaxnt1h8sr9PZA8paXY5KbEBORSUI0crLfAxJcUM=)
                          5: EB9FE0C2500C11F0AC93B675C4F9AE02.roa (hash: Q+dL2W7eAJ3DJlsw7AhajpgSkws/8wtOeo5r7hNa/fM=)
                          6: 2106E428992111EC99E0095AC4F9AE02.roa (hash: yIepWjS0oZcQGSmT9ESi5QJXbvdq+Yq0vyuRnX4kFy4=)
                          7: 412371002A5911F08EA23244C4F9AE02.roa (hash: D1yfDyTJLdVgKeV2rHlPTQBf9awpPyRXNzKhhL6qHEI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.crl
                          rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWV3K3tOvoUEnSr5syrMh4AxGl0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 00:09:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1158 (0x486)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91251AD, serialNumber=1565772B7B4EBE85049D2AF9B32ACC8780311A5D
        Validity
            Not Before: Jun 13 00:10:00 2026 GMT
            Not After : Jun 20 00:10:00 2026 GMT
        Subject: CN=6a2c9fd8-a751
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:10:7e:39:c8:f6:33:20:6c:4b:47:99:f4:e9:
                    6b:10:8a:e2:f0:f5:9b:d1:fb:99:1b:af:b7:65:5b:
                    86:fe:e9:da:ce:45:18:1b:1c:49:3c:85:23:73:58:
                    08:b4:9e:3c:f8:2b:5c:98:d0:39:08:30:ab:4a:16:
                    72:c2:02:36:a1:b2:28:e3:55:73:ba:41:fa:c6:0d:
                    ec:ac:6b:25:d2:82:bb:9c:e9:d4:77:78:65:cd:63:
                    f7:6a:5f:2d:ba:1b:ad:18:66:48:da:44:e4:65:8e:
                    62:ca:22:f7:df:f3:2a:c6:b2:02:7a:1d:e1:68:1a:
                    8c:f5:09:8d:84:40:42:ad:ff:c1:81:b9:70:2c:93:
                    cd:63:84:3b:31:55:c8:d3:0c:8c:8f:5e:73:fc:c9:
                    c7:0a:bb:40:24:83:8f:81:08:41:87:4f:05:e3:12:
                    41:c3:b9:fa:b2:f7:3a:5e:4c:77:b5:dd:52:0a:16:
                    00:3f:e8:86:b8:2a:5d:df:a7:83:83:68:f4:5e:8f:
                    19:d8:4c:de:d6:b2:35:85:0d:fa:0d:68:a1:ef:c7:
                    d9:89:17:00:b4:29:46:85:72:8c:6e:2d:f1:58:f9:
                    2f:cf:77:1f:76:b8:4c:a0:35:f3:8b:5e:48:06:0c:
                    01:f9:fe:7c:18:c1:12:01:9d:d9:00:a3:0b:8d:dc:
                    f4:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:6A:D6:83:B5:69:A3:AD:25:FD:13:A7:53:2B:32:1B:76:D7:6F:5B
            X509v3 Authority Key Identifier:
                keyid:15:65:77:2B:7B:4E:BE:85:04:9D:2A:F9:B3:2A:CC:87:80:31:1A:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWV3K3tOvoUEnSr5syrMh4AxGl0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:89:d8:ca:27:8c:74:fe:38:35:b3:45:4e:74:27:d1:72:63:
         aa:ea:01:c8:3e:19:16:cd:c9:c1:d9:4a:62:b0:4c:4a:bb:ee:
         87:5f:82:6f:1b:8e:f3:39:10:04:0e:1f:ee:2b:23:b4:0d:9d:
         f1:8b:95:9b:0c:dd:62:c9:8d:f6:85:d8:c6:75:35:4e:e6:76:
         da:24:3c:4e:82:7d:54:80:04:ef:85:78:a9:9d:07:71:ce:ca:
         d8:4d:8f:50:7d:97:18:44:a6:13:17:46:97:47:93:28:05:59:
         02:45:56:7d:56:a6:d4:3e:a3:74:c7:c2:5b:ed:de:ce:9b:a4:
         b2:69:fa:f5:6c:f8:92:54:60:e8:7c:22:ca:0d:82:82:7e:c0:
         45:05:26:7a:3b:8b:a4:2d:48:e5:ab:e8:79:7a:00:72:87:09:
         ee:45:f3:9f:93:0d:22:35:a6:7e:ae:b9:33:c1:76:1f:f9:e4:
         50:7d:dc:bb:2d:e8:14:e8:d5:5f:d5:5b:38:5c:ad:c6:7b:4d:
         a6:12:21:38:dc:a0:49:f7:b7:dd:05:54:20:26:7d:c9:b9:c0:
         ce:0f:ac:c8:a6:4d:f9:1b:bd:d4:e4:f8:c0:44:c9:6e:90:86:
         a1:19:b9:c1:17:01:88:89:d5:03:26:9b:ec:8a:b3:cc:f1:0e:
         6f:78:39:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:10:58 2026 by rpki-client