Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.mft
File:                     -ffptMwx85XFzbj6yfUvyldSTeE.mft (raw, json)
Hash identifier:          WX+g4xtgRUiEFAvT/n9DDU2H50Id9yXYOqFh4XFrKGc=
Subject key identifier:   BC:09:25:A1:4E:64:4B:97:06:49:F1:DD:DB:08:E0:F4:6C:19:E0:D9
Authority key identifier: F9:F7:E9:B4:CC:31:F3:95:C5:CD:B8:FA:C9:F5:2F:CA:57:52:4D:E1
Certificate issuer:       /CN=A912DFFA/serialNumber=F9F7E9B4CC31F395C5CDB8FAC9F52FCA57524DE1
Certificate serial:       0395
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ffptMwx85XFzbj6yfUvyldSTeE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.mft
Manifest number:          0371
Signing time:             Sat 13 Jun 2026 00:57:00 +0000
Manifest this update:     Sat 13 Jun 2026 00:57:00 +0000
Manifest next update:     Sat 20 Jun 2026 00:57:00 +0000
Files and hashes:         1: -ffptMwx85XFzbj6yfUvyldSTeE.crl (hash: uF2Ds6xO0sRZVR0CS+zJJjQ3ElaH8JhR7CKTKch8ufU=)
                          2: A38DD8D40E1111F1B60944950A3D8C67.roa (hash: 8xomlP6u/pFuCS+4ZI0VqTn0cJ1Ypm6zhDkBB6EqaYQ=)
                          3: 9770D05EBC4211F0B94CE580C4F9AE02.roa (hash: EKVGFJ/g32vu6i1eB7NEFOf+Zsly8ubAP4iYudVd5gM=)
                          4: 14A16ED4F0C011EFB89A0131C4F9AE02.roa (hash: JiCW8fyrxd1H5hhanenqtI3Q+to3q8hEENBSB39tRpc=)
                          5: 0EDE44B2797511EF9F3FEC4CC4F9AE02.roa (hash: X52OCC/lE3b4nsh0tIE1/ie7TTPJC9iTuuS5fQwz44I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.crl
                          rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ffptMwx85XFzbj6yfUvyldSTeE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 00:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 917 (0x395)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912DFFA, serialNumber=F9F7E9B4CC31F395C5CDB8FAC9F52FCA57524DE1
        Validity
            Not Before: Jun 13 00:57:00 2026 GMT
            Not After : Jun 20 00:57:00 2026 GMT
        Subject: CN=6a2caadc-8342
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:1b:f6:96:8e:43:63:07:06:b3:34:d6:c1:ee:
                    17:b7:db:7a:28:61:86:f8:ac:b6:1a:95:b6:08:c3:
                    21:20:39:e9:5c:27:00:e1:3a:c6:5f:59:67:ee:75:
                    68:8c:76:eb:b3:ff:d4:c0:cb:43:35:d6:8c:5c:a6:
                    93:95:d3:c3:10:7e:43:33:59:43:4b:bd:cd:40:ac:
                    41:62:d7:25:c4:79:97:3a:6e:2b:12:8b:97:0e:5e:
                    ee:92:b2:c7:89:fa:2c:42:9b:f8:49:dd:e2:cd:35:
                    2e:bb:72:9d:40:4e:06:ed:dc:c9:45:20:d1:24:22:
                    bd:64:c3:6b:71:89:ea:d2:b5:8d:40:a2:dc:4b:26:
                    8d:a8:8d:cf:d8:11:41:25:69:bb:50:72:56:f1:80:
                    11:be:6f:39:76:b7:c7:96:e0:8b:85:fe:ad:45:af:
                    b5:d4:b0:bc:dc:b5:f9:ea:d4:d0:c4:af:8e:2c:88:
                    e4:47:82:03:aa:85:7d:be:5b:e0:22:bb:48:32:e0:
                    5b:ea:e9:da:c6:41:68:df:2e:5f:07:ca:85:58:79:
                    0b:0a:9b:b5:91:ce:0d:6e:00:4f:0b:d1:23:9e:d2:
                    a2:01:49:72:f8:e7:0b:14:9a:64:1a:9e:8e:b2:29:
                    2e:75:30:5a:6a:b2:0f:d2:2b:b5:e8:9d:9c:a7:53:
                    c4:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:09:25:A1:4E:64:4B:97:06:49:F1:DD:DB:08:E0:F4:6C:19:E0:D9
            X509v3 Authority Key Identifier:
                keyid:F9:F7:E9:B4:CC:31:F3:95:C5:CD:B8:FA:C9:F5:2F:CA:57:52:4D:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ffptMwx85XFzbj6yfUvyldSTeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:0d:b4:5d:a2:69:6c:02:b0:cf:ff:b2:4f:59:e7:0f:51:18:
         79:6e:56:0e:ad:8a:e7:f9:18:af:12:5c:f3:2b:3c:fc:b1:84:
         f6:d7:b7:07:1d:c8:9f:3f:e9:9f:72:73:00:ba:be:d8:fa:d5:
         a1:6d:20:51:07:d6:d2:5a:0e:40:62:ed:1c:67:34:86:f2:e7:
         11:ee:8b:ef:6c:e9:a9:d4:de:71:8b:e0:a1:2d:55:19:3e:4b:
         e7:12:8a:aa:a2:29:b3:b2:71:55:77:f0:ba:3c:5c:e5:4b:47:
         8d:0c:44:10:74:f3:ce:79:00:68:0b:45:22:84:12:31:5c:63:
         c5:c6:f7:76:e1:4f:5d:82:eb:26:a6:a9:f3:aa:fc:4b:47:be:
         dc:1e:0c:13:e4:87:f8:73:e2:d4:b1:b1:73:49:1b:e4:66:b1:
         52:0f:f9:5a:c7:42:17:3b:8a:71:17:66:b2:dc:01:de:33:be:
         4c:ad:ea:91:14:54:ec:e2:63:6c:7c:48:60:7c:4d:2a:47:76:
         38:b9:90:43:ac:78:7e:a9:3c:8d:0e:24:fb:61:a3:ac:77:56:
         f1:11:0c:49:b9:cb:d1:9f:9b:d1:e6:15:88:f2:2b:b5:4e:95:
         70:bc:5a:5f:64:00:2b:40:bd:09:a7:fc:66:03:b3:a9:ed:3b:
         b4:24:bf:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:58:40 2026 by rpki-client