Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C35A/161F7FE43DE511F1AD5235459C833773/fqSkLLBXo92BKeSh4seYBQ_W1lc.mft
File:                     fqSkLLBXo92BKeSh4seYBQ_W1lc.mft (raw, json)
Hash identifier:          fxmU8/EhoV9S11ziT9Fm3BZKlAaQW4HeeQ5e4tp5WZw=
Subject key identifier:   7F:D9:F9:1B:4B:9C:82:35:B3:63:06:93:CA:55:B5:E7:C2:32:5F:F0
Authority key identifier: 7E:A4:A4:2C:B0:57:A3:DD:81:29:E4:A1:E2:C7:98:05:0F:D6:D6:57
Certificate issuer:       /CN=A913C35A/serialNumber=7EA4A42CB057A3DD8129E4A1E2C798050FD6D657
Certificate serial:       33
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fqSkLLBXo92BKeSh4seYBQ_W1lc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C35A/161F7FE43DE511F1AD5235459C833773/fqSkLLBXo92BKeSh4seYBQ_W1lc.mft
Manifest number:          32
Signing time:             Wed 29 Jul 2026 10:13:42 +0000
Manifest this update:     Wed 29 Jul 2026 10:13:41 +0000
Manifest next update:     Wed 05 Aug 2026 10:13:41 +0000
Files and hashes:         1: fqSkLLBXo92BKeSh4seYBQ_W1lc.crl (hash: rwS8Mw6RNJlBaMckOlPc3VAXuXJ/gXierTxYwR4xRzA=)
                          2: 6F2747DE3DE511F19BE7396A9C833773.roa (hash: EIFF9n7nIw8O07orwFHUSOVHnVSTRstMZzTfvLGr7aA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913C35A/161F7FE43DE511F1AD5235459C833773/fqSkLLBXo92BKeSh4seYBQ_W1lc.crl
                          rsync://rpki.apnic.net/member_repository/A913C35A/161F7FE43DE511F1AD5235459C833773/fqSkLLBXo92BKeSh4seYBQ_W1lc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fqSkLLBXo92BKeSh4seYBQ_W1lc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 08:32:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51 (0x33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C35A, serialNumber=7EA4A42CB057A3DD8129E4A1E2C798050FD6D657
        Validity
            Not Before: Jul 29 10:13:41 2026 GMT
            Not After : Aug  5 10:13:41 2026 GMT
        Subject: CN=6a69d256-5552
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:60:72:b8:38:f5:65:c4:10:f9:0c:34:6a:09:
                    71:32:27:d5:87:19:e7:fb:11:cd:79:b0:a5:1d:6d:
                    8c:39:7f:01:75:36:f0:20:5f:5e:f8:ce:7d:33:d7:
                    fb:0f:99:fe:f6:8a:22:e1:e1:9c:84:4a:10:bd:b3:
                    ea:08:a4:07:cf:fa:1e:ad:b2:1b:64:9f:07:52:9c:
                    ee:7c:73:57:4d:39:02:bf:77:03:93:85:55:6a:73:
                    3e:2c:8d:19:9b:0f:cb:c4:2e:3b:bb:ee:d7:f2:f9:
                    2f:ab:1e:8e:48:2a:63:7d:bc:31:90:52:e6:db:5a:
                    15:e7:9e:4b:35:3c:5e:f1:7b:5f:93:fc:1b:c4:cb:
                    3f:67:8e:12:8b:5a:12:a3:3c:d6:fe:ca:5f:21:4d:
                    b3:c6:ea:a2:79:6a:0a:87:27:35:8c:12:0c:c2:3b:
                    e7:90:47:9b:b6:e3:92:ce:df:74:b9:b7:10:9e:36:
                    1d:2c:04:79:44:02:f1:9c:f9:8c:91:05:c9:0b:3c:
                    85:17:d5:dc:a3:7d:5e:5c:66:71:3f:87:3d:4a:92:
                    9b:ff:9c:c3:09:95:ff:c0:49:e8:56:b2:ba:38:28:
                    d3:26:30:01:16:c6:b2:2a:b3:e1:c6:d0:00:2c:f8:
                    3c:8b:86:06:b6:20:7e:e0:10:11:75:ca:dc:14:ab:
                    91:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:D9:F9:1B:4B:9C:82:35:B3:63:06:93:CA:55:B5:E7:C2:32:5F:F0
            X509v3 Authority Key Identifier:
                keyid:7E:A4:A4:2C:B0:57:A3:DD:81:29:E4:A1:E2:C7:98:05:0F:D6:D6:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C35A/161F7FE43DE511F1AD5235459C833773/fqSkLLBXo92BKeSh4seYBQ_W1lc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fqSkLLBXo92BKeSh4seYBQ_W1lc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C35A/161F7FE43DE511F1AD5235459C833773/fqSkLLBXo92BKeSh4seYBQ_W1lc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:a9:80:d2:af:45:65:50:3b:bb:39:43:49:23:95:36:5f:4d:
         bc:dc:8a:7f:a9:8e:78:45:0d:85:79:56:f1:81:79:4c:52:7e:
         fc:78:3b:6e:da:b1:e1:a9:67:b7:ce:78:b4:82:a9:d7:27:9c:
         5e:49:40:3b:32:4c:78:e8:01:36:95:5b:bc:38:b6:d9:25:94:
         68:a4:00:23:89:1c:91:36:c0:8e:ac:75:e2:48:ac:79:61:78:
         75:20:aa:cb:55:75:56:46:40:38:51:1a:2d:c7:9d:1c:eb:3f:
         1e:36:c6:7c:4b:cd:50:32:b5:d1:ca:20:7c:63:dd:01:94:61:
         b8:a1:ec:e7:5b:c9:57:6d:da:90:87:80:37:f3:22:e8:1f:04:
         f5:ae:86:63:ef:3e:64:93:a9:42:92:65:40:69:f9:89:1f:b2:
         1a:f2:cf:d6:3c:63:3a:d9:e7:03:aa:d1:76:0e:b8:16:ab:60:
         f6:e4:80:70:f7:a7:74:76:10:8f:14:a6:ec:2e:e0:f1:8d:7c:
         76:7e:e9:b3:be:12:02:ed:1d:e4:cb:b2:29:3f:e2:55:75:05:
         fe:4c:5a:a9:7b:ac:cc:db:d4:66:25:2f:a4:15:6b:f0:d6:88:
         bc:1b:7f:cc:5e:48:9d:ac:3c:0a:aa:b2:7d:a9:d4:0e:d1:34:
         47:99:6f:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:23:33 2026 by rpki-client