Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.mft
File:                     FKbKvDAuwePc503pi_VYoEK-rFY.mft (raw, json)
Hash identifier:          1ueONZAeU3RX0NXY7BMR8vlqnbFdp9eXJKNTRE9B4qs=
Subject key identifier:   33:4A:BC:81:71:2B:E9:62:BB:CC:4B:51:BA:2C:9F:3E:D2:A1:36:E5
Authority key identifier: 14:A6:CA:BC:30:2E:C1:E3:DC:E7:4D:E9:8B:F5:58:A0:42:BE:AC:56
Certificate issuer:       /CN=A91409DC/serialNumber=14A6CABC302EC1E3DCE74DE98BF558A042BEAC56
Certificate serial:       0943
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FKbKvDAuwePc503pi_VYoEK-rFY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.mft
Manifest number:          1631
Signing time:             Tue 28 Jul 2026 18:27:02 +0000
Manifest this update:     Tue 28 Jul 2026 18:27:01 +0000
Manifest next update:     Tue 04 Aug 2026 18:27:01 +0000
Files and hashes:         1: FKbKvDAuwePc503pi_VYoEK-rFY.crl (hash: K+Ljd9f7JYSeBrleMJB31RduKl+HobO8jQ+z7IZwzRg=)
                          2: DB78B2684BCD11EE8F976B7EC4F9AE02.roa (hash: 59G5/JH3Jy7HOVQ7Fwa2htossMKLT5qvwu9fkF+mzSU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.crl
                          rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FKbKvDAuwePc503pi_VYoEK-rFY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 18:27:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2371 (0x943)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91409DC, serialNumber=14A6CABC302EC1E3DCE74DE98BF558A042BEAC56
        Validity
            Not Before: Jul 28 18:27:01 2026 GMT
            Not After : Aug  4 18:27:01 2026 GMT
        Subject: CN=6a68f476-895b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d6:5e:ae:99:e1:b4:1f:2b:fc:e3:d2:eb:4e:
                    00:37:2f:15:d7:d6:0a:38:7e:3f:eb:43:d4:e8:c4:
                    c9:03:d9:37:13:b3:57:83:2e:48:1a:c2:ee:49:9e:
                    0e:11:34:c7:8f:c2:1f:f6:6d:d2:a9:72:06:98:c4:
                    80:25:1a:a6:09:b8:c0:66:de:bb:92:73:5a:94:d1:
                    df:ab:80:c8:43:3b:dd:e2:f3:0c:93:19:55:95:58:
                    e8:51:46:9a:c0:97:81:91:a0:c9:93:37:2c:32:25:
                    ae:cd:78:fb:ba:27:c1:2b:dd:b1:21:da:ec:61:76:
                    66:13:e8:a6:58:20:8d:74:64:f2:e4:7d:30:1b:18:
                    85:37:59:88:0e:6e:17:a9:3f:a4:22:3f:ba:ad:27:
                    a3:9a:df:dc:dd:34:59:64:b5:c5:e4:03:a6:e7:e0:
                    e1:37:ce:83:36:66:e4:54:ed:19:ba:9c:09:7d:e8:
                    08:36:a3:dc:93:14:98:f8:a2:e2:48:07:b7:43:d7:
                    10:10:66:a4:4b:26:fc:bc:86:6c:ec:71:8c:f1:8b:
                    cc:03:46:97:74:c8:24:0b:49:24:d3:de:6d:b9:8f:
                    fc:2c:b5:2f:53:52:2c:78:a5:71:d1:6e:a9:2d:d3:
                    fe:8c:02:9a:66:d7:75:9f:78:4a:6c:f9:ad:be:90:
                    87:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:4A:BC:81:71:2B:E9:62:BB:CC:4B:51:BA:2C:9F:3E:D2:A1:36:E5
            X509v3 Authority Key Identifier:
                keyid:14:A6:CA:BC:30:2E:C1:E3:DC:E7:4D:E9:8B:F5:58:A0:42:BE:AC:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FKbKvDAuwePc503pi_VYoEK-rFY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:2d:8e:61:56:78:15:ee:2f:1c:c7:00:9a:59:06:1a:07:a8:
         d6:9e:9a:ab:86:b3:2b:48:0f:d0:18:9f:75:67:b2:48:62:9b:
         d8:b5:73:9b:53:7b:33:16:21:dd:c8:c7:e7:6f:51:a6:54:61:
         27:e6:ad:d9:96:0a:46:e4:b8:78:85:34:3c:5f:74:c7:9a:d1:
         1d:56:2e:3b:d8:85:01:e8:ba:17:0e:d1:65:e4:74:61:14:b4:
         e1:fe:91:ba:58:32:63:fc:f5:26:d1:d8:b5:76:1a:7e:52:12:
         49:2d:89:e4:d4:51:74:54:b9:28:c1:99:83:c4:fc:f1:90:22:
         1f:08:18:c5:10:30:22:f8:30:d9:cf:bc:28:1e:95:c6:a1:c7:
         bc:d0:2c:7d:5a:6d:7f:d6:b2:a0:69:8c:94:0c:85:40:1e:cb:
         06:9d:27:2f:86:aa:10:1f:d0:ce:de:a9:58:21:44:ac:0e:69:
         4a:fc:3c:a3:90:75:04:52:21:60:f2:6f:4d:dd:f1:c9:4a:c9:
         41:47:95:6b:ce:04:30:14:38:a8:d4:57:af:8c:cb:5b:bf:69:
         0e:be:49:6c:d8:0a:52:51:6c:8d:34:16:28:f3:7d:40:23:e7:
         31:a3:20:85:49:4e:b2:e4:f6:30:a3:cc:92:df:63:34:24:80:
         f7:3d:35:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:15:42 2026 by rpki-client