Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.mft
File:                     FX3bMj02U1BOMIJOaeDbA3U6aM4.mft (raw, json)
Hash identifier:          86ZsPidT0N+dNCJ2ZBO60vhu4nIqKDHtTEyBT5ZT2ks=
Subject key identifier:   9D:1E:4C:46:D4:1B:AF:60:C5:8F:E0:C7:F5:3E:B9:91:BC:A9:A8:E7
Authority key identifier: 15:7D:DB:32:3D:36:53:50:4E:30:82:4E:69:E0:DB:03:75:3A:68:CE
Certificate issuer:       /CN=A91480B2/serialNumber=157DDB323D3653504E30824E69E0DB03753A68CE
Certificate serial:       01FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FX3bMj02U1BOMIJOaeDbA3U6aM4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.mft
Manifest number:          01F8
Signing time:             Sat 13 Jun 2026 03:15:55 +0000
Manifest this update:     Sat 13 Jun 2026 03:15:55 +0000
Manifest next update:     Sat 20 Jun 2026 03:15:55 +0000
Files and hashes:         1: FX3bMj02U1BOMIJOaeDbA3U6aM4.crl (hash: GwwElzf3lO53MbsJxyC09//ogP+foy8IAWDS94P5uNE=)
                          2: 93151D5668F911EE9916D146C4F9AE02.roa (hash: ClVPuLcuGILWLEy5bL0EVXdV3J/UJlUtzA64dR9iTrc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.crl
                          rsync://rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FX3bMj02U1BOMIJOaeDbA3U6aM4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 03:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 510 (0x1fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91480B2, serialNumber=157DDB323D3653504E30824E69E0DB03753A68CE
        Validity
            Not Before: Jun 13 03:15:55 2026 GMT
            Not After : Jun 20 03:15:55 2026 GMT
        Subject: CN=6a2ccb6b-288b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:5d:69:3b:e9:6e:60:a3:f7:69:1e:ba:06:2b:
                    3d:20:de:2b:e7:45:a3:be:25:ff:71:d6:66:67:dc:
                    e2:df:f9:2f:0c:4b:da:e0:e9:bc:00:a5:13:18:1c:
                    6a:7a:c3:7c:47:4b:98:c2:72:21:d0:68:cb:4b:1a:
                    d1:7c:2d:52:74:fa:9d:7e:bc:2d:18:b4:03:84:30:
                    d6:23:f8:7a:a3:58:e9:e7:15:31:52:5b:62:6d:17:
                    75:0f:cb:f5:6b:2b:8f:34:3a:6e:6d:45:b5:06:da:
                    f1:97:8b:04:aa:a8:ed:4d:ad:aa:98:4d:65:dc:31:
                    14:d8:0d:8b:68:46:7f:e3:56:43:8a:09:ea:71:22:
                    32:7c:e8:a4:92:8d:55:db:fa:cc:ee:80:ba:8c:b3:
                    18:aa:b6:48:22:9b:46:48:27:c8:6a:ae:7b:f2:0b:
                    9e:6e:7d:5c:b1:8f:04:16:3a:97:df:03:97:f8:54:
                    fd:17:8d:7a:ac:e6:12:ff:ed:7c:c0:f8:e6:8c:ab:
                    fa:2b:62:2f:97:24:7c:1f:fe:df:e0:6c:ec:90:53:
                    4d:8e:61:24:c3:ca:5b:d2:ac:a4:58:3f:3f:ec:4c:
                    cc:cf:8e:e1:30:20:e2:63:18:a4:ad:45:96:8f:68:
                    f9:7d:41:bf:13:01:94:56:a6:fc:b8:76:0b:b1:b1:
                    43:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:1E:4C:46:D4:1B:AF:60:C5:8F:E0:C7:F5:3E:B9:91:BC:A9:A8:E7
            X509v3 Authority Key Identifier:
                keyid:15:7D:DB:32:3D:36:53:50:4E:30:82:4E:69:E0:DB:03:75:3A:68:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FX3bMj02U1BOMIJOaeDbA3U6aM4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:e9:4b:d5:13:c5:b2:76:86:fa:43:00:1d:e7:19:30:05:17:
         e3:ac:b2:4a:2a:cc:89:ab:7d:15:88:7d:50:ff:d6:bc:6b:af:
         ee:e2:b9:59:73:fc:81:7e:a9:64:64:18:aa:83:88:17:dc:6f:
         ec:39:38:bc:fc:60:66:a9:a6:2d:06:83:69:dc:cb:7c:b0:a9:
         94:e0:ef:23:6a:81:3a:71:f1:bf:e4:8c:d4:bd:ab:87:cb:6b:
         23:4a:18:43:c6:1c:2f:ee:e7:f9:94:7e:6b:a7:3d:51:c2:f6:
         cd:34:6d:c1:0d:b8:fe:0f:6e:3b:8f:d5:68:cc:bf:ff:31:c8:
         d0:a7:41:f8:8a:3b:63:4f:71:32:f4:8e:2b:46:71:a9:67:9b:
         ac:b2:e9:98:2b:74:f5:fb:1e:73:a7:da:ee:a6:a6:a1:91:45:
         85:69:ea:1d:66:13:53:1e:11:09:f4:4f:26:60:c0:43:e7:15:
         9e:96:0e:de:af:d7:92:06:b2:3f:89:19:eb:ba:ec:fa:b5:bb:
         01:86:68:32:02:f5:00:18:9d:55:56:7a:24:b3:fc:ef:23:cf:
         aa:d6:71:38:c2:55:ec:77:76:d5:13:c6:3b:40:92:53:1a:64:
         a2:8e:ab:60:dc:d8:04:36:fa:bb:c2:bc:27:cb:c3:32:c6:f3:
         80:64:4b:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:12:46 2026 by rpki-client