Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915DB9F/B88F4252545011E6A3A6D466C4F9AE02/fgqozSvoYXAaXKfPudRQ09kYJ-g.mft
File:                     fgqozSvoYXAaXKfPudRQ09kYJ-g.mft (raw, json)
Hash identifier:          8RH+3VdDzPEHfL5v9ij/0bWtFvWhy9eft+Bw04SoUiM=
Subject key identifier:   05:8A:06:2B:5C:F3:29:96:D2:4B:98:70:45:5C:00:85:26:C8:27:9C
Authority key identifier: 7E:0A:A8:CD:2B:E8:61:70:1A:5C:A7:CF:B9:D4:50:D3:D9:18:27:E8
Certificate issuer:       /CN=A915DB9F/serialNumber=7E0AA8CD2BE861701A5CA7CFB9D450D3D91827E8
Certificate serial:       200D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fgqozSvoYXAaXKfPudRQ09kYJ-g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915DB9F/B88F4252545011E6A3A6D466C4F9AE02/fgqozSvoYXAaXKfPudRQ09kYJ-g.mft
Manifest number:          1FFC
Signing time:             Tue 28 Jul 2026 16:03:39 +0000
Manifest this update:     Tue 28 Jul 2026 16:03:39 +0000
Manifest next update:     Tue 04 Aug 2026 16:03:39 +0000
Files and hashes:         1: fgqozSvoYXAaXKfPudRQ09kYJ-g.crl (hash: VjkrifILUWkuUX834XrVcDqEbjRxmMuPCB59y1PBE04=)
                          2: 4D94E0D6545211E6A367BC68C4F9AE02.roa (hash: /bT1hL6j0BNPqPFpwRAyuvsZxeDtNAbVDJWNalsZBQE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915DB9F/B88F4252545011E6A3A6D466C4F9AE02/fgqozSvoYXAaXKfPudRQ09kYJ-g.crl
                          rsync://rpki.apnic.net/member_repository/A915DB9F/B88F4252545011E6A3A6D466C4F9AE02/fgqozSvoYXAaXKfPudRQ09kYJ-g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fgqozSvoYXAaXKfPudRQ09kYJ-g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 16:03:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8205 (0x200d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915DB9F, serialNumber=7E0AA8CD2BE861701A5CA7CFB9D450D3D91827E8
        Validity
            Not Before: Jul 28 16:03:39 2026 GMT
            Not After : Aug  4 16:03:39 2026 GMT
        Subject: CN=6a68d2db-ff44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:39:33:ca:50:4c:ed:51:0a:2c:3f:17:8e:94:
                    07:6f:e3:0f:ee:e8:83:98:26:0f:59:f3:34:31:64:
                    9a:1e:39:9d:0a:d5:96:3c:85:cf:b7:08:86:dd:f0:
                    5f:95:c1:b3:95:83:41:dd:f3:6a:bb:d2:10:21:f6:
                    4f:35:12:21:71:4d:4c:41:09:f8:ff:cc:58:6e:2b:
                    f4:f5:e7:da:15:06:4c:36:29:05:17:aa:2b:ab:7e:
                    8f:66:70:1d:fd:51:f0:ce:a9:2e:4b:d4:16:2d:93:
                    44:ab:64:76:7e:55:be:00:c4:fd:84:03:02:be:2c:
                    f2:12:08:b0:00:25:72:0f:70:3a:86:07:39:ab:7c:
                    ea:60:69:50:18:5b:c8:0e:72:ad:b6:97:6a:ca:8a:
                    88:33:b4:38:bb:73:3f:ef:4d:21:b6:d4:93:4b:ff:
                    a9:c9:ab:37:f8:c9:73:cf:8b:bf:b9:04:0f:61:14:
                    97:25:74:77:a7:68:6e:55:60:38:5a:1a:29:58:07:
                    0d:64:c6:9b:bf:1c:8b:22:cf:f9:68:b6:4f:f9:7e:
                    4c:b0:31:6d:9d:f9:1f:1a:b0:3d:cc:a7:c2:85:be:
                    75:5b:69:21:58:5a:ed:aa:a5:f3:a4:af:80:d7:82:
                    80:79:00:3b:65:12:6e:bf:02:7f:38:26:36:5a:c7:
                    c0:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:8A:06:2B:5C:F3:29:96:D2:4B:98:70:45:5C:00:85:26:C8:27:9C
            X509v3 Authority Key Identifier:
                keyid:7E:0A:A8:CD:2B:E8:61:70:1A:5C:A7:CF:B9:D4:50:D3:D9:18:27:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915DB9F/B88F4252545011E6A3A6D466C4F9AE02/fgqozSvoYXAaXKfPudRQ09kYJ-g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fgqozSvoYXAaXKfPudRQ09kYJ-g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DB9F/B88F4252545011E6A3A6D466C4F9AE02/fgqozSvoYXAaXKfPudRQ09kYJ-g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:e8:60:ad:0d:7b:de:40:10:ea:c8:00:98:2b:a2:d1:cd:3a:
         81:d3:10:b1:81:4d:2a:dc:7a:3d:15:86:29:59:d2:e3:8c:1b:
         92:a9:e1:a8:55:74:f0:05:db:ce:cb:0b:a1:f3:13:d2:c6:46:
         84:24:a7:72:57:08:3b:7e:08:ba:49:72:f1:4d:5a:46:61:de:
         72:03:a9:92:0f:f8:6f:a8:12:fd:bd:82:af:18:7e:de:07:f9:
         07:b8:e4:74:21:c6:d4:d3:ce:10:23:05:70:e8:a6:47:64:e7:
         e4:7f:88:c3:66:8e:6a:eb:e9:9d:68:6e:8a:b5:94:e6:c7:96:
         73:41:e6:1e:f5:7d:69:c3:c0:86:6a:ba:f6:86:ef:bd:ea:a9:
         25:1a:4a:3d:ce:a7:60:1f:b2:bb:42:18:19:f5:76:03:da:16:
         6b:21:91:3f:c6:0e:f2:e5:52:c6:d1:5d:3d:51:f7:24:88:c3:
         c5:d8:67:f7:6b:2d:dc:a0:75:24:26:ba:ce:d0:f3:08:b2:d0:
         68:6d:dd:df:4b:c4:1c:fd:1f:31:b6:cf:d3:16:ca:96:67:6f:
         e0:fa:27:44:9c:c0:be:1d:38:e5:ed:b7:23:2b:01:0d:48:ac:
         eb:45:23:81:ac:8b:c5:8d:fa:79:8d:26:6a:26:4f:6b:b2:ab:
         0f:c8:92:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:58:16 2026 by rpki-client