Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915FD27/A80DB38235EF11ED8239AF2BC4F9AE02/1FLGfvaHRDivqZOoStCrwYUWkhs.mft
File:                     1FLGfvaHRDivqZOoStCrwYUWkhs.mft (raw, json)
Hash identifier:          xXHVYaZLWgkgcILIbytf5tD4ynSBoeflB8Kuc/iTUjE=
Subject key identifier:   73:C0:51:F2:13:C5:85:97:CF:66:2F:9A:32:36:B3:52:EB:59:B1:1B
Authority key identifier: D4:52:C6:7E:F6:87:44:38:AF:A9:93:A8:4A:D0:AB:C1:85:16:92:1B
Certificate issuer:       /CN=A915FD27/serialNumber=D452C67EF6874438AFA993A84AD0ABC18516921B
Certificate serial:       0301
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FLGfvaHRDivqZOoStCrwYUWkhs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915FD27/A80DB38235EF11ED8239AF2BC4F9AE02/1FLGfvaHRDivqZOoStCrwYUWkhs.mft
Manifest number:          02F4
Signing time:             Mon 27 Jul 2026 02:25:19 +0000
Manifest this update:     Mon 27 Jul 2026 02:25:19 +0000
Manifest next update:     Mon 03 Aug 2026 02:25:19 +0000
Files and hashes:         1: 1FLGfvaHRDivqZOoStCrwYUWkhs.crl (hash: YxZkA5JPd6WD5aceegNllor8uAYLNAGGJsWdZGV+Z1c=)
                          2: 9BDA59F69C8C11F0A27C535EC4F9AE02.roa (hash: 1AILx3io2TpfX7hUWzuL2pU58QXDn9h+uBSyFOkdjjg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915FD27/A80DB38235EF11ED8239AF2BC4F9AE02/1FLGfvaHRDivqZOoStCrwYUWkhs.crl
                          rsync://rpki.apnic.net/member_repository/A915FD27/A80DB38235EF11ED8239AF2BC4F9AE02/1FLGfvaHRDivqZOoStCrwYUWkhs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FLGfvaHRDivqZOoStCrwYUWkhs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 02:25:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 769 (0x301)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915FD27, serialNumber=D452C67EF6874438AFA993A84AD0ABC18516921B
        Validity
            Not Before: Jul 27 02:25:19 2026 GMT
            Not After : Aug  3 02:25:19 2026 GMT
        Subject: CN=6a66c18f-c84c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b9:9f:a1:de:68:b0:7d:b6:d2:6e:3c:09:74:
                    a7:73:01:27:fa:6a:45:0a:9f:a1:ea:5e:ff:d7:64:
                    09:fa:9c:51:b2:09:cc:6c:f7:c5:40:ea:0e:78:cf:
                    5f:4a:a9:ab:b0:d4:24:2e:0a:fe:b9:17:b5:19:39:
                    1b:25:62:90:96:db:8e:83:fe:5d:01:6d:da:92:e4:
                    b1:5a:0f:28:11:92:91:97:c8:22:b2:6a:02:8e:9a:
                    ad:d8:14:f9:1e:5a:08:bd:95:b5:83:e6:71:f7:ac:
                    07:e3:39:e7:74:d9:72:b9:c4:a5:9b:b2:46:a6:76:
                    83:e2:f3:c9:42:b0:c5:94:0d:88:55:d7:97:0c:2c:
                    af:96:15:97:bf:17:83:6b:51:2b:7b:b4:46:0a:0f:
                    b5:c3:b7:1a:09:74:d4:6b:d8:0b:44:2f:09:8b:51:
                    8c:b9:2f:33:5a:f3:33:d2:e7:75:3f:e5:d5:71:68:
                    89:e1:39:70:52:2c:96:ac:f5:5d:68:79:11:1a:82:
                    7f:98:7a:c1:aa:c8:93:97:d1:94:63:00:82:31:9a:
                    90:b7:2f:f6:63:e5:72:11:a3:d1:38:7e:f2:73:73:
                    e9:fb:a3:24:6f:9b:31:5a:fb:cb:f7:7a:45:dc:7d:
                    f3:1f:75:c7:3e:44:e9:ab:f6:7a:c7:7f:77:00:1c:
                    7c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:C0:51:F2:13:C5:85:97:CF:66:2F:9A:32:36:B3:52:EB:59:B1:1B
            X509v3 Authority Key Identifier:
                keyid:D4:52:C6:7E:F6:87:44:38:AF:A9:93:A8:4A:D0:AB:C1:85:16:92:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915FD27/A80DB38235EF11ED8239AF2BC4F9AE02/1FLGfvaHRDivqZOoStCrwYUWkhs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FLGfvaHRDivqZOoStCrwYUWkhs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FD27/A80DB38235EF11ED8239AF2BC4F9AE02/1FLGfvaHRDivqZOoStCrwYUWkhs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:fd:b4:9c:09:ad:e2:37:b0:43:82:d4:d6:b6:1b:bc:23:91:
         cc:72:ee:83:2d:60:74:99:f5:7f:23:d0:e9:d3:07:d5:3a:9d:
         06:3d:98:b0:bb:32:07:41:ee:19:91:62:74:45:9f:b7:17:86:
         fa:d6:7c:5a:c4:df:2f:f8:ad:b8:68:3b:46:02:f6:21:5b:e6:
         75:1e:df:99:2b:dd:79:c7:af:b1:a0:a4:9d:35:8e:53:f2:2c:
         73:53:e8:c3:8a:87:9e:52:fd:91:ec:6c:89:2c:06:c1:30:b6:
         7a:29:e7:89:bf:21:38:50:87:2d:b9:6f:0c:11:a3:7d:54:c1:
         06:32:a1:3f:cb:48:d9:2c:5d:4b:59:c9:48:70:f3:dd:eb:7a:
         30:9e:50:0f:f4:9d:b4:23:0d:0b:08:fc:34:08:7d:1a:20:12:
         0e:48:c1:03:70:93:4b:e9:bc:e9:69:13:1a:10:a9:fd:7a:7f:
         d6:9d:b1:11:95:a9:7a:49:f2:32:c3:86:83:c9:6d:27:a9:07:
         f4:b3:e0:ec:ab:2d:a0:65:4f:b1:34:39:54:bf:27:e5:57:a5:
         2b:82:da:27:5c:80:7f:9e:02:4e:9a:7f:08:1b:b2:84:60:e9:
         8e:f7:96:e6:3c:d3:27:f3:8a:0f:e8:10:29:e4:d1:63:55:fd:
         02:3f:e7:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:18:58 2026 by rpki-client