Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B826/6CE5D6C0743811EA90270781C4F9AE02/fSGgNfHk9MpCeHMKwuUHXbIxG08.mft
File:                     fSGgNfHk9MpCeHMKwuUHXbIxG08.mft (raw, json)
Hash identifier:          t3apDDmpA0aIAZ9wWhrHAkgggLngm4UuGPDvQzpjrLk=
Subject key identifier:   CA:3E:17:51:CB:8A:8E:5C:31:96:F7:FD:EF:E3:D1:B4:3F:C9:DD:88
Authority key identifier: 7D:21:A0:35:F1:E4:F4:CA:42:78:73:0A:C2:E5:07:5D:B2:31:1B:4F
Certificate issuer:       /CN=A916B826/serialNumber=7D21A035F1E4F4CA4278730AC2E5075DB2311B4F
Certificate serial:       0AFB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSGgNfHk9MpCeHMKwuUHXbIxG08.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B826/6CE5D6C0743811EA90270781C4F9AE02/fSGgNfHk9MpCeHMKwuUHXbIxG08.mft
Manifest number:          0AEA
Signing time:             Tue 28 Jul 2026 19:41:36 +0000
Manifest this update:     Tue 28 Jul 2026 19:41:36 +0000
Manifest next update:     Tue 04 Aug 2026 19:41:36 +0000
Files and hashes:         1: fSGgNfHk9MpCeHMKwuUHXbIxG08.crl (hash: +AEBD4amIltR2X+8bgCezCqbYdKeBlRLI0B0ZDh/bTo=)
                          2: 705B0F54743911EAA55F0482C4F9AE02.roa (hash: UbjsSqecieT8KT64hSVXVxons7KgEXv44KoSFwBnx9E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B826/6CE5D6C0743811EA90270781C4F9AE02/fSGgNfHk9MpCeHMKwuUHXbIxG08.crl
                          rsync://rpki.apnic.net/member_repository/A916B826/6CE5D6C0743811EA90270781C4F9AE02/fSGgNfHk9MpCeHMKwuUHXbIxG08.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSGgNfHk9MpCeHMKwuUHXbIxG08.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 19:41:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2811 (0xafb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B826, serialNumber=7D21A035F1E4F4CA4278730AC2E5075DB2311B4F
        Validity
            Not Before: Jul 28 19:41:36 2026 GMT
            Not After : Aug  4 19:41:36 2026 GMT
        Subject: CN=6a6905f0-cd41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e9:59:34:1e:72:e0:be:e6:d5:af:df:6e:36:
                    16:94:25:cf:5c:6d:9f:16:b9:28:88:cc:34:d7:bc:
                    40:4f:a6:10:e0:c7:49:5f:78:3d:23:da:52:dd:b5:
                    87:55:a4:2c:95:77:44:9c:56:1c:92:91:d9:3e:50:
                    fa:58:66:99:9b:de:06:9c:c9:3a:a8:0d:d4:23:d3:
                    85:98:91:a7:61:df:87:3c:f1:bb:f8:e3:8f:d7:74:
                    ca:fd:96:24:38:85:ca:0a:42:30:49:42:90:01:aa:
                    b6:14:fe:48:b6:cd:a0:4a:be:d9:e4:b3:23:2e:22:
                    dd:84:b8:65:c0:61:cf:48:4d:a1:1d:b8:a9:e7:5c:
                    e9:6f:28:fa:e3:f8:d5:7a:de:a4:11:94:1f:fe:7c:
                    e0:1a:c2:b3:05:93:a4:a4:5d:4e:ee:31:93:38:08:
                    60:d8:74:aa:db:58:43:e3:33:d0:db:3d:01:a1:01:
                    ff:f9:6a:7d:2d:15:5d:96:e6:1f:b6:a5:57:61:3f:
                    f7:42:df:52:df:04:bd:e2:41:be:ab:5d:ce:1b:e2:
                    df:2f:df:c4:c9:f5:16:b1:32:3a:c8:5c:7e:fc:74:
                    95:5e:31:80:6c:a4:cd:d2:2e:11:04:ee:e7:d7:75:
                    f9:ea:76:90:98:67:96:de:33:0f:c0:0b:7e:5b:3f:
                    ec:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:3E:17:51:CB:8A:8E:5C:31:96:F7:FD:EF:E3:D1:B4:3F:C9:DD:88
            X509v3 Authority Key Identifier:
                keyid:7D:21:A0:35:F1:E4:F4:CA:42:78:73:0A:C2:E5:07:5D:B2:31:1B:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B826/6CE5D6C0743811EA90270781C4F9AE02/fSGgNfHk9MpCeHMKwuUHXbIxG08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSGgNfHk9MpCeHMKwuUHXbIxG08.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B826/6CE5D6C0743811EA90270781C4F9AE02/fSGgNfHk9MpCeHMKwuUHXbIxG08.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:91:bf:5d:ed:c1:21:aa:da:cc:e5:63:5a:67:a7:03:39:fb:
         c3:41:af:76:53:8d:d6:d0:88:58:78:a0:b6:1e:11:5f:5b:d4:
         84:1f:32:1a:b0:26:55:8c:8e:b4:2f:76:95:40:3c:42:0b:1e:
         e2:36:de:b5:a8:a7:ef:8b:e8:fd:97:f7:b9:f2:5a:ad:aa:26:
         a8:68:26:3c:d8:12:47:fe:ee:54:ae:48:07:12:6f:c4:1d:02:
         43:3d:8c:37:37:64:db:50:ba:3f:14:f4:9f:d7:b8:76:92:cd:
         f0:69:65:75:dd:34:e0:05:5a:41:29:69:eb:db:b6:04:0b:c0:
         80:b9:67:16:3b:64:65:4d:ac:33:cf:0b:4e:6d:e4:f4:11:78:
         86:fe:36:bc:63:0f:66:a2:ce:9d:f7:b9:01:f3:67:cb:b2:24:
         25:02:77:78:e8:84:27:55:f8:72:62:37:7b:64:4c:b5:0c:58:
         9b:f6:e3:da:b8:6b:4b:21:a9:ca:79:ae:9f:ba:a2:0c:57:7d:
         c8:ec:f0:ae:ad:af:e6:74:71:e7:61:e5:cb:db:a8:74:7a:ae:
         c3:21:2a:be:89:9e:fb:8d:6c:75:99:ce:c2:f0:d6:21:97:d5:
         e0:57:97:05:86:9e:b3:a5:47:53:62:d3:0f:9b:a9:e0:b9:5c:
         3d:64:c8:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:57:01 2026 by rpki-client