Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/fnLYAbOKcqtLA3bhLJVBJKrkPG0.mft
File:                     fnLYAbOKcqtLA3bhLJVBJKrkPG0.mft (raw, json)
Hash identifier:          PkITiyqg0f9FJAfTxm7N+5wBwF3TE+OwWKmdD/SXz5Q=
Subject key identifier:   2F:83:73:7A:0D:64:42:ED:16:25:90:F9:C7:8E:A9:0E:7C:D3:43:40
Authority key identifier: 7E:72:D8:01:B3:8A:72:AB:4B:03:76:E1:2C:95:41:24:AA:E4:3C:6D
Certificate issuer:       /CN=A918753F/serialNumber=7E72D801B38A72AB4B0376E12C954124AAE43C6D
Certificate serial:       0973
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnLYAbOKcqtLA3bhLJVBJKrkPG0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/fnLYAbOKcqtLA3bhLJVBJKrkPG0.mft
Manifest number:          0962
Signing time:             Fri 12 Jun 2026 20:08:06 +0000
Manifest this update:     Fri 12 Jun 2026 20:08:05 +0000
Manifest next update:     Fri 19 Jun 2026 20:08:05 +0000
Files and hashes:         1: fnLYAbOKcqtLA3bhLJVBJKrkPG0.crl (hash: tVS1QTSvSr5y4HVa8gH6UAA9XOSQhi+8Dduh/2t/hE0=)
                          2: 10A6E062B70A11EDB851464EC4F9AE02.roa (hash: +2GMR/V9mZr0Ife9tGdydPkVcoSqLY2zhQZIUiI3Hq0=)
                          3: 38B92F54E17D11EDBCAFC081C4F9AE02.roa (hash: bPFO6I2wWIPENqB/X87e5uIatc/LQckX7tfxgiWc7ts=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/fnLYAbOKcqtLA3bhLJVBJKrkPG0.crl
                          rsync://rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/fnLYAbOKcqtLA3bhLJVBJKrkPG0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnLYAbOKcqtLA3bhLJVBJKrkPG0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 20:08:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2419 (0x973)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918753F, serialNumber=7E72D801B38A72AB4B0376E12C954124AAE43C6D
        Validity
            Not Before: Jun 12 20:08:05 2026 GMT
            Not After : Jun 19 20:08:05 2026 GMT
        Subject: CN=6a2c6726-9457
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:78:4e:de:48:9c:6c:e4:5d:07:fc:21:08:e1:
                    d0:4a:1c:7e:33:a1:c6:c8:b7:c1:f2:d7:a1:41:e0:
                    82:1b:aa:93:75:1c:38:1c:3d:3b:b3:19:1d:89:a3:
                    e7:fe:c0:cf:70:e7:d6:3b:6d:2a:1d:4e:ab:61:4c:
                    b1:7c:3c:bc:4b:13:0c:86:5f:40:52:d3:46:d1:f1:
                    35:7f:f0:8a:d8:e5:ad:dd:07:92:ad:b1:8d:91:36:
                    29:b3:8a:34:fc:c6:3c:56:6e:ae:e5:2f:68:b8:e1:
                    35:b6:aa:8d:08:5d:8b:a3:98:6f:37:75:5e:d2:2e:
                    9a:57:2c:c7:8b:91:70:9f:58:72:f3:8e:dc:90:5b:
                    b4:86:20:7f:46:78:da:57:55:50:b3:27:f5:50:d5:
                    7b:62:2f:82:85:05:8a:31:af:e7:24:69:ff:ca:be:
                    b7:ac:c5:de:01:20:7a:35:e8:62:36:e2:3e:ab:07:
                    d7:21:ea:fb:c2:c8:e8:04:ff:23:44:89:a8:ae:49:
                    2a:2b:23:3d:f5:06:3e:ed:eb:5a:f0:3d:29:9d:c5:
                    1a:09:38:c2:72:4a:5b:f1:4d:ad:84:cb:43:00:bb:
                    b1:e8:de:9f:84:53:5a:a8:c8:9f:ac:14:30:d9:cc:
                    2c:80:d7:09:dd:06:63:75:f8:97:6e:fb:09:37:e4:
                    63:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:83:73:7A:0D:64:42:ED:16:25:90:F9:C7:8E:A9:0E:7C:D3:43:40
            X509v3 Authority Key Identifier:
                keyid:7E:72:D8:01:B3:8A:72:AB:4B:03:76:E1:2C:95:41:24:AA:E4:3C:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/fnLYAbOKcqtLA3bhLJVBJKrkPG0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnLYAbOKcqtLA3bhLJVBJKrkPG0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/fnLYAbOKcqtLA3bhLJVBJKrkPG0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:ea:8d:89:7d:c6:74:96:1c:32:e0:22:9e:dd:30:de:d7:6e:
         32:88:8b:e2:ea:54:52:36:6d:12:db:6e:28:d0:6c:8f:99:85:
         36:28:c5:5c:d0:9f:47:2a:f6:45:e0:d8:5a:8b:92:dd:c9:3a:
         fa:7b:4d:53:02:a2:d3:b9:e0:f9:45:d2:66:78:f8:49:61:21:
         61:da:ef:d3:a1:20:18:b0:87:42:85:0c:16:f3:24:6b:64:a9:
         f4:d9:f4:31:66:b8:18:57:0e:12:fe:6c:a6:dc:61:01:d6:41:
         41:19:f8:9d:61:70:17:16:cb:a9:8b:eb:af:da:80:d3:3c:46:
         1c:6c:7a:66:2e:63:cf:37:4a:d5:69:55:dc:e9:c9:65:d8:fa:
         3a:c2:4d:8e:bc:84:61:17:63:c7:cb:52:04:d6:b4:b9:e1:2d:
         fb:2f:6d:a7:94:d9:7a:c9:a6:8e:4a:0d:46:8e:77:be:89:fa:
         a5:d4:ca:f7:ef:da:71:71:68:f2:8a:ee:64:bc:b2:f2:5e:b4:
         d8:6a:c6:3c:cb:cc:6f:cc:74:30:6a:74:4f:5b:f5:c4:f3:8d:
         df:a8:01:48:1f:d6:23:f0:05:a6:a1:4d:b0:6f:7f:3d:a9:7b:
         d0:90:73:30:31:f6:fc:a9:a7:42:c5:da:0f:09:5e:b0:b0:3b:
         a0:7b:31:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:51:01 2026 by rpki-client