Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.mft
File:                     FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.mft (raw, json)
Hash identifier:          uORPjnJ1gN7JHtEys5PlGMgLYYUlStPL2p56qbJoLyY=
Subject key identifier:   5F:32:E8:E4:E4:3A:E8:E7:F8:98:37:BA:6A:87:D2:32:E5:7C:44:AF
Authority key identifier: 15:F0:A4:06:85:E6:9A:64:1D:B7:0E:82:BF:78:0A:9A:BF:E3:F1:59
Certificate issuer:       /CN=A918B0C4/serialNumber=15F0A40685E69A641DB70E82BF780A9ABFE3F159
Certificate serial:       02B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.mft
Manifest number:          02A9
Signing time:             Mon 27 Jul 2026 02:52:24 +0000
Manifest this update:     Mon 27 Jul 2026 02:52:24 +0000
Manifest next update:     Mon 03 Aug 2026 02:52:24 +0000
Files and hashes:         1: FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.crl (hash: Aoc7ciTfSukZdgOz1rUk6HX7KZqsZ5Do9tRRIceMNFE=)
                          2: F59959807A0511EDA112EF32C4F9AE02.roa (hash: rWEaU3X62dbPpbBeKKBVqa2rvAme+JAlDrUFb+kTgY8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.crl
                          rsync://rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 02:52:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 689 (0x2b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918B0C4, serialNumber=15F0A40685E69A641DB70E82BF780A9ABFE3F159
        Validity
            Not Before: Jul 27 02:52:24 2026 GMT
            Not After : Aug  3 02:52:24 2026 GMT
        Subject: CN=6a66c7e8-cde8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:fb:e1:63:01:24:90:22:39:03:52:c6:a5:e8:
                    8f:5a:d0:4c:bc:46:df:8d:a8:f3:eb:03:15:d2:77:
                    4b:69:ae:ba:69:fd:23:91:5c:ca:f5:d7:44:28:25:
                    70:5a:88:c8:9e:7e:31:f0:55:49:55:dd:fe:29:58:
                    0c:33:ec:26:7f:79:8b:60:30:dc:73:3b:57:9e:d9:
                    14:ce:1b:d4:00:b7:03:fb:80:c1:7e:54:60:80:bd:
                    ef:37:1d:13:54:89:54:e6:b0:63:14:74:a1:7a:d6:
                    8e:77:05:86:62:be:8d:92:b2:15:bd:2b:ae:33:57:
                    0d:7e:a0:98:57:89:35:06:c6:7e:63:29:d1:05:a9:
                    aa:f9:bc:13:d5:c1:7a:c5:72:58:54:49:80:ac:71:
                    11:49:76:37:12:47:9d:6f:c7:11:82:8a:1b:be:94:
                    08:36:24:1d:88:18:03:cd:65:8a:e4:d1:68:4d:51:
                    e0:6a:4e:bf:3f:39:16:7b:fe:c4:a3:29:13:a4:03:
                    db:04:98:36:12:b2:b8:89:a6:fa:b0:b1:f7:06:41:
                    e2:a0:e2:f4:c1:4f:77:7a:19:89:c9:4c:99:74:52:
                    11:fd:88:a7:c3:5c:07:d8:25:d0:e9:41:c6:03:94:
                    96:03:2f:f8:1c:93:9a:5c:14:1b:cd:e1:d6:3f:2a:
                    6f:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:32:E8:E4:E4:3A:E8:E7:F8:98:37:BA:6A:87:D2:32:E5:7C:44:AF
            X509v3 Authority Key Identifier:
                keyid:15:F0:A4:06:85:E6:9A:64:1D:B7:0E:82:BF:78:0A:9A:BF:E3:F1:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:fd:26:d6:0b:bc:8c:5b:3c:6e:2d:c4:c7:22:44:a6:4c:01:
         19:82:24:28:46:a7:ae:94:ae:0a:2d:45:11:16:5d:48:bf:01:
         ad:97:02:fe:f5:a5:dc:54:88:39:20:4f:cb:4f:02:7e:e7:09:
         49:fb:22:9f:53:93:b9:a9:09:94:dc:97:09:b9:32:20:89:a7:
         10:c4:95:31:df:d2:cb:2a:6a:a4:57:0d:79:a4:0c:54:ed:d5:
         d8:78:aa:0a:04:2d:a0:f2:8a:26:27:de:94:3a:c8:c9:f4:7b:
         f7:be:e1:2b:66:83:7e:13:b3:ec:ce:4e:3a:01:b4:64:f0:0b:
         cb:c0:67:86:39:e2:5c:1b:d9:62:14:e8:d9:71:a1:f5:f7:2c:
         2c:cd:2c:33:d2:ea:3a:9b:e3:46:6d:61:a3:b9:82:12:8f:c7:
         d5:07:09:cc:34:ea:d8:43:6a:8b:4b:48:26:fb:0f:5c:3c:b3:
         90:b2:6c:77:84:66:17:10:8a:c5:8a:ba:96:e8:a2:8f:f7:27:
         9d:ba:70:b4:14:8e:32:d7:0b:98:f4:9f:7d:19:17:59:75:3f:
         41:f4:bb:8f:45:82:63:fc:d5:93:2c:f8:5f:ff:13:e0:8c:56:
         93:99:a5:f0:9a:85:c4:6e:bc:2e:36:5a:88:a4:76:66:aa:5a:
         14:cd:99:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:27:27 2026 by rpki-client