Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9195661/EDC71444D5CE11ECA9DB2462C4F9AE02/FZNmkyrLwvOB-BEGIpgEpBUrNfE.mft
File:                     FZNmkyrLwvOB-BEGIpgEpBUrNfE.mft (raw, json)
Hash identifier:          4XfQ41ekMOEvN80wEdEJH45TQ45d9KnzlCyb7Wm0Blc=
Subject key identifier:   4B:C2:46:8C:C1:30:FE:87:54:22:6B:29:C2:79:ED:63:34:D9:87:B7
Authority key identifier: 15:93:66:93:2A:CB:C2:F3:81:F8:11:06:22:98:04:A4:15:2B:35:F1
Certificate issuer:       /CN=A9195661/serialNumber=159366932ACBC2F381F81106229804A4152B35F1
Certificate serial:       03E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FZNmkyrLwvOB-BEGIpgEpBUrNfE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9195661/EDC71444D5CE11ECA9DB2462C4F9AE02/FZNmkyrLwvOB-BEGIpgEpBUrNfE.mft
Manifest number:          03DF
Signing time:             Mon 27 Jul 2026 01:36:24 +0000
Manifest this update:     Mon 27 Jul 2026 01:36:23 +0000
Manifest next update:     Mon 03 Aug 2026 01:36:23 +0000
Files and hashes:         1: FZNmkyrLwvOB-BEGIpgEpBUrNfE.crl (hash: 1tFpYMIb02B/+tbMYNw4nSjHwKsxWCYhBK0H+KMLVvQ=)
                          2: 31A11606D5D411ECA6C65869C4F9AE02.roa (hash: DQpFah8kqk++zsCSX0cB+OCq/dIJC6xLoJ0yhhG5HHM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9195661/EDC71444D5CE11ECA9DB2462C4F9AE02/FZNmkyrLwvOB-BEGIpgEpBUrNfE.crl
                          rsync://rpki.apnic.net/member_repository/A9195661/EDC71444D5CE11ECA9DB2462C4F9AE02/FZNmkyrLwvOB-BEGIpgEpBUrNfE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FZNmkyrLwvOB-BEGIpgEpBUrNfE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 01:36:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 997 (0x3e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9195661, serialNumber=159366932ACBC2F381F81106229804A4152B35F1
        Validity
            Not Before: Jul 27 01:36:23 2026 GMT
            Not After : Aug  3 01:36:23 2026 GMT
        Subject: CN=6a66b617-1071
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:99:1b:52:05:dd:bd:e0:10:e9:ea:f4:d6:d8:
                    28:e8:b6:68:b1:55:3a:33:62:c3:a3:25:f2:8f:36:
                    b4:f5:e1:3a:15:f9:8c:fe:23:dd:ff:bf:8a:a7:64:
                    7c:92:86:bd:48:a7:24:8a:e7:89:81:53:ee:0d:85:
                    8d:9e:3d:85:54:23:4b:84:e0:06:ce:02:a5:0c:9f:
                    13:d5:17:5f:c0:7d:a0:9f:92:63:04:1a:b2:92:15:
                    82:c4:9a:91:91:46:07:49:a3:95:d8:5f:f0:fb:6f:
                    56:53:e9:5b:8b:8b:d4:ef:2c:87:17:f5:58:f9:81:
                    f6:a6:94:8d:eb:3d:40:9d:46:04:de:9c:97:31:b0:
                    cd:63:af:ed:bd:f9:63:a0:50:b8:a1:04:23:ee:26:
                    7b:f2:e3:1f:c3:80:69:d1:40:24:dd:d5:b6:9a:c6:
                    9d:7f:d8:08:4f:e4:2d:e1:e8:74:4c:96:30:60:9c:
                    cc:22:b8:0c:bd:9e:0e:92:57:3f:6d:1f:d6:fb:5c:
                    e1:1f:90:b5:fe:f6:91:e7:e1:f4:9f:b0:a7:57:e5:
                    15:63:a1:74:b9:14:00:3d:81:60:d7:d3:4b:2a:49:
                    97:81:25:0f:38:81:20:f7:aa:9a:64:05:a5:f2:72:
                    ba:fd:ae:2c:b7:71:69:4a:9b:29:e3:d4:89:64:3c:
                    b6:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:C2:46:8C:C1:30:FE:87:54:22:6B:29:C2:79:ED:63:34:D9:87:B7
            X509v3 Authority Key Identifier:
                keyid:15:93:66:93:2A:CB:C2:F3:81:F8:11:06:22:98:04:A4:15:2B:35:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9195661/EDC71444D5CE11ECA9DB2462C4F9AE02/FZNmkyrLwvOB-BEGIpgEpBUrNfE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FZNmkyrLwvOB-BEGIpgEpBUrNfE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195661/EDC71444D5CE11ECA9DB2462C4F9AE02/FZNmkyrLwvOB-BEGIpgEpBUrNfE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:1f:b7:7f:dc:78:2b:90:e5:99:18:54:32:7a:20:24:51:42:
         44:cf:70:71:74:f8:ea:4e:b4:b0:29:f0:f4:f9:50:3a:08:c8:
         bb:b9:f8:00:cd:22:17:a5:cc:83:2b:78:11:60:b1:a7:c8:f4:
         bf:09:ac:aa:51:45:b6:20:48:27:7d:03:bf:72:be:0e:f4:fe:
         df:75:92:fb:49:b5:e6:02:6e:2b:a6:1e:9a:e2:6b:44:41:63:
         d7:13:b1:67:d7:44:f3:6e:fb:57:f1:93:3a:89:55:be:37:80:
         f6:8d:3b:ab:d1:a1:09:58:39:77:34:22:ce:82:e5:b1:ee:e8:
         0f:6e:8f:e8:2e:47:8f:a5:46:ba:92:4b:dc:ac:21:b9:f9:91:
         64:4f:c9:b6:77:22:60:a8:5f:4c:1f:d2:54:4e:65:22:13:f5:
         a8:65:cf:3f:45:c7:63:d3:ca:4b:c5:99:47:ac:73:13:10:63:
         24:f7:70:a1:47:38:6a:de:70:90:74:86:75:a7:be:3b:15:46:
         fd:46:7a:21:8f:f9:8b:8a:cf:1d:70:6d:5f:99:52:27:ec:46:
         fa:d8:a5:cc:9a:6e:59:91:19:8c:3c:4a:a6:af:59:d3:f0:a1:
         b1:65:08:01:e4:50:37:80:a7:1c:37:0c:43:20:e3:d4:71:9f:
         59:7d:5c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:18:51 2026 by rpki-client