Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.mft
File:                     FtFKpRNNQRJGTXmS2_HEUvf6KaA.mft (raw, json)
Hash identifier:          DIbraEvn9fPCPGkPAiyrD44oYAWxKFa5wZigjYXd3xM=
Subject key identifier:   4D:39:04:85:7E:8D:51:A5:B5:9B:E8:3E:CE:45:82:9D:2E:5C:AD:70
Authority key identifier: 16:D1:4A:A5:13:4D:41:12:46:4D:79:92:DB:F1:C4:52:F7:FA:29:A0
Certificate issuer:       /CN=A91A29DA/serialNumber=16D14AA5134D4112464D7992DBF1C452F7FA29A0
Certificate serial:       01C8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FtFKpRNNQRJGTXmS2_HEUvf6KaA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.mft
Manifest number:          01C2
Signing time:             Wed 29 Jul 2026 05:02:01 +0000
Manifest this update:     Wed 29 Jul 2026 05:02:01 +0000
Manifest next update:     Wed 05 Aug 2026 05:02:01 +0000
Files and hashes:         1: FtFKpRNNQRJGTXmS2_HEUvf6KaA.crl (hash: k4g4DlAcewj17p4dg4OLyc4OVaueMNz3OL/BlvOM6RY=)
                          2: C1F74E665C1611F0B0B40A35C4F9AE02.roa (hash: O7Lj4yPFpwZm2VwkuRfj2gTrVG1pPTs7zZ1NbT7XSSw=)
                          3: Z4aH_tdZ0tOLwEu69Vy4G69gf-4.asa (hash: Aislko8MBzysrn48sutN/9wnmjDSj9ZREo4lAeWYs0A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.crl
                          rsync://rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FtFKpRNNQRJGTXmS2_HEUvf6KaA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 05:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 456 (0x1c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A29DA, serialNumber=16D14AA5134D4112464D7992DBF1C452F7FA29A0
        Validity
            Not Before: Jul 29 05:02:01 2026 GMT
            Not After : Aug  5 05:02:01 2026 GMT
        Subject: CN=6a698949-81a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:ad:7a:83:68:fa:01:a8:38:b8:8d:f1:de:dc:
                    f5:00:62:e6:90:a2:a6:9c:9b:82:ae:93:4f:56:05:
                    b0:f9:81:2b:19:c4:14:e2:49:de:c1:52:4e:cf:13:
                    a5:17:b7:f3:ed:90:53:fe:f6:61:d6:43:04:9a:b1:
                    24:2d:b0:e6:dc:cc:11:8b:f5:f3:21:f8:e1:3f:7c:
                    ba:4f:eb:a7:8d:cd:5d:dc:fb:eb:ab:9b:36:5d:f3:
                    99:e6:f4:3f:8a:55:02:e5:cf:ba:32:29:f5:0d:e2:
                    d4:4a:02:01:32:b7:3a:1f:aa:c7:fd:a0:71:d5:d9:
                    b6:dc:d1:1a:6f:6c:e4:15:2d:f7:5a:f4:b4:c2:96:
                    d7:fa:d3:ae:9b:0d:2c:ae:24:f4:47:9f:53:20:65:
                    56:4d:d6:72:2e:2e:f9:e4:ba:94:ba:9e:57:6a:85:
                    9e:cf:55:38:67:c8:f1:e7:3c:cc:ad:ce:2a:e8:46:
                    74:ae:b0:20:8b:c3:d5:71:11:94:bd:29:35:f1:be:
                    8c:2b:36:f1:db:71:80:c4:ce:47:51:f5:97:05:cc:
                    59:ce:63:e9:51:35:7f:ce:cb:e5:97:b9:b1:3a:63:
                    f3:db:e6:a3:fe:e9:22:d5:b2:c6:d7:d5:ac:68:d2:
                    6a:1e:fa:c5:ef:a8:ef:00:4e:33:7f:ca:61:df:8f:
                    a5:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:39:04:85:7E:8D:51:A5:B5:9B:E8:3E:CE:45:82:9D:2E:5C:AD:70
            X509v3 Authority Key Identifier:
                keyid:16:D1:4A:A5:13:4D:41:12:46:4D:79:92:DB:F1:C4:52:F7:FA:29:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FtFKpRNNQRJGTXmS2_HEUvf6KaA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:61:6b:69:32:e2:31:aa:8e:55:d8:b5:f9:e1:8f:3b:c9:f8:
         4a:35:dc:35:ad:7d:dd:48:39:43:a7:1c:ab:74:c5:3d:21:ce:
         89:86:0a:8b:01:be:79:43:34:f0:6d:71:e0:b2:f1:e6:af:ed:
         ac:2c:bb:23:b2:a3:92:aa:bb:ce:04:07:59:cc:ec:e9:4e:ed:
         7f:0b:87:51:52:a7:46:d3:67:4d:28:88:a4:c7:86:75:4c:8a:
         d1:1d:15:1c:68:4e:70:47:da:48:09:43:f8:30:ff:16:a6:8b:
         38:a1:bb:3b:ff:14:ba:43:fd:4f:4c:94:54:4c:75:d4:17:78:
         ac:4e:12:50:b2:54:3d:97:59:96:18:38:25:fc:c5:09:42:3a:
         6a:57:84:68:8a:48:dc:ac:a6:72:3b:0d:a7:e8:28:69:a0:fb:
         52:f5:e1:91:4b:a8:4f:6c:6b:35:c3:a9:9e:68:99:f6:0c:6b:
         e0:3f:98:99:6e:86:af:e8:b5:80:98:e7:02:c6:6d:e3:18:a7:
         bb:50:12:96:05:d6:f7:9c:2d:59:78:74:09:0d:fa:56:21:58:
         5b:eb:15:f7:10:b8:cd:c8:47:dc:3a:b6:4d:85:ed:54:81:f1:
         69:e1:26:36:3a:d6:e4:68:b4:97:ec:9b:83:25:f3:9d:19:a5:
         4d:ff:05:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:50:57 2026 by rpki-client