Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.mft
File:                     FjMWdiEa7mdzSFtlIzxiw6RYev0.mft (raw, json)
Hash identifier:          TVYcFHRksI5DDAxCBAjoO8Mxo/ccxbvM93U1xQq670w=
Subject key identifier:   B3:A2:1E:88:18:7B:26:C7:2A:E9:70:58:6A:8D:1B:B7:FE:30:E6:2E
Authority key identifier: 16:33:16:76:21:1A:EE:67:73:48:5B:65:23:3C:62:C3:A4:58:7A:FD
Certificate issuer:       /CN=A91A86D0/serialNumber=16331676211AEE6773485B65233C62C3A4587AFD
Certificate serial:       0D01
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FjMWdiEa7mdzSFtlIzxiw6RYev0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.mft
Manifest number:          0CED
Signing time:             Fri 12 Jun 2026 17:25:34 +0000
Manifest this update:     Fri 12 Jun 2026 17:25:34 +0000
Manifest next update:     Fri 19 Jun 2026 17:25:34 +0000
Files and hashes:         1: FjMWdiEa7mdzSFtlIzxiw6RYev0.crl (hash: WsbWI5LHFf/B45+1d9dUZojS+kBR8Mw9xaChrKJo0H8=)
                          2: DD004670C39711F0A241F86DC4F9AE02.roa (hash: ILb2f5MFl0hmYnyJlCFO6BUBR2uQox0knIxNniHNGBA=)
                          3: CF1B3152CCE111EB90AF2C7AC4F9AE02.roa (hash: twJcU0dvcEBMbuiZq5Wi1cC3xSMhYlFvAN7WKpOcESs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.crl
                          rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FjMWdiEa7mdzSFtlIzxiw6RYev0.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 17:25:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3329 (0xd01)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A86D0, serialNumber=16331676211AEE6773485B65233C62C3A4587AFD
        Validity
            Not Before: Jun 12 17:25:34 2026 GMT
            Not After : Jun 19 17:25:34 2026 GMT
        Subject: CN=6a2c410e-bccd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a4:7a:5f:a5:a1:95:c6:a9:e0:9f:4f:95:65:
                    7a:87:ca:e3:e5:44:14:6c:b4:e5:ae:4e:c0:84:b3:
                    cc:75:33:7e:f0:60:91:c5:4f:f6:5c:e5:b0:14:cf:
                    61:c7:dd:72:3b:b7:1b:0a:97:1b:39:77:10:4a:28:
                    ae:93:73:e0:aa:98:b1:d9:03:e3:c6:67:18:2e:d5:
                    8e:3d:03:de:a9:29:52:93:cb:c6:52:bf:6e:c8:3a:
                    53:a9:55:36:fd:2c:a2:8f:92:fb:e3:46:34:e4:03:
                    e4:91:dc:e5:67:e7:d1:0e:c0:b8:f1:9b:4e:60:77:
                    0f:05:9e:63:d1:e0:7c:26:9b:b3:42:92:7d:29:68:
                    42:6a:a1:fc:8b:b6:bf:d9:6d:bd:85:fb:ce:87:d6:
                    77:65:9f:ca:6d:4d:e1:2d:a9:8e:dc:a4:1b:6f:e1:
                    a9:00:9e:64:8c:26:36:d9:74:bb:9e:14:54:de:12:
                    9a:60:26:52:b4:27:8f:49:8b:37:78:7e:7a:10:ef:
                    6d:55:7e:42:c5:60:d5:ca:f2:0f:59:dc:98:97:7a:
                    96:74:fc:85:de:f0:c8:41:9d:98:96:6f:02:9b:d6:
                    69:9c:25:99:88:aa:8e:49:1e:8e:b9:35:21:0c:c8:
                    9d:fa:e7:76:11:24:cc:9f:e5:4a:e9:02:fa:11:6e:
                    84:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:A2:1E:88:18:7B:26:C7:2A:E9:70:58:6A:8D:1B:B7:FE:30:E6:2E
            X509v3 Authority Key Identifier:
                keyid:16:33:16:76:21:1A:EE:67:73:48:5B:65:23:3C:62:C3:A4:58:7A:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FjMWdiEa7mdzSFtlIzxiw6RYev0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:1b:eb:a1:99:f2:a3:b9:0e:ad:b9:f7:92:b1:e1:64:53:ce:
         f2:21:37:3a:ba:82:d6:9f:47:cb:de:57:84:8c:5f:59:9b:eb:
         7e:3e:6b:ef:60:1e:09:a9:d7:5b:bb:9f:3f:4f:99:2f:28:91:
         8c:1a:27:61:5b:3d:40:91:b4:8d:42:7f:8c:cc:fa:8c:a7:ef:
         3f:50:45:9f:8f:69:2a:e3:71:f2:d1:d4:05:6c:b3:08:44:4e:
         2d:9f:4a:8f:06:1f:37:55:e4:d0:8a:ee:a0:e2:78:c7:59:43:
         80:de:6c:a7:ac:80:75:74:66:24:a5:55:45:e2:72:24:39:2f:
         a5:9a:ed:41:03:9a:7d:ec:c4:3a:d0:49:69:f5:4e:ae:38:9e:
         13:9e:3e:e3:1f:40:10:2f:76:50:90:55:ff:65:b6:0f:d1:7f:
         37:76:34:75:04:c5:4a:e5:ed:86:26:2b:c2:f0:66:4b:27:c8:
         4a:7e:3c:a1:db:83:a0:1a:41:6f:e6:0b:1f:1c:cb:00:7b:b2:
         4a:58:4e:6a:d6:df:e4:a0:99:86:fe:7f:08:8a:09:2b:54:69:
         59:ce:d1:29:96:49:40:c7:7c:66:13:99:eb:c1:98:33:e7:16:
         b4:ef:b1:98:35:6c:94:53:c5:a7:51:2d:b8:4c:98:c3:21:65:
         0a:b1:55:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:43:22 2026 by rpki-client