Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA3E7/64776BEE8A1F11F19E4EC7A16811F970/Fkl8IIYtsywfe60cEQzGsoBSRXU.mft
File:                     Fkl8IIYtsywfe60cEQzGsoBSRXU.mft (raw, json)
Hash identifier:          0ppFznD08667V3he4jsA5kE3pVVtXiJce2UE9nELnFk=
Subject key identifier:   EF:DC:DE:99:F6:76:9A:AD:C8:BC:A2:C6:0E:6F:C1:C8:47:49:A9:FE
Authority key identifier: 16:49:7C:20:86:2D:B3:2C:1F:7B:AD:1C:11:0C:C6:B2:80:52:45:75
Certificate issuer:       /CN=A91BA3E7/serialNumber=16497C20862DB32C1F7BAD1C110CC6B280524575
Certificate serial:       04
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fkl8IIYtsywfe60cEQzGsoBSRXU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BA3E7/64776BEE8A1F11F19E4EC7A16811F970/Fkl8IIYtsywfe60cEQzGsoBSRXU.mft
Manifest number:          03
Signing time:             Tue 28 Jul 2026 04:24:12 +0000
Manifest this update:     Tue 28 Jul 2026 04:24:11 +0000
Manifest next update:     Tue 04 Aug 2026 04:24:11 +0000
Files and hashes:         1: Fkl8IIYtsywfe60cEQzGsoBSRXU.crl (hash: rgpwVmS0lP9TEdH+ATYPtPsZtLehdPv8SV9+XTftPQc=)
                          2: 2C58A8288A3C11F18F5718FE3111F970.roa (hash: SONSYy4tIc7OLfGgQbiSXlMj9cIg5ZBgBiRgNLwC7Qs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BA3E7/64776BEE8A1F11F19E4EC7A16811F970/Fkl8IIYtsywfe60cEQzGsoBSRXU.crl
                          rsync://rpki.apnic.net/member_repository/A91BA3E7/64776BEE8A1F11F19E4EC7A16811F970/Fkl8IIYtsywfe60cEQzGsoBSRXU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fkl8IIYtsywfe60cEQzGsoBSRXU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 04:24:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BA3E7, serialNumber=16497C20862DB32C1F7BAD1C110CC6B280524575
        Validity
            Not Before: Jul 28 04:24:11 2026 GMT
            Not After : Aug  4 04:24:11 2026 GMT
        Subject: CN=6a682eec-76c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:83:d1:87:ab:c5:87:7a:d0:31:6a:4b:a1:16:
                    b3:2b:42:17:3d:70:fb:cb:67:18:96:e3:e4:99:ca:
                    60:b7:c7:ce:1f:0d:19:e1:d8:a4:dd:b5:47:d4:5d:
                    05:8d:33:ca:a3:4e:ae:72:7b:ce:c1:4e:99:e9:65:
                    68:47:ad:af:93:6c:fc:0c:f9:0e:4e:9c:c8:81:ab:
                    62:d5:77:a9:21:f5:29:f8:d7:b6:28:ae:e8:fb:1f:
                    b5:b8:1b:d9:fd:e8:6d:f8:19:b2:38:e4:7c:2a:cf:
                    ea:48:14:92:f8:a0:72:18:e5:1a:5f:6d:14:e3:68:
                    04:1a:45:c8:77:5d:8a:ab:a4:42:c6:97:5b:77:12:
                    85:d8:2b:c7:b4:6f:80:05:0b:fe:cf:77:e2:e9:cd:
                    57:e5:2e:cf:5c:fe:5d:7a:be:85:e3:98:5c:36:f3:
                    80:60:1c:56:51:80:12:04:8e:30:36:96:16:bb:ed:
                    de:af:c7:0a:e3:a6:6c:93:fd:20:f9:09:6b:54:cf:
                    19:79:13:5e:6d:48:32:1d:7a:b6:a8:18:c6:8c:0e:
                    72:5e:16:7c:b5:82:cd:94:77:0c:7b:35:0c:c7:73:
                    cd:3f:05:cd:79:50:84:66:7a:8a:e7:25:ce:06:41:
                    e5:d8:bc:0b:f1:31:d0:1b:72:6d:0c:2d:e0:8f:7a:
                    3c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:DC:DE:99:F6:76:9A:AD:C8:BC:A2:C6:0E:6F:C1:C8:47:49:A9:FE
            X509v3 Authority Key Identifier:
                keyid:16:49:7C:20:86:2D:B3:2C:1F:7B:AD:1C:11:0C:C6:B2:80:52:45:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BA3E7/64776BEE8A1F11F19E4EC7A16811F970/Fkl8IIYtsywfe60cEQzGsoBSRXU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fkl8IIYtsywfe60cEQzGsoBSRXU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA3E7/64776BEE8A1F11F19E4EC7A16811F970/Fkl8IIYtsywfe60cEQzGsoBSRXU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:90:95:91:2e:77:fe:d3:c1:52:61:95:bd:d0:9a:e1:f7:93:
         f9:6e:4d:1f:60:a8:3c:58:4d:cb:81:72:a7:fa:2b:7d:ca:4e:
         0f:cf:d1:c9:28:6d:11:8e:d3:94:96:bc:84:9a:1a:d7:6b:c1:
         c7:0a:73:0e:ff:b9:54:be:b5:90:be:c5:3c:eb:c5:49:dc:81:
         5e:05:5c:76:e9:17:8f:77:4b:99:b1:f4:d7:da:80:4f:c8:e9:
         e3:bb:70:f9:0d:66:29:21:fe:fb:ba:9b:9b:e6:b2:a0:83:e1:
         f0:62:18:ac:d0:6e:9a:36:ea:c4:bc:df:f7:ec:14:b6:23:c4:
         c7:22:19:67:4b:6a:c9:fe:fb:fe:d7:85:e0:e7:06:46:c6:c6:
         b5:90:03:c4:33:37:d9:b8:5e:b3:6c:2d:02:af:b5:60:74:00:
         ae:23:49:36:86:e6:b4:6e:9d:26:c8:f8:8e:54:db:c2:d4:8f:
         d9:a2:40:5e:f9:2f:88:84:96:af:ff:3c:69:e8:bf:9b:2b:30:
         19:3d:9f:74:3b:72:15:21:c6:fd:59:c8:23:b6:40:de:62:82:
         2e:d9:d7:52:e6:9c:8d:fd:8b:b6:2c:f7:21:74:5c:f3:bc:c5:
         15:46:53:52:f1:b6:20:30:ad:20:ff:19:1b:fc:ce:e0:5f:6a:
         2f:aa:02:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:38:11 2026 by rpki-client