Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF8F4/707765A838A111ED9F3C0C82C4F9AE02/FPn_SiOnILc7r-YDNT8R65c5Jxk.mft
File:                     FPn_SiOnILc7r-YDNT8R65c5Jxk.mft (raw, json)
Hash identifier:          mYgkSEW6lc95b5PXP1E2LQdfrzsjip0QcHqhiB2zNoE=
Subject key identifier:   EB:49:55:20:13:82:DC:1A:6E:38:48:5D:E5:D8:DB:3B:5C:3A:96:CD
Authority key identifier: 14:F9:FF:4A:23:A7:20:B7:3B:AF:E6:03:35:3F:11:EB:97:39:27:19
Certificate issuer:       /CN=A91BF8F4/serialNumber=14F9FF4A23A720B73BAFE603353F11EB97392719
Certificate serial:       02F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FPn_SiOnILc7r-YDNT8R65c5Jxk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BF8F4/707765A838A111ED9F3C0C82C4F9AE02/FPn_SiOnILc7r-YDNT8R65c5Jxk.mft
Manifest number:          02E9
Signing time:             Mon 27 Jul 2026 02:25:57 +0000
Manifest this update:     Mon 27 Jul 2026 02:25:56 +0000
Manifest next update:     Mon 03 Aug 2026 02:25:56 +0000
Files and hashes:         1: FPn_SiOnILc7r-YDNT8R65c5Jxk.crl (hash: AbeMuIqshMorTkM+SeKh50Oizgi9L0RlhK6VnLxD9wM=)
                          2: 9B3244E038A411EDB5C86A28C4F9AE02.roa (hash: GWPxIWtX/zwRGLkOWbdqE/upTqp/GZlTgsxR+zXWx1k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BF8F4/707765A838A111ED9F3C0C82C4F9AE02/FPn_SiOnILc7r-YDNT8R65c5Jxk.crl
                          rsync://rpki.apnic.net/member_repository/A91BF8F4/707765A838A111ED9F3C0C82C4F9AE02/FPn_SiOnILc7r-YDNT8R65c5Jxk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FPn_SiOnILc7r-YDNT8R65c5Jxk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 02:25:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 753 (0x2f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BF8F4, serialNumber=14F9FF4A23A720B73BAFE603353F11EB97392719
        Validity
            Not Before: Jul 27 02:25:56 2026 GMT
            Not After : Aug  3 02:25:56 2026 GMT
        Subject: CN=6a66c1b4-b921
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:5a:7b:96:a2:9d:92:70:c3:56:9a:4b:c7:6c:
                    ce:9d:70:c1:ee:86:13:55:70:12:cd:1b:3c:87:6c:
                    3f:5a:06:65:88:00:2a:f4:20:67:d4:fb:b7:d4:f3:
                    da:bb:bf:39:23:d5:4b:53:09:32:27:73:f0:91:80:
                    20:07:37:b8:4a:de:72:9b:83:4c:eb:72:bf:b6:e2:
                    27:80:bc:60:5b:a1:15:6c:af:b0:47:e0:e4:48:e1:
                    11:f0:7e:52:91:c5:0b:e9:06:b0:41:65:a4:4f:33:
                    6c:57:a0:3d:39:9d:58:69:2a:ac:67:d9:a2:40:cc:
                    2a:e5:0b:45:a4:85:38:7d:18:94:87:27:0b:2e:97:
                    5b:47:bb:97:72:46:24:c4:e1:6e:b2:3a:f3:cf:92:
                    88:62:67:be:0d:75:1f:59:83:75:e3:0b:c4:c9:e0:
                    e5:74:b5:98:61:08:39:2b:9e:69:50:d8:15:c5:b7:
                    d5:8b:9c:1e:ca:1f:1d:31:30:b1:bf:aa:26:02:7a:
                    b2:26:2e:11:75:e5:f1:f0:7d:0e:99:5e:b2:07:48:
                    74:ec:15:08:04:07:f3:89:82:75:b3:1e:65:b3:e9:
                    01:e4:e1:82:04:70:59:dc:dd:45:05:74:30:95:cc:
                    26:6c:68:ce:61:9e:4e:f3:00:19:8b:e9:13:d7:cc:
                    ea:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:49:55:20:13:82:DC:1A:6E:38:48:5D:E5:D8:DB:3B:5C:3A:96:CD
            X509v3 Authority Key Identifier:
                keyid:14:F9:FF:4A:23:A7:20:B7:3B:AF:E6:03:35:3F:11:EB:97:39:27:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BF8F4/707765A838A111ED9F3C0C82C4F9AE02/FPn_SiOnILc7r-YDNT8R65c5Jxk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FPn_SiOnILc7r-YDNT8R65c5Jxk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF8F4/707765A838A111ED9F3C0C82C4F9AE02/FPn_SiOnILc7r-YDNT8R65c5Jxk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:a9:33:ab:58:d8:07:f0:93:80:2d:85:67:a5:46:dd:b9:53:
         19:da:58:c1:17:5a:b2:92:20:36:02:71:1f:ed:e6:dc:94:0f:
         81:74:02:2c:ec:32:48:91:33:ee:b2:cd:63:97:2d:e9:e9:6f:
         db:ea:76:52:fa:3b:42:c1:08:d1:71:37:03:16:85:d5:57:44:
         73:b5:88:ed:eb:2f:55:33:60:d2:72:bf:0d:ed:a7:b4:e4:aa:
         df:24:8a:c0:46:fb:5a:33:0b:d1:4b:05:ce:54:cf:c6:ab:84:
         76:ae:90:ea:c7:10:e8:5e:51:f1:fe:63:e3:80:bc:3b:e8:3e:
         72:38:63:13:bc:c1:4b:f8:57:2a:8e:07:ff:40:0b:07:e5:ab:
         ca:8f:ef:c4:12:c9:9f:9e:35:00:51:de:c4:6a:f0:c7:3f:f2:
         ec:71:2b:fb:aa:d8:8a:d4:7a:bb:e3:22:1c:a4:d0:60:fb:34:
         c9:3f:38:84:ad:76:f2:15:23:5b:f7:5b:ce:f0:0e:fe:e4:16:
         3b:be:3e:67:32:eb:b4:ad:2f:d1:cd:51:97:23:b5:12:9b:0d:
         ca:95:6f:d5:dd:a5:93:27:0c:1f:8b:26:69:ad:7f:39:0f:eb:
         27:16:2a:97:83:7d:e3:2a:95:50:a2:07:d1:7d:c3:f5:09:9a:
         17:60:12:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:12:34 2026 by rpki-client