Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D12C2/B2FE35DE378011EAB2141374C4F9AE02/FmUgpBWnVONYZSxXkM6GtLJjLdE.mft
File:                     FmUgpBWnVONYZSxXkM6GtLJjLdE.mft (raw, json)
Hash identifier:          jzfOUHoWb3/uq6OM4Gs8z77zjzxV9KSOnYYyozByaSU=
Subject key identifier:   83:CF:B1:45:BD:25:0C:0D:6C:F0:F9:EC:8F:03:87:97:BC:9C:DA:4D
Authority key identifier: 16:65:20:A4:15:A7:54:E3:58:65:2C:57:90:CE:86:B4:B2:63:2D:D1
Certificate issuer:       /CN=A91D12C2/serialNumber=166520A415A754E358652C5790CE86B4B2632DD1
Certificate serial:       0C23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FmUgpBWnVONYZSxXkM6GtLJjLdE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D12C2/B2FE35DE378011EAB2141374C4F9AE02/FmUgpBWnVONYZSxXkM6GtLJjLdE.mft
Manifest number:          0C1A
Signing time:             Tue 28 Jul 2026 19:01:09 +0000
Manifest this update:     Tue 28 Jul 2026 19:01:09 +0000
Manifest next update:     Tue 04 Aug 2026 19:01:09 +0000
Files and hashes:         1: FmUgpBWnVONYZSxXkM6GtLJjLdE.crl (hash: 8CHSJnT+IcCOzC2RRYa2Qvlp5k1zeyN04x9iv4wicdI=)
                          2: 6C8823E2378211EA8FE81077C4F9AE02.roa (hash: FpZm2QP1SUCe57Fvsf80SOu98+2+4rTMgSRz2gTn3gs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D12C2/B2FE35DE378011EAB2141374C4F9AE02/FmUgpBWnVONYZSxXkM6GtLJjLdE.crl
                          rsync://rpki.apnic.net/member_repository/A91D12C2/B2FE35DE378011EAB2141374C4F9AE02/FmUgpBWnVONYZSxXkM6GtLJjLdE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FmUgpBWnVONYZSxXkM6GtLJjLdE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 19:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3107 (0xc23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D12C2, serialNumber=166520A415A754E358652C5790CE86B4B2632DD1
        Validity
            Not Before: Jul 28 19:01:09 2026 GMT
            Not After : Aug  4 19:01:09 2026 GMT
        Subject: CN=6a68fc75-e543
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:8a:e5:be:c9:b7:5b:1a:4b:ad:f4:32:97:1a:
                    6a:fe:e7:c5:39:cb:bf:d8:53:75:69:43:b0:df:98:
                    c7:0e:71:f5:ae:be:29:1e:05:46:c8:c6:70:25:2f:
                    c9:9e:b7:1d:5a:b8:2a:c7:36:1b:2a:f4:cc:de:65:
                    12:74:cf:1d:72:4c:83:f3:e7:78:10:98:5c:15:52:
                    f8:2d:17:8b:1e:bf:d4:94:c2:b5:ff:f4:33:87:34:
                    b3:b2:f0:c0:e8:7c:37:a7:d5:54:80:d4:90:2c:a0:
                    33:35:dc:96:22:d4:88:43:fc:36:7d:df:1b:98:c2:
                    86:98:b8:dc:1b:64:26:39:74:1e:97:b3:da:83:c5:
                    12:7c:30:6e:c1:07:dc:55:12:26:9f:95:1a:b6:3d:
                    02:e9:b3:1f:52:11:53:88:27:db:eb:d8:14:5f:b4:
                    be:0f:27:6b:2d:b4:1c:66:3d:46:27:7d:17:c2:72:
                    2b:00:59:15:1a:11:3f:fd:74:e4:e4:d5:3d:2e:e6:
                    88:7e:fb:2c:02:bc:df:69:fb:cc:dc:d2:20:06:dd:
                    f4:19:f5:0f:be:1a:04:63:bc:19:29:b5:cb:d3:d8:
                    99:b3:ff:51:3e:82:b9:54:29:05:08:df:0e:fc:ed:
                    79:b0:dd:5c:5c:84:b1:0d:dd:03:bf:70:32:e5:63:
                    ad:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:CF:B1:45:BD:25:0C:0D:6C:F0:F9:EC:8F:03:87:97:BC:9C:DA:4D
            X509v3 Authority Key Identifier:
                keyid:16:65:20:A4:15:A7:54:E3:58:65:2C:57:90:CE:86:B4:B2:63:2D:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D12C2/B2FE35DE378011EAB2141374C4F9AE02/FmUgpBWnVONYZSxXkM6GtLJjLdE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FmUgpBWnVONYZSxXkM6GtLJjLdE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D12C2/B2FE35DE378011EAB2141374C4F9AE02/FmUgpBWnVONYZSxXkM6GtLJjLdE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:9f:84:3f:a3:53:9d:1a:bf:59:e6:6f:9f:ef:25:0c:4c:c3:
         a2:34:d8:f3:cc:69:4b:0b:14:20:1c:03:08:93:40:b3:86:49:
         2c:d3:9e:11:0a:ef:7e:e0:9d:01:41:2a:54:00:cf:e9:1c:4b:
         eb:18:33:99:b8:92:2d:e2:fe:75:be:14:54:6b:0b:66:d6:2f:
         53:d4:93:84:e1:2c:79:dc:6d:f6:7e:06:00:73:3e:ff:0a:f1:
         90:69:d1:5c:35:d4:e6:b1:ef:e0:4f:e8:43:b7:50:e2:ac:fc:
         04:a3:ea:87:59:e9:1c:ce:62:df:f1:ed:a5:25:4e:46:07:99:
         5d:7a:63:f8:15:66:03:d1:d7:bd:d2:76:2b:7f:ff:e7:47:0e:
         4d:76:0b:ac:e2:74:97:fd:9c:e0:cb:5c:aa:40:4d:fe:c8:39:
         4e:c1:85:32:f6:b8:ab:4a:81:3e:0f:47:c0:74:f7:e9:28:59:
         60:45:75:1c:38:7a:c8:b3:56:a0:bc:3d:b3:6b:3e:ff:18:98:
         d1:08:2e:54:7a:a7:9a:a9:5f:0f:10:f1:26:b3:c7:2e:33:20:
         5a:96:02:a6:99:e4:dc:8d:f1:50:c4:b1:d9:69:d4:6d:89:a5:
         99:6e:6b:a1:db:eb:c7:99:6f:0e:37:f8:00:1e:ad:aa:d4:31:
         5f:a9:54:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:48:19 2026 by rpki-client