Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5E23/862A83CAB07311EA90EC996EC4F9AE02/fvLsMxvWVD0y25gMUGJsBAfKiYI.mft
File:                     fvLsMxvWVD0y25gMUGJsBAfKiYI.mft (raw, json)
Hash identifier:          Lznb7IrneZuOVcyvIRLVMBnp+Ymg+05lwzUNNTGM2Ks=
Subject key identifier:   88:72:EF:04:6D:CF:E2:92:A9:CB:E4:12:77:69:2B:3F:4C:35:1C:21
Authority key identifier: 7E:F2:EC:33:1B:D6:54:3D:32:DB:98:0C:50:62:6C:04:07:CA:89:82
Certificate issuer:       /CN=A91D5E23/serialNumber=7EF2EC331BD6543D32DB980C50626C0407CA8982
Certificate serial:       09A4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fvLsMxvWVD0y25gMUGJsBAfKiYI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D5E23/862A83CAB07311EA90EC996EC4F9AE02/fvLsMxvWVD0y25gMUGJsBAfKiYI.mft
Manifest number:          099B
Signing time:             Fri 12 Jun 2026 20:00:52 +0000
Manifest this update:     Fri 12 Jun 2026 20:00:52 +0000
Manifest next update:     Fri 19 Jun 2026 20:00:52 +0000
Files and hashes:         1: fvLsMxvWVD0y25gMUGJsBAfKiYI.crl (hash: CtoKXbVaWA0U1WvnNlVwNzrbHW67nUITDFz3pOGXXZ8=)
                          2: 70C35E88B07511EA8C0EC372C4F9AE02.roa (hash: nEw1J5nI/jYM2/PDdrlSv5FQkDbuSGPVtzOk8gJbumo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D5E23/862A83CAB07311EA90EC996EC4F9AE02/fvLsMxvWVD0y25gMUGJsBAfKiYI.crl
                          rsync://rpki.apnic.net/member_repository/A91D5E23/862A83CAB07311EA90EC996EC4F9AE02/fvLsMxvWVD0y25gMUGJsBAfKiYI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fvLsMxvWVD0y25gMUGJsBAfKiYI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 20:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2468 (0x9a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D5E23, serialNumber=7EF2EC331BD6543D32DB980C50626C0407CA8982
        Validity
            Not Before: Jun 12 20:00:52 2026 GMT
            Not After : Jun 19 20:00:52 2026 GMT
        Subject: CN=6a2c6574-2ad2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:5c:c3:02:17:52:59:07:3a:4c:64:04:22:44:
                    dd:d3:70:2d:c2:e4:bf:f2:b8:42:aa:b8:5d:f4:14:
                    c4:bb:49:a6:4e:34:f6:e6:6e:85:65:89:d1:5b:90:
                    8b:1c:b1:ab:8e:07:9c:cc:ee:6f:fd:ee:9a:d1:cf:
                    c9:ce:d7:6d:bb:4a:5f:eb:50:72:77:96:4c:d5:c0:
                    db:ed:1b:3c:c3:60:b1:c4:bf:c5:eb:4d:29:91:d2:
                    07:77:07:5b:b2:62:eb:44:0b:38:48:da:08:c8:b4:
                    1f:cd:37:11:13:ee:51:12:86:2e:9a:13:62:3d:2b:
                    7f:28:f1:9c:fe:61:cb:78:31:b2:90:7e:be:2d:41:
                    38:cd:c1:5c:49:54:ae:ec:19:d7:1f:ed:cd:27:96:
                    2c:bc:8c:30:00:fa:2a:94:70:ed:37:fb:c6:57:04:
                    5a:b5:c2:4a:23:96:d1:a3:e0:fe:1f:e3:ef:f5:b8:
                    f1:09:9e:c9:5d:5e:be:04:13:2c:90:d9:2c:23:25:
                    e3:fe:af:ea:0f:13:7f:e4:4d:c2:d4:42:4c:59:16:
                    16:4c:95:7e:a7:96:fe:7a:9c:64:2e:93:0c:94:cf:
                    76:f2:47:0b:6b:07:a4:14:8e:84:47:d4:75:0c:b4:
                    bb:b5:60:ee:15:9e:f1:af:35:f8:81:ce:92:f2:1e:
                    98:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:72:EF:04:6D:CF:E2:92:A9:CB:E4:12:77:69:2B:3F:4C:35:1C:21
            X509v3 Authority Key Identifier:
                keyid:7E:F2:EC:33:1B:D6:54:3D:32:DB:98:0C:50:62:6C:04:07:CA:89:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D5E23/862A83CAB07311EA90EC996EC4F9AE02/fvLsMxvWVD0y25gMUGJsBAfKiYI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fvLsMxvWVD0y25gMUGJsBAfKiYI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5E23/862A83CAB07311EA90EC996EC4F9AE02/fvLsMxvWVD0y25gMUGJsBAfKiYI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:ce:20:cb:4d:5d:8a:d7:73:65:2a:86:65:6f:96:2b:d4:64:
         35:60:35:cd:1e:40:90:61:4b:54:e2:ff:83:49:75:18:c5:3a:
         a1:c4:ae:bc:d1:8f:b5:c8:b4:b3:c4:6e:26:36:91:07:38:47:
         6e:44:8d:3b:11:5a:ba:97:5c:ed:b0:e7:1e:a8:62:6e:be:16:
         ff:5a:80:72:dd:c1:d5:5c:83:3b:de:fd:e7:49:48:8f:b5:cb:
         12:5d:4c:97:05:77:75:d1:1d:87:71:e6:87:d5:60:d6:fa:ae:
         86:b7:37:f7:e8:bd:89:3b:0e:45:23:33:d5:19:40:86:4e:3d:
         7f:40:21:64:4f:33:cd:cb:d4:55:fc:01:6e:80:72:c6:9e:db:
         43:56:a3:67:72:24:bb:4d:86:bd:81:06:d7:a1:08:98:5a:21:
         38:48:0a:a2:07:63:e1:98:cf:d9:5a:de:03:61:08:da:8f:2c:
         64:15:7d:39:fe:c5:64:65:88:0d:c0:27:84:96:4d:f0:82:97:
         fa:c5:83:c9:64:89:60:12:50:71:c8:f4:1f:85:5a:d4:f7:ce:
         b6:cf:78:af:d4:9c:c5:36:4d:3d:1b:93:7e:9d:2f:5e:5f:66:
         ff:d1:0e:2d:30:fe:f5:5c:20:2d:b0:39:48:93:9d:0a:a4:21:
         c9:90:62:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:06:16 2026 by rpki-client