Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912FEAB/FDD899EC2F8411ED98B91B0AC4F9AE02/FWZDTXxsxlkckNwnSr9z3gDrBQE.mft
File:                     FWZDTXxsxlkckNwnSr9z3gDrBQE.mft (raw, json)
Hash identifier:          rdgIMHqQNlbjEu0jNSrtcJ4y7+1mymRYuR8Krl+r9gA=
Subject key identifier:   C7:E4:0F:F4:DC:13:6C:A1:BD:C1:3E:E2:76:2A:D3:8A:81:B3:BD:6F
Authority key identifier: 15:66:43:4D:7C:6C:C6:59:1C:90:DC:27:4A:BF:73:DE:00:EB:05:01
Certificate issuer:       /CN=A912FEAB/serialNumber=1566434D7C6CC6591C90DC274ABF73DE00EB0501
Certificate serial:       02DE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWZDTXxsxlkckNwnSr9z3gDrBQE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912FEAB/FDD899EC2F8411ED98B91B0AC4F9AE02/FWZDTXxsxlkckNwnSr9z3gDrBQE.mft
Manifest number:          02D7
Signing time:             Wed 13 May 2026 01:28:46 +0000
Manifest this update:     Wed 13 May 2026 01:28:45 +0000
Manifest next update:     Wed 20 May 2026 01:28:45 +0000
Files and hashes:         1: FWZDTXxsxlkckNwnSr9z3gDrBQE.crl (hash: sAEjWfJKnxGTVr6Ms9WY2pDWUuWgksSlq7H23K1ZBqk=)
                          2: 9082B9C42F8711ED90F1090CC4F9AE02.roa (hash: EDyKn0kWcDVHT/YkbTzVjcZ2ssAl9mljUo5MrerRei0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912FEAB/FDD899EC2F8411ED98B91B0AC4F9AE02/FWZDTXxsxlkckNwnSr9z3gDrBQE.crl
                          rsync://rpki.apnic.net/member_repository/A912FEAB/FDD899EC2F8411ED98B91B0AC4F9AE02/FWZDTXxsxlkckNwnSr9z3gDrBQE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWZDTXxsxlkckNwnSr9z3gDrBQE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 01:28:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 734 (0x2de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912FEAB, serialNumber=1566434D7C6CC6591C90DC274ABF73DE00EB0501
        Validity
            Not Before: May 13 01:28:45 2026 GMT
            Not After : May 20 01:28:45 2026 GMT
        Subject: CN=6a03d3cd-5b2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:82:e5:9a:a9:70:a3:4d:bf:ee:a6:ed:1d:e3:
                    60:13:08:33:22:ef:35:0d:c9:ae:29:6b:50:03:f1:
                    ce:1a:10:e5:02:4f:cc:6c:6d:6f:61:41:46:84:96:
                    e9:8a:57:b5:ff:28:22:fa:8a:4f:d5:0c:d0:22:f8:
                    d4:36:96:4d:41:21:c8:44:78:5e:e4:8c:7e:3e:56:
                    6a:a9:98:8f:ad:58:06:25:0f:4e:69:cb:71:79:26:
                    2f:e7:53:b7:32:08:f7:3a:f9:a2:b6:30:86:74:b2:
                    4c:a1:09:8e:e6:7e:de:7f:36:a1:56:85:e5:2f:59:
                    6e:4e:9a:19:38:15:fb:4c:ce:fa:c2:0e:22:53:7e:
                    e5:e7:17:5c:fa:20:e2:a9:a5:4e:84:07:2a:70:f9:
                    1b:89:78:06:2d:62:86:72:9f:47:99:9f:da:1a:b4:
                    19:b5:aa:33:22:fe:38:52:c2:88:80:72:ea:0f:6b:
                    6c:0a:c6:21:05:f9:23:e2:c7:69:7b:d0:40:c8:c2:
                    82:b9:00:89:eb:94:97:e2:3e:74:3f:de:33:c6:08:
                    85:57:6f:16:b7:b2:49:be:91:bc:75:9e:74:17:8d:
                    7a:b4:2d:ec:a7:1f:9e:a2:4c:3b:0a:da:11:3e:b4:
                    58:ce:9b:f6:e1:4d:eb:fd:89:61:40:55:9b:51:58:
                    87:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:E4:0F:F4:DC:13:6C:A1:BD:C1:3E:E2:76:2A:D3:8A:81:B3:BD:6F
            X509v3 Authority Key Identifier:
                keyid:15:66:43:4D:7C:6C:C6:59:1C:90:DC:27:4A:BF:73:DE:00:EB:05:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912FEAB/FDD899EC2F8411ED98B91B0AC4F9AE02/FWZDTXxsxlkckNwnSr9z3gDrBQE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWZDTXxsxlkckNwnSr9z3gDrBQE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FEAB/FDD899EC2F8411ED98B91B0AC4F9AE02/FWZDTXxsxlkckNwnSr9z3gDrBQE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:24:02:fd:e3:fc:e9:a5:5e:46:8b:29:4a:89:8f:be:f5:14:
         75:df:fa:e9:86:0b:27:aa:5a:fe:7e:74:a4:2b:81:d6:66:8c:
         9a:2c:73:60:ac:5e:bf:5b:ce:09:f0:1e:81:ec:6d:64:f6:44:
         3d:35:ab:22:99:3b:03:4d:6d:2c:fd:b9:6c:25:dd:d4:c4:79:
         5c:08:42:d2:60:8b:1e:c0:f4:12:dd:3a:f4:ee:9d:f1:bb:f4:
         ed:77:ca:5f:77:1d:ce:bb:6e:fc:89:9e:ca:df:19:5e:93:59:
         31:c8:85:64:5e:06:5b:c8:75:8a:c9:df:e9:f2:b5:e4:7a:39:
         1e:7e:22:20:95:74:2e:92:74:a5:e9:51:4f:87:f7:d2:19:aa:
         69:4f:09:82:0d:d3:8a:0a:2b:58:27:ad:0a:a3:53:6f:1d:51:
         34:b5:49:98:32:ad:c3:d2:ca:ec:99:2d:d7:9b:51:56:c0:e3:
         0a:f1:62:48:d1:11:f4:c8:58:96:9e:83:73:49:37:e6:17:51:
         6a:4f:bf:3a:95:32:86:d6:4b:c0:cd:75:cb:44:cd:15:04:b5:
         f6:65:34:d8:f3:4d:48:df:e2:30:7b:ca:26:0f:eb:24:3e:b7:
         57:0c:cd:8f:d3:9f:b1:ab:0b:1c:c2:c1:77:1e:3f:5e:90:77:
         bc:2f:40:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:29:01 2026 by rpki-client