Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149E0D/904E747E390911EAB0DE3F49C4F9AE02/FrgD2zk43LFdxZooyXcZ2h_yClM.mft
File:                     FrgD2zk43LFdxZooyXcZ2h_yClM.mft (raw, json)
Hash identifier:          E3exdFpzF4gRDElt1mpyd4UkddULOglcVkDse5eQRXU=
Subject key identifier:   68:8A:88:BD:8C:A7:4D:08:BC:D7:6D:7C:99:27:89:82:C7:5A:CD:63
Authority key identifier: 16:B8:03:DB:39:38:DC:B1:5D:C5:9A:28:C9:77:19:DA:1F:F2:0A:53
Certificate issuer:       /CN=A9149E0D/serialNumber=16B803DB3938DCB15DC59A28C97719DA1FF20A53
Certificate serial:       0C24
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrgD2zk43LFdxZooyXcZ2h_yClM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149E0D/904E747E390911EAB0DE3F49C4F9AE02/FrgD2zk43LFdxZooyXcZ2h_yClM.mft
Manifest number:          0C17
Signing time:             Wed 22 Jul 2026 19:08:07 +0000
Manifest this update:     Wed 22 Jul 2026 19:08:07 +0000
Manifest next update:     Wed 29 Jul 2026 19:08:07 +0000
Files and hashes:         1: FrgD2zk43LFdxZooyXcZ2h_yClM.crl (hash: F8SwNYXhXT5h9aET9KSwvsLHovm/f59TLF9vkCpicAs=)
                          2: C8FB48F808AF11EBAB78DF6BC4F9AE02.roa (hash: mSjl0ibvEOuCK6DB5KHjDY/U2WKZFdSr/+i3luIa4aI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149E0D/904E747E390911EAB0DE3F49C4F9AE02/FrgD2zk43LFdxZooyXcZ2h_yClM.crl
                          rsync://rpki.apnic.net/member_repository/A9149E0D/904E747E390911EAB0DE3F49C4F9AE02/FrgD2zk43LFdxZooyXcZ2h_yClM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrgD2zk43LFdxZooyXcZ2h_yClM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 19:08:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3108 (0xc24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149E0D, serialNumber=16B803DB3938DCB15DC59A28C97719DA1FF20A53
        Validity
            Not Before: Jul 22 19:08:07 2026 GMT
            Not After : Jul 29 19:08:07 2026 GMT
        Subject: CN=6a611517-5e0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c6:a8:62:d5:e4:07:80:91:bb:eb:1f:ba:fe:
                    6e:77:2f:cc:ab:11:a1:c5:5b:77:94:b2:6a:98:db:
                    39:3c:12:ef:b0:35:eb:7c:b6:7a:92:ff:3b:04:f6:
                    c4:73:95:00:88:70:0c:e7:3c:31:8d:1a:65:b9:63:
                    ae:7a:68:35:6f:24:db:16:25:7a:ab:5e:26:07:27:
                    d7:3a:5c:94:12:29:f8:b2:b0:00:99:f7:3b:45:85:
                    11:34:d6:dc:7f:17:b2:e1:cc:bb:dc:b7:9d:a5:f8:
                    4a:ff:89:f0:36:11:a2:d1:22:d3:03:50:26:0d:75:
                    ba:55:da:b4:d6:23:9a:eb:13:e4:35:20:63:73:86:
                    62:a8:e2:35:61:52:c5:9b:4e:43:5d:d5:ba:f2:f7:
                    25:4b:9e:2a:22:1a:43:a3:ca:e9:b1:ac:00:02:3e:
                    17:22:cd:7e:16:8a:0a:f3:ce:cf:83:48:f0:ba:8a:
                    89:7d:3f:91:03:78:ff:8c:c7:ef:c9:68:ae:ad:64:
                    7f:43:65:ea:04:e8:ae:d2:70:9d:75:b5:56:ef:07:
                    8c:10:b3:bd:92:ed:67:a8:f4:ed:33:1f:0f:58:42:
                    15:67:37:2b:a9:2e:1b:bd:e7:de:42:4b:dc:df:1e:
                    de:af:2e:06:de:3e:cd:14:9a:02:cf:dc:fc:7e:89:
                    32:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:8A:88:BD:8C:A7:4D:08:BC:D7:6D:7C:99:27:89:82:C7:5A:CD:63
            X509v3 Authority Key Identifier:
                keyid:16:B8:03:DB:39:38:DC:B1:5D:C5:9A:28:C9:77:19:DA:1F:F2:0A:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149E0D/904E747E390911EAB0DE3F49C4F9AE02/FrgD2zk43LFdxZooyXcZ2h_yClM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrgD2zk43LFdxZooyXcZ2h_yClM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149E0D/904E747E390911EAB0DE3F49C4F9AE02/FrgD2zk43LFdxZooyXcZ2h_yClM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:13:8d:14:e3:8c:5f:40:b1:eb:07:3c:ee:b3:a5:ca:a5:dc:
         58:dd:20:7e:86:58:ea:34:e0:4d:49:11:e7:02:ae:3e:9a:5a:
         32:49:d5:0e:c5:15:2d:c6:f7:0e:77:a3:6c:ee:f2:6e:0e:c0:
         01:5b:54:f5:a0:10:d1:83:b0:aa:dc:20:52:03:2c:59:f0:e2:
         7b:3f:1a:0f:50:7a:3d:d8:d6:e2:2c:1d:1b:75:dd:e0:58:8a:
         e8:71:08:e8:84:17:c5:f7:07:0b:6e:b6:46:f3:ea:a2:5e:fb:
         d9:72:55:16:2d:62:64:24:1a:b1:aa:c1:f2:37:32:81:da:99:
         b4:56:2f:85:fe:fe:27:04:d3:96:4d:e2:85:2c:83:bc:3c:b6:
         3f:25:c1:ab:50:6c:21:9f:db:e9:aa:b3:45:cf:85:af:02:0f:
         7a:a6:26:17:ad:6e:2b:95:f9:44:8a:a1:aa:9c:82:5d:63:ae:
         d2:05:1c:3b:af:30:77:9b:e6:b8:68:31:1e:18:54:69:64:b5:
         cb:07:4e:eb:99:c7:ee:86:89:ac:1e:5e:b5:0c:72:3e:8c:d2:
         e8:ff:eb:e0:e8:72:9e:f8:15:05:7b:f2:5c:f4:c3:33:d2:86:
         f8:c9:5d:dc:86:4f:e8:f3:9b:fe:c2:11:3e:2e:15:ce:56:05:
         73:99:91:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:10:53 2026 by rpki-client