Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.mft
File:                     FfB_78oF6EbUU4USXou0J3WDAPk.mft (raw, json)
Hash identifier:          gEPP7ruSoxVNxs9mr66UZGupFm6lORwMPT+vBqkt6yw=
Subject key identifier:   90:D3:32:7F:F1:69:62:DF:0F:28:17:77:26:F3:FF:82:DA:34:5D:F4
Authority key identifier: 15:F0:7F:EF:CA:05:E8:46:D4:53:85:12:5E:8B:B4:27:75:83:00:F9
Certificate issuer:       /CN=A91503BB/serialNumber=15F07FEFCA05E846D45385125E8BB427758300F9
Certificate serial:       0C95
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfB_78oF6EbUU4USXou0J3WDAPk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.mft
Manifest number:          0C8B
Signing time:             Wed 22 Jul 2026 18:54:37 +0000
Manifest this update:     Wed 22 Jul 2026 18:54:36 +0000
Manifest next update:     Wed 29 Jul 2026 18:54:36 +0000
Files and hashes:         1: FfB_78oF6EbUU4USXou0J3WDAPk.crl (hash: ribvm0+AONI2jbg/YpJ+iFhWDftwYMnCusN4pwx3gHQ=)
                          2: FC90C520213411EA8D675645C4F9AE02.roa (hash: wRh3N1lkasKdB1iov51RXGczR9sD9duj3/LCNc3iLBY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.crl
                          rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfB_78oF6EbUU4USXou0J3WDAPk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 18:54:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3221 (0xc95)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91503BB, serialNumber=15F07FEFCA05E846D45385125E8BB427758300F9
        Validity
            Not Before: Jul 22 18:54:36 2026 GMT
            Not After : Jul 29 18:54:36 2026 GMT
        Subject: CN=6a6111ec-2b04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:25:b5:b6:39:88:5c:2a:29:14:ee:cc:cc:b8:
                    1f:53:8a:68:d1:83:f7:e9:b0:5a:12:af:af:eb:97:
                    61:f9:c1:72:a6:7c:cb:e4:5d:13:d8:72:fd:98:27:
                    0d:93:66:f2:fa:52:44:c3:51:35:b1:9a:d8:34:ae:
                    e8:2e:f3:9e:e0:a5:b9:6d:8b:8b:d7:81:18:e6:92:
                    d2:a7:b6:54:50:f9:72:74:37:43:1a:33:c6:8c:f0:
                    67:8e:91:63:d4:e6:ee:c4:30:b5:67:1c:23:d7:ce:
                    14:de:01:e0:03:d8:bf:28:fa:96:e5:ae:a0:4c:8e:
                    ad:48:8b:ec:c0:69:21:c9:a6:19:8e:21:5e:43:dc:
                    07:82:21:75:6b:39:53:98:6b:ba:dc:e8:81:e6:ce:
                    83:21:b6:f5:94:b7:8e:0d:cf:34:d9:37:50:d8:f1:
                    35:24:c9:03:1d:49:5d:1b:9a:38:71:92:91:ed:b0:
                    18:ab:45:56:e7:37:3a:9f:18:18:79:d2:00:50:06:
                    74:86:5d:11:05:78:e0:27:a6:71:f4:a8:34:a8:58:
                    ef:5c:83:88:20:78:67:fc:07:b4:ee:ba:69:c0:c2:
                    43:90:b0:c4:48:2d:ac:51:a8:69:9d:4b:02:f9:fb:
                    bc:b4:0f:15:7b:e4:fd:a0:9c:3b:2e:70:26:4b:06:
                    ae:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:D3:32:7F:F1:69:62:DF:0F:28:17:77:26:F3:FF:82:DA:34:5D:F4
            X509v3 Authority Key Identifier:
                keyid:15:F0:7F:EF:CA:05:E8:46:D4:53:85:12:5E:8B:B4:27:75:83:00:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfB_78oF6EbUU4USXou0J3WDAPk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:97:5f:4f:f5:79:de:bb:c4:81:15:68:78:95:11:79:00:20:
         47:46:36:5b:9b:07:79:7e:bb:32:e9:e0:76:a5:d1:2a:bd:6f:
         8c:6c:05:07:3e:35:d8:fb:a0:b5:01:b2:80:af:4b:e5:7f:6e:
         ce:4b:0c:dd:c9:fd:ad:da:73:fd:02:8f:ce:27:da:82:3e:91:
         47:8f:50:80:ff:56:0c:ea:ef:04:8d:94:18:6d:32:0d:fa:48:
         69:df:1b:c1:db:3b:78:d6:d3:5e:01:4f:d7:76:f7:3f:f1:e8:
         76:c8:c0:d7:16:f9:a3:8f:28:2e:08:18:5d:8d:e2:06:f5:c4:
         e5:f6:4e:d6:66:3c:7e:4f:67:6e:64:34:0e:5b:b9:4c:6c:7f:
         2b:64:33:04:b1:29:6c:11:87:9d:38:db:c5:e5:07:ab:d2:8a:
         71:c6:46:3e:d4:44:69:c4:66:d6:08:2d:33:f2:6c:e3:6c:1b:
         a6:06:a1:bc:e5:29:68:01:b7:0d:04:be:76:2e:d0:09:9b:4a:
         4e:da:d5:85:2c:0b:ff:e2:9e:dc:1d:cb:ff:d9:86:d7:50:45:
         78:d8:d5:fb:65:2b:01:9f:1f:e5:62:9b:d6:28:ed:5b:49:bc:
         6b:45:87:8a:b5:9c:19:8a:fd:3e:e6:11:64:83:84:a7:79:f6:
         d7:d6:d3:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:06:44 2026 by rpki-client