Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915280B/97BC1DB8EDEF11EC896AE740C4F9AE02/FGXcLLcCU-31FM1DdyZi_zu49uA.mft
File:                     FGXcLLcCU-31FM1DdyZi_zu49uA.mft (raw, json)
Hash identifier:          tGjNjN2cjs9KGCA4PabqkqaQYWHoDcFTopL+ctiXxRA=
Subject key identifier:   5C:31:84:F6:FE:44:15:5D:2B:56:0D:6F:A6:CC:FF:C0:3C:CB:E8:9D
Authority key identifier: 14:65:DC:2C:B7:02:53:ED:F5:14:CD:43:77:26:62:FF:3B:B8:F6:E0
Certificate issuer:       /CN=A915280B/serialNumber=1465DC2CB70253EDF514CD43772662FF3BB8F6E0
Certificate serial:       0393
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FGXcLLcCU-31FM1DdyZi_zu49uA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915280B/97BC1DB8EDEF11EC896AE740C4F9AE02/FGXcLLcCU-31FM1DdyZi_zu49uA.mft
Manifest number:          0386
Signing time:             Mon 11 May 2026 00:54:08 +0000
Manifest this update:     Mon 11 May 2026 00:54:08 +0000
Manifest next update:     Mon 18 May 2026 00:54:08 +0000
Files and hashes:         1: FGXcLLcCU-31FM1DdyZi_zu49uA.crl (hash: zd7CwCABO+tXFGYYdqESRsO0v38MwFXS3+4hfBR38D0=)
                          2: 27EECF18EDF811ECBCAF5567C4F9AE02.roa (hash: gkL9IgqrwOkZIyg24mdNbqROTtOYERD4H34jArPhYAs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915280B/97BC1DB8EDEF11EC896AE740C4F9AE02/FGXcLLcCU-31FM1DdyZi_zu49uA.crl
                          rsync://rpki.apnic.net/member_repository/A915280B/97BC1DB8EDEF11EC896AE740C4F9AE02/FGXcLLcCU-31FM1DdyZi_zu49uA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FGXcLLcCU-31FM1DdyZi_zu49uA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 00:54:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 915 (0x393)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915280B, serialNumber=1465DC2CB70253EDF514CD43772662FF3BB8F6E0
        Validity
            Not Before: May 11 00:54:08 2026 GMT
            Not After : May 18 00:54:08 2026 GMT
        Subject: CN=6a0128b0-91dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c7:53:9f:8c:8a:3c:77:84:8a:19:4f:77:62:
                    ca:fa:10:76:99:a2:da:00:b6:de:be:c5:35:32:43:
                    82:4e:fa:7a:2a:b6:89:a2:45:d7:59:b7:da:31:6f:
                    9e:e7:af:48:b2:ad:00:32:8e:d1:72:d5:2b:27:32:
                    f1:f3:de:49:26:d4:28:1a:39:40:9a:d4:73:c8:de:
                    ca:39:54:09:75:03:95:ce:44:ef:90:d3:3b:ad:06:
                    15:6b:f4:48:b8:76:8e:31:75:71:a3:b4:d8:dd:07:
                    d9:fa:0e:7e:56:a7:02:ad:7d:d5:21:ec:f1:e4:5e:
                    3e:6a:89:3f:c4:b9:13:5f:4a:35:b8:a9:d7:7e:1f:
                    d2:c7:be:03:5c:dd:8e:03:59:e7:93:fa:6d:7d:2d:
                    36:c5:7a:e0:59:2d:f5:67:67:c4:af:d8:7d:d8:9e:
                    d8:f4:01:19:9b:b4:6c:48:52:26:3f:e9:f8:7b:59:
                    82:42:ab:11:cc:7c:6c:b3:a0:53:37:ba:5f:10:d1:
                    4c:fb:4d:5c:f4:e0:4c:ef:9b:f1:0e:04:31:cc:02:
                    f4:06:9a:0e:e5:e2:83:a2:cc:8a:36:a5:21:05:9c:
                    02:38:e2:12:87:94:06:90:d7:2f:36:3a:f7:3f:98:
                    7a:ac:11:1c:bd:34:b9:3b:d6:06:18:8d:3f:55:1c:
                    4d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:31:84:F6:FE:44:15:5D:2B:56:0D:6F:A6:CC:FF:C0:3C:CB:E8:9D
            X509v3 Authority Key Identifier:
                keyid:14:65:DC:2C:B7:02:53:ED:F5:14:CD:43:77:26:62:FF:3B:B8:F6:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915280B/97BC1DB8EDEF11EC896AE740C4F9AE02/FGXcLLcCU-31FM1DdyZi_zu49uA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FGXcLLcCU-31FM1DdyZi_zu49uA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915280B/97BC1DB8EDEF11EC896AE740C4F9AE02/FGXcLLcCU-31FM1DdyZi_zu49uA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:de:33:ab:80:fe:fa:24:a6:46:7e:4c:c0:c0:d2:a8:a8:91:
         9e:ff:f0:24:db:b9:46:39:8b:41:60:4a:c7:c0:ff:27:7c:da:
         35:10:d8:29:73:a1:38:15:2d:05:65:c0:ef:4a:a9:af:bd:cd:
         14:6b:02:b0:d7:9f:11:28:f4:40:f4:27:1f:5a:dc:21:16:76:
         7c:4a:58:38:b2:5f:b1:57:1c:99:5b:3a:ce:68:de:3d:fd:66:
         04:c9:bd:b7:61:39:a7:54:6e:37:08:fd:08:de:9a:0d:95:cf:
         a1:5e:5e:33:d1:b8:4c:dd:74:8e:05:a2:6f:29:d6:62:2b:9e:
         f0:ed:f5:2c:75:bb:74:b4:6b:8c:29:b4:a3:75:c6:76:24:5f:
         89:84:bb:7d:0c:5d:41:24:bb:41:67:12:dc:d9:51:f0:5e:95:
         8a:fc:e6:e6:6a:fd:33:53:1b:34:8f:59:8b:1f:6c:63:f3:36:
         20:c6:c9:73:df:22:91:a4:de:ed:8c:c5:88:43:ca:b9:53:11:
         fa:30:84:66:44:b5:4e:b0:8d:a5:53:40:1b:4c:6f:83:3f:93:
         24:8c:d8:46:0c:5b:f3:47:0e:f6:95:df:a5:dc:e8:b4:56:23:
         96:0e:34:5e:36:74:1f:60:66:ef:5d:eb:1e:14:ba:80:e4:7e:
         71:ca:b6:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:01:19 2026 by rpki-client