Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.mft
File:                     fONyLR7LAIObJGf9XDmmrUamImE.mft (raw, json)
Hash identifier:          6aI4MBnnEQL5hipp+/OCA1vhrfvW/p6//F2wYC9LR8I=
Subject key identifier:   87:2F:12:E1:17:BD:10:F5:91:FB:97:48:4B:66:19:DB:EF:F9:80:88
Authority key identifier: 7C:E3:72:2D:1E:CB:00:83:9B:24:67:FD:5C:39:A6:AD:46:A6:22:61
Certificate issuer:       /CN=A9156E6F/serialNumber=7CE3722D1ECB00839B2467FD5C39A6AD46A62261
Certificate serial:       0CFF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fONyLR7LAIObJGf9XDmmrUamImE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.mft
Manifest number:          0CF4
Signing time:             Tue 12 May 2026 18:20:21 +0000
Manifest this update:     Tue 12 May 2026 18:20:20 +0000
Manifest next update:     Tue 19 May 2026 18:20:20 +0000
Files and hashes:         1: fONyLR7LAIObJGf9XDmmrUamImE.crl (hash: 5rYYsw9IWrV2tkVj6LCH5kHl0tOU+7Qb7MHxQ/ErYLA=)
                          2: ABD61D2E06D611EA8EBBEA50C4F9AE02.roa (hash: taMg9ABZmz3UBA8VdUB5OiDUtv+I/OZVxR13yJafYfo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.crl
                          rsync://rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fONyLR7LAIObJGf9XDmmrUamImE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 18:20:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3327 (0xcff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9156E6F, serialNumber=7CE3722D1ECB00839B2467FD5C39A6AD46A62261
        Validity
            Not Before: May 12 18:20:20 2026 GMT
            Not After : May 19 18:20:20 2026 GMT
        Subject: CN=6a036f65-37b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:47:99:ae:66:45:47:ae:48:80:9c:f9:58:83:
                    f8:a3:53:e1:0b:17:f4:51:07:3e:e1:6c:74:e5:72:
                    56:3a:23:72:f9:76:62:a3:1f:2f:b1:29:a3:f8:13:
                    4f:48:db:cf:44:7e:85:c5:4a:dd:7c:b4:62:84:ac:
                    9a:0a:ea:d2:44:77:58:65:ca:80:ba:f1:1a:92:06:
                    14:fc:56:ea:cd:41:ba:be:b8:c3:96:80:60:71:0d:
                    4a:67:df:01:1b:c8:19:90:32:f4:fb:49:50:d7:62:
                    e1:3d:ad:99:8f:79:21:bf:eb:be:13:dc:a2:92:12:
                    1d:69:e3:e3:e0:eb:ef:78:71:6d:e5:2a:53:7f:24:
                    b9:42:b9:f9:6b:c5:0d:48:26:5b:33:80:54:25:15:
                    4c:07:be:35:63:41:64:c0:53:59:fa:08:66:8d:ea:
                    12:31:07:b4:48:d0:b4:17:86:3e:e5:d0:8c:17:cb:
                    4c:92:de:b0:d8:f8:e4:42:ac:e5:7d:03:00:e5:57:
                    88:ac:56:17:ce:fc:da:d5:a2:c1:86:99:3f:c3:86:
                    18:51:d5:3b:98:74:a0:25:cb:dd:84:81:d3:8f:62:
                    52:a5:ff:10:ac:64:50:46:45:e9:79:2d:8a:1b:a8:
                    b5:9c:26:b9:98:3b:0b:8d:95:84:b9:5e:11:4c:4c:
                    4a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:2F:12:E1:17:BD:10:F5:91:FB:97:48:4B:66:19:DB:EF:F9:80:88
            X509v3 Authority Key Identifier:
                keyid:7C:E3:72:2D:1E:CB:00:83:9B:24:67:FD:5C:39:A6:AD:46:A6:22:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fONyLR7LAIObJGf9XDmmrUamImE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:d9:f9:70:97:2f:36:7a:8d:63:66:33:cc:45:79:7b:21:ac:
         52:ba:4a:48:8a:a4:06:bc:e4:da:c4:4b:a3:43:23:2a:77:b1:
         98:6b:38:d6:00:a6:23:72:a7:fa:83:88:a3:12:ab:f5:7b:da:
         74:c3:5e:de:e7:85:2b:5c:e9:46:d0:51:60:34:9f:a8:b0:85:
         b4:19:f7:77:3d:fa:5a:a3:70:e6:31:fb:cd:c5:13:78:3f:58:
         a0:51:e8:be:e1:95:21:25:8b:d5:15:26:c6:2e:b1:c3:d1:7d:
         c4:e4:ae:f1:94:10:14:15:d4:e3:e9:67:23:71:af:74:41:d6:
         74:a4:42:39:98:eb:ae:38:43:62:56:2a:ba:70:b5:5f:27:51:
         db:4c:a9:2b:6c:e2:8b:32:6b:91:1a:fd:51:dd:11:38:9f:33:
         5b:93:25:04:50:bf:91:32:8a:83:66:58:77:7d:6a:78:12:ae:
         d4:12:a6:f3:11:46:56:74:77:b4:4e:04:8b:14:d0:8c:39:00:
         11:ef:86:29:78:e8:57:2a:de:f0:29:45:d1:8b:2c:68:2e:85:
         cd:92:a0:81:8a:30:51:ad:6c:a0:3d:1d:75:cf:47:37:88:cc:
         4b:29:8d:4a:b0:eb:39:07:e9:75:ee:01:5e:6a:95:8a:52:27:
         4b:69:da:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:40:14 2026 by rpki-client