Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915DB9F/B88F4252545011E6A3A6D466C4F9AE02/fgqozSvoYXAaXKfPudRQ09kYJ-g.mft
File:                     fgqozSvoYXAaXKfPudRQ09kYJ-g.mft (raw, json)
Hash identifier:          22GW+RYVd7OZ3sdv81irdBs5oGvTE4pFP1G0hpRob4M=
Subject key identifier:   19:C3:C1:9F:DC:70:09:6E:A3:74:61:42:AE:1B:53:CF:84:57:98:09
Authority key identifier: 7E:0A:A8:CD:2B:E8:61:70:1A:5C:A7:CF:B9:D4:50:D3:D9:18:27:E8
Certificate issuer:       /CN=A915DB9F/serialNumber=7E0AA8CD2BE861701A5CA7CFB9D450D3D91827E8
Certificate serial:       1FE0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fgqozSvoYXAaXKfPudRQ09kYJ-g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915DB9F/B88F4252545011E6A3A6D466C4F9AE02/fgqozSvoYXAaXKfPudRQ09kYJ-g.mft
Manifest number:          1FD1
Signing time:             Tue 12 May 2026 15:58:52 +0000
Manifest this update:     Tue 12 May 2026 15:58:51 +0000
Manifest next update:     Tue 19 May 2026 15:58:51 +0000
Files and hashes:         1: fgqozSvoYXAaXKfPudRQ09kYJ-g.crl (hash: fhJ5FrPAURuLvNsZJipob+UzXDuDMPSOXRxm1PEJ4Wk=)
                          2: 4D94E0D6545211E6A367BC68C4F9AE02.roa (hash: nzLMDhvvKl6G16FEG2gICFkWdz4KTK6PcIX/fg8UQKE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915DB9F/B88F4252545011E6A3A6D466C4F9AE02/fgqozSvoYXAaXKfPudRQ09kYJ-g.crl
                          rsync://rpki.apnic.net/member_repository/A915DB9F/B88F4252545011E6A3A6D466C4F9AE02/fgqozSvoYXAaXKfPudRQ09kYJ-g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fgqozSvoYXAaXKfPudRQ09kYJ-g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 15:58:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8160 (0x1fe0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915DB9F, serialNumber=7E0AA8CD2BE861701A5CA7CFB9D450D3D91827E8
        Validity
            Not Before: May 12 15:58:51 2026 GMT
            Not After : May 19 15:58:51 2026 GMT
        Subject: CN=6a034e3c-a372
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:72:80:60:37:47:20:9a:fd:26:8f:a4:b2:92:
                    1b:f1:d2:96:f5:22:92:84:b4:91:aa:54:56:d2:de:
                    bd:65:4f:15:a5:9e:ea:5f:0b:a4:b1:0c:77:05:37:
                    0d:4a:e1:3f:b5:4f:67:93:73:65:18:27:db:0b:1e:
                    87:ee:ea:aa:15:5e:e7:61:e6:07:80:e6:8f:05:1a:
                    31:9f:af:5f:b5:29:de:67:0f:e4:d0:1f:ad:12:48:
                    b7:66:84:f5:24:ab:41:95:0e:38:71:9d:cc:33:23:
                    24:9d:70:2d:b2:44:af:53:33:90:c6:cd:a6:08:2a:
                    91:fe:71:76:13:9a:a0:0e:38:5c:dd:e0:b3:c3:3a:
                    61:c8:87:5f:d8:fe:36:28:7a:d3:a6:6c:41:08:d2:
                    5f:83:e6:9e:74:66:bb:2d:37:a1:cf:30:21:ec:ae:
                    0d:03:7e:79:e1:7f:a6:55:6c:d8:db:10:34:16:e8:
                    09:aa:cc:bf:36:17:ce:c7:5e:29:e1:bd:a9:c1:67:
                    a5:7f:d5:20:89:4c:f6:9a:2d:fe:7b:83:eb:08:d1:
                    b9:23:57:c1:e1:bb:b3:e2:13:37:93:89:9d:86:3e:
                    38:c2:58:5d:69:92:c3:92:d4:9f:e6:c9:08:e4:9f:
                    48:39:aa:cd:b0:e3:29:b1:a3:56:c3:4c:8f:a7:ce:
                    58:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:C3:C1:9F:DC:70:09:6E:A3:74:61:42:AE:1B:53:CF:84:57:98:09
            X509v3 Authority Key Identifier:
                keyid:7E:0A:A8:CD:2B:E8:61:70:1A:5C:A7:CF:B9:D4:50:D3:D9:18:27:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915DB9F/B88F4252545011E6A3A6D466C4F9AE02/fgqozSvoYXAaXKfPudRQ09kYJ-g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fgqozSvoYXAaXKfPudRQ09kYJ-g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DB9F/B88F4252545011E6A3A6D466C4F9AE02/fgqozSvoYXAaXKfPudRQ09kYJ-g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:a2:4f:da:cd:ee:c5:4a:e7:2e:e8:1d:fd:5a:57:47:ba:12:
         fd:65:f0:f0:3c:13:c7:06:98:aa:7b:bb:90:d2:04:4b:49:85:
         83:31:81:aa:80:3c:a5:05:26:ea:ad:a7:25:3d:16:51:8d:db:
         47:e2:80:70:54:e0:c2:f3:dc:73:4e:4c:9c:58:7c:91:2d:f9:
         97:52:59:8c:d5:66:f7:75:e5:09:1b:be:b6:ba:a5:13:49:c8:
         27:77:0f:62:b1:64:4b:fc:90:21:53:e5:de:cc:8d:55:57:51:
         46:2e:66:07:2b:e8:34:77:ff:84:55:aa:0c:80:ad:b7:d0:1a:
         d0:cb:a4:3f:dd:7e:ea:d7:bc:a3:55:90:95:45:98:65:40:51:
         93:91:8a:3c:30:9f:bc:ea:23:67:ec:ff:77:69:a9:31:ca:5c:
         89:6a:c6:dc:0a:b4:1d:92:31:48:1e:2c:fa:2f:e8:f1:e9:33:
         e3:86:86:4c:b4:15:bd:7c:4f:0b:ef:2d:32:92:85:25:a3:c0:
         72:ac:77:d7:4a:e6:79:43:08:99:b6:c9:d7:c8:ea:cd:5d:ee:
         2d:1e:e4:0d:89:55:bf:41:fb:11:c1:0a:77:b9:73:1e:2f:3b:
         be:b7:10:56:38:07:1f:85:ce:79:b4:37:b1:66:ee:85:ac:7f:
         54:4a:bc:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:56:31 2026 by rpki-client