Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915FD27/A80DB38235EF11ED8239AF2BC4F9AE02/1FLGfvaHRDivqZOoStCrwYUWkhs.mft
File:                     1FLGfvaHRDivqZOoStCrwYUWkhs.mft (raw, json)
Hash identifier:          irzlcBTmE1CUnuY9peZqdvAgF9NsmiRELkrk6qAANrQ=
Subject key identifier:   AB:D2:82:56:15:50:90:40:51:48:81:B7:D4:A4:6C:37:AB:FC:F4:43
Authority key identifier: D4:52:C6:7E:F6:87:44:38:AF:A9:93:A8:4A:D0:AB:C1:85:16:92:1B
Certificate issuer:       /CN=A915FD27/serialNumber=D452C67EF6874438AFA993A84AD0ABC18516921B
Certificate serial:       02DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FLGfvaHRDivqZOoStCrwYUWkhs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915FD27/A80DB38235EF11ED8239AF2BC4F9AE02/1FLGfvaHRDivqZOoStCrwYUWkhs.mft
Manifest number:          02CE
Signing time:             Wed 13 May 2026 01:31:33 +0000
Manifest this update:     Wed 13 May 2026 01:31:33 +0000
Manifest next update:     Wed 20 May 2026 01:31:33 +0000
Files and hashes:         1: 1FLGfvaHRDivqZOoStCrwYUWkhs.crl (hash: VJFCcUXGfeE8CPoApNKlOwsqXlQVrPFozb2iLIPa1yM=)
                          2: 9BDA59F69C8C11F0A27C535EC4F9AE02.roa (hash: 1AILx3io2TpfX7hUWzuL2pU58QXDn9h+uBSyFOkdjjg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915FD27/A80DB38235EF11ED8239AF2BC4F9AE02/1FLGfvaHRDivqZOoStCrwYUWkhs.crl
                          rsync://rpki.apnic.net/member_repository/A915FD27/A80DB38235EF11ED8239AF2BC4F9AE02/1FLGfvaHRDivqZOoStCrwYUWkhs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FLGfvaHRDivqZOoStCrwYUWkhs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 01:22:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 731 (0x2db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915FD27, serialNumber=D452C67EF6874438AFA993A84AD0ABC18516921B
        Validity
            Not Before: May 13 01:31:33 2026 GMT
            Not After : May 20 01:31:33 2026 GMT
        Subject: CN=6a03d475-1168
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:14:20:47:c3:24:88:33:80:44:17:b1:ea:f5:
                    cc:0c:9e:4b:19:00:71:4b:0a:f4:39:de:29:e1:59:
                    6c:ef:76:67:1b:fd:8d:e1:a6:eb:c5:e2:cb:98:0c:
                    e2:62:9b:68:2d:75:ab:cd:77:65:36:eb:1e:e4:77:
                    f0:14:ba:ab:ac:97:72:08:6d:cd:9f:8d:2f:db:72:
                    11:68:cc:ff:07:be:fc:55:53:3f:a6:1b:c9:9d:32:
                    2d:e2:dc:13:23:5b:3b:b1:7a:9f:0d:19:5e:1e:ef:
                    c3:ed:af:56:e4:23:9f:c5:78:61:81:66:84:08:ec:
                    bb:81:56:89:91:61:9b:66:1a:d3:64:ac:69:ae:5d:
                    80:0a:e1:32:07:25:b6:2f:59:fd:f8:e1:e7:7e:4e:
                    eb:cb:47:d9:e6:0e:88:60:f8:b5:d4:d1:df:19:33:
                    04:a2:86:b3:a5:8e:6e:f5:8f:76:e9:b5:4e:62:57:
                    9c:7b:32:a5:db:7b:c6:5c:06:88:1e:54:30:ec:86:
                    97:00:1f:d5:7c:75:24:32:ae:bd:9d:87:97:51:58:
                    be:98:12:38:65:0c:2f:bc:87:09:0d:15:d9:7c:51:
                    26:87:49:a1:00:e3:44:3b:3b:72:77:9e:72:7a:c9:
                    27:b7:65:bc:64:45:fc:c5:aa:87:e3:5e:f6:10:77:
                    9e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:D2:82:56:15:50:90:40:51:48:81:B7:D4:A4:6C:37:AB:FC:F4:43
            X509v3 Authority Key Identifier:
                keyid:D4:52:C6:7E:F6:87:44:38:AF:A9:93:A8:4A:D0:AB:C1:85:16:92:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915FD27/A80DB38235EF11ED8239AF2BC4F9AE02/1FLGfvaHRDivqZOoStCrwYUWkhs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FLGfvaHRDivqZOoStCrwYUWkhs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FD27/A80DB38235EF11ED8239AF2BC4F9AE02/1FLGfvaHRDivqZOoStCrwYUWkhs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:a6:55:22:01:fe:a1:f0:b6:da:a3:c9:31:50:3d:6b:93:a6:
         e5:b9:95:86:c9:4e:27:3c:20:11:5a:ef:cb:32:5c:dd:a5:3f:
         6a:1c:1b:92:8a:a3:3a:f2:e8:c0:47:1c:98:5b:26:a9:af:56:
         7c:49:6b:e5:ad:ff:f8:d0:79:76:2d:73:69:6e:02:3f:e7:21:
         8c:e3:d0:7c:da:2d:ec:d8:0d:f8:da:32:a4:97:09:b8:62:c4:
         d4:21:42:f9:16:f9:60:62:4d:8e:22:3d:22:be:fa:f3:af:5f:
         fc:e4:ea:56:82:71:d7:4e:c0:1a:f7:64:b4:35:ae:ef:f1:d1:
         a1:6c:68:a6:8d:2a:4e:a3:7e:1c:f1:5d:d0:55:2b:3f:ee:09:
         98:d7:b3:f5:25:da:ee:40:fb:b5:02:7a:5f:9e:37:5c:53:6f:
         59:81:17:d7:3a:98:b6:69:47:4c:b0:98:44:d7:b2:23:47:a5:
         02:6a:0b:9c:6f:10:6a:bf:86:78:dc:93:56:c5:50:cf:6e:39:
         be:df:fa:29:b8:cc:28:91:60:ad:e3:f1:f0:49:9e:99:81:e0:
         63:5b:c2:d5:be:a7:2a:1d:31:d2:4a:e9:ce:6c:4f:59:a7:79:
         90:dc:be:4b:a9:d8:21:06:81:22:8c:0d:0a:05:e2:22:cf:af:
         22:43:e5:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:32:24 2026 by rpki-client