Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/FEfUS0n3kG3GNzGl2Y2FLsELd0U.mft
File:                     FEfUS0n3kG3GNzGl2Y2FLsELd0U.mft (raw, json)
Hash identifier:          OOIgw5/qRpYHx6q9m90XPzPq7skiKfmeLHu6t7qCMr4=
Subject key identifier:   0E:3E:CA:30:9F:04:66:6B:CB:5A:E0:E1:35:CE:BE:64:90:EB:E3:73
Authority key identifier: 14:47:D4:4B:49:F7:90:6D:C6:37:31:A5:D9:8D:85:2E:C1:0B:77:45
Certificate issuer:       /CN=A9173CF2/serialNumber=1447D44B49F7906DC63731A5D98D852EC10B7745
Certificate serial:       071D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEfUS0n3kG3GNzGl2Y2FLsELd0U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/FEfUS0n3kG3GNzGl2Y2FLsELd0U.mft
Manifest number:          0715
Signing time:             Tue 12 May 2026 22:01:28 +0000
Manifest this update:     Tue 12 May 2026 22:01:28 +0000
Manifest next update:     Tue 19 May 2026 22:01:28 +0000
Files and hashes:         1: FEfUS0n3kG3GNzGl2Y2FLsELd0U.crl (hash: 6HV3rplgLXciTZ4oeLrkRTvOATk6iPbKXcQyR5VYDQQ=)
                          2: D9E7CFF681EF11EBAEE9D17AC4F9AE02.roa (hash: dTa5Sv3QyKZeyYh7kTFM/PjTqogHVEan9r70oy/WWU0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/FEfUS0n3kG3GNzGl2Y2FLsELd0U.crl
                          rsync://rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/FEfUS0n3kG3GNzGl2Y2FLsELd0U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEfUS0n3kG3GNzGl2Y2FLsELd0U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 22:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1821 (0x71d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173CF2, serialNumber=1447D44B49F7906DC63731A5D98D852EC10B7745
        Validity
            Not Before: May 12 22:01:28 2026 GMT
            Not After : May 19 22:01:28 2026 GMT
        Subject: CN=6a03a338-bab0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:66:17:ee:bd:bf:84:48:2d:66:5e:91:6f:b9:
                    cc:0c:72:6b:9e:d9:ac:fd:53:01:3a:42:1b:8e:83:
                    fd:e5:52:64:da:e3:fd:7c:47:85:56:7a:2b:c4:5c:
                    7f:5f:f4:b6:15:3c:94:e1:a0:12:bc:86:0e:a4:d3:
                    04:96:10:98:c8:91:79:1a:a8:7f:7b:df:c7:e2:6e:
                    c6:37:d7:33:a4:f3:f4:9d:31:60:75:85:f6:36:16:
                    e5:ac:b6:09:37:fc:37:e4:4e:81:e0:1e:98:4f:ba:
                    98:10:02:27:81:60:55:f7:ec:fa:6a:79:4f:7f:ee:
                    53:f4:17:27:4c:7a:61:89:0c:82:5d:d5:db:6c:ec:
                    f0:49:f1:76:93:ed:3a:7e:45:63:e9:37:8c:98:40:
                    fc:e4:48:88:91:ed:b1:2c:45:dc:37:db:93:a2:0c:
                    1c:06:aa:bc:b9:42:03:12:a3:e7:dd:66:83:6c:b7:
                    f1:c3:86:9e:52:76:06:64:1c:62:51:7c:47:95:cd:
                    89:1d:39:3d:dc:04:88:02:9c:c3:4b:8c:82:e5:f8:
                    e3:a8:03:5b:27:0c:44:02:f2:ba:31:ec:b6:5a:41:
                    da:5d:dd:85:06:d1:8c:54:93:69:b2:ed:9b:64:87:
                    56:8d:a1:66:dc:f6:86:61:4e:93:ac:64:f5:f2:84:
                    e7:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:3E:CA:30:9F:04:66:6B:CB:5A:E0:E1:35:CE:BE:64:90:EB:E3:73
            X509v3 Authority Key Identifier:
                keyid:14:47:D4:4B:49:F7:90:6D:C6:37:31:A5:D9:8D:85:2E:C1:0B:77:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/FEfUS0n3kG3GNzGl2Y2FLsELd0U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEfUS0n3kG3GNzGl2Y2FLsELd0U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/FEfUS0n3kG3GNzGl2Y2FLsELd0U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:20:4a:c2:9b:35:1c:d3:cd:c4:34:0d:0d:02:7f:83:c8:e1:
         61:9c:6f:56:d6:2d:7a:1c:41:7b:99:55:8e:f3:4f:b0:58:ba:
         76:06:9e:4d:d6:14:70:90:15:a0:13:da:23:29:b4:d3:d1:3a:
         e6:b5:57:19:7c:ca:05:56:bf:ba:17:52:d0:ff:b4:40:74:c5:
         a7:de:55:5a:f9:71:6c:91:12:62:a5:d7:93:a1:78:c3:8d:6c:
         1a:42:d0:9f:58:ba:91:a5:3f:6f:84:a1:ea:87:18:3a:3c:5e:
         ad:fd:14:11:51:4a:9e:36:e8:5e:47:c0:63:02:e7:da:09:14:
         69:ca:cd:37:27:20:82:34:c3:85:3d:33:f2:f0:7a:ee:3d:88:
         d1:76:dd:c9:4c:c5:35:75:45:11:0c:0e:e7:5a:3a:3b:00:db:
         4b:23:3b:f4:d2:c6:b9:7c:4f:b4:d6:c6:d1:c4:6b:de:9e:4f:
         5a:b9:66:e1:71:bc:c1:e4:b5:4d:66:78:55:fb:66:9b:a2:86:
         56:7f:c1:64:f7:4e:b8:0a:1c:1f:44:40:45:bb:9a:c3:42:db:
         77:67:19:7b:9f:35:3d:b6:9e:2f:22:54:73:44:da:f5:a3:43:
         89:a3:57:00:97:77:26:37:83:46:19:7a:dd:c4:5e:eb:58:74:
         b8:cb:4c:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:18:48 2026 by rpki-client