Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918259F/0F8B5910CDAB11EA8837520CC4F9AE02/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.mft
File:                     FnXb2ew5zu2Bu7veQsx4z3oWJ8U.mft (raw, json)
Hash identifier:          pIzYnAqRQoWs/ljJbWreO269Xw8KDmRiywPfGoyHHYk=
Subject key identifier:   80:64:E6:49:7D:19:18:AA:CD:61:CD:DA:24:1C:DE:BD:AA:1E:45:5F
Authority key identifier: 16:75:DB:D9:EC:39:CE:ED:81:BB:BB:DE:42:CC:78:CF:7A:16:27:C5
Certificate issuer:       /CN=A918259F/serialNumber=1675DBD9EC39CEED81BBBBDE42CC78CF7A1627C5
Certificate serial:       08FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918259F/0F8B5910CDAB11EA8837520CC4F9AE02/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.mft
Manifest number:          08F3
Signing time:             Tue 12 May 2026 20:23:54 +0000
Manifest this update:     Tue 12 May 2026 20:23:54 +0000
Manifest next update:     Tue 19 May 2026 20:23:54 +0000
Files and hashes:         1: FnXb2ew5zu2Bu7veQsx4z3oWJ8U.crl (hash: +ISMhlbudEuZnAjIvlW7naOWdpgbgsFzg3kp86nrVgw=)
                          2: 760B9414D50911EB81567986C4F9AE02.roa (hash: MgdcKmuGldM/cTrkoZgGM1t6+zjCxuHZdFqBwttZF5Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918259F/0F8B5910CDAB11EA8837520CC4F9AE02/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.crl
                          rsync://rpki.apnic.net/member_repository/A918259F/0F8B5910CDAB11EA8837520CC4F9AE02/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 20:23:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2301 (0x8fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918259F, serialNumber=1675DBD9EC39CEED81BBBBDE42CC78CF7A1627C5
        Validity
            Not Before: May 12 20:23:54 2026 GMT
            Not After : May 19 20:23:54 2026 GMT
        Subject: CN=6a038c5a-9f3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:7f:88:d9:4f:cd:ed:b5:0e:d0:35:00:a4:5b:
                    7d:47:c6:2a:a1:1f:de:73:46:bc:03:bf:ce:71:89:
                    91:9f:d4:5c:ed:d1:1d:a6:c2:0a:f2:dd:fb:7c:db:
                    d0:4b:3d:51:91:e7:fd:3a:54:ea:ba:2b:c7:f4:c2:
                    e3:e1:9c:9f:ba:c9:53:4a:be:c8:98:5d:96:72:59:
                    b5:6d:50:12:9d:34:55:07:ff:59:25:32:47:75:d9:
                    f0:bc:b7:fa:6a:43:09:4a:be:c1:35:be:0f:59:31:
                    b4:b4:df:97:c1:9d:c8:63:7a:fb:24:44:24:24:c1:
                    4e:6a:ef:95:a3:05:47:75:3a:0f:84:26:72:7d:4d:
                    69:94:43:01:11:61:e4:c6:44:2e:3f:58:d7:57:2e:
                    5e:d6:d1:ae:57:a0:a3:b2:a4:ae:2c:19:37:27:f2:
                    86:dc:f6:5d:50:68:8f:f9:ab:86:e2:0a:92:e8:f7:
                    b6:33:7d:10:c7:29:49:38:ff:da:64:15:bb:f7:f9:
                    98:1b:24:a7:3d:b3:d1:13:7e:eb:02:65:fb:68:2d:
                    8e:d2:96:4b:7e:70:a0:3e:70:86:45:5f:5f:fb:81:
                    e0:10:b8:99:ae:f6:f3:bc:58:bb:85:63:a2:04:ea:
                    68:e8:94:39:7c:6f:c7:53:93:93:23:9d:40:5a:fd:
                    66:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:64:E6:49:7D:19:18:AA:CD:61:CD:DA:24:1C:DE:BD:AA:1E:45:5F
            X509v3 Authority Key Identifier:
                keyid:16:75:DB:D9:EC:39:CE:ED:81:BB:BB:DE:42:CC:78:CF:7A:16:27:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918259F/0F8B5910CDAB11EA8837520CC4F9AE02/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918259F/0F8B5910CDAB11EA8837520CC4F9AE02/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:49:2c:65:45:4e:54:b0:f6:4c:de:a0:58:4f:d3:02:a7:34:
         51:ae:eb:74:21:3b:88:38:2b:dd:3c:60:98:4e:d4:00:d2:e3:
         eb:40:0e:b9:f6:d1:79:27:f6:44:ef:43:0e:6d:0d:c9:dc:fb:
         06:e9:bd:16:f2:04:64:ea:f8:8d:a7:9c:1a:c7:cf:b5:54:e0:
         52:4b:b6:f4:eb:cb:c5:51:95:02:26:b9:cb:c0:b7:04:4c:a7:
         db:e0:2d:4a:3f:e1:2e:43:07:dd:66:b1:95:96:1d:64:31:8d:
         d7:96:c9:06:6d:ca:0b:e4:93:49:44:e0:3b:6d:47:9a:44:39:
         bb:79:f4:d1:8e:0b:ed:bd:fe:68:1f:e2:f0:38:66:aa:e1:48:
         3e:2e:9d:0f:4b:cc:c2:7a:0f:7b:47:d5:ed:17:ee:d2:f0:ef:
         e9:e0:82:81:3c:4f:fb:5c:fa:97:11:30:df:df:1f:ab:0b:75:
         04:b9:8c:89:f1:30:7a:af:6d:61:f4:2b:e9:e6:ea:a0:a0:48:
         8c:b6:7f:84:db:6a:69:18:3b:f5:35:35:79:4c:99:84:39:29:
         be:69:ee:dd:a4:44:d5:10:8b:32:01:01:63:61:7c:fe:0c:03:
         26:d0:c1:d2:e3:fb:28:c1:74:08:3f:df:3a:16:e9:e7:1a:55:
         be:00:e8:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:05:05 2026 by rpki-client