Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.mft
File:                     Fx7dP3eF4PU4VW-e8mvtcWaejYw.mft (raw, json)
Hash identifier:          6D/jri88rkVlItgw3guPppqhZHxUffCLUeRHqipTCDk=
Subject key identifier:   3B:24:CA:E6:04:E8:33:C7:39:3A:2A:BF:F8:2E:7A:7D:A4:8E:C3:B5
Authority key identifier: 17:1E:DD:3F:77:85:E0:F5:38:55:6F:9E:F2:6B:ED:71:66:9E:8D:8C
Certificate issuer:       /CN=A9186363/serialNumber=171EDD3F7785E0F538556F9EF26BED71669E8D8C
Certificate serial:       0118
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fx7dP3eF4PU4VW-e8mvtcWaejYw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.mft
Manifest number:          0110
Signing time:             Mon 11 May 2026 06:04:29 +0000
Manifest this update:     Mon 11 May 2026 06:04:28 +0000
Manifest next update:     Mon 18 May 2026 06:04:28 +0000
Files and hashes:         1: Fx7dP3eF4PU4VW-e8mvtcWaejYw.crl (hash: 8fBv8TGwErm7cwwOi5+XP2vl4K9TttzyUFjPKK1FuBw=)
                          2: 0FFCC5E8AFAE11EFAC818674C4F9AE02.roa (hash: 3nD9LInONQ51DGwH1Bk1CRRWQxIMYRaBTzihhmaQ14w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.crl
                          rsync://rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fx7dP3eF4PU4VW-e8mvtcWaejYw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 06:04:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 280 (0x118)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186363, serialNumber=171EDD3F7785E0F538556F9EF26BED71669E8D8C
        Validity
            Not Before: May 11 06:04:28 2026 GMT
            Not After : May 18 06:04:28 2026 GMT
        Subject: CN=6a01716d-8167
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:bb:f9:4a:fe:b2:8f:fd:8e:f6:8f:6f:b0:e9:
                    54:b7:35:c1:0e:a4:1e:30:11:22:39:47:55:46:a0:
                    b2:10:2b:6f:1b:71:1a:5c:a7:9a:ed:dc:d3:b6:a9:
                    27:59:7d:25:aa:ae:20:2a:fc:58:5d:bb:5f:26:f3:
                    f4:6d:58:5f:87:f1:3c:5b:15:7e:72:01:b4:56:51:
                    84:99:fa:4e:fc:6c:74:44:4b:7b:94:63:1d:43:d2:
                    cd:77:05:1a:a9:67:7b:4e:fc:33:16:b2:1e:6e:13:
                    d0:80:aa:02:f2:08:9b:d1:eb:de:69:f8:b2:6c:7e:
                    af:df:8f:65:db:ac:ce:f2:4f:1a:db:35:fe:a6:3e:
                    ae:60:db:90:a1:b9:0d:f4:f8:81:ea:83:71:bb:1c:
                    78:ad:c7:33:c6:2c:cb:e8:6a:55:e3:52:29:2c:49:
                    6f:6b:a1:67:aa:a6:44:27:0b:bd:01:4d:81:00:6a:
                    8d:64:00:bc:c5:ad:26:5d:c2:61:6f:2f:8f:80:a8:
                    46:de:c6:d8:d7:41:2c:ab:36:af:fb:17:04:35:59:
                    fb:f4:4d:d0:2a:8a:99:e0:fa:ca:09:21:8c:a6:87:
                    cf:9c:6c:0c:53:19:74:93:38:50:d7:e8:ff:39:fb:
                    e1:63:a8:c9:57:33:fe:a8:c8:9c:65:85:ad:04:ce:
                    6d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:24:CA:E6:04:E8:33:C7:39:3A:2A:BF:F8:2E:7A:7D:A4:8E:C3:B5
            X509v3 Authority Key Identifier:
                keyid:17:1E:DD:3F:77:85:E0:F5:38:55:6F:9E:F2:6B:ED:71:66:9E:8D:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fx7dP3eF4PU4VW-e8mvtcWaejYw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:ae:0b:5b:e0:7b:a5:aa:a2:7a:0d:e6:87:25:30:50:93:ee:
         2d:66:18:4e:9b:6c:6d:e2:b2:71:f6:b7:36:f8:7f:1c:83:f5:
         c2:cb:1c:62:b1:d6:f3:e4:ef:a1:34:6c:17:b3:81:a3:af:cb:
         ca:10:e7:59:92:07:92:30:fb:ab:13:c4:16:64:a7:29:d4:0d:
         07:8c:d7:f1:77:90:28:e8:e4:59:a8:94:15:ba:af:39:7b:54:
         a1:0a:ad:59:e8:4a:29:ae:a7:ff:fe:b6:04:5b:9f:93:c1:c9:
         ff:35:fc:f4:fa:fc:22:b5:72:11:b5:82:8c:d6:66:3c:fd:70:
         82:c2:98:91:bc:e0:23:87:1d:39:d6:03:95:a3:08:cb:e3:dd:
         b2:ad:8a:95:7c:88:77:e4:40:1e:7e:72:68:ce:2e:44:a9:1f:
         72:c6:3d:d9:eb:20:ed:1e:e3:d3:65:fd:02:ff:ac:94:a7:d4:
         c6:5c:e6:cc:e5:c7:5d:39:51:ea:da:7b:40:af:75:a6:73:e2:
         39:67:2f:04:69:b2:41:7c:3d:f7:2a:8e:bb:8f:33:0a:79:af:
         4e:48:df:b7:d4:70:64:fa:29:ab:4c:4e:fc:34:2e:2b:ea:13:
         e6:d8:95:5b:1c:a1:f3:24:62:26:f2:02:68:dc:4f:ad:0c:bf:
         03:62:ff:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:44:22 2026 by rpki-client