Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193267/8966D6FE6EE111EDB45FF360C4F9AE02/FggPXxr0qlYST_cZXRPoW5OllSE.mft
File:                     FggPXxr0qlYST_cZXRPoW5OllSE.mft (raw, json)
Hash identifier:          jmfWgnuNMu8lB90LWN1mKWxwVIb3wVuvwhbkIhKdt4Q=
Subject key identifier:   25:57:5D:D2:8A:1C:FB:97:70:D4:D4:6A:4D:85:69:40:0B:64:01:64
Authority key identifier: 16:08:0F:5F:1A:F4:AA:56:12:4F:F7:19:5D:13:E8:5B:93:A5:95:21
Certificate issuer:       /CN=A9193267/serialNumber=16080F5F1AF4AA56124FF7195D13E85B93A59521
Certificate serial:       028E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FggPXxr0qlYST_cZXRPoW5OllSE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193267/8966D6FE6EE111EDB45FF360C4F9AE02/FggPXxr0qlYST_cZXRPoW5OllSE.mft
Manifest number:          0288
Signing time:             Mon 11 May 2026 01:49:38 +0000
Manifest this update:     Mon 11 May 2026 01:49:38 +0000
Manifest next update:     Mon 18 May 2026 01:49:38 +0000
Files and hashes:         1: FggPXxr0qlYST_cZXRPoW5OllSE.crl (hash: KrlnDrNqmk0pYQ3dvTmM+Oqhwt2+OAC0ZNgF34cU2fw=)
                          2: F29D0E026EE311ED94338E61C4F9AE02.roa (hash: 5ttrslPy7LaJO4gSanAc9hK6tw6CcRvwnYxFZwSyMX4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193267/8966D6FE6EE111EDB45FF360C4F9AE02/FggPXxr0qlYST_cZXRPoW5OllSE.crl
                          rsync://rpki.apnic.net/member_repository/A9193267/8966D6FE6EE111EDB45FF360C4F9AE02/FggPXxr0qlYST_cZXRPoW5OllSE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FggPXxr0qlYST_cZXRPoW5OllSE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 01:49:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 654 (0x28e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193267, serialNumber=16080F5F1AF4AA56124FF7195D13E85B93A59521
        Validity
            Not Before: May 11 01:49:38 2026 GMT
            Not After : May 18 01:49:38 2026 GMT
        Subject: CN=6a0135b2-12e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:59:bd:44:9c:db:68:6b:aa:22:22:bf:13:ab:
                    71:09:0f:04:52:cb:73:32:bb:33:9a:86:60:87:6c:
                    8c:d4:65:b2:f9:e7:4c:5c:8a:b2:da:64:33:6f:96:
                    48:db:b6:24:54:eb:d2:81:de:90:6a:0f:60:1b:57:
                    53:7e:7d:aa:17:57:66:e4:d2:0e:c8:5b:76:4a:fb:
                    67:2a:a2:7f:97:b4:70:52:2e:bd:59:c1:94:92:f2:
                    2b:55:11:80:45:86:7c:10:82:b7:be:1a:fe:38:5d:
                    53:42:ae:81:d7:1b:eb:01:fe:23:e1:25:be:dc:72:
                    e1:04:e9:34:e4:a0:2c:da:fc:ff:75:75:43:bb:00:
                    aa:0d:24:8f:62:b0:e0:ff:e8:e6:e3:40:b6:1f:9a:
                    8f:fc:fa:5f:a9:bc:6c:5b:f1:8b:de:52:37:db:be:
                    02:a0:60:b7:83:f6:31:a4:49:7d:27:35:5a:20:f6:
                    64:62:38:5b:1a:db:39:51:f9:64:72:d3:83:0b:53:
                    15:cf:61:a5:ad:a9:5e:e8:05:e5:64:63:f8:3e:19:
                    74:a7:06:20:74:28:a1:bc:7b:d9:a4:a5:65:a5:3d:
                    1b:3a:80:7f:bf:fb:41:31:7c:70:b3:7b:1a:1d:10:
                    f7:be:bd:aa:03:ae:ca:3d:f9:57:dd:0e:04:a4:e2:
                    ac:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:57:5D:D2:8A:1C:FB:97:70:D4:D4:6A:4D:85:69:40:0B:64:01:64
            X509v3 Authority Key Identifier:
                keyid:16:08:0F:5F:1A:F4:AA:56:12:4F:F7:19:5D:13:E8:5B:93:A5:95:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193267/8966D6FE6EE111EDB45FF360C4F9AE02/FggPXxr0qlYST_cZXRPoW5OllSE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FggPXxr0qlYST_cZXRPoW5OllSE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193267/8966D6FE6EE111EDB45FF360C4F9AE02/FggPXxr0qlYST_cZXRPoW5OllSE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:b3:93:05:e4:db:1e:d0:e4:38:7f:5e:b1:00:05:2d:ad:7d:
         70:fc:42:8f:ac:5b:18:f4:86:44:23:b8:85:f9:9f:28:6f:83:
         73:c6:9e:c1:4c:47:4a:79:aa:43:ff:43:ef:8d:55:79:80:43:
         33:55:11:82:f9:88:09:5c:2e:d4:63:d6:1f:2d:2d:68:3b:55:
         6c:2b:d2:c4:1a:99:7c:70:56:a6:c9:83:c7:69:4f:ef:9a:20:
         72:07:95:6b:7d:42:cc:be:6d:01:1c:13:a4:0c:c8:73:ec:40:
         bd:97:b8:36:ea:c9:37:e0:0b:75:4f:53:4c:88:b1:01:b7:48:
         1b:f7:5d:f7:4e:ed:d1:99:f4:f0:a1:c3:74:71:d9:fb:b0:97:
         5d:67:30:da:35:0a:a4:ab:e4:0b:2f:5a:4a:f4:41:7d:e3:3c:
         72:90:b0:80:77:ef:80:81:06:f0:6c:28:a4:ac:c9:70:0d:3e:
         7f:85:e5:70:59:71:42:98:3e:38:a8:75:c5:30:12:f8:00:80:
         b8:8b:c5:c8:1e:3d:ff:3d:af:e8:f8:93:88:1a:31:50:d4:88:
         93:a5:e9:19:ee:65:06:82:03:91:61:5d:71:7e:25:6e:5b:3f:
         e5:c1:22:15:a6:b5:68:50:8e:14:ab:5c:3e:d0:b6:0a:79:f8:
         14:d9:66:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:03:59 2026 by rpki-client