Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B994F/AAFD14ECE5A211EA89A3606DC4F9AE02/fLBjBy0uSJJZhhStW6tT4d6v9wE.mft
File:                     fLBjBy0uSJJZhhStW6tT4d6v9wE.mft (raw, json)
Hash identifier:          QPIeQc7WHBCJ4+aV33xgP3x5reDlEFJO/YUrh1UZ5QE=
Subject key identifier:   7D:5B:18:17:26:CB:ED:B5:38:CD:E7:28:6D:91:F1:53:3B:3E:89:48
Authority key identifier: 7C:B0:63:07:2D:2E:48:92:59:86:14:AD:5B:AB:53:E1:DE:AF:F7:01
Certificate issuer:       /CN=A91B994F/serialNumber=7CB063072D2E4892598614AD5BAB53E1DEAFF701
Certificate serial:       08B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fLBjBy0uSJJZhhStW6tT4d6v9wE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B994F/AAFD14ECE5A211EA89A3606DC4F9AE02/fLBjBy0uSJJZhhStW6tT4d6v9wE.mft
Manifest number:          08AC
Signing time:             Tue 12 May 2026 20:34:17 +0000
Manifest this update:     Tue 12 May 2026 20:34:17 +0000
Manifest next update:     Tue 19 May 2026 20:34:17 +0000
Files and hashes:         1: fLBjBy0uSJJZhhStW6tT4d6v9wE.crl (hash: oiejXjrTVs4J2G9bMbDZEdkak0Z9YQD9yOBNwpjsM+g=)
                          2: 2B24D5DC854511EB9B57240FC4F9AE02.roa (hash: Wx3wh0FX9RN/H0djKjf0msN4+MsFhYpyxoof9NySlqU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B994F/AAFD14ECE5A211EA89A3606DC4F9AE02/fLBjBy0uSJJZhhStW6tT4d6v9wE.crl
                          rsync://rpki.apnic.net/member_repository/A91B994F/AAFD14ECE5A211EA89A3606DC4F9AE02/fLBjBy0uSJJZhhStW6tT4d6v9wE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fLBjBy0uSJJZhhStW6tT4d6v9wE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 20:34:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2232 (0x8b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B994F, serialNumber=7CB063072D2E4892598614AD5BAB53E1DEAFF701
        Validity
            Not Before: May 12 20:34:17 2026 GMT
            Not After : May 19 20:34:17 2026 GMT
        Subject: CN=6a038ec9-bd0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a8:d3:f7:59:4f:f3:4e:0b:75:9d:81:89:4c:
                    0f:5b:f4:47:fb:a7:2d:a5:42:03:7e:d8:ee:7e:f7:
                    81:61:58:91:53:eb:96:ac:e2:c9:d0:22:94:5d:ef:
                    5a:4a:3d:d7:f9:f9:7b:66:de:bd:4f:59:1b:27:aa:
                    34:2a:cf:0d:fb:dc:50:2c:7d:11:79:38:06:6f:a2:
                    0b:1e:9e:9e:51:a3:bf:ce:b7:3a:41:df:88:70:d6:
                    d6:8e:24:10:6f:f5:df:ea:61:5f:49:64:57:ca:9c:
                    21:cb:dd:48:8c:11:28:1a:0a:c0:8d:5a:18:fb:77:
                    ed:40:67:5c:52:4b:91:9a:02:b7:e9:40:5b:0e:50:
                    1e:83:1e:b2:4e:50:81:41:75:d5:40:b0:b1:ba:4a:
                    27:14:29:75:8a:be:6f:9e:ae:77:0e:cc:bd:06:46:
                    7e:77:ad:c0:93:6d:1c:f0:2e:24:ca:84:ea:50:e4:
                    65:e1:47:3f:b4:a1:02:5a:31:67:7d:64:a3:9a:24:
                    7b:bc:58:76:c1:ad:3c:1a:b6:85:61:ec:d6:07:58:
                    00:00:84:47:66:3a:f3:46:47:fc:4a:2e:5a:6a:14:
                    e1:c1:5f:b7:56:d0:c1:15:0f:81:49:f1:a8:1d:38:
                    db:e8:aa:9b:bc:59:a9:cf:b2:1f:ab:01:6d:c9:ca:
                    22:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:5B:18:17:26:CB:ED:B5:38:CD:E7:28:6D:91:F1:53:3B:3E:89:48
            X509v3 Authority Key Identifier:
                keyid:7C:B0:63:07:2D:2E:48:92:59:86:14:AD:5B:AB:53:E1:DE:AF:F7:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B994F/AAFD14ECE5A211EA89A3606DC4F9AE02/fLBjBy0uSJJZhhStW6tT4d6v9wE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fLBjBy0uSJJZhhStW6tT4d6v9wE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B994F/AAFD14ECE5A211EA89A3606DC4F9AE02/fLBjBy0uSJJZhhStW6tT4d6v9wE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:45:e8:54:dc:dd:60:8c:b9:98:70:e1:17:b5:55:0b:ec:6f:
         43:db:77:58:50:8d:54:ac:15:6d:82:cb:59:77:46:92:88:ff:
         9a:52:23:cb:7d:ee:c6:bd:29:81:61:51:b2:2c:7a:ca:88:a0:
         2d:fc:6a:0a:b0:b0:ef:a6:20:bf:a0:b1:8f:73:9d:60:56:2a:
         6b:8b:08:3a:31:62:3b:d9:98:c3:cd:87:02:d5:8e:3b:bc:5c:
         8b:55:9f:af:77:5a:4e:73:c7:64:c6:bc:a6:f4:ae:1c:48:b7:
         f8:e8:27:7b:78:e8:20:44:4e:aa:45:b1:cf:70:91:63:eb:e0:
         16:97:51:3e:a2:bd:13:5c:f3:59:65:2e:43:c2:7e:40:a3:26:
         9d:16:13:b4:c2:e3:e8:20:e7:9b:1e:be:d5:4d:59:c4:41:eb:
         f0:19:8b:4f:3e:c6:27:34:c1:69:0f:33:9e:ac:0b:a3:41:34:
         12:c4:22:4b:7e:0e:9b:ad:8b:28:a6:d5:e3:2d:9e:f6:40:0d:
         9f:a8:d9:a6:d9:0b:d1:11:2d:cc:f5:0e:30:6a:e4:5a:07:f3:
         a2:1b:1e:f6:5a:c5:2f:61:26:f0:38:2b:36:18:43:ba:51:ea:
         d3:ee:e2:25:af:69:33:af:2c:d4:d7:c4:9f:55:48:73:20:09:
         38:70:7a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:01:09 2026 by rpki-client