Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91444E5/2E822DAA1B9111EC9E7A3114C4F9AE02/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.mft
File:                     Fgi_RiSn4bcjIotGYd1mHnCu8_Q.mft (raw, json)
Hash identifier:          Uj86Fm5ITIRaplaMQtWbbZWAkkyeocHl5pzcbQNEVhg=
Subject key identifier:   96:FE:FF:52:F6:39:9F:07:DD:E9:5A:B3:0D:55:73:2C:13:F0:29:FD
Authority key identifier: 16:08:BF:46:24:A7:E1:B7:23:22:8B:46:61:DD:66:1E:70:AE:F3:F4
Certificate issuer:       /CN=A91444E5/serialNumber=1608BF4624A7E1B723228B4661DD661E70AEF3F4
Certificate serial:       05E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91444E5/2E822DAA1B9111EC9E7A3114C4F9AE02/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.mft
Manifest number:          05DB
Signing time:             Sun 20 Sep 2026 22:52:05 +0000
Manifest this update:     Sun 20 Sep 2026 22:52:04 +0000
Manifest next update:     Sun 27 Sep 2026 22:52:04 +0000
Files and hashes:         1: Fgi_RiSn4bcjIotGYd1mHnCu8_Q.crl (hash: 0QnucEymtr+81LC/eX+HIJWrk4lMQ/50ZJPsFOMN2TM=)
                          2: 90AB89E4547511EEB44F391AC4F9AE02.roa (hash: kEf3e06ZfAqbB9aARItvXEWnGEj9ABmGarhckew4SMQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91444E5/2E822DAA1B9111EC9E7A3114C4F9AE02/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.crl
                          rsync://rpki.apnic.net/member_repository/A91444E5/2E822DAA1B9111EC9E7A3114C4F9AE02/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 22:52:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1510 (0x5e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91444E5, serialNumber=1608BF4624A7E1B723228B4661DD661E70AEF3F4
        Validity
            Not Before: Sep 20 22:52:04 2026 GMT
            Not After : Sep 27 22:52:04 2026 GMT
        Subject: CN=6ab06395-a2c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:ba:cf:ec:df:3c:23:8b:1d:23:36:c8:fa:ea:
                    cc:76:df:31:21:0a:f1:e0:9a:19:e7:40:ba:92:0a:
                    ba:9b:1e:05:1f:91:dd:1f:75:f1:bd:6d:74:ca:15:
                    2c:0c:3a:93:9a:07:32:76:ac:30:26:6e:15:42:52:
                    b2:ca:ce:c6:e2:82:15:5f:6f:5c:03:c4:05:8b:63:
                    09:1f:a5:aa:17:4b:c5:5f:20:e1:b7:9c:1e:68:de:
                    d6:ee:e4:3c:47:1f:2d:4d:b4:fa:ad:ab:0c:20:cd:
                    6e:d8:a9:cb:57:1a:a7:52:ac:36:72:55:4b:32:dc:
                    6f:4f:10:4c:41:d6:62:f0:96:b7:37:0b:ba:c8:c8:
                    42:26:20:d7:db:19:d1:03:f4:6d:64:70:50:c1:e8:
                    10:5f:ef:2a:4c:73:9b:d7:77:ca:32:bf:03:1e:9e:
                    65:af:fb:d4:f0:42:6d:1f:06:b9:eb:45:1f:bf:40:
                    00:29:b8:f6:70:8e:5d:16:9e:79:81:2d:ff:69:68:
                    3b:32:84:f9:42:7e:d6:cb:d9:e6:44:ab:01:e2:ee:
                    f6:c0:6c:65:f6:34:31:56:4a:13:f9:80:f3:26:72:
                    75:18:f8:f7:23:5c:b3:c7:6f:4e:c9:9f:6b:b2:2e:
                    fb:52:7b:2b:ff:6a:91:7b:ec:4d:63:1a:b8:08:48:
                    84:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:FE:FF:52:F6:39:9F:07:DD:E9:5A:B3:0D:55:73:2C:13:F0:29:FD
            X509v3 Authority Key Identifier:
                keyid:16:08:BF:46:24:A7:E1:B7:23:22:8B:46:61:DD:66:1E:70:AE:F3:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91444E5/2E822DAA1B9111EC9E7A3114C4F9AE02/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91444E5/2E822DAA1B9111EC9E7A3114C4F9AE02/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:07:6c:9a:10:19:92:3b:db:02:af:bc:49:fa:05:a1:39:7d:
         f0:b1:23:c4:4a:53:be:91:07:58:fe:28:e7:ee:36:2d:9b:63:
         7a:7e:64:94:4c:dc:1c:8f:6a:e2:37:21:71:c8:ad:43:01:e7:
         01:6b:6a:9f:07:5f:dc:5d:6e:71:71:a6:72:f5:5b:2e:42:d8:
         50:cd:f5:1a:0d:5a:72:e4:16:f0:15:f1:0c:04:5f:9a:67:93:
         fc:19:a1:3c:55:f9:9f:f9:09:f4:72:3c:ef:6e:82:3f:21:0a:
         bd:b6:b2:58:87:6e:86:7b:c7:42:98:08:a1:6e:cc:3c:ff:22:
         f2:19:0e:4a:a2:cd:9d:fb:00:bc:55:b6:f4:cc:4e:d4:ef:c3:
         73:f4:eb:99:68:b2:5c:82:52:2a:c3:4a:f6:d5:83:1a:2c:6e:
         d7:9b:2a:4b:ef:6f:e1:8b:c4:82:1f:df:19:61:dc:6e:96:97:
         e8:2e:1e:22:a4:d8:ae:1a:61:85:59:c6:bf:0d:b1:30:b6:d0:
         8c:86:17:4b:1c:62:d1:7c:9f:a5:41:5d:f1:0b:90:f0:7b:4c:
         b8:49:b9:c5:18:1d:69:48:a3:57:6b:9c:34:a6:a2:11:27:11:
         f0:ff:d7:b8:ab:69:d9:08:04:a3:79:18:01:78:d6:0a:72:a9:
         be:0a:47:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 04:15:49 2026 by rpki-client