Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.mft
File:                     FX3bMj02U1BOMIJOaeDbA3U6aM4.mft (raw, json)
Hash identifier:          cmwc87jOg21nTHNy7c9SUg3AoAG9cZwjqbdVUDKFJE0=
Subject key identifier:   6E:4C:63:87:F4:43:E7:C1:4C:B8:72:1C:B9:81:AC:C7:D1:73:BC:98
Authority key identifier: 15:7D:DB:32:3D:36:53:50:4E:30:82:4E:69:E0:DB:03:75:3A:68:CE
Certificate issuer:       /CN=A91480B2/serialNumber=157DDB323D3653504E30824E69E0DB03753A68CE
Certificate serial:       0231
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FX3bMj02U1BOMIJOaeDbA3U6aM4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.mft
Manifest number:          022B
Signing time:             Mon 21 Sep 2026 02:46:09 +0000
Manifest this update:     Mon 21 Sep 2026 02:46:08 +0000
Manifest next update:     Mon 28 Sep 2026 02:46:08 +0000
Files and hashes:         1: FX3bMj02U1BOMIJOaeDbA3U6aM4.crl (hash: B/hmKsobDKC+RYvarSUQFwhv4xzU4oKg9x7EnKqjB30=)
                          2: 93151D5668F911EE9916D146C4F9AE02.roa (hash: ClVPuLcuGILWLEy5bL0EVXdV3J/UJlUtzA64dR9iTrc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.crl
                          rsync://rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FX3bMj02U1BOMIJOaeDbA3U6aM4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 02:46:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 561 (0x231)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91480B2, serialNumber=157DDB323D3653504E30824E69E0DB03753A68CE
        Validity
            Not Before: Sep 21 02:46:08 2026 GMT
            Not After : Sep 28 02:46:08 2026 GMT
        Subject: CN=6ab09a70-9118
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:0e:b0:98:27:a8:4d:82:f1:44:82:61:d1:0a:
                    55:23:6f:65:43:4f:53:41:e6:26:6f:e6:93:e0:d4:
                    0f:fb:f2:cb:dd:1a:cf:fd:5c:a7:93:cc:81:f6:1a:
                    02:5d:5a:c9:6c:6b:6e:ed:ca:f1:73:d9:be:3d:bf:
                    b2:4a:63:45:77:28:8f:ae:5f:ce:fa:26:df:40:2e:
                    07:f2:95:50:cb:ac:af:af:ac:d3:f7:18:0f:3d:76:
                    94:24:4c:52:29:52:7f:32:80:44:94:4e:0f:f3:cb:
                    0e:c5:1b:0e:aa:65:21:41:0b:e0:db:93:f7:f0:d3:
                    06:97:8b:ad:59:03:50:2e:7f:cb:6d:e9:c4:2a:bd:
                    69:f3:06:38:07:09:d9:84:e6:8a:66:8e:44:60:39:
                    78:20:82:b5:77:8d:e9:85:92:ef:b5:ce:52:5c:17:
                    45:d6:99:9e:e9:76:c4:bd:41:3b:5a:ae:33:92:3c:
                    8d:fd:48:36:b6:c6:b2:8c:d9:58:8a:a6:c0:54:62:
                    d9:63:89:fd:1a:f3:c4:68:19:a6:19:6f:34:b1:91:
                    6c:4b:29:43:24:34:60:33:05:6a:92:5f:9e:93:16:
                    79:d5:d7:be:ee:f5:d2:cb:1f:c4:60:fd:3b:c4:10:
                    ab:de:a4:71:f3:05:8b:9a:9a:53:23:c9:32:4a:50:
                    6a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:4C:63:87:F4:43:E7:C1:4C:B8:72:1C:B9:81:AC:C7:D1:73:BC:98
            X509v3 Authority Key Identifier:
                keyid:15:7D:DB:32:3D:36:53:50:4E:30:82:4E:69:E0:DB:03:75:3A:68:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FX3bMj02U1BOMIJOaeDbA3U6aM4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:90:97:49:ba:7d:c7:3a:9b:ba:29:af:93:91:b5:61:5c:1b:
         4a:78:2a:75:07:22:73:d6:15:09:9c:e3:d0:63:e6:4a:20:d8:
         d5:2a:6e:1b:1e:88:b5:ca:d5:47:61:dc:86:3c:77:b0:8d:90:
         1a:bc:f8:c2:26:ae:1b:f9:d9:a3:03:dd:1f:39:74:c5:64:28:
         f1:2f:86:53:f2:67:6d:cb:fe:01:5c:4e:6a:52:01:66:e9:56:
         6c:57:fb:a4:96:92:06:fd:0c:ac:d7:bb:d6:d4:90:0b:4b:ed:
         6a:91:ab:e0:28:e2:5b:37:5f:23:53:2d:73:74:dc:10:e8:50:
         e1:a5:0d:4b:2c:43:ca:ea:59:d7:f3:88:2a:70:47:ec:d6:90:
         d9:7c:da:db:57:e4:b8:ac:3e:3c:3b:58:3a:25:2d:87:9f:93:
         4a:d9:cf:6f:fe:44:d3:9a:6d:40:83:49:16:ae:f4:03:dc:8d:
         6d:4c:a2:f7:10:3b:b9:8c:2d:50:e6:86:77:6c:86:00:dc:4e:
         12:69:b8:f7:8b:5c:cc:ae:00:c1:25:f6:5c:f1:6d:67:fa:93:
         e9:54:b3:1f:28:98:89:8d:52:ba:ce:b2:41:1b:66:e2:da:7b:
         55:de:48:d3:3d:e4:7d:fa:ef:56:73:74:18:0b:6f:1b:11:51:
         7d:8c:1d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 15:33:01 2026 by rpki-client