Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914F5BA/049DCD22AD6111EA8F1A8D63C4F9AE02/FCD4Bwnd09_D9RFWVQPO9ERL7cM.mft
File:                     FCD4Bwnd09_D9RFWVQPO9ERL7cM.mft (raw, json)
Hash identifier:          M0cI7ucHpXKMKI87vBfjlLL02t6aP6uS8FW6G/RQzV8=
Subject key identifier:   1C:7E:9F:01:C4:24:74:BF:2A:17:27:BD:BB:B0:F0:74:62:4C:53:4C
Authority key identifier: 14:20:F8:07:09:DD:D3:DF:C3:F5:11:56:55:03:CE:F4:44:4B:ED:C3
Certificate issuer:       /CN=A914F5BA/serialNumber=1420F80709DDD3DFC3F511565503CEF4444BEDC3
Certificate serial:       09E7
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FCD4Bwnd09_D9RFWVQPO9ERL7cM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914F5BA/049DCD22AD6111EA8F1A8D63C4F9AE02/FCD4Bwnd09_D9RFWVQPO9ERL7cM.mft
Manifest number:          09DE
Signing time:             Sun 20 Sep 2026 19:47:24 +0000
Manifest this update:     Sun 20 Sep 2026 19:47:23 +0000
Manifest next update:     Sun 27 Sep 2026 19:47:23 +0000
Files and hashes:         1: FCD4Bwnd09_D9RFWVQPO9ERL7cM.crl (hash: CDyaxtWrXIig2yk9CnaeRG127Jg0c0agmXV4iY3S8Fk=)
                          2: E9E80356AD6211EABEDF046AC4F9AE02.roa (hash: 3/DJ3hL5G9etvpvOyj7MflbEEZYKEAa9BhYU/ttjjb0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914F5BA/049DCD22AD6111EA8F1A8D63C4F9AE02/FCD4Bwnd09_D9RFWVQPO9ERL7cM.crl
                          rsync://rpki.apnic.net/member_repository/A914F5BA/049DCD22AD6111EA8F1A8D63C4F9AE02/FCD4Bwnd09_D9RFWVQPO9ERL7cM.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FCD4Bwnd09_D9RFWVQPO9ERL7cM.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 19:47:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2535 (0x9e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914F5BA, serialNumber=1420F80709DDD3DFC3F511565503CEF4444BEDC3
        Validity
            Not Before: Sep 20 19:47:23 2026 GMT
            Not After : Sep 27 19:47:23 2026 GMT
        Subject: CN=6ab0384c-0fb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c6:5a:97:64:b9:46:a9:af:1f:e1:2e:23:8d:
                    77:52:6a:cf:53:e1:50:9b:67:67:01:18:2c:82:d6:
                    8c:13:1d:9e:de:c9:99:e9:5d:a4:1b:9d:05:be:78:
                    a7:6f:d9:c0:99:d2:20:d5:bf:c3:70:3c:44:1c:1d:
                    61:07:d5:4e:27:dd:1e:28:3a:d0:d5:a9:a7:f6:93:
                    6f:b1:be:e0:fd:4f:57:ed:b1:12:5f:bf:30:d5:12:
                    bc:ee:0e:ef:a5:1e:0d:a1:3f:9f:80:d7:1e:00:d1:
                    3b:dc:4c:6f:36:25:4c:6e:d0:74:67:89:dc:94:8a:
                    1a:12:51:03:9e:1f:6a:c7:f8:4a:01:cb:d1:db:e1:
                    a1:d4:68:70:e8:65:83:e4:3f:fa:ad:18:71:67:29:
                    fb:b8:8a:89:29:15:27:09:4f:48:39:d8:30:d9:11:
                    29:ec:c1:67:9d:1b:a7:39:ca:44:fe:52:fb:23:ae:
                    ef:f7:7d:e6:10:c1:64:c4:e4:e9:d5:b0:b9:dc:c3:
                    9e:33:f9:6b:ff:fe:8a:df:d1:3c:94:7c:88:08:bd:
                    03:4a:ca:63:f2:b3:48:ca:41:33:89:cd:9c:75:0a:
                    15:74:7c:6a:53:40:b5:5c:2d:ec:5d:69:83:78:8c:
                    99:88:6e:40:ff:96:cc:8e:b2:88:ab:08:cb:2e:e2:
                    25:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:7E:9F:01:C4:24:74:BF:2A:17:27:BD:BB:B0:F0:74:62:4C:53:4C
            X509v3 Authority Key Identifier:
                keyid:14:20:F8:07:09:DD:D3:DF:C3:F5:11:56:55:03:CE:F4:44:4B:ED:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914F5BA/049DCD22AD6111EA8F1A8D63C4F9AE02/FCD4Bwnd09_D9RFWVQPO9ERL7cM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FCD4Bwnd09_D9RFWVQPO9ERL7cM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F5BA/049DCD22AD6111EA8F1A8D63C4F9AE02/FCD4Bwnd09_D9RFWVQPO9ERL7cM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:69:80:da:28:af:3c:fb:fb:b6:e4:41:5b:8c:06:e0:f6:d9:
         1c:9e:a0:6f:ed:b6:76:29:fe:74:e8:e1:ab:a2:ce:6c:8e:ee:
         7c:2f:5a:0d:14:d1:12:93:b5:77:bf:9b:40:90:a2:ad:48:a6:
         9d:a7:ab:6c:01:13:ce:5c:15:da:71:4e:6a:7c:e9:3f:b3:9e:
         89:8f:2e:88:3d:27:b6:83:06:16:a7:9d:a0:c9:0e:94:33:6d:
         07:39:d8:77:9a:ac:e5:76:32:06:a7:00:fc:1c:c5:02:37:54:
         3c:76:82:02:6c:12:a9:20:7d:e2:83:bb:e0:9e:79:77:2b:de:
         d7:59:04:73:ca:06:8c:17:e1:ae:7b:f4:ce:4e:f8:b5:54:f5:
         e0:6c:b4:b6:8f:ad:d1:69:72:90:ad:c7:85:46:8a:97:66:dc:
         d4:02:a5:74:e0:65:bb:e8:02:78:d2:db:25:3d:6a:6f:dc:c6:
         4c:53:92:ce:9b:91:12:6c:93:f3:4c:d0:dd:5b:df:8c:b0:6c:
         46:46:21:fb:61:43:46:f3:b9:5c:de:05:58:3d:7b:be:7c:de:
         8b:f9:e8:76:95:a7:d6:c7:a7:67:71:d7:ed:e8:67:dd:fa:8b:
         57:d1:2b:13:80:a7:47:18:59:c0:04:56:e5:36:d3:30:ed:75:
         c8:31:ca:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:31:09 2026 by rpki-client