Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.mft
File:                     FfB_78oF6EbUU4USXou0J3WDAPk.mft (raw, json)
Hash identifier:          D/dtRszwEWXS6cwRdrC4MTP9J/xlngSr7W75dWQB7iI=
Subject key identifier:   C1:F7:59:83:9D:23:40:AC:F2:63:05:82:69:1D:E1:26:AF:0A:01:9C
Authority key identifier: 15:F0:7F:EF:CA:05:E8:46:D4:53:85:12:5E:8B:B4:27:75:83:00:F9
Certificate issuer:       /CN=A91503BB/serialNumber=15F07FEFCA05E846D45385125E8BB427758300F9
Certificate serial:       0CB5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfB_78oF6EbUU4USXou0J3WDAPk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.mft
Manifest number:          0CAB
Signing time:             Tue 22 Sep 2026 18:27:04 +0000
Manifest this update:     Tue 22 Sep 2026 18:27:03 +0000
Manifest next update:     Tue 29 Sep 2026 18:27:03 +0000
Files and hashes:         1: FfB_78oF6EbUU4USXou0J3WDAPk.crl (hash: w+jG0tHNY/Gn9fmRL4qY9X52HzGAziOErmbamBEBOts=)
                          2: FC90C520213411EA8D675645C4F9AE02.roa (hash: wRh3N1lkasKdB1iov51RXGczR9sD9duj3/LCNc3iLBY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.crl
                          rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfB_78oF6EbUU4USXou0J3WDAPk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 18:27:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3253 (0xcb5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91503BB, serialNumber=15F07FEFCA05E846D45385125E8BB427758300F9
        Validity
            Not Before: Sep 22 18:27:03 2026 GMT
            Not After : Sep 29 18:27:03 2026 GMT
        Subject: CN=6ab2c878-08ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:35:80:b7:0d:53:5f:d9:86:1c:7d:be:f7:f6:
                    a0:65:f5:36:f8:f2:24:ef:78:18:17:42:06:0c:14:
                    79:f4:cd:09:60:39:68:52:79:f1:82:20:fa:2e:13:
                    30:b3:55:16:d4:1a:f9:35:11:c7:c8:da:62:a8:50:
                    26:d1:f2:e7:56:3f:b3:be:e1:2d:77:99:20:d8:fc:
                    41:59:40:22:03:9a:42:2b:de:60:1b:48:02:ba:c6:
                    c1:fc:90:40:ba:53:bf:12:6b:73:43:b7:99:e3:15:
                    1b:f2:e6:80:64:50:a6:ed:b5:71:6f:d1:e7:1b:a3:
                    ee:ca:83:dd:5f:a2:0d:16:f5:0c:bf:b5:df:2c:ee:
                    74:b1:82:4b:10:a8:cf:9a:55:da:92:a9:eb:e5:6c:
                    38:44:57:22:70:89:e5:8c:e5:ab:e0:f1:30:90:51:
                    a0:9b:85:52:7a:a0:37:da:6c:64:d6:96:a3:f9:ec:
                    54:0c:7c:df:95:30:de:03:93:03:82:66:4f:6f:eb:
                    f1:8d:86:1d:3a:3e:59:7a:9d:ad:11:b2:d9:11:22:
                    e5:cc:ad:92:4b:dd:98:4a:07:bb:09:bc:da:79:78:
                    90:2e:9a:b6:db:2e:61:ed:b6:7d:0d:b1:4d:8e:7a:
                    7e:ad:42:a6:a7:35:89:9a:a1:c4:3d:d9:6c:b1:45:
                    0b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:F7:59:83:9D:23:40:AC:F2:63:05:82:69:1D:E1:26:AF:0A:01:9C
            X509v3 Authority Key Identifier:
                keyid:15:F0:7F:EF:CA:05:E8:46:D4:53:85:12:5E:8B:B4:27:75:83:00:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfB_78oF6EbUU4USXou0J3WDAPk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:2e:44:c7:68:c8:2b:93:e1:db:a9:03:81:4f:f8:79:51:28:
         e1:eb:a1:93:a0:3c:eb:be:49:cc:80:a6:ca:d7:1b:c6:47:7b:
         e0:5f:b1:9a:9f:d4:4a:48:34:8d:6e:ec:37:77:d8:9f:65:a6:
         fb:4b:1f:4d:0c:43:80:63:59:6f:81:aa:ca:68:2d:b8:f4:0b:
         61:bc:c2:76:a6:f8:8d:c4:74:4e:4d:fb:1c:14:09:b1:8c:89:
         3a:d1:27:b7:df:c3:a9:d9:55:03:f5:0a:85:fe:38:82:6a:ea:
         fc:ea:e5:32:ad:f8:5e:e4:dd:2d:9c:30:03:b6:50:b6:14:3e:
         f7:e1:80:45:b9:73:e3:15:1a:23:a6:c8:af:82:32:5d:98:49:
         50:fa:ae:01:29:54:aa:f9:71:b4:eb:3e:bb:5c:07:5e:b4:25:
         e7:e0:6d:51:b4:4c:b0:e0:2c:2a:d4:08:52:d2:da:1e:ce:8a:
         e1:18:e4:39:bb:20:40:7b:0b:ba:da:fe:b4:77:f7:ff:ee:47:
         04:8b:b6:5c:f9:69:d9:2c:63:66:56:8c:03:fc:dd:42:ac:36:
         84:52:c3:3e:fe:9e:cc:b5:ab:7c:0f:88:9c:1e:7f:f6:d6:ef:
         fc:8b:a0:9f:55:00:8d:c8:ad:91:71:3a:7b:69:48:3b:16:55:
         16:28:be:13
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDLUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTAzQkIxMTAvBgNVBAUTKDE1RjA3RkVGQ0EwNUU4NDZENDUzODUxMjVFOEJCNDI3
NzU4MzAwRjkwHhcNMjYwOTIyMTgyNzAzWhcNMjYwOTI5MTgyNzAzWjAYMRYwFAYD
VQQDEw02YWIyYzg3OC0wOGVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAszWAtw1TX9mGHH2+9/agZfU2+PIk73gYF0IGDBR59M0JYDloUnnxgiD6LhMw
s1UW1Br5NRHHyNpiqFAm0fLnVj+zvuEtd5kg2PxBWUAiA5pCK95gG0gCusbB/JBA
ulO/EmtzQ7eZ4xUb8uaAZFCm7bVxb9HnG6PuyoPdX6INFvUMv7XfLO50sYJLEKjP
mlXakqnr5Ww4RFcicInljOWr4PEwkFGgm4VSeqA32mxk1paj+exUDHzflTDeA5MD
gmZPb+vxjYYdOj5Zep2tEbLZESLlzK2SS92YSge7CbzaeXiQLpq22y5h7bZ9DbFN
jnp+rUKmpzWJmqHEPdlssUULtQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMH3WYOd
I0Cs8mMFgmkd4SavCgGcMB8GA1UdIwQYMBaAFBXwf+/KBehG1FOFEl6LtCd1gwD5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDNCQi80NzI1RkM3ODIx
MkYxMUVBODMwRTBBMzVDNEY5QUUwMi9GZkJfNzhvRjZFYlVVNFVTWG91MEozV0RB
UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZmQl83OG9GNkViVVU0VVNYb3UwSjNXREFQay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MDNCQi80NzI1RkM3ODIxMkYxMUVBODMwRTBBMzVDNEY5QUUwMi9GZkJfNzhvRjZF
YlVVNFVTWG91MEozV0RBUGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAoy5Ex2jIK5Ph26kDgU/4eVEo4euhk6A8675JzICmytcbxkd74F+xmp/USkg0
jW7sN3fYn2Wm+0sfTQxDgGNZb4GqymgtuPQLYbzCdqb4jcR0Tk37HBQJsYyJOtEn
t9/DqdlVA/UKhf44gmrq/OrlMq34XuTdLZwwA7ZQthQ+9+GARblz4xUaI6bIr4Iy
XZhJUPquASlUqvlxtOs+u1wHXrQl5+BtUbRMsOAsKtQIUtLaHs6K4RjkObsgQHsL
utr+tHf3/+5HBIu2XPlp2SxjZlaMA/zdQqw2hFLDPv6ezLWrfA+InB5/9tbv/Iug
n1UAjcitkXE6e2lIOxZVFii+Ew==
-----END CERTIFICATE-----
Generated at Thu Sep 24 02:35:06 2026 by rpki-client