Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91513FA/329397661DEE11ED9472C136C4F9AE02/FgS-6E66CP3JRuSLTBTo3CVCGTo.mft
File:                     FgS-6E66CP3JRuSLTBTo3CVCGTo.mft (raw, json)
Hash identifier:          4kGm9rC7yYnchxvKqXZaVE4cVc5Lba9xh0wjtS8XTG4=
Subject key identifier:   36:3D:96:27:56:49:C9:03:67:DE:9D:D5:D3:D3:06:E4:7A:66:4C:BE
Authority key identifier: 16:04:BE:E8:4E:BA:08:FD:C9:46:E4:8B:4C:14:E8:DC:25:42:19:3A
Certificate issuer:       /CN=A91513FA/serialNumber=1604BEE84EBA08FDC946E48B4C14E8DC2542193A
Certificate serial:       0365
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgS-6E66CP3JRuSLTBTo3CVCGTo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91513FA/329397661DEE11ED9472C136C4F9AE02/FgS-6E66CP3JRuSLTBTo3CVCGTo.mft
Manifest number:          035E
Signing time:             Thu 05 Nov 2026 01:13:02 +0000
Manifest this update:     Thu 05 Nov 2026 01:13:01 +0000
Manifest next update:     Thu 12 Nov 2026 01:13:01 +0000
Files and hashes:         1: FgS-6E66CP3JRuSLTBTo3CVCGTo.crl (hash: jtTU6RcX9RSVvZbSU7flqLvlD4fByBrLUUGkFAxe8rs=)
                          2: 6901B0861DF211ED95A51A3EC4F9AE02.roa (hash: 5pvNOF23o2dVE23cjfW7jTVGCNwz3VBA/OSl53p3le0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91513FA/329397661DEE11ED9472C136C4F9AE02/FgS-6E66CP3JRuSLTBTo3CVCGTo.crl
                          rsync://rpki.apnic.net/member_repository/A91513FA/329397661DEE11ED9472C136C4F9AE02/FgS-6E66CP3JRuSLTBTo3CVCGTo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgS-6E66CP3JRuSLTBTo3CVCGTo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Nov 2026 01:13:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 869 (0x365)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91513FA, serialNumber=1604BEE84EBA08FDC946E48B4C14E8DC2542193A
        Validity
            Not Before: Nov  5 01:13:01 2026 GMT
            Not After : Nov 12 01:13:01 2026 GMT
        Subject: CN=6aebd81e-3efb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7f:ec:75:21:8e:ba:d1:66:d5:59:ce:57:57:
                    5a:c6:1a:f8:5e:e0:ff:e8:7b:7a:72:07:00:b7:83:
                    4a:4d:8f:63:db:0a:7c:36:f8:0c:2e:5f:86:f0:11:
                    d4:f1:48:0e:40:67:69:c4:0c:42:91:2f:cc:92:2f:
                    aa:60:e2:59:d0:13:10:dc:73:bb:f9:6c:63:5b:74:
                    09:02:47:c0:9c:32:1b:36:38:70:75:a4:ab:73:b2:
                    0b:4f:cb:65:af:fc:52:29:a9:d0:46:9d:65:7a:03:
                    bf:50:3a:0c:65:15:49:8f:f1:8d:af:f5:cb:0e:e6:
                    61:4d:fb:4a:b6:6c:62:65:29:a6:02:ba:76:1a:86:
                    ce:bd:c3:1d:d4:7f:b9:7e:e1:8d:cd:90:e0:90:5f:
                    21:93:95:b2:7b:60:29:6e:be:04:48:78:1b:2d:17:
                    dd:21:42:f3:88:3a:6f:d8:ad:d7:a2:df:34:cc:47:
                    27:7b:a4:42:2f:e5:36:02:6b:ad:e4:7d:4f:20:de:
                    e1:16:be:be:be:4c:f8:9b:18:41:4f:e7:fc:6f:89:
                    d7:94:c2:95:c2:d9:b2:f2:b3:1d:05:d3:ab:e8:18:
                    df:7c:03:d0:3e:ea:15:db:fb:2d:70:ae:65:a2:78:
                    6d:e6:26:7a:86:74:1a:5f:51:c7:0d:b6:2c:5e:f0:
                    ae:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:3D:96:27:56:49:C9:03:67:DE:9D:D5:D3:D3:06:E4:7A:66:4C:BE
            X509v3 Authority Key Identifier:
                keyid:16:04:BE:E8:4E:BA:08:FD:C9:46:E4:8B:4C:14:E8:DC:25:42:19:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91513FA/329397661DEE11ED9472C136C4F9AE02/FgS-6E66CP3JRuSLTBTo3CVCGTo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgS-6E66CP3JRuSLTBTo3CVCGTo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91513FA/329397661DEE11ED9472C136C4F9AE02/FgS-6E66CP3JRuSLTBTo3CVCGTo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:3a:1b:b3:e6:23:a5:66:cb:23:1a:08:57:0f:5e:d6:bf:59:
         76:ce:d4:9a:90:55:68:88:26:b8:6d:d7:d8:9e:5c:d8:d8:43:
         b5:36:6e:ad:63:d0:6f:3c:f0:b9:e1:8b:7b:51:f6:2f:31:42:
         1b:c3:29:aa:a7:11:fd:bf:7f:3b:1b:bb:b2:6a:e7:c4:5b:e8:
         f7:28:c6:f0:b2:13:82:5c:20:d6:5f:cb:5c:f4:9c:57:9c:a6:
         40:4e:00:c7:98:cb:6e:65:9b:e9:e6:80:5e:90:a9:4d:63:3b:
         37:64:bb:35:67:af:b2:bb:27:f4:52:70:ec:4f:7e:d7:8e:1f:
         fa:af:2f:2a:9d:82:87:a7:c9:d5:bb:8a:f6:70:6c:39:24:89:
         6d:fb:1c:03:0d:ce:1f:0f:65:8d:21:ef:f8:ae:5c:89:e5:d9:
         0f:49:d0:2a:cd:aa:79:3f:c4:f5:52:8a:5b:58:65:4d:1d:b6:
         c5:3a:1d:2a:e2:e4:b8:a8:1e:2c:5d:b3:e3:05:f6:06:ef:1b:
         78:4a:0c:8a:3a:cf:7f:e0:af:71:3f:4c:da:f8:80:7c:b5:06:
         41:5c:9c:63:27:68:e0:87:e7:60:4d:9d:00:cb:64:70:e6:1a:
         d2:ec:ad:5d:03:8a:5d:0f:0a:f2:2c:74:09:3b:0f:c2:06:88:
         08:db:69:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 16:16:49 2026 by rpki-client