Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.mft
File:                     FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.mft (raw, json)
Hash identifier:          WgJnnwHsfCa1MhUaSlMmOyehJGz/JnFUPC1tC3S0gp4=
Subject key identifier:   16:9E:65:B1:6B:6E:CC:D8:BB:64:64:B3:E2:9C:46:05:F7:87:F1:D4
Authority key identifier: 16:13:D1:15:ED:83:A0:6E:97:A7:3D:AE:55:16:BA:1B:68:4E:EC:09
Certificate issuer:       /CN=A9158F08/serialNumber=1613D115ED83A06E97A73DAE5516BA1B684EEC09
Certificate serial:       0D30
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.mft
Manifest number:          1746
Signing time:             Sun 20 Sep 2026 18:11:24 +0000
Manifest this update:     Sun 20 Sep 2026 18:11:23 +0000
Manifest next update:     Sun 27 Sep 2026 18:11:23 +0000
Files and hashes:         1: FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.crl (hash: GFW5qH/gmefbXEzTHfeeQKXr/FulEdXBIz3I/OYwIls=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.crl
                          rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 18:11:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3376 (0xd30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9158F08, serialNumber=1613D115ED83A06E97A73DAE5516BA1B684EEC09
        Validity
            Not Before: Sep 20 18:11:23 2026 GMT
            Not After : Sep 27 18:11:23 2026 GMT
        Subject: CN=6ab021cc-143d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:2a:9e:f4:a0:55:61:23:69:96:86:55:d7:65:
                    59:83:d4:d0:07:34:10:a3:d2:4c:2a:bc:6e:87:dd:
                    81:a7:2a:10:65:8f:d5:d2:f4:82:e9:8a:e0:f8:fd:
                    3f:b0:81:4b:cd:92:41:5a:46:ba:c5:10:fd:e7:17:
                    bb:38:96:a3:36:35:65:d4:f7:39:7b:07:7a:68:38:
                    ff:ab:8f:58:e4:cd:eb:8e:26:73:25:b7:75:07:03:
                    28:66:9d:36:47:52:69:a4:51:26:35:55:1c:71:06:
                    e1:20:e0:97:33:82:bb:c3:e4:84:83:cc:74:d5:c9:
                    5e:07:24:d9:28:43:93:5b:c7:a0:4e:93:d5:17:14:
                    c8:fb:2c:19:31:14:3c:79:62:a3:bd:62:d1:60:14:
                    5c:71:80:bb:11:bf:19:83:60:6f:9c:09:32:7c:31:
                    86:24:1c:dc:73:fe:7b:b6:0a:a5:57:e6:c5:64:d1:
                    0e:cb:15:cf:d8:01:f2:7e:7d:bd:3e:90:7d:d4:5b:
                    ab:05:dd:10:30:82:fe:ca:18:0f:1f:9b:30:12:05:
                    6f:51:9a:89:35:2c:76:7c:9b:e4:04:0e:e9:54:1d:
                    26:03:af:dc:90:2c:2a:5a:b8:77:fe:cd:f0:35:85:
                    49:8f:e0:3d:34:a0:ed:83:49:49:d4:52:27:78:45:
                    da:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:9E:65:B1:6B:6E:CC:D8:BB:64:64:B3:E2:9C:46:05:F7:87:F1:D4
            X509v3 Authority Key Identifier:
                keyid:16:13:D1:15:ED:83:A0:6E:97:A7:3D:AE:55:16:BA:1B:68:4E:EC:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:06:0b:dc:d1:fe:98:7d:d7:f9:70:01:e3:ef:23:d0:e9:7b:
         2a:61:17:11:61:b2:38:7a:26:d8:08:4d:9b:0b:4d:05:dc:db:
         4d:5a:0d:fa:41:d1:92:1b:d3:3d:7c:c1:e2:00:77:64:c6:0f:
         b4:96:52:58:3c:2a:7c:b9:43:cd:4a:a6:47:67:ec:2e:92:3a:
         d2:71:68:4e:99:8d:23:6b:1f:cf:c6:e6:f8:20:e7:d2:35:19:
         ac:9f:b4:a9:32:e1:ec:01:5b:5f:38:a3:59:bc:6f:f4:35:3d:
         a1:7c:dc:fb:2d:59:82:db:20:5a:f9:ae:1c:cb:7f:e3:34:6b:
         06:e9:6b:3c:5e:1e:18:72:29:fa:5d:e1:75:3c:ec:c4:b9:13:
         4e:2c:7c:c3:54:b1:1d:b3:18:7a:91:7b:c5:e4:af:c4:55:2e:
         64:ad:c8:be:7f:c1:58:97:ba:c3:cf:aa:d5:c4:0c:58:35:f0:
         83:2b:ad:6b:38:81:b3:90:ed:55:17:74:38:78:58:ac:9d:72:
         20:d9:72:19:49:d9:5c:e3:e0:32:3f:89:8a:bb:01:9c:e2:50:
         d6:d1:86:7b:ee:22:aa:e5:e6:b1:d8:ba:d5:36:75:bc:55:d2:
         e8:31:73:4c:77:b1:c1:a8:f7:6e:2a:af:4f:8d:7c:c5:95:6d:
         55:2b:ae:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 02:10:30 2026 by rpki-client