Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.mft
File:                     fY-gvvau9xvfiDhY9zYZ07WeJ3c.mft (raw, json)
Hash identifier:          M/uJirztKpzouNvqb2Q+1d7ZfNMX8yqazkRBXxWHKB8=
Subject key identifier:   CB:6E:0A:63:FD:C5:0F:51:05:09:7D:D9:AF:D4:8B:9A:79:33:27:38
Authority key identifier: 7D:8F:A0:BE:F6:AE:F7:1B:DF:88:38:58:F7:36:19:D3:B5:9E:27:77
Certificate issuer:       /CN=A9159309/serialNumber=7D8FA0BEF6AEF71BDF883858F73619D3B59E2777
Certificate serial:       F2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fY-gvvau9xvfiDhY9zYZ07WeJ3c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.mft
Manifest number:          EC
Signing time:             Tue 13 Oct 2026 07:06:44 +0000
Manifest this update:     Tue 13 Oct 2026 07:06:44 +0000
Manifest next update:     Tue 20 Oct 2026 07:06:44 +0000
Files and hashes:         1: fY-gvvau9xvfiDhY9zYZ07WeJ3c.crl (hash: mcROlotTn5dR0l0hP4sovW77WQRk4izd5cUB8iEEd3w=)
                          2: 21C5B04263A311F096468248C4F9AE02.roa (hash: ZAT1gq4fsyyEvWAh5Wb9WrqtHt9uUHF0Lm9+fNRhxOc=)
                          3: B32DFBA0613E11F0807A9A39C4F9AE02.roa (hash: znQCSmWYjAzJ99g/MnFKRiPRCuuveVvzPYPlkOv1NBM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.crl
                          rsync://rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fY-gvvau9xvfiDhY9zYZ07WeJ3c.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 Oct 2026 07:06:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 242 (0xf2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9159309, serialNumber=7D8FA0BEF6AEF71BDF883858F73619D3B59E2777
        Validity
            Not Before: Oct 13 07:06:44 2026 GMT
            Not After : Oct 20 07:06:44 2026 GMT
        Subject: CN=6acdd884-b5ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:66:2d:41:7a:2e:51:93:71:4b:e5:9a:a3:35:
                    54:c3:78:61:15:c8:78:e8:58:bd:bc:9a:72:dc:53:
                    c5:ca:90:aa:07:83:19:a3:43:18:9f:d6:18:e0:65:
                    33:61:58:c7:9d:ca:1d:6e:f1:46:32:05:6f:b8:c4:
                    c4:a1:eb:23:88:d1:2e:f9:36:8d:eb:28:ae:73:30:
                    76:dc:c1:36:6d:98:ea:49:6e:2a:f8:cc:6e:a7:76:
                    7f:05:7f:af:8e:62:b4:f7:6e:26:a9:be:06:0e:aa:
                    a6:44:d9:42:5a:c7:20:8c:cf:81:b3:49:50:3c:48:
                    e8:89:2f:0c:e7:e9:d4:18:6c:71:10:eb:d1:84:05:
                    13:da:48:49:a4:bb:9e:15:57:28:27:b9:af:3d:3d:
                    61:e0:97:24:b3:a4:ce:ae:8d:7e:34:1e:64:ee:c5:
                    e3:7a:70:8d:ab:a1:39:53:c0:35:5b:d7:d2:6b:98:
                    7f:79:90:ad:19:2c:a7:b3:bb:ff:35:0a:3f:b1:83:
                    fb:3c:52:fa:85:f8:cd:96:1f:e4:80:9e:c9:8d:9b:
                    47:56:d5:30:da:1b:ca:0e:38:58:d8:cc:06:00:55:
                    bd:19:fc:82:2f:58:b7:9b:2c:26:ec:db:e1:ed:46:
                    86:67:f7:ce:45:ab:56:c8:4a:62:83:86:b1:75:e1:
                    dd:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:6E:0A:63:FD:C5:0F:51:05:09:7D:D9:AF:D4:8B:9A:79:33:27:38
            X509v3 Authority Key Identifier:
                keyid:7D:8F:A0:BE:F6:AE:F7:1B:DF:88:38:58:F7:36:19:D3:B5:9E:27:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fY-gvvau9xvfiDhY9zYZ07WeJ3c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:cd:71:ea:97:3e:7c:6b:9a:f5:45:0b:65:ba:24:d4:42:1d:
         f9:a5:43:1b:1f:22:c8:15:67:69:78:81:59:07:9d:fa:7e:4a:
         5a:e5:28:94:04:3d:5f:13:01:d0:4b:bb:27:e5:2e:4c:b1:f0:
         52:b2:16:21:a6:3b:72:ba:b1:07:a0:c2:b8:af:96:4e:ef:3d:
         12:3a:84:ad:57:c1:fd:19:dc:4a:a4:40:81:75:c9:90:68:ff:
         90:65:f2:56:e6:33:20:c7:0d:9e:e5:ba:46:1b:a3:d4:5e:4c:
         42:af:ec:80:82:8a:02:4c:e1:c8:9f:93:c1:19:9b:1e:01:ec:
         09:34:b1:03:4b:ca:1b:95:f5:0a:8e:1b:e4:c9:45:35:16:c9:
         c1:ac:cb:ee:e6:77:c5:ce:ca:3b:19:dc:94:41:68:63:8d:e9:
         0e:97:ab:bf:b4:1c:e3:12:b2:ae:59:ed:03:43:24:80:7e:09:
         be:13:0d:a2:0e:d8:0c:54:ce:fb:e9:16:da:f4:37:f4:01:bf:
         5a:1e:66:91:a0:53:b5:d6:a1:e1:88:f2:36:ae:43:f7:5b:cc:
         9f:ae:bb:85:42:bc:0f:bd:63:75:7e:70:73:99:34:09:f2:ed:
         7a:4d:a0:42:ad:9c:2b:0a:7e:06:3e:98:61:16:23:55:d8:5f:
         d7:6e:c5:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 22:57:55 2026 by rpki-client