Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.mft
File:                     FN2GhClPGzOjE6-48OuhyKADeAk.mft (raw, json)
Hash identifier:          JrvKaqovFxL0mXW8wPp8gZNWtKx359z6MlFvU1YmX2s=
Subject key identifier:   BE:D7:22:6F:C4:17:92:20:1B:89:7B:64:5F:44:7E:D0:6A:50:7F:61
Authority key identifier: 14:DD:86:84:29:4F:1B:33:A3:13:AF:B8:F0:EB:A1:C8:A0:03:78:09
Certificate issuer:       /CN=A9160A05/serialNumber=14DD8684294F1B33A313AFB8F0EBA1C8A0037809
Certificate serial:       018E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FN2GhClPGzOjE6-48OuhyKADeAk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.mft
Manifest number:          017B
Signing time:             Mon 21 Sep 2026 04:46:30 +0000
Manifest this update:     Mon 21 Sep 2026 04:46:29 +0000
Manifest next update:     Mon 28 Sep 2026 04:46:29 +0000
Files and hashes:         1: FN2GhClPGzOjE6-48OuhyKADeAk.crl (hash: r7EjlPjJ+ni4+h7C2U1FYihLFyAdBBXiJn3yx5oD0O4=)
                          2: F7981812F38811EFAC05053AC4F9AE02.roa (hash: EK3pUqrH9H4fquoX1peOlD1L2xEfn/Ee2ouiE9JS3Uk=)
                          3: E9B0903AF38811EF81B8CE39C4F9AE02.roa (hash: SSKa739rT23rOpIYYisZx12/v/K7+nclE63wWrbXXlU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.crl
                          rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FN2GhClPGzOjE6-48OuhyKADeAk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 04:46:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 398 (0x18e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9160A05, serialNumber=14DD8684294F1B33A313AFB8F0EBA1C8A0037809
        Validity
            Not Before: Sep 21 04:46:29 2026 GMT
            Not After : Sep 28 04:46:29 2026 GMT
        Subject: CN=6ab0b6a6-bbcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:35:32:4e:e2:1c:42:90:af:19:ff:12:18:c1:
                    c5:17:a3:1a:a9:d7:8d:52:9c:c4:90:ed:21:85:25:
                    43:3a:26:66:60:57:17:35:d9:da:47:1d:3c:63:c5:
                    26:33:2e:af:bb:68:55:ea:61:26:5c:f7:9f:0b:e5:
                    e6:9f:c5:4f:c1:c1:44:a6:be:10:03:8e:ca:4a:e8:
                    b1:33:f6:18:42:9d:88:7f:20:16:14:ec:9d:eb:3e:
                    d9:bb:3d:ed:03:5c:be:d6:97:11:56:99:f5:82:02:
                    48:5a:4f:75:7d:81:b6:7b:a3:50:09:7f:02:9f:06:
                    a5:a7:48:b1:dd:d5:08:66:f9:41:59:ba:5c:d6:ba:
                    a8:21:71:60:d2:4b:5e:50:93:25:ae:8c:91:ff:a6:
                    16:a3:c5:b9:28:7c:8d:e4:4a:6f:0e:b9:f7:cf:c6:
                    c3:f8:94:17:86:a2:66:cc:63:02:68:41:69:61:a0:
                    89:6a:59:65:ae:70:dd:2c:5f:4f:21:14:46:fb:0d:
                    94:6d:0f:03:c2:f1:cf:1c:0a:49:2e:76:f3:50:27:
                    bd:20:59:6c:44:6b:bb:5a:5a:2b:54:03:6a:16:ec:
                    84:c8:76:96:c5:45:02:8f:c8:76:b4:88:13:2b:74:
                    b5:ea:86:a5:39:d6:a7:0c:b9:55:d9:f0:92:70:b7:
                    c3:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:D7:22:6F:C4:17:92:20:1B:89:7B:64:5F:44:7E:D0:6A:50:7F:61
            X509v3 Authority Key Identifier:
                keyid:14:DD:86:84:29:4F:1B:33:A3:13:AF:B8:F0:EB:A1:C8:A0:03:78:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FN2GhClPGzOjE6-48OuhyKADeAk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:05:0b:0d:8a:12:11:76:84:55:79:dc:0f:a2:1d:2d:30:9e:
         f1:96:74:f5:2a:e1:3b:ec:c9:21:3c:17:6f:12:4d:77:21:05:
         ed:33:a8:0f:c1:11:7a:57:45:48:d1:ca:df:06:6b:cc:ac:21:
         0e:1f:4d:d2:b0:c0:6e:f3:99:83:d0:89:21:bd:3e:bc:33:83:
         cd:97:17:a7:dd:7b:d0:81:ba:f7:77:d7:e6:08:19:9a:39:95:
         66:88:65:74:14:ce:ec:aa:fc:96:dc:9c:70:0b:8c:78:09:22:
         75:2c:fd:e5:d3:88:47:e0:d8:c1:d3:8c:c8:ab:9c:81:9f:7a:
         81:2f:68:b1:93:4e:97:e6:9f:53:bc:6c:c9:03:9b:d3:b4:19:
         76:83:50:c0:e7:c5:d7:aa:d9:f4:a3:6f:45:d5:45:ea:29:2c:
         42:bd:fc:b6:37:9a:d1:5f:69:a2:5b:78:4a:f7:48:fd:33:dd:
         38:89:75:92:49:9c:c6:96:57:4d:99:fa:28:c0:82:0e:3a:39:
         4e:04:8a:53:ce:ab:f5:f2:48:c6:22:fa:47:2a:9a:4d:74:60:
         b3:68:45:22:13:f4:83:4a:8c:de:6b:16:14:d6:20:a8:bd:f6:
         6b:08:12:79:a3:2e:b8:4c:e0:b7:ef:1a:cc:bf:ab:87:6d:b1:
         9a:73:05:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:27:52 2026 by rpki-client