Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916223F/4EBF27B6F95C11E9B6272285C4F9AE02/Fu3IlWvEE8nFAhkosDvIUPx-ckc.mft
File:                     Fu3IlWvEE8nFAhkosDvIUPx-ckc.mft (raw, json)
Hash identifier:          cs56wpulIkAsJPOy+EXWwMQ1zTTRhnCVtxV83A19+lE=
Subject key identifier:   19:DC:47:D3:E0:AD:F4:72:2E:31:62:E0:BB:0D:F9:10:A1:43:D1:00
Authority key identifier: 16:ED:C8:95:6B:C4:13:C9:C5:02:19:28:B0:3B:C8:50:FC:7E:72:47
Certificate issuer:       /CN=A916223F/serialNumber=16EDC8956BC413C9C5021928B03BC850FC7E7247
Certificate serial:       0D80
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fu3IlWvEE8nFAhkosDvIUPx-ckc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916223F/4EBF27B6F95C11E9B6272285C4F9AE02/Fu3IlWvEE8nFAhkosDvIUPx-ckc.mft
Manifest number:          0D77
Signing time:             Tue 22 Sep 2026 17:52:53 +0000
Manifest this update:     Tue 22 Sep 2026 17:52:52 +0000
Manifest next update:     Tue 29 Sep 2026 17:52:52 +0000
Files and hashes:         1: Fu3IlWvEE8nFAhkosDvIUPx-ckc.crl (hash: M5n6pERQ5WaMq+pxJKmw/SOFAP0HqK/xL4Oh4se41uE=)
                          2: 80392340F95D11E9ABF14387C4F9AE02.roa (hash: ASXvIGV5XQpb47JnlEJHWDEczJ8u/zVk1fKYxytG1Yo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916223F/4EBF27B6F95C11E9B6272285C4F9AE02/Fu3IlWvEE8nFAhkosDvIUPx-ckc.crl
                          rsync://rpki.apnic.net/member_repository/A916223F/4EBF27B6F95C11E9B6272285C4F9AE02/Fu3IlWvEE8nFAhkosDvIUPx-ckc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fu3IlWvEE8nFAhkosDvIUPx-ckc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 15:21:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3456 (0xd80)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916223F, serialNumber=16EDC8956BC413C9C5021928B03BC850FC7E7247
        Validity
            Not Before: Sep 22 17:52:52 2026 GMT
            Not After : Sep 29 17:52:52 2026 GMT
        Subject: CN=6ab2c075-2796
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4b:ed:44:16:38:be:8e:ca:5b:de:36:ff:4f:
                    da:e1:60:51:94:43:ef:7b:e2:46:2e:60:f6:9e:a0:
                    2c:5c:fb:6f:11:8e:61:11:21:02:84:3c:63:f9:aa:
                    42:6a:a3:fd:ed:78:d1:6b:61:6c:53:08:99:de:d9:
                    28:f7:bb:77:4d:f8:3c:a0:71:fa:cf:f3:6b:44:89:
                    63:c1:87:49:29:83:d0:77:ce:e5:53:e2:47:79:e1:
                    57:74:0c:09:fa:da:30:c3:1e:a2:4a:76:42:1a:b0:
                    d8:0c:9d:36:ea:2b:ce:e2:46:a2:2a:fd:bb:6a:bf:
                    86:af:ba:ca:c5:21:43:f2:c9:6d:04:d9:30:c1:8d:
                    cd:21:18:35:0c:f9:69:0a:ff:3a:cb:da:8c:6c:ca:
                    43:27:ee:5d:74:3a:a8:ac:d3:e5:91:1c:da:39:6d:
                    f2:71:42:95:2a:68:2c:bf:cf:77:4b:6f:40:a5:21:
                    a9:cb:73:6c:65:a0:28:16:f0:d9:48:41:3b:43:ba:
                    c0:58:e2:78:f5:e6:59:61:bd:a3:f2:39:0e:b2:cc:
                    0b:8e:d0:de:74:e8:e7:53:93:33:46:d5:ca:97:1a:
                    59:b6:75:7c:de:f5:61:64:a7:12:dc:d7:53:01:b8:
                    b7:ae:2d:1f:71:60:db:52:9d:7f:c2:f3:19:82:3c:
                    a7:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:DC:47:D3:E0:AD:F4:72:2E:31:62:E0:BB:0D:F9:10:A1:43:D1:00
            X509v3 Authority Key Identifier:
                keyid:16:ED:C8:95:6B:C4:13:C9:C5:02:19:28:B0:3B:C8:50:FC:7E:72:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916223F/4EBF27B6F95C11E9B6272285C4F9AE02/Fu3IlWvEE8nFAhkosDvIUPx-ckc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fu3IlWvEE8nFAhkosDvIUPx-ckc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916223F/4EBF27B6F95C11E9B6272285C4F9AE02/Fu3IlWvEE8nFAhkosDvIUPx-ckc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:5d:b6:34:42:52:a2:29:6e:26:1f:48:11:ca:ee:cf:68:d7:
         e8:a7:a3:6f:51:c2:17:1f:bb:ff:44:f2:4c:4d:d6:fd:c3:41:
         80:96:2d:03:74:26:3d:ea:d2:26:15:1c:37:d1:ed:02:01:eb:
         36:63:57:30:cd:37:e9:f9:84:43:42:68:b1:15:35:d9:24:fb:
         eb:a0:96:4e:f1:51:8f:00:6b:1e:82:38:79:c3:6a:ec:d3:68:
         53:08:31:fe:29:fc:95:aa:0e:02:65:f6:2d:02:79:bf:46:c8:
         c2:78:ae:a8:cf:7d:fe:bf:8b:57:a5:c6:d6:89:c2:9a:b2:0c:
         f7:73:d3:17:57:df:67:6d:72:cf:25:8b:43:07:0b:48:a4:c5:
         24:c9:84:dc:3c:40:22:4b:8e:69:53:cb:e1:4a:ca:22:5b:6e:
         2d:31:e5:2a:ff:1f:e2:b0:f5:3d:b1:89:79:fa:f5:7b:0f:b2:
         b3:55:e1:b0:f4:68:f0:b0:0e:ba:d9:90:e2:a2:5f:ef:6a:a9:
         6f:22:62:4d:af:88:04:14:36:72:35:19:0c:4d:ab:95:40:9a:
         9d:83:61:40:65:12:04:a1:27:52:61:f3:28:0a:7b:80:7a:2a:
         e0:ac:9a:e3:02:72:8e:42:6b:09:0a:1c:f4:f9:5b:ed:f3:a7:
         26:5a:8e:24
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDYAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjIyM0YxMTAvBgNVBAUTKDE2RURDODk1NkJDNDEzQzlDNTAyMTkyOEIwM0JDODUw
RkM3RTcyNDcwHhcNMjYwOTIyMTc1MjUyWhcNMjYwOTI5MTc1MjUyWjAYMRYwFAYD
VQQDEw02YWIyYzA3NS0yNzk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsEvtRBY4vo7KW942/0/a4WBRlEPve+JGLmD2nqAsXPtvEY5hESEChDxj+apC
aqP97XjRa2FsUwiZ3tko97t3Tfg8oHH6z/NrRIljwYdJKYPQd87lU+JHeeFXdAwJ
+towwx6iSnZCGrDYDJ026ivO4kaiKv27ar+Gr7rKxSFD8sltBNkwwY3NIRg1DPlp
Cv86y9qMbMpDJ+5ddDqorNPlkRzaOW3ycUKVKmgsv893S29ApSGpy3NsZaAoFvDZ
SEE7Q7rAWOJ49eZZYb2j8jkOsswLjtDedOjnU5MzRtXKlxpZtnV83vVhZKcS3NdT
Abi3ri0fcWDbUp1/wvMZgjynZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBncR9Pg
rfRyLjFi4LsN+RChQ9EAMB8GA1UdIwQYMBaAFBbtyJVrxBPJxQIZKLA7yFD8fnJH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjIzRi80RUJGMjdCNkY5
NUMxMUU5QjYyNzIyODVDNEY5QUUwMi9GdTNJbFd2RUU4bkZBaGtvc0R2SVVQeC1j
a2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0Z1M0lsV3ZFRThuRkFoa29zRHZJVVB4LWNrYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MjIzRi80RUJGMjdCNkY5NUMxMUU5QjYyNzIyODVDNEY5QUUwMi9GdTNJbFd2RUU4
bkZBaGtvc0R2SVVQeC1ja2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMF22NEJSoiluJh9IEcruz2jX6Kejb1HCFx+7/0TyTE3W/cNBgJYtA3QmPerS
JhUcN9HtAgHrNmNXMM036fmEQ0JosRU12ST766CWTvFRjwBrHoI4ecNq7NNoUwgx
/in8laoOAmX2LQJ5v0bIwniuqM99/r+LV6XG1onCmrIM93PTF1ffZ21yzyWLQwcL
SKTFJMmE3DxAIkuOaVPL4UrKIltuLTHlKv8f4rD1PbGJefr1ew+ys1XhsPRo8LAO
utmQ4qJf72qpbyJiTa+IBBQ2cjUZDE2rlUCanYNhQGUSBKEnUmHzKAp7gHoq4Kya
4wJyjkJrCQoc9Plb7fOnJlqOJA==
-----END CERTIFICATE-----
Generated at Tue Sep 22 20:26:33 2026 by rpki-client