Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91645D3/7620BC0C0C2011EB8AE6394DC4F9AE02/fcUQye6vE3-r4XHlViRtskYeJxU.mft
File:                     fcUQye6vE3-r4XHlViRtskYeJxU.mft (raw, json)
Hash identifier:          A4uLfiYJddnnHv6ikfhy5jUcruSyN65pJOwAhmWc8Co=
Subject key identifier:   32:48:50:76:0F:0D:B8:62:90:A4:EB:DA:BF:5E:04:06:AE:14:6F:F4
Authority key identifier: 7D:C5:10:C9:EE:AF:13:7F:AB:E1:71:E5:56:24:6D:B2:46:1E:27:15
Certificate issuer:       /CN=A91645D3/serialNumber=7DC510C9EEAF137FABE171E556246DB2461E2715
Certificate serial:       0894
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcUQye6vE3-r4XHlViRtskYeJxU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91645D3/7620BC0C0C2011EB8AE6394DC4F9AE02/fcUQye6vE3-r4XHlViRtskYeJxU.mft
Manifest number:          088A
Signing time:             Sun 20 Sep 2026 20:38:53 +0000
Manifest this update:     Sun 20 Sep 2026 20:38:52 +0000
Manifest next update:     Sun 27 Sep 2026 20:38:52 +0000
Files and hashes:         1: fcUQye6vE3-r4XHlViRtskYeJxU.crl (hash: F+i51DZh6GgZPGIOLSaSAHCOWlNwdiRt184Ls5WXHD0=)
                          2: 58DAB5900FF311EBB0C3265EC4F9AE02.roa (hash: BTpU8dpGatUZOvwd6SbXwfQ3oVErt9SER4OTcVG1hdA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91645D3/7620BC0C0C2011EB8AE6394DC4F9AE02/fcUQye6vE3-r4XHlViRtskYeJxU.crl
                          rsync://rpki.apnic.net/member_repository/A91645D3/7620BC0C0C2011EB8AE6394DC4F9AE02/fcUQye6vE3-r4XHlViRtskYeJxU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcUQye6vE3-r4XHlViRtskYeJxU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 20:38:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2196 (0x894)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91645D3, serialNumber=7DC510C9EEAF137FABE171E556246DB2461E2715
        Validity
            Not Before: Sep 20 20:38:52 2026 GMT
            Not After : Sep 27 20:38:52 2026 GMT
        Subject: CN=6ab0445d-0a13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:79:99:e6:f1:75:55:eb:52:8c:09:d6:a0:0e:
                    4c:9f:49:86:82:08:37:9c:a8:47:b0:d3:a8:c5:ac:
                    19:57:cc:8a:df:43:08:3c:41:37:c1:e8:99:95:92:
                    a5:1b:71:1a:ec:79:a9:e4:39:47:f6:96:26:55:ff:
                    d8:e8:8a:92:82:bf:3f:ae:74:6e:90:28:d9:57:9c:
                    a0:b1:0c:f4:11:ea:aa:3f:05:05:e6:78:7c:7a:8c:
                    7d:d8:ab:5e:0a:14:6f:bc:10:b5:90:a0:c8:bf:f7:
                    c2:25:6c:a3:04:a0:dc:2c:64:fd:06:b2:e0:cf:84:
                    e5:9e:01:6b:05:ef:23:99:8b:de:42:95:70:40:bf:
                    c8:44:61:75:d4:71:f1:0c:87:91:48:89:43:4f:d7:
                    59:20:4a:c8:84:a2:c3:85:52:c0:6f:c4:77:07:c5:
                    89:22:f1:3f:34:0e:e7:11:83:8e:ec:05:ca:60:1e:
                    68:ff:f9:89:e1:22:0e:08:c2:33:63:3a:f5:88:0f:
                    4d:a2:46:90:33:6c:ce:ec:2f:d8:fc:44:ef:2a:4d:
                    ad:e5:07:11:f4:6b:37:71:5b:9d:07:7e:7a:3c:0c:
                    d9:0d:46:21:83:9f:24:a2:ac:2a:ac:78:82:df:87:
                    41:2f:c8:8d:8f:c5:b1:34:a3:bb:ff:87:4e:42:ef:
                    07:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:48:50:76:0F:0D:B8:62:90:A4:EB:DA:BF:5E:04:06:AE:14:6F:F4
            X509v3 Authority Key Identifier:
                keyid:7D:C5:10:C9:EE:AF:13:7F:AB:E1:71:E5:56:24:6D:B2:46:1E:27:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91645D3/7620BC0C0C2011EB8AE6394DC4F9AE02/fcUQye6vE3-r4XHlViRtskYeJxU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcUQye6vE3-r4XHlViRtskYeJxU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91645D3/7620BC0C0C2011EB8AE6394DC4F9AE02/fcUQye6vE3-r4XHlViRtskYeJxU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:17:66:5e:ec:ac:1b:92:26:dd:80:cf:21:a6:c8:c3:52:4d:
         58:61:ff:7c:9e:bc:45:4b:9b:6c:26:06:3b:91:df:5f:5b:51:
         5d:2a:e8:18:7a:68:8b:ca:fd:e7:ff:0c:5f:25:41:15:f3:c5:
         bb:dd:98:6c:7e:f0:d0:2f:6e:63:da:aa:f0:3e:d8:ab:40:49:
         e3:7b:f1:3f:00:f4:e0:94:ce:12:b6:94:6f:74:69:97:d3:c8:
         b5:f8:a4:6b:ef:6d:ef:01:0b:d6:f2:33:d6:99:27:6f:3c:df:
         d4:dc:06:6c:44:ff:fc:d2:c1:37:20:b9:3d:83:0d:49:c8:90:
         80:c4:19:33:69:7a:44:67:d2:d9:ec:b3:2b:83:6c:00:42:d5:
         fd:0a:0c:56:37:32:87:b8:7d:67:cc:87:4a:3d:db:d2:14:e6:
         2d:82:cb:d6:ff:8f:bc:ef:3b:a8:02:d6:48:b0:8d:bc:60:c7:
         8c:21:ca:ce:37:d9:af:d1:0f:a5:0b:e6:b8:b9:0f:ae:3d:b3:
         dd:6f:41:06:8b:d1:bb:6d:6f:ae:8c:cb:40:01:1d:a7:a0:8c:
         6b:f6:cd:8f:c7:64:2c:38:d4:42:33:d4:dc:7c:f0:4e:41:2e:
         73:cb:d8:47:37:be:0b:16:09:60:ba:e6:7b:1e:e7:09:e7:f5:
         16:ed:85:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:22:18 2026 by rpki-client