Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9167FBA/4B6E00FC048F11F0872E8547C4F9AE02/FTyY0zE8xk7bmuFaujtUPkgEWZA.mft
File:                     FTyY0zE8xk7bmuFaujtUPkgEWZA.mft (raw, json)
Hash identifier:          YDnrIrR/vFP30zhjhWmeOXsjZaPubJkZXzKDiN58Ats=
Subject key identifier:   99:84:40:B1:E3:08:00:A8:BC:D7:5E:29:2E:22:12:3A:A5:62:15:48
Authority key identifier: 15:3C:98:D3:31:3C:C6:4E:DB:9A:E1:5A:BA:3B:54:3E:48:04:59:90
Certificate issuer:       /CN=A9167FBA/serialNumber=153C98D3313CC64EDB9AE15ABA3B543E48045990
Certificate serial:       012F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FTyY0zE8xk7bmuFaujtUPkgEWZA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9167FBA/4B6E00FC048F11F0872E8547C4F9AE02/FTyY0zE8xk7bmuFaujtUPkgEWZA.mft
Manifest number:          0127
Signing time:             Sun 11 Oct 2026 06:22:09 +0000
Manifest this update:     Sun 11 Oct 2026 06:22:08 +0000
Manifest next update:     Sun 18 Oct 2026 06:22:08 +0000
Files and hashes:         1: FTyY0zE8xk7bmuFaujtUPkgEWZA.crl (hash: Q6OpvZCOFum8f4FWva/444Qz+kC6hyEg/moRBNiUYyQ=)
                          2: F552E6BA05A111F082D17325C4F9AE02.roa (hash: 50HTgUj8BYD/Up0LzcZVR1qzl5yUcfq0/gOWZsXxQLA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9167FBA/4B6E00FC048F11F0872E8547C4F9AE02/FTyY0zE8xk7bmuFaujtUPkgEWZA.crl
                          rsync://rpki.apnic.net/member_repository/A9167FBA/4B6E00FC048F11F0872E8547C4F9AE02/FTyY0zE8xk7bmuFaujtUPkgEWZA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FTyY0zE8xk7bmuFaujtUPkgEWZA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Oct 2026 06:22:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 303 (0x12f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9167FBA, serialNumber=153C98D3313CC64EDB9AE15ABA3B543E48045990
        Validity
            Not Before: Oct 11 06:22:08 2026 GMT
            Not After : Oct 18 06:22:08 2026 GMT
        Subject: CN=6acb2b10-3575
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:46:56:79:b8:58:bf:06:ed:53:4b:04:07:f3:
                    ec:82:67:1f:37:e0:72:af:7a:24:23:84:bb:b2:f5:
                    10:68:86:48:6b:f4:23:67:f4:0f:89:93:b2:68:7b:
                    ab:1d:be:c6:c9:03:f2:48:6a:bf:72:9a:27:50:ee:
                    2f:55:a7:7a:fd:8a:eb:09:07:30:11:cc:3a:be:23:
                    40:b8:94:e7:29:20:9a:18:af:5e:6c:76:f4:ee:e3:
                    0a:34:cc:a8:90:de:f7:41:08:0d:3a:c2:06:26:7b:
                    b3:d1:a7:45:60:52:33:7e:d1:45:48:61:8a:df:30:
                    fd:9a:52:dd:e7:2f:27:7b:24:41:c9:6c:3e:31:84:
                    52:35:5d:ba:20:6f:55:dc:aa:e8:ea:77:9a:f7:62:
                    b8:6f:a1:5f:72:d2:c6:d0:31:86:56:63:13:17:30:
                    79:4d:16:7b:d9:a4:57:82:87:64:51:2b:5c:e6:13:
                    d2:65:c0:8e:2c:d7:be:80:5c:d4:ec:c7:f8:88:c1:
                    76:3d:50:2f:c0:3f:c0:e1:40:ba:73:24:ba:9c:57:
                    82:9a:f1:7b:d2:f8:29:36:b4:28:e8:69:d1:c4:23:
                    9f:c9:b2:63:54:b5:7c:19:49:1a:2a:67:e7:a8:85:
                    14:38:8d:c7:71:24:7a:8c:c1:7a:84:5d:f5:75:64:
                    7c:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:84:40:B1:E3:08:00:A8:BC:D7:5E:29:2E:22:12:3A:A5:62:15:48
            X509v3 Authority Key Identifier:
                keyid:15:3C:98:D3:31:3C:C6:4E:DB:9A:E1:5A:BA:3B:54:3E:48:04:59:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9167FBA/4B6E00FC048F11F0872E8547C4F9AE02/FTyY0zE8xk7bmuFaujtUPkgEWZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FTyY0zE8xk7bmuFaujtUPkgEWZA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167FBA/4B6E00FC048F11F0872E8547C4F9AE02/FTyY0zE8xk7bmuFaujtUPkgEWZA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:ed:e8:9e:97:47:fa:19:da:8c:9a:98:70:bd:ca:81:0e:8f:
         ef:14:f0:51:6d:83:dc:ee:b6:c1:ee:e6:33:7c:27:5b:40:4e:
         8f:d9:14:7a:7d:5f:f1:d8:c0:25:b6:88:66:1e:65:c3:45:d2:
         aa:ce:0b:38:b7:f5:91:7f:02:c0:35:26:53:a8:40:0c:ca:82:
         5b:e7:2d:08:01:23:d3:47:c9:e4:27:a3:2a:5c:ca:dc:28:08:
         d6:7a:ff:0b:d3:8f:1d:59:4a:d6:d7:1a:08:60:a5:5a:4f:b9:
         51:51:e0:90:75:4b:43:be:a4:82:64:3b:7a:d8:9f:10:09:3b:
         f9:cf:c0:6f:d6:6c:83:78:28:c4:ae:04:ce:ed:fc:af:14:b0:
         55:a6:b3:35:9a:bc:ca:81:70:87:69:2e:81:34:8b:7d:b0:71:
         62:31:f5:0e:ff:30:37:5f:f7:56:3d:01:a6:b4:02:ba:f6:31:
         91:f8:26:06:05:fd:ac:c4:aa:c7:bd:cb:eb:55:a4:68:25:5f:
         db:97:72:5a:fd:ca:e0:b3:0a:9a:0c:93:77:de:5c:8d:3e:ec:
         06:50:f3:ff:ae:04:71:77:89:7e:e6:1f:fe:b3:3c:05:5f:36:
         b1:93:7a:54:c9:66:07:64:91:e9:01:90:6a:15:fe:69:1c:9d:
         d9:52:71:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:07:52 2026 by rpki-client