Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916E343/3AE739AEB97E11EEB3C22955C4F9AE02/FOVew0KOPSuk3HHBWeX2Bh8WPG0.mft
File:                     FOVew0KOPSuk3HHBWeX2Bh8WPG0.mft (raw, json)
Hash identifier:          NC87a01+6/vMC30imlNfpXQCpcE5+JQiJZVcAQrQoeI=
Subject key identifier:   EB:5D:9E:BB:7E:1B:79:97:6B:3F:3E:AE:FE:2E:25:2B:3F:66:C0:B5
Authority key identifier: 14:E5:5E:C3:42:8E:3D:2B:A4:DC:71:C1:59:E5:F6:06:1F:16:3C:6D
Certificate issuer:       /CN=A916E343/serialNumber=14E55EC3428E3D2BA4DC71C159E5F6061F163C6D
Certificate serial:       01F5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FOVew0KOPSuk3HHBWeX2Bh8WPG0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916E343/3AE739AEB97E11EEB3C22955C4F9AE02/FOVew0KOPSuk3HHBWeX2Bh8WPG0.mft
Manifest number:          01F5
Signing time:             Fri 25 Sep 2026 02:33:37 +0000
Manifest this update:     Fri 25 Sep 2026 02:33:36 +0000
Manifest next update:     Fri 02 Oct 2026 02:33:36 +0000
Files and hashes:         1: FOVew0KOPSuk3HHBWeX2Bh8WPG0.crl (hash: OlHuw3KtdVLSongkiGK2cKgmlF2Fg36d8EwBxRoUgnM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916E343/3AE739AEB97E11EEB3C22955C4F9AE02/FOVew0KOPSuk3HHBWeX2Bh8WPG0.crl
                          rsync://rpki.apnic.net/member_repository/A916E343/3AE739AEB97E11EEB3C22955C4F9AE02/FOVew0KOPSuk3HHBWeX2Bh8WPG0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FOVew0KOPSuk3HHBWeX2Bh8WPG0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 02:33:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 501 (0x1f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916E343, serialNumber=14E55EC3428E3D2BA4DC71C159E5F6061F163C6D
        Validity
            Not Before: Sep 25 02:33:36 2026 GMT
            Not After : Oct  2 02:33:36 2026 GMT
        Subject: CN=6ab5dd81-3d81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:bf:4f:df:29:55:c2:dd:25:7f:a5:96:6c:f1:
                    00:f0:de:34:e4:56:20:22:fd:88:fd:da:20:80:51:
                    ee:2b:7e:ae:9f:2b:cb:7e:10:a7:5c:5c:d7:d3:39:
                    a3:28:97:68:71:ec:a4:7a:22:79:6a:3a:5f:34:a6:
                    00:57:5b:a7:17:03:7b:df:97:ec:98:b7:13:10:08:
                    87:ce:55:5f:8a:db:c8:75:e8:bd:75:b9:59:5b:ad:
                    77:ac:14:94:ad:ec:9f:58:4d:60:b7:33:8f:24:3f:
                    c9:62:3e:ed:ce:6f:d7:11:d4:3d:93:6b:ec:3e:96:
                    d5:cb:be:92:de:9c:09:2e:91:57:29:ab:b3:a7:19:
                    0e:65:1d:e3:25:c0:8c:f9:9a:db:9b:25:42:7b:75:
                    6a:96:21:74:ac:6e:3c:fb:1e:e2:44:46:2f:1e:3e:
                    5f:d2:4d:f0:f9:de:f6:e6:a0:2b:9e:12:ec:15:32:
                    5c:65:c8:29:57:e5:85:81:18:6a:8f:30:34:36:c1:
                    13:aa:f7:1c:67:f9:59:65:b9:d6:42:2f:e8:56:4f:
                    29:80:2f:0e:eb:ad:17:68:57:ad:15:43:14:35:97:
                    d4:85:9a:55:47:73:c9:bc:e9:d9:ac:bf:24:d4:1b:
                    b0:ec:26:7f:f4:6d:26:dc:a1:58:81:e0:94:6c:7b:
                    c6:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:5D:9E:BB:7E:1B:79:97:6B:3F:3E:AE:FE:2E:25:2B:3F:66:C0:B5
            X509v3 Authority Key Identifier:
                keyid:14:E5:5E:C3:42:8E:3D:2B:A4:DC:71:C1:59:E5:F6:06:1F:16:3C:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916E343/3AE739AEB97E11EEB3C22955C4F9AE02/FOVew0KOPSuk3HHBWeX2Bh8WPG0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FOVew0KOPSuk3HHBWeX2Bh8WPG0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E343/3AE739AEB97E11EEB3C22955C4F9AE02/FOVew0KOPSuk3HHBWeX2Bh8WPG0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:51:73:df:dc:e9:1e:36:00:e5:3c:60:73:15:7b:73:06:1a:
         ab:41:ee:43:db:71:a3:59:61:b1:e3:58:d8:ef:17:bb:4d:27:
         d2:ad:a9:08:d5:c0:5c:2a:00:2e:b1:0c:3a:58:49:dd:b1:03:
         01:45:2e:38:b8:d5:4a:06:15:e3:21:7d:21:34:5d:bd:6e:fc:
         31:30:17:e8:fb:9a:07:57:f7:e5:64:fc:da:40:63:66:25:35:
         59:dc:56:e5:d4:8a:7b:6c:87:f1:26:91:07:fe:35:b5:dc:d3:
         92:7e:d0:79:ec:71:b6:3b:73:0a:75:ba:a3:a9:fa:b8:1f:8c:
         1d:f9:fd:71:8a:b9:82:55:31:c3:ba:a9:6d:24:4a:1c:10:6a:
         f0:7e:84:b3:f9:f3:fd:a8:0e:f2:f6:60:b5:bf:f7:0d:5c:32:
         be:a5:e0:a0:76:7f:11:a1:ea:20:fd:bb:cb:f8:59:d4:6f:cd:
         71:25:fc:db:1b:a9:56:f5:83:2b:98:89:90:94:fb:04:c7:43:
         6e:93:10:d3:27:ca:d8:d8:7e:d2:ee:b8:bb:f9:c4:3b:eb:0e:
         20:a9:95:f7:ab:f9:b7:99:33:6f:10:5e:ff:94:b4:a9:66:1b:
         71:72:2d:0d:21:3a:a0:a8:58:44:2b:5d:ef:ca:d4:aa:b5:69:
         9e:1c:91:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:55:16 2026 by rpki-client