Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9173526/79B99B749AAC11F1B63AA1684111F970/fOoThFDUNhs1PnBX2C_Bx2qMflg.mft
File:                     fOoThFDUNhs1PnBX2C_Bx2qMflg.mft (raw, json)
Hash identifier:          sNyVTZRYlfQ5p8V9CRqVLruEDeGpw9ccofJ1OWWRhA0=
Subject key identifier:   FC:D3:64:DA:C6:2D:26:89:AF:C2:C0:0A:0F:C8:EB:F6:50:74:1E:F4
Authority key identifier: 7C:EA:13:84:50:D4:36:1B:35:3E:70:57:D8:2F:C1:C7:6A:8C:7E:58
Certificate issuer:       /CN=A9173526/serialNumber=7CEA138450D4361B353E7057D82FC1C76A8C7E58
Certificate serial:       16
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fOoThFDUNhs1PnBX2C_Bx2qMflg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173526/79B99B749AAC11F1B63AA1684111F970/fOoThFDUNhs1PnBX2C_Bx2qMflg.mft
Manifest number:          15
Signing time:             Mon 21 Sep 2026 09:02:08 +0000
Manifest this update:     Mon 21 Sep 2026 09:02:08 +0000
Manifest next update:     Mon 28 Sep 2026 09:02:08 +0000
Files and hashes:         1: fOoThFDUNhs1PnBX2C_Bx2qMflg.crl (hash: 79tC+pHt+Vl4d/FpF0Tgzy1ZtjoAAKI0bDsEfsHQddw=)
                          2: 864D2A94A1C411F1A29B73897011F970.roa (hash: CjCIDj8MlgWZJjzO4IRsVZ7VxVfQnt0GwQFvWoydvek=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173526/79B99B749AAC11F1B63AA1684111F970/fOoThFDUNhs1PnBX2C_Bx2qMflg.crl
                          rsync://rpki.apnic.net/member_repository/A9173526/79B99B749AAC11F1B63AA1684111F970/fOoThFDUNhs1PnBX2C_Bx2qMflg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fOoThFDUNhs1PnBX2C_Bx2qMflg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 09:02:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22 (0x16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173526, serialNumber=7CEA138450D4361B353E7057D82FC1C76A8C7E58
        Validity
            Not Before: Sep 21 09:02:08 2026 GMT
            Not After : Sep 28 09:02:08 2026 GMT
        Subject: CN=6ab0f290-5da1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:43:9d:6a:35:3d:ee:b7:89:5c:63:22:c2:e6:
                    ee:e1:29:11:f2:e6:8a:89:50:82:aa:35:2c:10:53:
                    65:a3:72:e7:f5:c9:e8:7c:9b:69:d8:62:6f:91:1d:
                    94:3d:6a:ca:ee:13:51:7f:c3:57:65:32:7c:d9:d3:
                    1f:dd:9b:fb:b9:69:55:e0:9d:f9:ec:1c:fc:36:9a:
                    2b:e4:8b:10:09:8d:4d:43:4c:cb:06:86:b3:7d:c0:
                    c1:fb:57:a4:b7:57:68:c7:ed:f9:da:af:a5:72:45:
                    a2:b3:d4:81:bf:41:88:86:de:fe:a0:91:78:27:94:
                    dd:1d:80:bc:45:b4:85:04:b8:80:bd:ac:e7:2e:85:
                    08:5c:3c:c6:16:a2:b2:d0:c6:d8:09:64:56:3f:70:
                    55:4a:2e:dc:cf:7f:0c:6c:ca:97:f7:7b:5e:5d:35:
                    c6:45:9e:1f:17:69:9d:25:6d:b5:c5:ec:fa:88:36:
                    31:92:3b:4a:3c:34:ba:cd:f0:d0:8e:a5:17:b7:ff:
                    97:22:03:e8:ba:f8:c4:e4:3c:c9:59:81:fb:35:0a:
                    58:dc:8b:5b:72:b8:2d:65:8e:bc:b7:51:58:0a:03:
                    80:26:d7:ab:52:ae:e2:a4:6c:b5:bc:25:75:ab:a5:
                    2c:f8:c0:bb:f8:36:d0:71:b2:17:8b:40:50:26:8c:
                    b0:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:D3:64:DA:C6:2D:26:89:AF:C2:C0:0A:0F:C8:EB:F6:50:74:1E:F4
            X509v3 Authority Key Identifier:
                keyid:7C:EA:13:84:50:D4:36:1B:35:3E:70:57:D8:2F:C1:C7:6A:8C:7E:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173526/79B99B749AAC11F1B63AA1684111F970/fOoThFDUNhs1PnBX2C_Bx2qMflg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fOoThFDUNhs1PnBX2C_Bx2qMflg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173526/79B99B749AAC11F1B63AA1684111F970/fOoThFDUNhs1PnBX2C_Bx2qMflg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:aa:a1:1a:2a:76:d2:27:51:6d:f6:9e:21:4e:32:d0:54:2e:
         c5:0c:80:56:45:db:be:f3:0d:51:08:07:5f:44:30:53:83:14:
         82:d1:aa:31:06:e1:da:17:6d:9a:ee:04:fa:10:33:97:97:28:
         59:17:ec:7d:2b:bc:11:42:87:d4:08:f1:f6:f4:c8:a1:f0:1f:
         6c:a6:5d:de:ed:53:09:a0:b7:46:1b:6d:0d:3d:72:a0:83:2f:
         41:c2:19:f5:00:14:fd:f0:84:76:f7:62:b8:02:2a:ba:7a:87:
         64:ee:e2:3a:54:88:c8:7b:7d:64:88:9e:7b:fb:c4:a6:bc:fb:
         d0:bb:34:14:44:07:93:7b:77:6c:9d:f6:03:68:0e:a6:e7:c6:
         57:66:a7:db:96:5a:83:8b:e6:05:30:60:e6:43:17:5c:3b:e4:
         fc:27:20:02:28:d6:80:78:0d:59:ee:ab:5a:6d:0d:d7:47:cd:
         52:04:5c:58:96:57:36:da:68:da:3b:e0:b6:60:e9:69:30:ca:
         05:02:fe:a3:ca:6b:89:d6:c9:52:b4:00:2c:ef:b7:e3:43:8c:
         31:cd:4b:3e:4c:0e:81:e7:a7:a8:43:fe:9f:a6:fd:dc:cb:4e:
         93:f6:0c:d5:dc:20:76:49:bf:af:f3:f7:1f:2c:cb:9c:b2:74:
         ab:28:81:58
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
MzUyNjExMC8GA1UEBRMoN0NFQTEzODQ1MEQ0MzYxQjM1M0U3MDU3RDgyRkMxQzc2
QThDN0U1ODAeFw0yNjA5MjEwOTAyMDhaFw0yNjA5MjgwOTAyMDhaMBgxFjAUBgNV
BAMTDTZhYjBmMjkwLTVkYTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCcQ51qNT3ut4lcYyLC5u7hKRHy5oqJUIKqNSwQU2Wjcuf1yeh8m2nYYm+RHZQ9
asruE1F/w1dlMnzZ0x/dm/u5aVXgnfnsHPw2mivkixAJjU1DTMsGhrN9wMH7V6S3
V2jH7fnar6VyRaKz1IG/QYiG3v6gkXgnlN0dgLxFtIUEuIC9rOcuhQhcPMYWorLQ
xtgJZFY/cFVKLtzPfwxsypf3e15dNcZFnh8XaZ0lbbXF7PqINjGSO0o8NLrN8NCO
pRe3/5ciA+i6+MTkPMlZgfs1Cljci1tyuC1ljry3UVgKA4Am16tSruKkbLW8JXWr
pSz4wLv4NtBxsheLQFAmjLChAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU/NNk2sYt
JomvwsAKD8jr9lB0HvQwHwYDVR0jBBgwFoAUfOoThFDUNhs1PnBX2C/Bx2qMflgw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTczNTI2Lzc5Qjk5Qjc0OUFB
QzExRjFCNjNBQTE2ODQxMTFGOTcwL2ZPb1RoRkRVTmhzMVBuQlgyQ19CeDJxTWZs
Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvZk9vVGhGRFVOaHMxUG5CWDJDX0J4MnFNZmxnLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcz
NTI2Lzc5Qjk5Qjc0OUFBQzExRjFCNjNBQTE2ODQxMTFGOTcwL2ZPb1RoRkRVTmhz
MVBuQlgyQ19CeDJxTWZsZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQA7qqEaKnbSJ1Ft9p4hTjLQVC7FDIBWRdu+8w1RCAdfRDBTgxSC0aoxBuHaF22a
7gT6EDOXlyhZF+x9K7wRQofUCPH29Mih8B9spl3e7VMJoLdGG20NPXKggy9Bwhn1
ABT98IR292K4Aiq6eodk7uI6VIjIe31kiJ57+8SmvPvQuzQURAeTe3dsnfYDaA6m
58ZXZqfbllqDi+YFMGDmQxdcO+T8JyACKNaAeA1Z7qtabQ3XR81SBFxYllc22mja
O+C2YOlpMMoFAv6jymuJ1slStAAs77fjQ4wxzUs+TA6B56eoQ/6fpv3cy06T9gzV
3CB2Sb+v8/cfLMucsnSrKIFY
-----END CERTIFICATE-----
Generated at Tue Sep 22 03:02:17 2026 by rpki-client