Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918259F/0F8B5910CDAB11EA8837520CC4F9AE02/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.mft
File:                     FnXb2ew5zu2Bu7veQsx4z3oWJ8U.mft (raw, json)
Hash identifier:          tEUsrTdS6t0OAWsllbk5O5QHq/rm0yAF+MCGs+70tG0=
Subject key identifier:   D3:94:E0:C6:C0:C4:D5:28:5A:63:91:B2:9A:35:AA:81:A0:4F:62:77
Authority key identifier: 16:75:DB:D9:EC:39:CE:ED:81:BB:BB:DE:42:CC:78:CF:7A:16:27:C5
Certificate issuer:       /CN=A918259F/serialNumber=1675DBD9EC39CEED81BBBBDE42CC78CF7A1627C5
Certificate serial:       0949
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918259F/0F8B5910CDAB11EA8837520CC4F9AE02/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.mft
Manifest number:          093E
Signing time:             Fri 02 Oct 2026 20:26:50 +0000
Manifest this update:     Fri 02 Oct 2026 20:26:49 +0000
Manifest next update:     Fri 09 Oct 2026 20:26:49 +0000
Files and hashes:         1: FnXb2ew5zu2Bu7veQsx4z3oWJ8U.crl (hash: hJpMnHZS8PgwULcuwZXsGyPsolb9UmdHAX1ZSKS41/4=)
                          2: 760B9414D50911EB81567986C4F9AE02.roa (hash: o5orvZwjq3Ex7Ez6rw6oEtSGMyAC37EhiJfqK7bjWg8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918259F/0F8B5910CDAB11EA8837520CC4F9AE02/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.crl
                          rsync://rpki.apnic.net/member_repository/A918259F/0F8B5910CDAB11EA8837520CC4F9AE02/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 20:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2377 (0x949)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918259F, serialNumber=1675DBD9EC39CEED81BBBBDE42CC78CF7A1627C5
        Validity
            Not Before: Oct  2 20:26:49 2026 GMT
            Not After : Oct  9 20:26:49 2026 GMT
        Subject: CN=6ac0138a-6333
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:97:47:b0:2c:1a:64:b5:3e:96:29:82:db:32:
                    1e:ed:60:bf:fc:e4:cc:c5:aa:11:9c:f5:5c:69:ae:
                    30:97:a3:51:4c:de:07:dd:5b:fa:03:74:9a:89:59:
                    d8:1e:67:e9:1f:86:04:a9:a8:60:4b:e0:57:4c:6d:
                    14:a5:81:0b:de:f6:db:04:db:ea:71:7c:9a:1c:e8:
                    27:77:23:d0:82:84:b1:56:6f:ad:06:d5:33:05:56:
                    56:3d:d6:78:95:b0:69:a6:15:80:54:7e:96:a1:39:
                    d3:2e:09:3b:04:db:43:74:c1:7e:db:c5:d2:ba:5a:
                    77:ff:30:24:eb:a9:b2:4e:e7:b7:37:55:a2:28:c6:
                    34:b3:d4:cd:7a:1f:cd:4e:29:0a:28:b2:e8:30:ee:
                    a6:df:82:79:9f:06:6e:b8:32:cf:f3:7c:b9:82:01:
                    ee:4e:66:2f:22:7d:d1:6d:c8:75:63:38:59:16:36:
                    00:53:d6:68:92:09:a8:ec:01:9e:10:be:69:f0:1d:
                    a6:c0:31:32:31:36:9f:a7:d6:8f:6a:86:f3:1d:2a:
                    7d:ea:b5:39:45:96:f9:31:c3:d5:b3:c5:c1:8e:66:
                    38:09:1f:94:f3:bc:14:d6:25:71:19:a7:f3:0d:bf:
                    30:0c:5e:7f:c9:a3:95:5d:f6:7f:e6:b6:a3:67:d5:
                    7e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:94:E0:C6:C0:C4:D5:28:5A:63:91:B2:9A:35:AA:81:A0:4F:62:77
            X509v3 Authority Key Identifier:
                keyid:16:75:DB:D9:EC:39:CE:ED:81:BB:BB:DE:42:CC:78:CF:7A:16:27:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918259F/0F8B5910CDAB11EA8837520CC4F9AE02/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918259F/0F8B5910CDAB11EA8837520CC4F9AE02/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:c6:f5:24:5f:ae:3c:3a:cd:c5:8c:07:57:65:a3:e4:a7:9f:
         92:28:be:ab:b8:9d:d8:3d:8c:7d:dc:c2:8a:3b:49:6c:28:f8:
         15:c8:7b:9d:26:f3:ea:eb:e3:63:3b:4b:13:f7:4f:83:d5:21:
         ea:a5:81:f0:0a:a0:16:43:8d:b2:8a:db:c3:d6:0b:4c:0c:ee:
         4e:23:e7:b1:ac:c6:47:df:3b:8d:3b:68:ed:fa:e8:bc:f6:aa:
         92:b0:b1:d9:31:fe:00:05:50:da:94:f1:1b:91:cc:33:b2:3a:
         91:38:6a:13:f6:e0:9b:73:de:c8:87:11:0b:df:bc:b4:e1:42:
         6d:47:bf:e0:c6:f0:55:24:c0:2b:34:47:0a:eb:19:09:b1:57:
         d3:82:77:ab:53:54:64:f2:a8:4d:f9:ed:08:6e:eb:c7:b5:92:
         56:b1:4c:60:ec:b6:18:c6:1f:b4:2a:41:65:bd:93:e7:c0:7f:
         d6:04:b0:c9:1e:c4:ce:e9:2f:4d:d9:7f:43:3e:62:af:65:49:
         78:6b:95:58:2e:aa:cd:ad:6f:93:17:71:c7:73:2d:d6:48:2c:
         0c:27:0e:54:15:01:3d:9f:ad:f9:a9:a1:b8:ef:5f:d7:d1:91:
         7f:01:0c:a1:c4:bf:ee:54:d3:19:e0:8d:42:15:2c:c1:e1:b7:
         4e:68:a5:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:14:07 2026 by rpki-client