Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.mft
File:                     fuDGoot1n3LV3JpYlQOLurlKhhQ.mft (raw, json)
Hash identifier:          mt2G208qaIL+qi4c4OpYVuzNpnoxrVK5wJOFOOBYjck=
Subject key identifier:   51:C7:7E:30:57:67:A0:D4:09:CC:AD:6A:63:92:0E:86:76:CF:33:52
Authority key identifier: 7E:E0:C6:A2:8B:75:9F:72:D5:DC:9A:58:95:03:8B:BA:B9:4A:86:14
Certificate issuer:       /CN=A918AF08/serialNumber=7EE0C6A28B759F72D5DC9A5895038BBAB94A8614
Certificate serial:       0DA9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuDGoot1n3LV3JpYlQOLurlKhhQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.mft
Manifest number:          0D7F
Signing time:             Tue 06 Oct 2026 18:05:16 +0000
Manifest this update:     Tue 06 Oct 2026 18:05:15 +0000
Manifest next update:     Tue 13 Oct 2026 18:05:15 +0000
Files and hashes:         1: fuDGoot1n3LV3JpYlQOLurlKhhQ.crl (hash: YmJ8XLQCXVjrOB82vrowJADkM/wWfKkUK1Zj12MKWA8=)
                          2: C3A5D7A482EC11EAB62A4C48C4F9AE02.roa (hash: j92prk/uK2Ywge0Jciin2GZ1aT3KklaR49F50NhTmVs=)
                          3: 6E2937E456EB11EA9025542FC4F9AE02.roa (hash: IKP/3LkjmzmqVJFy98fnHZw27+NLLznHY4/+RVjAooM=)
                          4: C434BE5682EC11EAB62A4C48C4F9AE02.roa (hash: B6Kt3Oe4o5Cz2cixhZh1OJ2llNrTHtKjF1mAy/g8Bes=)
                          5: 85521A14F2B911ECB45D2B31C4F9AE02.roa (hash: C7w7LKU1l4FZuPC9RggB2MHIxMPXJkT6gHYW0Bj0W3E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.crl
                          rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuDGoot1n3LV3JpYlQOLurlKhhQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 18:05:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3497 (0xda9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918AF08, serialNumber=7EE0C6A28B759F72D5DC9A5895038BBAB94A8614
        Validity
            Not Before: Oct  6 18:05:15 2026 GMT
            Not After : Oct 13 18:05:15 2026 GMT
        Subject: CN=6ac5385c-9a3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:8c:30:4e:c8:e9:60:18:41:d2:e0:c7:c3:45:
                    21:19:29:d5:4c:56:d5:7c:f1:4b:77:7d:fa:e9:b0:
                    52:e9:14:b8:75:2a:1e:5c:07:94:ed:e7:da:2e:25:
                    54:76:3a:33:3c:64:17:ba:83:7a:69:82:7f:79:66:
                    70:40:2c:6c:d5:33:00:09:bd:47:c0:e0:d5:bd:0e:
                    b3:07:c1:e1:e6:64:d7:af:7d:0d:38:94:33:ef:fb:
                    ee:7e:d2:6d:01:95:5e:03:72:ee:97:83:6e:c0:7a:
                    82:0d:98:d1:ac:9a:f2:80:59:e4:10:ce:0b:c1:01:
                    74:53:e0:09:02:ce:01:e0:e1:f1:b6:b6:ad:38:79:
                    cb:c8:ab:50:51:64:15:39:ba:9d:b1:46:fe:4e:94:
                    8b:cb:37:fc:ba:f3:55:d8:19:d8:e7:60:a7:8d:66:
                    66:a3:3f:e4:b3:9f:d7:50:88:a6:6a:ce:7a:3b:3e:
                    39:06:f8:28:41:59:ea:20:ec:2c:17:23:e6:93:c0:
                    37:8f:f7:50:a6:a5:9a:06:0d:03:14:6e:9e:df:ad:
                    62:ac:1d:92:98:af:00:fc:39:c0:67:36:ae:1f:5e:
                    dd:cb:4e:b6:cf:c2:20:7d:d2:fa:83:6e:e7:e2:59:
                    6a:63:21:fe:b6:04:9c:4a:0d:79:8e:78:44:7b:d9:
                    b3:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:C7:7E:30:57:67:A0:D4:09:CC:AD:6A:63:92:0E:86:76:CF:33:52
            X509v3 Authority Key Identifier:
                keyid:7E:E0:C6:A2:8B:75:9F:72:D5:DC:9A:58:95:03:8B:BA:B9:4A:86:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuDGoot1n3LV3JpYlQOLurlKhhQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:7f:6a:bc:fd:83:8b:0f:a6:a0:a6:f1:89:e4:b1:60:37:a1:
         78:4e:1d:2c:20:0d:a0:41:13:aa:c0:e5:6b:b9:81:c9:09:61:
         07:ca:de:3a:55:63:b3:d0:5c:72:7d:2a:bf:85:19:57:c3:52:
         e1:7b:fe:21:57:32:1f:30:e0:a1:f2:b8:37:c3:29:6b:c1:1d:
         f7:5d:5b:99:e2:ba:1c:ee:20:bd:47:b8:56:c2:9f:d3:72:1e:
         6e:ff:8a:33:82:0e:00:62:f0:b3:c9:ac:fa:30:1a:04:6d:5e:
         2c:d2:4c:e4:b7:12:ac:dd:57:9f:dc:40:65:c2:a3:3e:fa:84:
         0e:8f:d2:2b:32:d6:3f:81:ec:03:14:ad:35:90:b4:d2:94:39:
         4e:9d:a4:10:0a:9d:6f:3e:57:e5:37:59:d9:c2:a8:57:dd:2d:
         62:50:d9:50:d1:3f:00:4b:a8:c6:11:98:2d:6d:63:16:6f:be:
         52:b9:6d:49:d3:8b:be:d9:d5:d2:16:10:67:2d:68:86:0c:f5:
         99:e3:e6:4b:fa:df:a4:bc:dd:c4:c0:8d:a5:72:ff:14:44:70:
         b3:a3:30:4d:ac:05:18:0b:b6:f8:80:05:26:2b:e8:ba:c9:38:
         35:14:08:45:d0:c0:67:bf:00:c9:2b:90:10:5d:25:27:90:b0:
         74:4f:ed:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 15:54:27 2026 by rpki-client