Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918E951/51BD7DDA623A11F0A7E2760BC4F9AE02/FbuDXdtfKLfj9RKIflfp_jFzh0Q.mft
File:                     FbuDXdtfKLfj9RKIflfp_jFzh0Q.mft (raw, json)
Hash identifier:          Uc1NKh5timjUkh619pVqqIueaiyt8jPZDKIAxFzRWII=
Subject key identifier:   E5:19:BD:4F:E4:20:67:BB:C9:DE:2E:82:BC:6A:7F:82:A9:C7:F9:93
Authority key identifier: 15:BB:83:5D:DB:5F:28:B7:E3:F5:12:88:7E:57:E9:FE:31:73:87:44
Certificate issuer:       /CN=A918E951/serialNumber=15BB835DDB5F28B7E3F512887E57E9FE31738744
Certificate serial:       E2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FbuDXdtfKLfj9RKIflfp_jFzh0Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E951/51BD7DDA623A11F0A7E2760BC4F9AE02/FbuDXdtfKLfj9RKIflfp_jFzh0Q.mft
Manifest number:          DF
Signing time:             Sat 19 Sep 2026 06:41:17 +0000
Manifest this update:     Sat 19 Sep 2026 06:41:16 +0000
Manifest next update:     Sat 26 Sep 2026 06:41:16 +0000
Files and hashes:         1: FbuDXdtfKLfj9RKIflfp_jFzh0Q.crl (hash: +Y+JeUPIPXNEj6FPednYeOyQxJ5KqwIzeuURIf3sHyU=)
                          2: A1E831AA623B11F0BEB49510C4F9AE02.roa (hash: Fv0Xb1YYHPsAbUT9W+oUlhh14/EKgGomSuYZO2ZemCg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E951/51BD7DDA623A11F0A7E2760BC4F9AE02/FbuDXdtfKLfj9RKIflfp_jFzh0Q.crl
                          rsync://rpki.apnic.net/member_repository/A918E951/51BD7DDA623A11F0A7E2760BC4F9AE02/FbuDXdtfKLfj9RKIflfp_jFzh0Q.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FbuDXdtfKLfj9RKIflfp_jFzh0Q.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 226 (0xe2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E951, serialNumber=15BB835DDB5F28B7E3F512887E57E9FE31738744
        Validity
            Not Before: Sep 19 06:41:16 2026 GMT
            Not After : Sep 26 06:41:16 2026 GMT
        Subject: CN=6aae2e8d-0308
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a9:ab:21:a5:eb:ff:c6:3c:1e:60:cb:a9:3e:
                    93:bf:46:10:44:65:52:38:b4:17:cd:5f:7b:00:aa:
                    a1:be:c0:27:a8:a9:00:f8:d4:39:19:44:e2:99:62:
                    cb:77:2c:cc:9d:1b:be:38:9c:c6:68:9f:dc:23:6b:
                    64:d9:8c:4e:c9:7b:d2:57:34:d4:61:ef:98:dd:ed:
                    6c:da:b4:36:9d:dc:d3:f1:27:c8:27:25:0c:bd:08:
                    af:a4:cf:09:07:00:6e:68:0b:05:49:19:ef:03:a6:
                    b5:3b:74:47:05:05:09:45:04:71:8a:69:70:a0:71:
                    61:44:7a:3a:90:53:ee:59:1b:2d:72:91:21:2c:8f:
                    e1:a2:6b:6f:dd:77:40:ee:37:2d:5e:fb:1a:f3:6e:
                    40:d5:fd:c6:a4:25:b9:f1:cb:92:3b:39:f2:13:e7:
                    71:3a:10:60:75:9a:56:b1:a1:90:d3:dc:65:85:47:
                    91:2e:06:cf:47:28:57:d0:65:dd:ef:35:d9:bc:0e:
                    78:60:09:0e:c5:df:cc:c2:7d:b0:4a:a2:c1:7e:a3:
                    37:48:cc:b4:c8:43:1f:ef:f6:19:f3:58:78:5c:3c:
                    05:fb:ec:04:c8:6c:95:d2:4e:bb:68:78:37:f0:49:
                    df:49:fd:37:d1:cd:6e:85:1d:da:01:05:7f:9a:75:
                    0c:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:19:BD:4F:E4:20:67:BB:C9:DE:2E:82:BC:6A:7F:82:A9:C7:F9:93
            X509v3 Authority Key Identifier:
                keyid:15:BB:83:5D:DB:5F:28:B7:E3:F5:12:88:7E:57:E9:FE:31:73:87:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E951/51BD7DDA623A11F0A7E2760BC4F9AE02/FbuDXdtfKLfj9RKIflfp_jFzh0Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FbuDXdtfKLfj9RKIflfp_jFzh0Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E951/51BD7DDA623A11F0A7E2760BC4F9AE02/FbuDXdtfKLfj9RKIflfp_jFzh0Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:e1:e0:21:65:a8:df:b9:fe:79:f4:35:4e:25:59:45:84:1f:
         8e:a1:7a:95:a4:37:b5:b6:74:e5:1a:d7:a6:13:3d:2f:75:4a:
         a5:9f:4a:01:c9:29:90:5d:43:4f:52:88:cb:1b:1d:c7:89:a5:
         59:8f:fd:99:dd:df:58:77:78:44:4e:90:4b:55:c7:3c:fd:ab:
         40:f3:98:6c:b6:35:a9:42:a7:a2:30:80:a0:b8:c1:dc:f0:0d:
         0c:11:fc:48:63:62:37:d3:20:c9:35:8e:33:31:4a:17:c5:af:
         12:45:86:4c:18:68:f6:3b:23:a1:bb:38:1d:3e:2d:05:b1:19:
         20:3b:b7:aa:54:dc:c4:03:34:3a:b5:1f:ea:6d:9a:d1:e3:a5:
         b0:13:2e:55:d8:22:96:c0:b9:45:5b:b1:8a:6e:b4:08:b3:c8:
         97:2c:96:13:d0:04:32:e3:0a:27:f9:61:36:2e:6a:c6:f5:8f:
         f4:82:61:1a:af:36:98:a3:0b:c4:41:4d:5d:a7:34:e3:e6:fc:
         34:3d:58:f4:5a:d1:9c:a9:bc:61:fa:e3:e8:03:48:7b:2a:3d:
         c2:57:bf:71:39:43:69:0e:fe:75:9e:8b:1a:3c:d5:9a:63:88:
         59:aa:6d:79:d0:0d:f9:93:81:ce:82:a9:97:39:6b:b7:58:e8:
         27:9d:74:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 06:23:59 2026 by rpki-client