Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A5EBA/72E54CFE2C5311EF91BF7C30C4F9AE02/FW1KnG8V6ytLPzZ9afqiUQEoB4g.mft
File:                     FW1KnG8V6ytLPzZ9afqiUQEoB4g.mft (raw, json)
Hash identifier:          sTT6EXAG/Mr6xDtM0MfRrG9/x73+zT0DU5Of9Grj80E=
Subject key identifier:   AE:BA:CA:28:E4:02:F0:CA:63:76:AD:C8:E7:6C:BA:1A:6E:F3:18:09
Authority key identifier: 15:6D:4A:9C:6F:15:EB:2B:4B:3F:36:7D:69:FA:A2:51:01:28:07:88
Certificate issuer:       /CN=A91A5EBA/serialNumber=156D4A9C6F15EB2B4B3F367D69FAA25101280788
Certificate serial:       01BD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FW1KnG8V6ytLPzZ9afqiUQEoB4g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5EBA/72E54CFE2C5311EF91BF7C30C4F9AE02/FW1KnG8V6ytLPzZ9afqiUQEoB4g.mft
Manifest number:          01B4
Signing time:             Tue 13 Oct 2026 04:32:25 +0000
Manifest this update:     Tue 13 Oct 2026 04:32:25 +0000
Manifest next update:     Tue 20 Oct 2026 04:32:25 +0000
Files and hashes:         1: FW1KnG8V6ytLPzZ9afqiUQEoB4g.crl (hash: 5DRPDGa78K2inJ0u3NcDKN3INAn+XjXpx9CpcxIsQ4Q=)
                          2: 80F32E7C2C5511EF83ECC535C4F9AE02.roa (hash: jwNqpqTZXno1DyXY2sIyAh2YiWEDOdSFaYY50G2wOTA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5EBA/72E54CFE2C5311EF91BF7C30C4F9AE02/FW1KnG8V6ytLPzZ9afqiUQEoB4g.crl
                          rsync://rpki.apnic.net/member_repository/A91A5EBA/72E54CFE2C5311EF91BF7C30C4F9AE02/FW1KnG8V6ytLPzZ9afqiUQEoB4g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FW1KnG8V6ytLPzZ9afqiUQEoB4g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 Oct 2026 04:32:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 445 (0x1bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5EBA, serialNumber=156D4A9C6F15EB2B4B3F367D69FAA25101280788
        Validity
            Not Before: Oct 13 04:32:25 2026 GMT
            Not After : Oct 20 04:32:25 2026 GMT
        Subject: CN=6acdb459-1775
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:11:57:4c:85:28:f5:99:f3:d5:71:e4:67:0f:
                    79:77:f1:01:f8:d5:e5:36:82:9e:15:d8:e9:56:00:
                    1a:89:30:23:99:f0:9d:87:00:fe:ec:8d:ab:9c:3d:
                    7a:8f:bd:ce:63:4c:ad:cb:d0:88:e5:b9:7b:b1:46:
                    0c:45:c5:2b:97:88:bd:f6:ca:c9:41:21:a1:cc:99:
                    02:33:fd:d5:9c:e0:69:a8:99:5b:47:51:ca:ad:ca:
                    68:4d:3c:50:51:cf:7c:1e:2d:e0:80:02:ed:b5:6a:
                    14:b3:ab:e6:89:9c:a7:ec:3e:a3:53:e2:c1:ec:5d:
                    d2:4d:fa:eb:36:ff:38:d4:ea:4d:9d:de:9e:de:56:
                    18:60:97:39:8e:3a:05:5f:43:25:45:c5:32:67:1e:
                    c8:e6:14:59:9d:ad:7a:7c:a6:4a:e5:3b:10:71:bb:
                    43:87:1f:b6:0b:69:c4:72:fe:63:a5:5b:bc:c4:89:
                    52:26:b1:b0:f9:4b:82:00:5c:4f:24:ae:5e:26:cf:
                    65:fa:17:5b:66:ce:5e:e2:49:40:71:d1:c7:ed:ad:
                    87:50:d2:4b:6d:a4:c1:e6:80:60:dd:0f:6d:29:a3:
                    d1:e9:ec:2c:fa:96:87:b6:9c:4e:b3:22:c7:24:c8:
                    a2:8f:42:11:c3:1b:80:c5:f4:35:58:51:be:e4:93:
                    69:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:BA:CA:28:E4:02:F0:CA:63:76:AD:C8:E7:6C:BA:1A:6E:F3:18:09
            X509v3 Authority Key Identifier:
                keyid:15:6D:4A:9C:6F:15:EB:2B:4B:3F:36:7D:69:FA:A2:51:01:28:07:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5EBA/72E54CFE2C5311EF91BF7C30C4F9AE02/FW1KnG8V6ytLPzZ9afqiUQEoB4g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FW1KnG8V6ytLPzZ9afqiUQEoB4g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5EBA/72E54CFE2C5311EF91BF7C30C4F9AE02/FW1KnG8V6ytLPzZ9afqiUQEoB4g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:d0:76:ce:bc:95:88:56:5b:e9:e2:73:d2:63:2f:a7:4b:5f:
         6a:cd:16:47:9a:81:24:71:68:db:1c:86:02:ff:ef:aa:e4:c6:
         a1:96:0c:d3:26:28:17:6c:01:62:92:18:b2:7b:1b:4e:0e:6c:
         92:77:b8:ae:32:6d:15:1e:60:23:a4:fa:94:55:ec:2c:c7:2a:
         86:3b:00:9f:09:b6:cc:67:69:33:d0:4e:e9:1f:e6:be:0f:8c:
         22:ab:11:d4:ff:27:a1:3b:43:79:68:32:13:b9:cb:b7:52:3b:
         ff:a5:89:c4:f4:40:76:51:2b:89:e0:ba:41:b2:4b:f7:3d:26:
         3d:02:d5:18:6e:29:4e:59:25:8d:94:ce:36:a3:69:f4:8f:5f:
         80:09:22:31:e5:2d:92:3d:cb:2d:36:41:27:49:41:7c:f0:8c:
         c8:b8:d2:66:c9:9b:eb:7c:d8:ed:f6:04:67:99:17:cc:85:3e:
         8e:59:91:62:35:63:52:99:e2:0b:4e:74:46:5b:52:14:40:21:
         39:fc:ae:ef:7c:94:1b:e3:0d:c8:c2:63:5c:f0:b0:91:f3:a6:
         be:c2:07:02:04:99:f4:2f:35:fd:89:a5:cd:fa:79:c2:e0:2c:
         2f:42:15:8c:08:13:6a:ae:6b:e8:b0:c5:f7:a4:f3:08:1e:39:
         3a:ef:f0:6e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAb0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTVFQkExMTAvBgNVBAUTKDE1NkQ0QTlDNkYxNUVCMkI0QjNGMzY3RDY5RkFBMjUx
MDEyODA3ODgwHhcNMjYxMDEzMDQzMjI1WhcNMjYxMDIwMDQzMjI1WjAYMRYwFAYD
VQQDEw02YWNkYjQ1OS0xNzc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuBFXTIUo9Znz1XHkZw95d/EB+NXlNoKeFdjpVgAaiTAjmfCdhwD+7I2rnD16
j73OY0yty9CI5bl7sUYMRcUrl4i99srJQSGhzJkCM/3VnOBpqJlbR1HKrcpoTTxQ
Uc98Hi3ggALttWoUs6vmiZyn7D6jU+LB7F3STfrrNv841OpNnd6e3lYYYJc5jjoF
X0MlRcUyZx7I5hRZna16fKZK5TsQcbtDhx+2C2nEcv5jpVu8xIlSJrGw+UuCAFxP
JK5eJs9l+hdbZs5e4klAcdHH7a2HUNJLbaTB5oBg3Q9tKaPR6ews+paHtpxOsyLH
JMiij0IRwxuAxfQ1WFG+5JNpBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK66yijk
AvDKY3atyOdsuhpu8xgJMB8GA1UdIwQYMBaAFBVtSpxvFesrSz82fWn6olEBKAeI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUVCQS83MkU1NENGRTJD
NTMxMUVGOTFCRjdDMzBDNEY5QUUwMi9GVzFLbkc4VjZ5dExQelo5YWZxaVVRRW9C
NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZXMUtuRzhWNnl0TFB6WjlhZnFpVVFFb0I0Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NUVCQS83MkU1NENGRTJDNTMxMUVGOTFCRjdDMzBDNEY5QUUwMi9GVzFLbkc4VjZ5
dExQelo5YWZxaVVRRW9CNGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEArdB2zryViFZb6eJz0mMvp0tfas0WR5qBJHFo2xyGAv/vquTGoZYM0yYoF2wB
YpIYsnsbTg5skne4rjJtFR5gI6T6lFXsLMcqhjsAnwm2zGdpM9BO6R/mvg+MIqsR
1P8noTtDeWgyE7nLt1I7/6WJxPRAdlErieC6QbJL9z0mPQLVGG4pTlkljZTONqNp
9I9fgAkiMeUtkj3LLTZBJ0lBfPCMyLjSZsmb63zY7fYEZ5kXzIU+jlmRYjVjUpni
C050RltSFEAhOfyu73yUG+MNyMJjXPCwkfOmvsIHAgSZ9C81/Ymlzfp5wuAsL0IV
jAgTaq5r6LDF96TzCB45Ou/wbg==
-----END CERTIFICATE-----
Generated at Wed Oct 14 21:42:07 2026 by rpki-client