Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AC232/41730086598D11EBAECC8321C4F9AE02/fToi3tGr8M05CSgLibI3bFRfbwc.mft
File:                     fToi3tGr8M05CSgLibI3bFRfbwc.mft (raw, json)
Hash identifier:          E6oepEmItKBNeQws64wamyKE8hwi5t4JMMgOElFTtD0=
Subject key identifier:   A9:07:75:2C:BC:BE:E8:31:F3:38:E5:C9:47:C9:DE:1C:FE:25:76:26
Authority key identifier: 7D:3A:22:DE:D1:AB:F0:CD:39:09:28:0B:89:B2:37:6C:54:5F:6F:07
Certificate issuer:       /CN=A91AC232/serialNumber=7D3A22DED1ABF0CD3909280B89B2376C545F6F07
Certificate serial:       07CF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fToi3tGr8M05CSgLibI3bFRfbwc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AC232/41730086598D11EBAECC8321C4F9AE02/fToi3tGr8M05CSgLibI3bFRfbwc.mft
Manifest number:          07C5
Signing time:             Sun 20 Sep 2026 21:19:03 +0000
Manifest this update:     Sun 20 Sep 2026 21:19:02 +0000
Manifest next update:     Sun 27 Sep 2026 21:19:02 +0000
Files and hashes:         1: fToi3tGr8M05CSgLibI3bFRfbwc.crl (hash: Gwd1Y0eEUpcUXEIpf2kjoD4AtfbfJNcjH1uB9KvBYEE=)
                          2: D93244BAF2EF11ED91F08A4FC4F9AE02.roa (hash: Hti98hcC+ag2IJ3RoxadOaVc5hLgBIiE7Elxt08Tr5c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AC232/41730086598D11EBAECC8321C4F9AE02/fToi3tGr8M05CSgLibI3bFRfbwc.crl
                          rsync://rpki.apnic.net/member_repository/A91AC232/41730086598D11EBAECC8321C4F9AE02/fToi3tGr8M05CSgLibI3bFRfbwc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fToi3tGr8M05CSgLibI3bFRfbwc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1999 (0x7cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AC232, serialNumber=7D3A22DED1ABF0CD3909280B89B2376C545F6F07
        Validity
            Not Before: Sep 20 21:19:02 2026 GMT
            Not After : Sep 27 21:19:02 2026 GMT
        Subject: CN=6ab04dc7-b47d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:01:5d:34:47:ea:0d:30:41:b3:6e:1b:fc:55:
                    d6:3a:ba:05:88:31:97:b0:f8:58:66:f8:43:44:27:
                    8f:66:d2:57:63:bc:f3:00:27:d0:05:6a:68:a1:4f:
                    f3:b7:8e:52:df:e8:3f:dc:98:56:6c:7e:d3:25:f9:
                    33:c0:d8:f2:6b:66:8e:25:2c:90:a3:0d:9e:c1:a2:
                    e7:3c:ae:c0:8e:8c:53:15:9b:bb:5c:51:d1:3d:38:
                    46:8c:bc:2a:65:be:00:9c:37:60:c4:d4:b5:f6:5d:
                    2b:be:84:36:d6:88:e9:ab:b9:50:83:f6:47:44:60:
                    cc:81:85:01:83:40:3c:c3:3d:43:19:80:23:9a:a6:
                    b5:9f:a4:91:18:ae:59:19:68:f5:c1:76:9f:de:11:
                    20:f6:93:70:c4:36:24:88:c0:3b:f7:77:73:59:40:
                    d4:ae:34:44:fb:ce:85:ba:03:7b:68:6a:01:39:8e:
                    8d:62:82:bc:d7:67:5d:df:46:51:f9:52:4d:f2:93:
                    a6:70:e9:b8:da:6e:77:a4:f8:e8:d0:e0:00:98:ad:
                    5f:dd:4b:15:35:f6:14:11:e9:47:13:3e:af:42:dd:
                    d3:12:c9:76:d4:d3:a8:31:2b:78:39:41:aa:2a:70:
                    23:83:31:2d:22:56:e6:97:2a:91:d3:96:13:9a:aa:
                    ac:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:07:75:2C:BC:BE:E8:31:F3:38:E5:C9:47:C9:DE:1C:FE:25:76:26
            X509v3 Authority Key Identifier:
                keyid:7D:3A:22:DE:D1:AB:F0:CD:39:09:28:0B:89:B2:37:6C:54:5F:6F:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AC232/41730086598D11EBAECC8321C4F9AE02/fToi3tGr8M05CSgLibI3bFRfbwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fToi3tGr8M05CSgLibI3bFRfbwc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC232/41730086598D11EBAECC8321C4F9AE02/fToi3tGr8M05CSgLibI3bFRfbwc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:ee:7a:6f:3c:86:7b:a2:93:69:af:7f:e2:3d:f9:31:bd:35:
         61:45:7f:fb:17:36:52:50:ff:5c:c2:20:fe:c8:4c:b2:a3:06:
         98:6a:c0:df:47:c6:b6:8a:73:92:a6:2b:9a:ed:bd:ed:3c:8b:
         ad:ac:9f:c2:48:69:e6:2e:a1:07:2e:17:a1:1b:2e:34:90:7b:
         12:a0:84:cd:3b:81:c3:16:c8:27:af:70:d6:09:54:81:0b:cc:
         10:b0:0a:8a:e0:5d:fe:19:74:bb:e6:d7:0d:79:8c:a5:b2:7e:
         6c:f4:cc:89:1a:9b:2e:f8:19:3b:0a:a3:87:fc:88:36:ea:70:
         bf:93:56:cd:a9:a9:e2:63:52:2f:f4:5d:f5:56:d1:8e:46:84:
         ae:e0:d5:27:7c:41:30:73:fd:26:ea:3d:06:f9:65:ef:82:9e:
         18:8a:98:f0:ca:2f:62:07:53:9d:16:ee:0a:5d:a1:96:c5:59:
         08:df:c1:8e:8a:e6:28:8a:6e:d6:a4:96:7c:3e:c8:8e:e6:5f:
         83:62:85:ef:6e:5f:b5:78:b0:07:38:de:e6:e7:20:42:1c:43:
         51:f6:1a:ee:05:54:54:66:28:53:64:aa:d0:7a:23:1d:33:16:
         e8:13:1e:24:b0:3c:08:8e:de:9b:b9:02:e2:8a:ae:e8:09:59:
         ef:c8:99:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 07:08:12 2026 by rpki-client