Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/Fm664SGI_4_HXurj7PjTvearJxo.mft
File:                     Fm664SGI_4_HXurj7PjTvearJxo.mft (raw, json)
Hash identifier:          pXjtq2gnhX/DEB20vJ+fjJ9L1XdspuvmDswYClQOJoQ=
Subject key identifier:   F8:04:EB:60:CB:7F:B4:38:23:60:DC:DA:3B:D9:5C:9A:81:99:06:BA
Authority key identifier: 16:6E:BA:E1:21:88:FF:8F:C7:5E:EA:E3:EC:F8:D3:BD:E6:AB:27:1A
Certificate issuer:       /CN=A91C654A/serialNumber=166EBAE12188FF8FC75EEAE3ECF8D3BDE6AB271A
Certificate serial:       0297
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fm664SGI_4_HXurj7PjTvearJxo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/Fm664SGI_4_HXurj7PjTvearJxo.mft
Manifest number:          0AB1
Signing time:             Sun 20 Sep 2026 21:04:35 +0000
Manifest this update:     Sun 20 Sep 2026 21:04:34 +0000
Manifest next update:     Sun 27 Sep 2026 21:04:34 +0000
Files and hashes:         1: Fm664SGI_4_HXurj7PjTvearJxo.crl (hash: nraKvdvf32EVI3b7nh24JFk9Ctgfau7RaocsZElB/uM=)
                          2: D4E747A681F411F195188DD178A30FBC.roa (hash: 6dv4eQ+/pdigXhYVekYEJh3imGafMJAgl8pggYEI6s0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/Fm664SGI_4_HXurj7PjTvearJxo.crl
                          rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/Fm664SGI_4_HXurj7PjTvearJxo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fm664SGI_4_HXurj7PjTvearJxo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 21:04:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 663 (0x297)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C654A, serialNumber=166EBAE12188FF8FC75EEAE3ECF8D3BDE6AB271A
        Validity
            Not Before: Sep 20 21:04:34 2026 GMT
            Not After : Sep 27 21:04:34 2026 GMT
        Subject: CN=6ab04a63-237d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:97:76:13:2d:3e:5c:04:62:06:8a:93:c8:6d:
                    10:d9:84:22:fe:24:b4:6e:17:60:9e:6e:56:02:44:
                    75:bd:58:9c:07:f5:67:bd:eb:08:0e:3d:92:fa:f1:
                    26:b4:c2:68:65:90:41:d4:10:9c:cb:be:59:11:04:
                    0a:8c:c3:b6:62:1b:34:46:f6:ba:9b:16:3c:91:5b:
                    62:fc:cc:ff:4f:f2:f6:20:29:1e:20:88:be:60:23:
                    3f:2a:bc:15:28:72:7f:b8:2e:d2:67:cf:03:19:ff:
                    0c:52:4e:13:f1:31:1f:a5:c4:c8:fe:ee:68:85:8f:
                    2a:95:c2:da:6f:52:28:ab:63:28:90:b2:b4:b0:33:
                    f0:56:64:c2:4c:13:b3:2f:2e:b7:c3:83:ab:e8:ae:
                    5e:cb:d7:c9:31:24:37:6d:cb:73:81:89:44:a7:42:
                    f3:48:f5:29:e9:94:dd:c2:1c:f3:7b:dd:35:6e:eb:
                    f1:9b:f9:97:ab:ba:9f:16:78:7a:33:4c:18:58:f1:
                    a7:b2:ff:ea:3c:c4:3f:1d:be:a3:5e:1e:b6:4e:0d:
                    d6:bc:7d:d6:63:e6:5d:4c:2c:ea:9a:25:77:48:b5:
                    3a:2d:1f:34:a9:f6:51:8c:77:08:d0:58:46:20:16:
                    56:63:a4:09:75:19:29:dc:78:2c:ca:00:ec:0c:22:
                    9c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:04:EB:60:CB:7F:B4:38:23:60:DC:DA:3B:D9:5C:9A:81:99:06:BA
            X509v3 Authority Key Identifier:
                keyid:16:6E:BA:E1:21:88:FF:8F:C7:5E:EA:E3:EC:F8:D3:BD:E6:AB:27:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/Fm664SGI_4_HXurj7PjTvearJxo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fm664SGI_4_HXurj7PjTvearJxo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/Fm664SGI_4_HXurj7PjTvearJxo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:9d:59:04:81:75:c0:9e:e2:59:04:ce:05:93:db:35:f5:49:
         5f:68:fb:ae:d8:6c:86:df:bf:d8:b7:9c:56:15:e4:10:5b:e3:
         ca:b6:94:54:92:e2:d0:49:99:08:5d:79:32:6f:a7:ee:d1:d3:
         e2:6f:80:1c:05:99:a0:f6:51:a0:64:dc:ae:ec:38:c1:60:c0:
         99:1f:4f:64:02:4f:bb:c8:74:1e:37:ac:df:2f:8b:66:d3:0f:
         6d:b2:61:20:eb:18:5f:ca:a4:53:8e:51:26:72:d7:c2:ee:ae:
         1c:c3:b2:01:9a:e0:5f:51:1c:fb:0a:f6:11:f4:ed:55:27:77:
         6b:95:56:aa:9c:be:35:5d:66:27:51:20:a5:f7:7b:13:1d:ab:
         61:42:ac:dc:16:bf:26:1c:f9:b7:f3:56:4e:7e:c6:3d:c1:7e:
         da:85:9b:d6:3a:c8:f0:62:09:7f:07:45:6f:87:d1:e5:f9:7a:
         7c:de:8f:95:37:73:ee:40:7f:a1:24:13:04:44:7e:57:59:34:
         89:26:90:f3:8c:51:83:0e:56:49:a3:6f:08:45:14:59:c4:56:
         a2:15:5a:df:e1:05:c0:71:31:7a:62:c4:66:97:25:42:33:46:
         8a:0d:43:43:ce:65:64:56:e0:a0:27:41:e1:3e:1d:67:b7:73:
         dd:bf:9a:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 04:26:47 2026 by rpki-client