Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CE4A1/85FA0CE880B711EC9FEB2C67C4F9AE02/FUc--zxa6KDEdke34P3liGtrH6M.mft
File:                     FUc--zxa6KDEdke34P3liGtrH6M.mft (raw, json)
Hash identifier:          2c2opeQgKmqTF6IXIK+JRgCscNLhxBTl5Z1f3zNerSU=
Subject key identifier:   04:14:11:CB:A8:F8:29:EB:73:55:9D:30:83:7E:33:2B:4A:CF:05:97
Authority key identifier: 15:47:3E:FB:3C:5A:E8:A0:C4:76:47:B7:E0:FD:E5:88:6B:6B:1F:A3
Certificate issuer:       /CN=A91CE4A1/serialNumber=15473EFB3C5AE8A0C47647B7E0FDE5886B6B1FA3
Certificate serial:       04FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FUc--zxa6KDEdke34P3liGtrH6M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE4A1/85FA0CE880B711EC9FEB2C67C4F9AE02/FUc--zxa6KDEdke34P3liGtrH6M.mft
Manifest number:          0503
Signing time:             Sun 20 Sep 2026 23:34:59 +0000
Manifest this update:     Sun 20 Sep 2026 23:34:59 +0000
Manifest next update:     Sun 27 Sep 2026 23:34:59 +0000
Files and hashes:         1: FUc--zxa6KDEdke34P3liGtrH6M.crl (hash: t7a9XQU5dXBG1WoIfyZFlluLbrdV/cuDNiWcpO6IeMo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE4A1/85FA0CE880B711EC9FEB2C67C4F9AE02/FUc--zxa6KDEdke34P3liGtrH6M.crl
                          rsync://rpki.apnic.net/member_repository/A91CE4A1/85FA0CE880B711EC9FEB2C67C4F9AE02/FUc--zxa6KDEdke34P3liGtrH6M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FUc--zxa6KDEdke34P3liGtrH6M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 23:34:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1279 (0x4ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE4A1, serialNumber=15473EFB3C5AE8A0C47647B7E0FDE5886B6B1FA3
        Validity
            Not Before: Sep 20 23:34:59 2026 GMT
            Not After : Sep 27 23:34:59 2026 GMT
        Subject: CN=6ab06da3-0d2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d7:5a:bb:23:12:75:3c:1b:56:1a:a1:a1:9e:
                    12:c6:29:db:0f:6f:da:83:e5:be:9e:8c:f9:a0:f0:
                    81:13:eb:57:b5:e2:b8:09:f3:0f:5d:e7:9a:f0:b8:
                    8c:8c:af:95:7d:18:af:a4:ec:f9:a2:af:49:cb:ae:
                    f0:8b:19:fd:c9:ce:d0:09:78:00:ee:bf:f7:24:43:
                    94:3c:49:71:92:97:95:c2:d6:dd:b4:60:4b:a5:b7:
                    63:4b:93:61:4a:13:c6:94:13:b9:84:df:d9:0e:8c:
                    e9:c4:63:2f:80:52:fb:d2:ec:ae:ab:19:01:f8:6e:
                    8f:64:b6:2b:e4:2d:45:39:20:44:75:90:a6:6c:de:
                    54:1c:c9:7c:80:b9:ea:ab:aa:01:20:b3:53:bf:37:
                    3a:29:19:b8:b2:ba:c2:f4:d4:72:28:f6:20:0a:e3:
                    c0:21:6a:96:b2:e1:ed:3d:59:71:92:8a:cd:bb:5a:
                    a5:21:1a:ff:9c:35:0d:27:d1:23:a3:4e:b8:94:6a:
                    05:64:bc:cf:60:62:f6:e6:39:4e:61:49:89:c6:26:
                    ca:d3:5a:ba:1e:5e:e3:40:0e:1c:b3:bc:c3:e2:d0:
                    68:d9:01:cf:06:c5:69:d4:62:11:0b:30:c2:d0:d1:
                    b0:51:33:4c:da:ee:5f:89:7f:a3:ca:12:56:b9:5b:
                    aa:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:14:11:CB:A8:F8:29:EB:73:55:9D:30:83:7E:33:2B:4A:CF:05:97
            X509v3 Authority Key Identifier:
                keyid:15:47:3E:FB:3C:5A:E8:A0:C4:76:47:B7:E0:FD:E5:88:6B:6B:1F:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE4A1/85FA0CE880B711EC9FEB2C67C4F9AE02/FUc--zxa6KDEdke34P3liGtrH6M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FUc--zxa6KDEdke34P3liGtrH6M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE4A1/85FA0CE880B711EC9FEB2C67C4F9AE02/FUc--zxa6KDEdke34P3liGtrH6M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:32:1a:6b:3e:6c:69:40:5f:1a:35:03:bb:64:ad:fc:51:b3:
         a3:d4:2e:68:b1:7e:36:c5:27:50:64:0c:ae:e1:8c:78:b1:27:
         9b:16:8e:5c:d1:58:24:4a:78:9d:78:01:20:93:09:bc:58:c3:
         2d:f0:80:d4:5d:f4:3d:c8:19:ec:30:68:04:97:fd:a8:a4:64:
         f1:5a:50:df:c9:de:02:53:70:c5:3b:d9:5d:91:1c:36:23:41:
         e4:2e:95:ff:b2:cd:3a:f8:71:d9:0f:c7:73:b6:e8:f6:20:50:
         56:91:9e:94:f0:3a:99:c9:31:df:3c:e6:61:c6:02:af:e0:1b:
         2d:02:86:d3:37:f8:91:4b:bb:f8:11:bb:6b:1d:77:1e:b1:70:
         4c:89:ef:fc:3c:ce:15:c1:05:be:41:00:2e:d0:93:d7:1e:9c:
         75:fb:72:ec:44:1d:95:f1:d2:58:28:e2:31:53:a5:c2:ba:e3:
         1b:b5:bd:2b:16:36:3d:0c:77:a6:93:5e:b7:fe:d5:76:c0:e6:
         85:c2:8c:f7:7c:c5:2c:65:05:83:3a:c9:71:8e:8d:33:4d:09:
         b5:78:ac:32:2d:f7:a5:5f:c2:ed:5a:fb:16:c4:97:47:f4:a6:
         7b:f1:50:d1:76:4c:bc:26:95:07:83:cd:09:ac:79:7c:ed:8f:
         5e:cc:97:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:54:09 2026 by rpki-client