Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/fF4N3E9YaXR7KjWMm3wPMejY3Ys.mft
File:                     fF4N3E9YaXR7KjWMm3wPMejY3Ys.mft (raw, json)
Hash identifier:          B48xtlf+zkzcPtlH4/gTGT2KgXqD5REJeUFqgbhuHUM=
Subject key identifier:   CE:10:CA:92:C9:2F:5C:4B:76:D1:0A:70:4D:B7:B1:85:76:9A:54:3E
Authority key identifier: 7C:5E:0D:DC:4F:58:69:74:7B:2A:35:8C:9B:7C:0F:31:E8:D8:DD:8B
Certificate issuer:       /CN=A91CFCF8/serialNumber=7C5E0DDC4F5869747B2A358C9B7C0F31E8D8DD8B
Certificate serial:       04ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fF4N3E9YaXR7KjWMm3wPMejY3Ys.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/fF4N3E9YaXR7KjWMm3wPMejY3Ys.mft
Manifest number:          04D2
Signing time:             Sun 20 Sep 2026 23:40:36 +0000
Manifest this update:     Sun 20 Sep 2026 23:40:35 +0000
Manifest next update:     Sun 27 Sep 2026 23:40:35 +0000
Files and hashes:         1: fF4N3E9YaXR7KjWMm3wPMejY3Ys.crl (hash: XXH32OKDCkbkQDaYr/yZHvOyJoFPibYhxI/6XChIeUI=)
                          2: 13A285FAB19A11EF8A0E4356C4F9AE02.roa (hash: /1zPPqOprES64oKSnzNIO7onohzBHekwOoaFlHoU8GU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/fF4N3E9YaXR7KjWMm3wPMejY3Ys.crl
                          rsync://rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/fF4N3E9YaXR7KjWMm3wPMejY3Ys.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fF4N3E9YaXR7KjWMm3wPMejY3Ys.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 23:40:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1261 (0x4ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CFCF8, serialNumber=7C5E0DDC4F5869747B2A358C9B7C0F31E8D8DD8B
        Validity
            Not Before: Sep 20 23:40:35 2026 GMT
            Not After : Sep 27 23:40:35 2026 GMT
        Subject: CN=6ab06ef4-8bee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:3d:24:ea:08:20:4e:26:a6:01:be:3e:68:67:
                    86:bd:78:34:ab:17:db:69:6e:cc:0f:6a:6f:e0:a4:
                    aa:5e:71:d9:6c:b5:84:04:a5:04:0f:04:be:33:c6:
                    fa:93:c0:4a:79:65:c2:d5:27:60:04:88:83:7f:ec:
                    7e:53:18:b1:0f:11:ce:5d:59:d2:2f:de:fc:0d:18:
                    f3:a0:71:c6:81:dc:0d:7c:45:b3:20:93:4f:ea:e1:
                    e6:84:55:64:dd:94:f7:b9:04:f4:cb:54:83:04:2f:
                    dd:ee:af:e7:71:6c:05:6e:d9:54:15:56:ec:20:f7:
                    21:5a:4b:a7:2e:5d:c2:a4:39:8e:62:99:ff:6d:fe:
                    61:d4:19:db:87:c9:9a:d1:54:83:e1:b9:42:cc:ff:
                    70:8e:19:6f:ab:4c:f7:17:55:81:85:e6:eb:3d:49:
                    55:d9:f7:9e:f8:0e:76:dc:9d:f9:50:fe:0c:bb:52:
                    6c:7f:a1:94:32:26:a3:c0:36:41:8e:fd:cd:94:36:
                    aa:60:26:82:09:fd:17:8a:8a:18:88:a0:19:7c:44:
                    9d:ab:8e:3a:78:2b:66:4c:50:4b:1a:ec:e4:84:dd:
                    43:2f:9d:5a:ba:8d:3a:be:06:85:b7:86:43:52:6d:
                    2a:ae:e8:9f:11:0f:aa:dc:5a:b8:37:85:c3:5c:be:
                    04:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:10:CA:92:C9:2F:5C:4B:76:D1:0A:70:4D:B7:B1:85:76:9A:54:3E
            X509v3 Authority Key Identifier:
                keyid:7C:5E:0D:DC:4F:58:69:74:7B:2A:35:8C:9B:7C:0F:31:E8:D8:DD:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/fF4N3E9YaXR7KjWMm3wPMejY3Ys.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fF4N3E9YaXR7KjWMm3wPMejY3Ys.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/fF4N3E9YaXR7KjWMm3wPMejY3Ys.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:96:9e:b5:86:a8:fe:25:48:cb:83:53:0c:d0:bb:b5:51:c5:
         fd:95:70:d9:7b:71:5e:00:f8:97:5f:85:b6:5c:69:fa:cd:03:
         45:65:5f:ef:34:b9:f4:76:0c:b6:91:5d:01:90:d6:e9:ea:f4:
         a9:a3:6f:78:07:53:e9:09:f9:ce:c9:54:f0:d3:37:97:2e:59:
         11:3d:43:02:08:d8:8d:bf:a4:fa:ae:c9:ce:9b:e4:f0:4f:20:
         1c:79:9e:e9:af:74:b8:49:e3:31:67:ea:db:b9:56:b2:10:5b:
         bb:93:99:fb:65:9e:2e:49:e9:b7:ea:d4:08:9f:2f:f7:b7:42:
         c5:a6:b7:19:fd:32:68:08:e2:cf:78:dc:5e:37:57:45:fb:31:
         ad:9b:30:fb:a9:ae:5a:a4:d7:b3:16:a5:49:d8:49:a1:55:3f:
         e3:50:a0:d5:5d:84:28:c2:82:75:50:ab:19:e5:f4:2a:e2:d4:
         52:58:6e:18:fc:b5:71:ea:54:b3:a8:61:f7:09:5c:00:5f:0b:
         96:f6:c4:22:94:f8:5a:1f:23:eb:6b:2e:15:61:cd:69:f8:95:
         c0:6b:4e:1a:13:cb:5a:b7:7b:b0:23:d3:7f:f8:02:f2:98:d6:
         04:06:f4:14:15:55:00:40:9e:86:53:7d:27:31:0f:a8:27:f9:
         fb:95:5f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:23:34 2026 by rpki-client