Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D34D0/F5403EF245B711EFA3D9A049C4F9AE02/Fq85Z82e72n-cs9m28bg-wDKONQ.mft
File:                     Fq85Z82e72n-cs9m28bg-wDKONQ.mft (raw, json)
Hash identifier:          ynLLVbU57fUMRqcXk01SnWBRz5YBh5zHif7gCOyoY6Y=
Subject key identifier:   F9:58:88:E6:66:F5:13:F6:CA:54:81:08:8C:8C:E2:9E:94:92:C3:2F
Authority key identifier: 16:AF:39:67:CD:9E:EF:69:FE:72:CF:66:DB:C6:E0:FB:00:CA:38:D4
Certificate issuer:       /CN=A91D34D0/serialNumber=16AF3967CD9EEF69FE72CF66DBC6E0FB00CA38D4
Certificate serial:       0198
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fq85Z82e72n-cs9m28bg-wDKONQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D34D0/F5403EF245B711EFA3D9A049C4F9AE02/Fq85Z82e72n-cs9m28bg-wDKONQ.mft
Manifest number:          0198
Signing time:             Mon 21 Sep 2026 04:19:56 +0000
Manifest this update:     Mon 21 Sep 2026 04:19:56 +0000
Manifest next update:     Mon 28 Sep 2026 04:19:56 +0000
Files and hashes:         1: Fq85Z82e72n-cs9m28bg-wDKONQ.crl (hash: gNxiluvWThTKeF8edM5cPC+LHmDmsofughXDHnx2xA8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D34D0/F5403EF245B711EFA3D9A049C4F9AE02/Fq85Z82e72n-cs9m28bg-wDKONQ.crl
                          rsync://rpki.apnic.net/member_repository/A91D34D0/F5403EF245B711EFA3D9A049C4F9AE02/Fq85Z82e72n-cs9m28bg-wDKONQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fq85Z82e72n-cs9m28bg-wDKONQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 04:19:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 408 (0x198)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D34D0, serialNumber=16AF3967CD9EEF69FE72CF66DBC6E0FB00CA38D4
        Validity
            Not Before: Sep 21 04:19:56 2026 GMT
            Not After : Sep 28 04:19:56 2026 GMT
        Subject: CN=6ab0b06c-f27d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:56:db:3f:f1:4c:c1:d1:90:07:8b:d4:95:0b:
                    a7:a3:b7:01:37:95:50:33:87:b5:3c:9c:62:26:de:
                    39:1e:ba:a9:90:54:75:a9:3b:53:ff:86:6c:2a:86:
                    c2:00:2e:af:d1:00:1c:e6:f2:0b:1d:29:95:b3:a2:
                    ef:9d:80:59:08:24:6c:40:ba:a3:01:2d:ff:e9:39:
                    98:cf:e6:e2:55:59:64:ce:86:59:51:a9:fb:53:09:
                    52:8d:ef:20:71:52:80:bb:4a:22:1e:42:2f:14:11:
                    d6:08:2a:0f:99:00:b3:0a:e3:0c:1d:e2:79:48:34:
                    7f:10:ae:83:33:97:1e:12:fd:b8:d2:46:05:1f:73:
                    10:86:56:de:55:8a:08:6c:54:c3:5c:97:98:c6:fc:
                    8b:23:b6:19:d1:7e:e4:15:d3:d9:df:53:cc:23:b7:
                    02:a7:4d:16:08:d7:fc:66:53:a5:3e:35:13:a7:45:
                    a6:07:ad:b8:79:64:6a:82:88:6c:56:a4:8c:92:e7:
                    24:5e:56:32:72:9b:ef:b0:96:e7:c3:05:d6:16:90:
                    6f:3b:b2:4b:30:91:05:4b:85:bf:4d:db:75:48:d0:
                    5b:ad:82:f0:7e:e3:46:19:0b:df:ec:ce:8a:8a:45:
                    94:0c:71:cc:c0:fc:13:96:18:f1:e8:0f:22:d6:5d:
                    c1:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:58:88:E6:66:F5:13:F6:CA:54:81:08:8C:8C:E2:9E:94:92:C3:2F
            X509v3 Authority Key Identifier:
                keyid:16:AF:39:67:CD:9E:EF:69:FE:72:CF:66:DB:C6:E0:FB:00:CA:38:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D34D0/F5403EF245B711EFA3D9A049C4F9AE02/Fq85Z82e72n-cs9m28bg-wDKONQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fq85Z82e72n-cs9m28bg-wDKONQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D34D0/F5403EF245B711EFA3D9A049C4F9AE02/Fq85Z82e72n-cs9m28bg-wDKONQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:9f:53:ed:ce:e9:ae:2e:ae:ab:97:eb:bb:b9:9c:2e:bd:4a:
         f8:9a:0f:5a:6c:19:cc:df:0e:dd:3a:41:57:00:08:10:25:55:
         c1:9c:f6:53:90:f2:00:d8:f2:b4:62:2e:a8:01:ea:a8:02:dd:
         18:11:7b:be:9a:b8:d2:60:4c:93:23:9b:f8:14:d3:47:ab:c6:
         b4:a5:1c:b0:94:6b:ab:f7:07:27:c8:02:0d:d6:62:1d:0c:45:
         5f:75:99:c4:fa:a8:4e:6d:dc:00:ff:77:a9:31:e3:3c:f7:2d:
         7c:00:f8:96:db:b6:7a:f5:68:86:df:3d:c3:7b:cd:af:ec:83:
         7c:54:03:33:f1:ac:f9:ee:78:20:f4:77:b9:69:15:27:54:7a:
         54:84:19:35:21:ee:bb:b8:f9:c1:09:98:d1:21:1e:06:ba:0e:
         d6:16:be:88:e8:57:00:64:51:78:fa:88:c9:44:a5:e2:ab:a7:
         cf:80:fa:91:3c:f5:87:ad:3d:45:dd:1c:c5:31:25:c9:49:1f:
         5e:9c:da:5e:77:8d:6f:dd:d7:60:bb:d7:4f:ea:e3:69:a2:74:
         cf:98:de:4d:e0:27:76:9e:41:49:bf:6e:b4:41:7d:85:c3:e7:
         5a:64:fc:45:ab:81:3b:bb:29:11:bd:14:47:e3:3b:00:05:b4:
         1a:43:ec:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:41:38 2026 by rpki-client