Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.mft
File:                     FnnqBmaD8qFVDecPRYQy3RqDJw8.mft (raw, json)
Hash identifier:          yqQu8UHIqIgNDgpDiFzYeS4VlnKu89/bFLBAA0N8snA=
Subject key identifier:   3E:ED:A4:2A:A8:99:15:89:EA:86:9F:B0:D7:3D:E5:C5:F1:B5:B3:C0
Authority key identifier: 16:79:EA:06:66:83:F2:A1:55:0D:E7:0F:45:84:32:DD:1A:83:27:0F
Certificate issuer:       /CN=A91DDCD9/serialNumber=1679EA066683F2A1550DE70F458432DD1A83270F
Certificate serial:       0BDE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnnqBmaD8qFVDecPRYQy3RqDJw8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.mft
Manifest number:          0C84
Signing time:             Sun 20 Sep 2026 18:58:24 +0000
Manifest this update:     Sun 20 Sep 2026 18:58:24 +0000
Manifest next update:     Sun 27 Sep 2026 18:58:24 +0000
Files and hashes:         1: FnnqBmaD8qFVDecPRYQy3RqDJw8.crl (hash: KBGwLFnhgjOlA9ZopvMHdiggLEfn1tiAM26Imlb+Wd4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.crl
                          rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnnqBmaD8qFVDecPRYQy3RqDJw8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 18:58:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3038 (0xbde)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DDCD9, serialNumber=1679EA066683F2A1550DE70F458432DD1A83270F
        Validity
            Not Before: Sep 20 18:58:24 2026 GMT
            Not After : Sep 27 18:58:24 2026 GMT
        Subject: CN=6ab02cd0-c40e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:4a:22:c4:75:3b:98:8a:24:ed:bb:44:60:16:
                    74:de:c6:f6:f7:98:e3:8e:60:7f:4d:ca:ba:c6:4d:
                    e3:7f:55:ba:b0:cf:56:68:e7:b5:11:8f:a8:27:ca:
                    ff:9b:15:c9:97:b6:0d:e4:1f:e9:2a:53:dd:c7:a2:
                    3f:3d:8f:8d:08:76:e3:3d:ba:8f:d5:87:2b:c8:fe:
                    02:ae:ad:99:77:4e:42:ce:93:6c:27:13:3c:ef:87:
                    0f:78:77:16:b2:07:d6:e1:87:f5:6d:f6:75:82:a0:
                    34:ef:36:16:e2:c6:f7:81:d1:9f:ed:e8:a5:a7:d1:
                    93:04:6a:8f:17:5b:43:2b:c0:07:8c:5c:cd:59:a2:
                    fb:f1:69:ad:38:e1:25:74:5b:76:9a:db:8d:f5:8d:
                    c4:f7:6a:88:37:e0:53:dc:92:e8:26:b0:23:d6:79:
                    28:a8:b2:1f:0a:59:8c:d1:72:c3:df:b6:bd:14:e2:
                    62:4a:e7:a3:9c:d3:31:13:bc:bd:40:55:75:29:55:
                    25:34:71:05:4e:82:7e:45:09:5e:bc:12:cd:c4:da:
                    f0:ea:05:15:fe:e0:32:ec:f5:47:e0:e6:28:ee:7b:
                    5e:78:8b:9a:e4:da:3b:af:af:6c:01:c0:71:5f:9a:
                    ac:a4:01:c2:3e:67:86:39:a6:fa:e5:be:38:9b:40:
                    3a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:ED:A4:2A:A8:99:15:89:EA:86:9F:B0:D7:3D:E5:C5:F1:B5:B3:C0
            X509v3 Authority Key Identifier:
                keyid:16:79:EA:06:66:83:F2:A1:55:0D:E7:0F:45:84:32:DD:1A:83:27:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnnqBmaD8qFVDecPRYQy3RqDJw8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:2c:98:97:37:53:5a:ba:21:4a:e7:ef:3d:09:c5:66:77:e7:
         7a:e6:cd:06:21:4e:d9:85:db:ce:93:bc:2e:cc:b7:64:48:5e:
         b1:85:50:05:3b:c4:af:e7:c5:32:e1:74:8a:d8:5e:24:7d:a4:
         91:c5:1c:81:69:bb:10:e8:15:fc:23:97:9c:4c:4e:54:1b:7a:
         48:e8:d5:7f:a9:75:4d:23:9c:f8:9d:d4:94:ff:71:09:d7:98:
         48:ae:84:76:ce:b7:db:d4:e9:e9:8e:26:a6:55:6b:1d:af:b9:
         19:2d:b8:b5:7d:2a:bd:fd:92:89:98:ac:39:f6:2a:4c:7d:40:
         3b:d2:14:b7:12:1e:f1:38:62:42:55:67:3b:cb:1f:fd:33:5b:
         94:1e:35:83:8a:3e:75:1b:5e:71:17:9a:dc:e5:6b:55:cb:d2:
         bc:5b:48:85:a8:ee:a1:16:d7:1c:bf:a9:c9:d2:e9:75:79:b9:
         a9:87:41:28:39:36:75:25:ce:57:3c:5a:93:2c:a0:84:24:df:
         21:27:57:a5:8e:ba:e6:f8:e8:cc:f6:df:49:ab:a9:e8:0b:e1:
         f6:dc:b5:5b:3c:22:39:5d:58:d4:1c:7b:79:c7:60:4c:37:68:
         af:00:8e:95:b8:cd:18:5a:06:b2:9c:ff:6d:7f:bb:50:2c:4b:
         54:31:be:58
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC94wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RERDRDkxMTAvBgNVBAUTKDE2NzlFQTA2NjY4M0YyQTE1NTBERTcwRjQ1ODQzMkRE
MUE4MzI3MEYwHhcNMjYwOTIwMTg1ODI0WhcNMjYwOTI3MTg1ODI0WjAYMRYwFAYD
VQQDEw02YWIwMmNkMC1jNDBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjUoixHU7mIok7btEYBZ03sb295jjjmB/Tcq6xk3jf1W6sM9WaOe1EY+oJ8r/
mxXJl7YN5B/pKlPdx6I/PY+NCHbjPbqP1YcryP4Crq2Zd05CzpNsJxM874cPeHcW
sgfW4Yf1bfZ1gqA07zYW4sb3gdGf7eilp9GTBGqPF1tDK8AHjFzNWaL78WmtOOEl
dFt2mtuN9Y3E92qIN+BT3JLoJrAj1nkoqLIfClmM0XLD37a9FOJiSuejnNMxE7y9
QFV1KVUlNHEFToJ+RQlevBLNxNrw6gUV/uAy7PVH4OYo7nteeIua5No7r69sAcBx
X5qspAHCPmeGOab65b44m0A6PQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD7tpCqo
mRWJ6oafsNc95cXxtbPAMB8GA1UdIwQYMBaAFBZ56gZmg/KhVQ3nD0WEMt0agycP
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERENEOS80MTBCQkMxNDRF
NkMxMUVBODkwNDk3NDdDNEY5QUUwMi9Gbm5xQm1hRDhxRlZEZWNQUllReTNScURK
dzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZubnFCbWFEOHFGVkRlY1BSWVF5M1JxREp3OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RENEOS80MTBCQkMxNDRFNkMxMUVBODkwNDk3NDdDNEY5QUUwMi9Gbm5xQm1hRDhx
RlZEZWNQUllReTNScURKdzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAESyYlzdTWrohSufvPQnFZnfneubNBiFO2YXbzpO8Lsy3ZEhesYVQBTvEr+fF
MuF0itheJH2kkcUcgWm7EOgV/COXnExOVBt6SOjVf6l1TSOc+J3UlP9xCdeYSK6E
ds6329Tp6Y4mplVrHa+5GS24tX0qvf2SiZisOfYqTH1AO9IUtxIe8ThiQlVnO8sf
/TNblB41g4o+dRtecRea3OVrVcvSvFtIhajuoRbXHL+pydLpdXm5qYdBKDk2dSXO
VzxakyyghCTfISdXpY665vjozPbfSaup6Avh9ty1WzwiOV1Y1Bx7ecdgTDdorwCO
lbjNGFoGspz/bX+7UCxLVDG+WA==
-----END CERTIFICATE-----
Generated at Tue Sep 22 07:03:50 2026 by rpki-client