Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.mft
File:                     fNSu5HyyHa6Yd-_0HwS-ldlzaG0.mft (raw, json)
Hash identifier:          mQvLPGCSCuW2OfV5wANUYE3jsqPCeWMWJcR3TXfsI3U=
Subject key identifier:   9D:48:12:B4:46:A0:E1:EE:0E:B8:A3:0F:38:A8:ED:FA:EE:53:E7:0E
Authority key identifier: 7C:D4:AE:E4:7C:B2:1D:AE:98:77:EF:F4:1F:04:BE:95:D9:73:68:6D
Certificate issuer:       /CN=A91DF26F/serialNumber=7CD4AEE47CB21DAE9877EFF41F04BE95D973686D
Certificate serial:       3590
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.mft
Manifest number:          3588
Signing time:             Thu 24 Sep 2026 14:38:41 +0000
Manifest this update:     Thu 24 Sep 2026 14:38:40 +0000
Manifest next update:     Thu 01 Oct 2026 14:38:40 +0000
Files and hashes:         1: fNSu5HyyHa6Yd-_0HwS-ldlzaG0.crl (hash: et/tX2mxyv+zwm+D1GL5sa3qtZGiM9uuhxps5geDZrc=)
                          2: 3AF0F3E028CB11F195C91CE1BF833773.roa (hash: H6MyZAwL1N2/89I0jCajMU0eiEbSrWAvn6d7upb1hyk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.crl
                          rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 14:38:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13712 (0x3590)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DF26F, serialNumber=7CD4AEE47CB21DAE9877EFF41F04BE95D973686D
        Validity
            Not Before: Sep 24 14:38:40 2026 GMT
            Not After : Oct  1 14:38:40 2026 GMT
        Subject: CN=6ab535f1-ef08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:25:24:78:af:86:e5:6b:bd:62:fa:fd:c3:4d:
                    68:8d:15:95:27:73:72:c9:dc:3b:b0:8f:47:5c:39:
                    fb:5e:13:7f:86:e9:08:df:4a:8a:77:11:2c:08:02:
                    ff:f8:2b:87:18:bf:e9:82:19:0f:4f:f0:76:d1:b6:
                    d3:1d:9b:fe:03:62:3e:7d:3e:fa:16:85:06:67:9d:
                    58:3e:d2:df:1d:df:cf:50:62:5b:95:e1:f2:18:d5:
                    88:6a:69:a5:bd:ec:3d:60:7b:ba:b0:b9:c0:0e:c7:
                    c6:31:85:35:59:bb:e1:be:69:95:61:f6:94:fb:73:
                    54:bc:82:97:09:91:7e:79:2d:5a:fb:96:23:af:68:
                    5e:87:45:96:c6:97:f0:2b:3e:4f:fe:31:85:ef:6c:
                    db:72:f6:d1:ea:13:8b:ae:75:70:59:10:27:fd:fa:
                    33:ea:9c:8d:31:d1:d4:59:6d:fb:f2:c0:53:7d:25:
                    06:78:db:27:1d:c4:7f:e2:45:7d:50:f9:e1:c2:e5:
                    e1:36:63:f7:6a:c5:c8:5f:b3:40:b9:83:e1:4d:fc:
                    23:19:4d:09:83:f1:0d:fe:3f:1c:d6:38:30:94:bb:
                    f5:ad:12:af:66:f4:fa:2c:0d:a4:00:18:d6:ad:df:
                    9e:e5:37:e1:9d:81:ca:6f:14:46:47:f6:7d:46:ab:
                    62:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:48:12:B4:46:A0:E1:EE:0E:B8:A3:0F:38:A8:ED:FA:EE:53:E7:0E
            X509v3 Authority Key Identifier:
                keyid:7C:D4:AE:E4:7C:B2:1D:AE:98:77:EF:F4:1F:04:BE:95:D9:73:68:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:74:8b:eb:5e:d0:39:f9:7f:88:e0:18:3c:d8:d9:31:91:74:
         c6:c5:0d:d7:a8:ac:8f:51:1b:93:12:0a:f3:7b:27:39:46:c5:
         01:09:97:15:2b:a8:a9:42:54:d2:38:aa:8a:8b:bd:0f:67:24:
         18:75:36:41:5a:74:e8:00:04:19:c1:e4:01:2b:61:d3:b7:60:
         63:d7:ba:b4:0f:c1:fe:0b:c8:9f:72:ba:88:0c:c9:67:39:c2:
         66:33:9f:9f:6d:6f:8a:24:38:47:06:68:c4:3b:8f:5b:a3:57:
         0a:b5:13:18:36:bf:d7:46:41:3d:70:68:4d:76:0e:c0:c1:c9:
         c7:8a:a8:18:8e:a1:28:31:29:20:85:6b:25:48:fb:ad:d7:df:
         10:2f:94:10:8c:55:30:4b:8c:fc:92:86:50:28:d3:f5:21:95:
         5f:f4:a2:a8:52:5a:c0:42:6c:38:7b:35:95:63:71:a5:f1:04:
         50:97:7a:a3:8b:48:29:cb:47:8e:cb:a1:3f:1e:c6:a6:dc:c5:
         55:b5:9f:66:5a:39:e7:b8:04:70:4f:6f:23:79:23:d0:7d:50:
         c4:68:9f:ae:18:90:00:c1:4f:d3:98:fe:e1:8c:fc:ee:04:77:
         00:a1:03:b6:9a:a1:08:86:74:6a:36:01:6f:41:ab:bb:a4:b6:
         6b:35:46:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 13:24:09 2026 by rpki-client