Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E6F07/C13D81D8052911EA82D74337C4F9AE02/Fi6Vb4jdPgmmsETYsrQt6xCoPaE.mft
File:                     Fi6Vb4jdPgmmsETYsrQt6xCoPaE.mft (raw, json)
Hash identifier:          25+X5jfXY3iFNXniEuN8Ld/fP3LRioSGJejgqLl3zcQ=
Subject key identifier:   9E:52:85:32:3B:49:10:DB:1B:5A:B9:58:09:9B:2E:A4:3A:0F:1F:54
Authority key identifier: 16:2E:95:6F:88:DD:3E:09:A6:B0:44:D8:B2:B4:2D:EB:10:A8:3D:A1
Certificate issuer:       /CN=A91E6F07/serialNumber=162E956F88DD3E09A6B044D8B2B42DEB10A83DA1
Certificate serial:       0D34
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fi6Vb4jdPgmmsETYsrQt6xCoPaE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6F07/C13D81D8052911EA82D74337C4F9AE02/Fi6Vb4jdPgmmsETYsrQt6xCoPaE.mft
Manifest number:          1673
Signing time:             Sun 20 Sep 2026 18:06:59 +0000
Manifest this update:     Sun 20 Sep 2026 18:06:58 +0000
Manifest next update:     Sun 27 Sep 2026 18:06:58 +0000
Files and hashes:         1: Fi6Vb4jdPgmmsETYsrQt6xCoPaE.crl (hash: 12+haI+jxdtClKJ8aZ8Y4Vf8QHV3WYWH5Z6+wFTCq80=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6F07/C13D81D8052911EA82D74337C4F9AE02/Fi6Vb4jdPgmmsETYsrQt6xCoPaE.crl
                          rsync://rpki.apnic.net/member_repository/A91E6F07/C13D81D8052911EA82D74337C4F9AE02/Fi6Vb4jdPgmmsETYsrQt6xCoPaE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fi6Vb4jdPgmmsETYsrQt6xCoPaE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 18:06:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3380 (0xd34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6F07, serialNumber=162E956F88DD3E09A6B044D8B2B42DEB10A83DA1
        Validity
            Not Before: Sep 20 18:06:58 2026 GMT
            Not After : Sep 27 18:06:58 2026 GMT
        Subject: CN=6ab020c3-5512
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:94:32:7a:12:98:e5:5f:87:41:01:f7:e5:6d:
                    28:2d:eb:2f:0e:9f:77:d3:1f:73:38:47:29:88:c9:
                    96:d9:5d:7e:54:94:1e:ea:e1:38:3b:b9:af:c7:2e:
                    04:f6:27:54:a6:fc:d0:a4:04:89:68:42:71:c1:3e:
                    23:56:36:1d:57:c9:cf:ff:2c:e4:63:f6:9c:b5:8f:
                    19:59:86:ef:45:2e:d7:0a:c5:09:60:d5:1b:47:5f:
                    5d:d9:24:f7:dc:27:5e:81:c6:bf:0a:21:a9:02:59:
                    27:8d:97:4e:7c:7d:f0:13:07:37:77:e6:8d:83:a9:
                    6f:ca:96:5f:ca:a5:3f:10:9d:fc:0b:a5:53:88:99:
                    46:4b:b4:c6:f8:c6:91:8c:28:e7:60:1f:d2:06:64:
                    bf:d6:08:89:c1:07:78:ef:8d:22:f1:6a:2f:49:36:
                    4f:f1:75:d7:48:c8:e7:d7:62:2c:10:a9:5f:1d:cb:
                    8a:ee:a4:19:19:0f:82:d7:a8:d2:ac:d1:e0:42:17:
                    a0:0b:3a:c0:b7:8d:26:d4:57:58:68:a7:8b:60:d7:
                    d6:e2:99:0f:4f:0b:a0:45:e1:bf:2e:0c:34:24:91:
                    2e:e0:a2:08:39:4b:c5:18:34:b2:64:c0:8c:ea:e2:
                    94:e7:b9:d4:9a:3a:00:da:fc:4d:57:45:e0:c6:89:
                    78:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:52:85:32:3B:49:10:DB:1B:5A:B9:58:09:9B:2E:A4:3A:0F:1F:54
            X509v3 Authority Key Identifier:
                keyid:16:2E:95:6F:88:DD:3E:09:A6:B0:44:D8:B2:B4:2D:EB:10:A8:3D:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6F07/C13D81D8052911EA82D74337C4F9AE02/Fi6Vb4jdPgmmsETYsrQt6xCoPaE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fi6Vb4jdPgmmsETYsrQt6xCoPaE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6F07/C13D81D8052911EA82D74337C4F9AE02/Fi6Vb4jdPgmmsETYsrQt6xCoPaE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:2f:da:57:81:a1:98:4e:b2:a0:32:1d:83:7d:d1:5e:08:d8:
         a3:cf:a0:08:14:3b:8e:4b:b3:c7:0c:12:de:71:b2:b1:5c:5e:
         09:f4:e2:b6:8d:be:6f:f4:1a:12:d6:6d:92:8b:df:00:a8:ef:
         0c:cf:e3:b7:51:1a:49:4d:81:24:6a:46:c4:d1:af:f4:bd:d7:
         97:98:0b:a2:45:b7:66:83:9b:3e:2b:04:8f:db:2c:f1:6b:27:
         04:cb:49:51:49:35:68:a9:9a:ef:e4:dd:63:6a:2d:e1:7d:2c:
         82:70:5b:af:a4:1e:44:43:21:ee:60:f1:fc:6d:33:19:ed:84:
         94:12:9a:96:d6:25:11:3c:16:48:c5:66:f5:33:b4:b9:4d:38:
         8d:52:81:4f:89:ee:1e:57:65:41:de:24:47:71:ed:c9:3f:8a:
         ff:78:69:52:57:62:08:8a:bf:44:ef:27:e2:8e:07:5c:d8:28:
         8f:5a:66:44:9d:6f:8a:24:9f:a8:b9:ac:04:e5:04:f0:ac:7b:
         24:11:dd:9f:5d:cf:f0:00:a5:2a:2a:ec:19:4d:7b:2f:bb:6b:
         a3:6a:1f:ac:11:44:ea:e3:11:c6:59:cd:0b:d5:37:4c:2f:c1:
         37:15:78:e2:c2:bb:ba:da:06:4e:08:8b:fd:6c:68:43:1e:97:
         e6:5c:ae:01
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDTQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTZGMDcxMTAvBgNVBAUTKDE2MkU5NTZGODhERDNFMDlBNkIwNDREOEIyQjQyREVC
MTBBODNEQTEwHhcNMjYwOTIwMTgwNjU4WhcNMjYwOTI3MTgwNjU4WjAYMRYwFAYD
VQQDEw02YWIwMjBjMy01NTEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApJQyehKY5V+HQQH35W0oLesvDp930x9zOEcpiMmW2V1+VJQe6uE4O7mvxy4E
9idUpvzQpASJaEJxwT4jVjYdV8nP/yzkY/actY8ZWYbvRS7XCsUJYNUbR19d2ST3
3Cdegca/CiGpAlknjZdOfH3wEwc3d+aNg6lvypZfyqU/EJ38C6VTiJlGS7TG+MaR
jCjnYB/SBmS/1giJwQd4740i8WovSTZP8XXXSMjn12IsEKlfHcuK7qQZGQ+C16jS
rNHgQhegCzrAt40m1FdYaKeLYNfW4pkPTwugReG/Lgw0JJEu4KIIOUvFGDSyZMCM
6uKU57nUmjoA2vxNV0Xgxol4PQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ5ShTI7
SRDbG1q5WAmbLqQ6Dx9UMB8GA1UdIwQYMBaAFBYulW+I3T4JprBE2LK0LesQqD2h
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkYwNy9DMTNEODFEODA1
MjkxMUVBODJENzQzMzdDNEY5QUUwMi9GaTZWYjRqZFBnbW1zRVRZc3JRdDZ4Q29Q
YUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZpNlZiNGpkUGdtbXNFVFlzclF0NnhDb1BhRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NkYwNy9DMTNEODFEODA1MjkxMUVBODJENzQzMzdDNEY5QUUwMi9GaTZWYjRqZFBn
bW1zRVRZc3JRdDZ4Q29QYUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAsi/aV4GhmE6yoDIdg33RXgjYo8+gCBQ7jkuzxwwS3nGysVxeCfTito2+b/Qa
EtZtkovfAKjvDM/jt1EaSU2BJGpGxNGv9L3Xl5gLokW3ZoObPisEj9ss8WsnBMtJ
UUk1aKma7+TdY2ot4X0sgnBbr6QeREMh7mDx/G0zGe2ElBKaltYlETwWSMVm9TO0
uU04jVKBT4nuHldlQd4kR3HtyT+K/3hpUldiCIq/RO8n4o4HXNgoj1pmRJ1viiSf
qLmsBOUE8Kx7JBHdn13P8AClKirsGU17L7tro2ofrBFE6uMRxlnNC9U3TC/BNxV4
4sK7utoGTgiL/WxoQx6X5lyuAQ==
-----END CERTIFICATE-----
Generated at Tue Sep 22 17:05:14 2026 by rpki-client