Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9111C7F/2537EA3890ED11F1903363874A11F970/fNQ5wfF7RAv5Uxzd0aM2FQHq-4M.mft
File:                     fNQ5wfF7RAv5Uxzd0aM2FQHq-4M.mft (raw, json)
Hash identifier:          /a/C6pXX1jBWeRYkTf3nhLao/Rnrwa1lxHZ8xsCABQ0=
Subject key identifier:   46:2F:F9:65:A7:42:2A:FB:DE:BD:71:8B:84:03:05:94:D3:B0:44:0B
Authority key identifier: 7C:D4:39:C1:F1:7B:44:0B:F9:53:1C:DD:D1:A3:36:15:01:EA:FB:83
Certificate issuer:       /CN=A9111C7F/serialNumber=7CD439C1F17B440BF9531CDDD1A3361501EAFB83
Certificate serial:       20
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNQ5wfF7RAv5Uxzd0aM2FQHq-4M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9111C7F/2537EA3890ED11F1903363874A11F970/fNQ5wfF7RAv5Uxzd0aM2FQHq-4M.mft
Manifest number:          20
Signing time:             Sat 03 Oct 2026 09:38:01 +0000
Manifest this update:     Sat 03 Oct 2026 09:38:00 +0000
Manifest next update:     Sat 10 Oct 2026 09:38:00 +0000
Files and hashes:         1: fNQ5wfF7RAv5Uxzd0aM2FQHq-4M.crl (hash: L4Yx1y9iMMcy2xmT/ZIWnOmOBpJVjmfAO6xRpInBxEM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9111C7F/2537EA3890ED11F1903363874A11F970/fNQ5wfF7RAv5Uxzd0aM2FQHq-4M.crl
                          rsync://rpki.apnic.net/member_repository/A9111C7F/2537EA3890ED11F1903363874A11F970/fNQ5wfF7RAv5Uxzd0aM2FQHq-4M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNQ5wfF7RAv5Uxzd0aM2FQHq-4M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 09:37:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32 (0x20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9111C7F, serialNumber=7CD439C1F17B440BF9531CDDD1A3361501EAFB83
        Validity
            Not Before: Oct  3 09:38:00 2026 GMT
            Not After : Oct 10 09:38:00 2026 GMT
        Subject: CN=6ac0ccf9-2a70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ec:74:7e:8c:99:14:e6:f5:53:a0:41:51:7a:
                    1f:f0:11:6a:55:aa:0c:31:ec:77:bd:06:cc:44:eb:
                    51:5c:5d:77:be:5b:4b:f5:8f:b1:d8:6d:d3:cc:ed:
                    85:f9:0a:fd:41:10:cf:aa:75:49:b7:38:eb:ed:11:
                    a6:fa:00:8c:0f:eb:ba:5c:e0:69:03:e3:ed:4a:37:
                    7a:9d:94:8b:47:11:a7:9b:4b:ca:a5:c6:2c:90:38:
                    f3:a7:7f:ab:65:69:67:36:77:b8:b4:89:70:89:eb:
                    22:f4:40:c5:c1:60:fe:3e:eb:f6:f7:db:c0:c0:54:
                    67:fb:90:d2:0e:b7:9b:f0:28:41:53:c9:27:22:01:
                    08:56:bf:bc:03:2e:58:8b:3f:09:b8:33:55:90:5d:
                    8d:d2:83:6f:d7:f0:00:b3:87:6d:c6:9d:49:a1:63:
                    d7:06:6d:44:20:8e:d1:7e:9e:f2:ef:d6:72:6c:c3:
                    d7:74:83:e0:3b:5d:b2:c8:08:96:0e:67:1c:a2:5d:
                    0f:12:c2:2a:03:64:8d:50:34:61:a6:5a:b8:d1:49:
                    7e:1d:04:8f:4a:ef:2a:50:4a:bd:76:00:be:eb:40:
                    80:fe:7a:e7:d6:34:28:6b:7e:aa:2c:75:20:e1:85:
                    94:f4:86:4c:0d:85:4b:67:c3:26:f6:ef:c4:9d:d7:
                    f4:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:2F:F9:65:A7:42:2A:FB:DE:BD:71:8B:84:03:05:94:D3:B0:44:0B
            X509v3 Authority Key Identifier:
                keyid:7C:D4:39:C1:F1:7B:44:0B:F9:53:1C:DD:D1:A3:36:15:01:EA:FB:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9111C7F/2537EA3890ED11F1903363874A11F970/fNQ5wfF7RAv5Uxzd0aM2FQHq-4M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNQ5wfF7RAv5Uxzd0aM2FQHq-4M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111C7F/2537EA3890ED11F1903363874A11F970/fNQ5wfF7RAv5Uxzd0aM2FQHq-4M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:d9:e5:2b:c6:ee:28:a4:5a:9f:81:92:a8:d5:96:e6:3f:46:
         ef:14:b9:4e:98:0c:1f:a8:b5:a1:ca:90:f6:3e:44:ae:6f:89:
         0b:34:7d:0c:20:4c:7e:8a:c5:67:03:7a:de:4c:5e:b0:b5:2b:
         ee:7c:72:fd:0e:fd:9d:7a:26:c5:6a:e4:10:ca:7b:2b:13:9b:
         81:fb:02:52:ee:14:3e:d5:18:43:5a:62:ff:36:08:02:4f:1e:
         2e:23:d1:b1:f0:90:30:41:8f:31:c9:76:60:7e:b1:aa:c8:58:
         a0:6e:45:08:60:56:68:3a:ee:d8:53:2d:7c:07:2f:ea:e3:38:
         db:93:9b:8e:5d:94:9d:76:21:db:31:04:24:8c:a1:0c:8b:79:
         8b:09:d2:e7:91:b8:3b:e1:77:06:80:32:d1:b2:80:75:24:fa:
         3d:95:43:eb:8e:b0:80:b9:1b:17:d7:d6:6e:db:d2:df:ad:bd:
         59:65:71:b5:36:10:03:bf:bf:7d:f3:f9:2a:d0:51:e2:49:64:
         dd:23:1b:8d:99:77:54:69:2c:83:29:f7:6d:fa:4e:b5:66:61:
         3d:1f:38:0d:33:c7:1c:e7:37:8d:8a:83:c7:7a:fb:d5:43:d7:
         55:fc:2a:92:6d:14:b2:88:f4:53:6f:b9:ef:63:5d:90:e4:e1:
         05:4b:0b:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 19:59:40 2026 by rpki-client