Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft
File:                     FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft (raw, json)
Hash identifier:          Jouy91w7b2jXnkTtmph18GKYVqQKT2ykp5tJbut52SQ=
Subject key identifier:   E6:52:9D:1C:31:C8:D6:94:B0:3F:85:34:09:39:4F:EE:29:F6:E5:46
Authority key identifier: 14:66:40:77:58:A8:D7:B9:35:69:48:96:D5:02:75:28:06:79:AF:29
Certificate issuer:       /CN=A9121188/serialNumber=1466407758A8D7B935694896D50275280679AF29
Certificate serial:       0222
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FGZAd1io17k1aUiW1QJ1KAZ5ryk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft
Manifest number:          0219
Signing time:             Sat 19 Sep 2026 03:01:09 +0000
Manifest this update:     Sat 19 Sep 2026 03:01:09 +0000
Manifest next update:     Sat 26 Sep 2026 03:01:09 +0000
Files and hashes:         1: FGZAd1io17k1aUiW1QJ1KAZ5ryk.crl (hash: sxb56IfwemChULPL219kz3+yPPT9iG85CKl/8SeQfEU=)
                          2: C6F2B810858711F1BFD2CAA18FA30FBC.roa (hash: ZMTrBfsMxmzIzO9B7U8qM9itshNtWwyMLZ+DyDQjh0o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.crl
                          rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FGZAd1io17k1aUiW1QJ1KAZ5ryk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 546 (0x222)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9121188, serialNumber=1466407758A8D7B935694896D50275280679AF29
        Validity
            Not Before: Sep 19 03:01:09 2026 GMT
            Not After : Sep 26 03:01:09 2026 GMT
        Subject: CN=6aadfaf5-8035
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:9c:07:44:5a:fb:06:a6:33:bb:92:82:cb:b3:
                    af:8f:98:d4:62:ca:6b:fd:ae:6b:b1:3a:97:27:51:
                    62:43:2e:6e:58:b4:1e:c6:61:68:94:e8:93:a5:cc:
                    c0:7e:e9:24:34:5b:15:93:58:df:fb:cf:c2:07:4a:
                    75:1b:b7:93:0d:cd:6f:a4:87:e4:de:0f:37:a0:bb:
                    74:c6:28:2f:60:ce:12:9d:5f:9e:4d:51:ef:f6:04:
                    05:87:27:05:3e:a3:46:f8:35:76:7d:18:49:4a:2b:
                    c3:76:59:cb:c4:45:1a:bf:c4:64:6a:56:07:64:3b:
                    4f:38:ae:a5:cf:e0:13:43:92:c7:ca:d9:4c:78:5d:
                    3e:b7:4d:e1:c0:82:2d:07:85:62:46:c0:41:51:ce:
                    19:7c:8b:2b:8d:a5:12:21:7b:fa:85:bf:e9:3a:59:
                    cd:e1:9e:13:4a:f1:cc:fa:63:08:60:c5:53:ac:d8:
                    81:93:30:d4:83:31:3a:89:96:d7:70:40:3a:80:8a:
                    77:67:d2:d4:7d:a6:6b:54:f9:56:10:37:9d:92:63:
                    d5:be:fa:a9:4e:e4:80:57:7c:53:ef:02:d5:a0:0b:
                    be:e8:2c:a9:45:ab:a1:01:d5:3a:6d:9b:d5:ba:86:
                    67:ea:d8:fd:74:19:f2:3a:b0:fb:32:50:86:d6:75:
                    97:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:52:9D:1C:31:C8:D6:94:B0:3F:85:34:09:39:4F:EE:29:F6:E5:46
            X509v3 Authority Key Identifier:
                keyid:14:66:40:77:58:A8:D7:B9:35:69:48:96:D5:02:75:28:06:79:AF:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FGZAd1io17k1aUiW1QJ1KAZ5ryk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:95:ed:8d:ce:1d:e6:d1:59:ce:59:ce:0d:2f:61:fb:44:d7:
         c6:fc:0f:05:32:2a:64:66:be:6e:b5:ac:9f:a0:73:c7:7a:f4:
         5e:30:9b:a7:1d:0d:77:d5:49:c7:2e:7d:02:a8:ec:2e:64:3a:
         ff:80:2f:4b:7b:2d:4f:b8:9f:6b:6a:97:69:7f:4f:2b:10:cd:
         a5:0a:4c:f0:38:dc:c2:41:e2:a9:f0:b0:fd:96:ab:7b:e1:38:
         8e:0a:a4:3d:14:19:d0:83:ec:13:e1:d3:fe:d9:dd:75:fc:24:
         18:b1:ed:37:05:1f:f7:30:b3:38:ed:49:63:24:bd:ee:da:44:
         1d:98:40:27:1b:e8:a5:99:5d:04:29:a5:f9:dd:26:8a:b5:95:
         ab:00:6e:1b:a7:90:28:62:63:a7:d0:52:f8:09:66:f2:ca:af:
         26:e7:7b:09:e6:16:d6:29:e3:11:da:99:90:d9:23:45:7d:22:
         fa:5a:74:33:ef:d9:6a:1b:ae:0b:ab:12:16:ef:13:3c:ee:c4:
         4b:18:75:fd:3a:18:89:6a:9a:27:29:85:42:7b:dc:9e:05:e6:
         89:6f:35:32:24:ab:13:e0:3a:f3:ac:60:45:ba:b9:08:78:a9:
         4a:13:d5:99:62:04:63:59:83:10:37:6b:b5:8d:c7:d7:06:4a:
         de:ca:6a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 06:33:19 2026 by rpki-client