Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9129023/FCF64740228011EFA7283C14C4F9AE02/F-lBr577tRXXwktBjmn5hnx6FMo.mft
File:                     F-lBr577tRXXwktBjmn5hnx6FMo.mft (raw, json)
Hash identifier:          lfdLcVdF4fDqWQfA3Xk62llPDKm8vWHbcnLXdO8/6p8=
Subject key identifier:   8F:34:BF:17:DC:0C:3E:F8:20:A6:8B:F3:E1:05:FF:D2:D0:D9:36:A0
Authority key identifier: 17:E9:41:AF:9E:FB:B5:15:D7:C2:4B:41:8E:69:F9:86:7C:7A:14:CA
Certificate issuer:       /CN=A9129023/serialNumber=17E941AF9EFBB515D7C24B418E69F9867C7A14CA
Certificate serial:       01B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F-lBr577tRXXwktBjmn5hnx6FMo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9129023/FCF64740228011EFA7283C14C4F9AE02/F-lBr577tRXXwktBjmn5hnx6FMo.mft
Manifest number:          01B6
Signing time:             Wed 07 Oct 2026 04:25:08 +0000
Manifest this update:     Wed 07 Oct 2026 04:25:07 +0000
Manifest next update:     Wed 14 Oct 2026 04:25:07 +0000
Files and hashes:         1: F-lBr577tRXXwktBjmn5hnx6FMo.crl (hash: 9r/86cTHWScCmqx4MIAPmnUOU32NDRM9v3EwutAkZ4U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9129023/FCF64740228011EFA7283C14C4F9AE02/F-lBr577tRXXwktBjmn5hnx6FMo.crl
                          rsync://rpki.apnic.net/member_repository/A9129023/FCF64740228011EFA7283C14C4F9AE02/F-lBr577tRXXwktBjmn5hnx6FMo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F-lBr577tRXXwktBjmn5hnx6FMo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 04:25:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 438 (0x1b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9129023, serialNumber=17E941AF9EFBB515D7C24B418E69F9867C7A14CA
        Validity
            Not Before: Oct  7 04:25:07 2026 GMT
            Not After : Oct 14 04:25:07 2026 GMT
        Subject: CN=6ac5c9a4-0280
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:d2:d3:eb:ae:69:94:74:60:d3:84:d6:ee:47:
                    cc:b8:b5:6b:64:bb:3a:f5:80:6f:e7:83:2b:3e:fd:
                    4b:4a:d9:98:6a:2e:43:23:9c:0f:d6:41:7f:30:cc:
                    e5:71:a7:71:82:88:e3:2c:f5:17:cf:b0:0f:da:80:
                    ab:81:91:b5:63:48:64:72:45:87:b6:6d:51:5d:82:
                    b6:4e:ea:3c:c4:93:62:61:56:cb:0b:5c:48:c1:17:
                    a5:e7:c7:14:ee:40:92:d8:7b:bc:a1:c7:93:2d:07:
                    c2:2d:3f:82:9b:93:63:90:54:10:f7:0b:6f:2c:64:
                    ed:05:44:83:9c:4d:e8:a3:95:a1:07:00:8e:c3:59:
                    60:a6:72:e0:45:02:ba:2a:e7:00:75:bf:6b:54:f5:
                    3c:f1:6e:13:cb:bc:0d:af:d7:4c:0d:a5:89:2a:06:
                    e6:fb:fa:cd:93:f0:df:c3:56:5a:e5:8e:a1:49:a2:
                    44:50:4b:ba:d6:de:ad:b2:16:95:a1:08:01:6b:02:
                    be:54:44:46:fc:e3:93:6a:9b:d1:37:3c:33:a9:5c:
                    2f:d4:43:42:d4:c2:d2:14:e0:7a:49:fb:50:bd:f1:
                    7e:55:11:70:6b:9d:de:a8:f4:1e:e1:c4:3a:13:36:
                    22:6b:dc:61:aa:28:38:5a:41:5f:05:90:af:7c:57:
                    ab:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:34:BF:17:DC:0C:3E:F8:20:A6:8B:F3:E1:05:FF:D2:D0:D9:36:A0
            X509v3 Authority Key Identifier:
                keyid:17:E9:41:AF:9E:FB:B5:15:D7:C2:4B:41:8E:69:F9:86:7C:7A:14:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9129023/FCF64740228011EFA7283C14C4F9AE02/F-lBr577tRXXwktBjmn5hnx6FMo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F-lBr577tRXXwktBjmn5hnx6FMo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129023/FCF64740228011EFA7283C14C4F9AE02/F-lBr577tRXXwktBjmn5hnx6FMo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:6f:e0:63:40:21:b1:b4:16:5e:1f:32:61:22:87:25:17:46:
         e7:9d:23:65:34:ea:84:94:58:f6:a4:17:d8:0c:57:1a:cf:b1:
         15:fd:57:5e:bd:8c:cb:a9:fc:bd:5d:48:f0:73:6f:e2:a6:6d:
         8e:69:f5:b2:2c:cf:d0:45:7f:b4:93:2f:a4:40:4c:28:d8:cd:
         1f:9e:d8:e3:37:4d:bd:90:9a:e1:0e:ec:8a:02:ef:9f:a7:01:
         2f:5d:28:bd:10:9e:96:2f:08:96:90:e7:c2:34:6e:4a:29:9d:
         8d:f8:ad:bc:8c:a2:5d:05:6f:e6:aa:74:ef:a6:0f:9a:1e:7d:
         c6:b5:cc:4f:fa:ce:6c:f9:00:08:27:e7:7b:d7:32:24:01:5d:
         9a:ad:5f:07:cf:51:6a:45:8d:00:00:8d:c4:fc:c3:08:f9:3a:
         e0:e8:25:b9:09:b3:15:a5:bb:5d:05:cf:a8:c0:01:41:9d:5f:
         c7:7f:5f:74:f3:4a:ac:61:d4:d0:33:a3:72:16:c6:9f:7f:62:
         1b:21:44:13:5d:f9:6d:26:17:5d:3f:f6:6f:d2:0c:fb:64:82:
         8b:59:3e:63:b4:44:87:51:fc:74:63:4c:88:61:bd:6f:b8:0c:
         59:8f:36:25:09:9b:98:93:63:6d:83:38:78:8c:24:47:61:91:
         fd:5e:1d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 09:04:02 2026 by rpki-client