Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.mft
File:                     Fg4AAV0rWBU_NILo3pR7X0rXhxg.mft (raw, json)
Hash identifier:          LLu3DHRxoaNdIZ8mP2sKe33/k4nk22Tv8gO/VWtg+BI=
Subject key identifier:   32:8D:3E:67:BB:BD:07:66:EA:70:29:72:73:31:3D:75:7A:F5:B4:27
Authority key identifier: 16:0E:00:01:5D:2B:58:15:3F:34:82:E8:DE:94:7B:5F:4A:D7:87:18
Certificate issuer:       /CN=A91295B6/serialNumber=160E00015D2B58153F3482E8DE947B5F4AD78718
Certificate serial:       025F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fg4AAV0rWBU_NILo3pR7X0rXhxg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.mft
Manifest number:          0255
Signing time:             Tue 01 Sep 2026 02:25:24 +0000
Manifest this update:     Tue 01 Sep 2026 02:25:23 +0000
Manifest next update:     Tue 08 Sep 2026 02:25:23 +0000
Files and hashes:         1: Fg4AAV0rWBU_NILo3pR7X0rXhxg.crl (hash: wkRNmckcMHDJEhEnWxUCf6WK3sQ3ps+iXTxfwyZVQrU=)
                          2: 35C8F50C218A11EE959B7037C4F9AE02.roa (hash: FvxI97u3e7WBP79sJ+IUpapGutxoU58idgwtPyrSOAc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.crl
                          rsync://rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fg4AAV0rWBU_NILo3pR7X0rXhxg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 08 Sep 2026 02:25:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 607 (0x25f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91295B6, serialNumber=160E00015D2B58153F3482E8DE947B5F4AD78718
        Validity
            Not Before: Sep  1 02:25:23 2026 GMT
            Not After : Sep  8 02:25:23 2026 GMT
        Subject: CN=6a963793-53e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:79:b8:6d:83:13:f6:f1:ab:0f:ce:30:64:44:
                    13:29:69:69:49:0c:f0:38:35:46:c3:7d:76:2a:d4:
                    91:eb:5a:47:6d:f9:5a:de:aa:f2:7a:1d:25:8e:31:
                    08:47:8e:13:60:75:3a:dd:64:19:f5:88:7b:3a:d0:
                    2a:29:1b:55:ab:ee:30:cc:b3:81:37:23:87:a1:c8:
                    d2:93:60:57:81:9f:4e:0b:6c:f9:1b:a5:13:da:76:
                    b0:11:f3:50:bd:41:06:53:ab:4b:01:f3:02:3e:45:
                    6c:7b:c1:d9:d6:9c:a1:01:32:99:32:d7:e8:2a:84:
                    7d:92:50:eb:37:fa:91:07:47:07:c4:5d:c4:0d:05:
                    c9:d3:a5:4a:ce:93:c9:fc:59:85:54:84:d6:0e:69:
                    05:47:18:bd:e6:4d:d1:d5:be:e4:97:0a:0f:ba:97:
                    60:f2:4e:d8:33:e4:a8:c5:42:9c:5c:67:63:8e:db:
                    68:5a:a1:1c:5c:6f:48:4b:2f:03:1e:23:b5:26:c7:
                    fb:3e:51:e1:d0:ec:2b:9e:bc:7e:0f:34:34:0c:32:
                    89:b9:33:bb:89:2b:db:b3:95:36:e0:b7:0b:21:84:
                    72:c5:92:88:f7:db:b1:07:90:13:fa:89:d6:b4:5d:
                    4d:d9:e5:5a:50:89:51:49:12:bb:14:d8:0c:9a:9f:
                    d7:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:8D:3E:67:BB:BD:07:66:EA:70:29:72:73:31:3D:75:7A:F5:B4:27
            X509v3 Authority Key Identifier:
                keyid:16:0E:00:01:5D:2B:58:15:3F:34:82:E8:DE:94:7B:5F:4A:D7:87:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fg4AAV0rWBU_NILo3pR7X0rXhxg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:a4:05:70:f4:a8:a1:5e:af:23:59:f7:39:ed:c7:06:66:7b:
         a4:77:a5:2c:59:91:0f:16:b9:59:e7:b2:74:f0:32:c1:2b:07:
         08:8d:19:36:c1:3f:28:1f:a8:38:fb:c7:22:e5:24:3e:eb:a1:
         66:bf:22:3c:0e:56:8e:59:c8:09:53:e8:21:47:37:b2:1e:e4:
         c0:67:c0:30:b7:fa:c6:69:4d:d5:bb:c4:ea:82:93:91:65:77:
         83:91:01:f0:ca:ca:b9:4a:ff:17:d1:0b:d6:f1:aa:f1:96:c3:
         59:34:aa:5b:cd:7e:c1:e6:bb:ed:32:89:9a:b1:c6:9e:4e:28:
         ad:92:6f:40:5e:11:13:f4:93:c5:e0:cd:18:a0:35:c5:20:51:
         43:92:f8:6a:f2:c2:41:86:65:2d:8a:3b:61:bb:47:79:43:f9:
         80:5c:fc:ad:35:93:12:08:aa:2f:f1:10:e4:7e:13:3b:3e:b9:
         3a:c5:ce:5c:cb:a2:bb:6a:f1:0d:e2:b5:c9:70:07:39:05:96:
         37:73:41:29:1d:73:a7:ef:63:e3:c8:65:ee:6d:c0:d2:49:bb:
         16:c9:f7:a9:c7:de:6a:9d:81:00:86:6d:9b:2c:45:97:79:4d:
         a7:74:04:3a:d8:fc:bb:82:1e:d7:d9:cc:e4:ac:3c:ef:1d:2f:
         c6:6f:94:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 05:30:41 2026 by rpki-client