Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.mft
File:                     fL-BxZ4yXvAGlzELOUX-ocEGs3g.mft (raw, json)
Hash identifier:          tE+1x5vjeK95M+w6iviauIW7J1yYRjbOb/71P12ZaEQ=
Subject key identifier:   EF:44:1A:9A:ED:BD:CF:8D:A9:18:D9:ED:A9:35:7C:09:A0:11:C4:A3
Authority key identifier: 7C:BF:81:C5:9E:32:5E:F0:06:97:31:0B:39:45:FE:A1:C1:06:B3:78
Certificate issuer:       /CN=A913D02A/serialNumber=7CBF81C59E325EF00697310B3945FEA1C106B378
Certificate serial:       0C52
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fL-BxZ4yXvAGlzELOUX-ocEGs3g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.mft
Manifest number:          0C4F
Signing time:             Fri 02 Oct 2026 18:57:45 +0000
Manifest this update:     Fri 02 Oct 2026 18:57:44 +0000
Manifest next update:     Fri 09 Oct 2026 18:57:44 +0000
Files and hashes:         1: fL-BxZ4yXvAGlzELOUX-ocEGs3g.crl (hash: J2SPxGlTsGNMW6dLvkKzm/Hp14VH94WLOSF0CrNuLWA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.crl
                          rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fL-BxZ4yXvAGlzELOUX-ocEGs3g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 18:57:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3154 (0xc52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913D02A, serialNumber=7CBF81C59E325EF00697310B3945FEA1C106B378
        Validity
            Not Before: Oct  2 18:57:44 2026 GMT
            Not After : Oct  9 18:57:44 2026 GMT
        Subject: CN=6abffea8-dfc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1c:c8:96:db:fa:63:bf:84:6e:1e:c4:17:ef:
                    17:43:fa:24:97:48:ea:25:78:7e:6e:0c:9c:6d:7c:
                    68:1b:a6:19:7f:02:aa:e9:8d:1d:5d:be:40:7f:47:
                    8b:d4:38:74:5a:dd:de:36:0d:0b:9a:d3:ef:10:8b:
                    f1:5d:29:6c:ac:11:12:7d:a1:e1:1a:29:7a:29:dd:
                    69:9b:11:33:d0:b0:ff:b7:ed:26:41:1a:d9:52:fd:
                    8d:a7:40:ee:71:24:52:86:b1:b5:53:78:b7:33:e9:
                    6a:56:b7:52:a9:2c:da:39:49:ce:ac:16:85:e6:55:
                    e1:1a:a0:31:a2:ea:10:eb:57:cd:04:12:45:47:ce:
                    96:27:97:84:f8:ca:79:b5:dd:31:2a:ba:ea:47:0e:
                    fc:52:1c:38:7b:d9:fe:e2:7f:b6:d8:ad:67:35:81:
                    87:88:99:21:9e:8d:1b:6d:7c:3f:84:df:b4:ee:c9:
                    fd:61:2c:9a:91:c5:4f:4d:e9:d4:8d:3e:3d:eb:37:
                    34:84:94:22:81:6b:a3:3d:a2:13:a5:3d:6c:3d:df:
                    82:8e:74:ad:1c:b7:4a:29:d1:4b:66:3a:de:c3:8f:
                    ab:95:22:29:12:57:81:38:21:a0:ea:6f:d0:4c:81:
                    95:ef:01:d1:e4:da:cf:13:e5:33:af:6f:c7:32:0c:
                    32:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:44:1A:9A:ED:BD:CF:8D:A9:18:D9:ED:A9:35:7C:09:A0:11:C4:A3
            X509v3 Authority Key Identifier:
                keyid:7C:BF:81:C5:9E:32:5E:F0:06:97:31:0B:39:45:FE:A1:C1:06:B3:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fL-BxZ4yXvAGlzELOUX-ocEGs3g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:1f:f9:e0:37:05:c0:3c:be:8c:73:3c:38:8e:af:bd:0e:56:
         de:a1:c9:41:eb:6b:03:0c:96:90:2d:4a:1d:5a:ba:fc:76:0b:
         54:5d:fb:7b:66:0b:2a:2c:fa:74:24:be:f2:a3:e3:09:ec:d2:
         1f:44:d1:0a:ab:78:51:d7:11:d7:fb:69:15:9d:96:a2:2f:a9:
         7b:b4:e8:08:8d:4e:e5:65:e1:3c:b5:cd:52:f4:93:a2:5c:09:
         f0:84:47:79:c1:fb:5d:20:91:99:38:91:07:97:bf:7e:a9:7b:
         87:d2:df:8c:61:7b:15:f8:da:3a:27:eb:61:3f:b6:ba:b4:9c:
         9e:e2:89:5e:6f:b4:b0:18:0f:80:1c:0b:c9:64:7d:63:72:94:
         0c:12:e8:2e:84:66:2b:af:5e:5f:fb:df:59:ae:b9:21:45:39:
         d2:fa:87:49:e6:9a:fe:6d:c1:05:0a:dd:99:b1:7d:25:64:b0:
         c8:07:27:34:3f:fd:9c:30:4c:dd:a2:6a:04:c9:1a:38:da:f1:
         d0:fe:cb:c6:e3:5e:e3:e5:67:3b:73:e9:a5:59:e6:eb:c5:22:
         9e:f8:74:fd:d3:33:c5:d5:97:86:54:f4:49:d1:49:04:e8:f0:
         b9:7a:9e:0b:26:05:95:cb:9f:13:ae:59:b4:ca:48:b7:47:19:
         d8:b6:4d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 08:21:30 2026 by rpki-client