Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91443EA/C55C1B7E973C11F1B9A51BDA3611F970/FzfOVvQLH76F5uXrA0_WsqFkb8w.mft
File:                     FzfOVvQLH76F5uXrA0_WsqFkb8w.mft (raw, json)
Hash identifier:          ioaL1FfTM5kltWhngHV2jAgcnnE2nQFKLHXF5+EjSRk=
Subject key identifier:   7E:00:DD:3C:B2:E1:12:38:EC:73:ED:45:9B:9F:BD:52:78:C8:71:86
Authority key identifier: 17:37:CE:56:F4:0B:1F:BE:85:E6:E5:EB:03:4F:D6:B2:A1:64:6F:CC
Certificate issuer:       /CN=A91443EA/serialNumber=1737CE56F40B1FBE85E6E5EB034FD6B2A1646FCC
Certificate serial:       1F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FzfOVvQLH76F5uXrA0_WsqFkb8w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91443EA/C55C1B7E973C11F1B9A51BDA3611F970/FzfOVvQLH76F5uXrA0_WsqFkb8w.mft
Manifest number:          1D
Signing time:             Sat 03 Oct 2026 09:41:19 +0000
Manifest this update:     Sat 03 Oct 2026 09:41:19 +0000
Manifest next update:     Sat 10 Oct 2026 09:41:19 +0000
Files and hashes:         1: FzfOVvQLH76F5uXrA0_WsqFkb8w.crl (hash: i4q1kcZSp2BBC8ipxEiX42ZpqxGTa3z15Z4jL4wsMkY=)
                          2: 41339BFA973D11F184508C1C3711F970.roa (hash: ErCTpmbM2VNJ1hvCRE7AmqqAa2l2NDuA3762i8vtV40=)
                          3: 72T5zLUyeM7VLgn276kJdhh3FIs.asa (hash: o/a6Ef5+Irp8WGLBEhxdmtOBpYmNP2JzAw60ujiyavU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91443EA/C55C1B7E973C11F1B9A51BDA3611F970/FzfOVvQLH76F5uXrA0_WsqFkb8w.crl
                          rsync://rpki.apnic.net/member_repository/A91443EA/C55C1B7E973C11F1B9A51BDA3611F970/FzfOVvQLH76F5uXrA0_WsqFkb8w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FzfOVvQLH76F5uXrA0_WsqFkb8w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 09:41:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31 (0x1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91443EA, serialNumber=1737CE56F40B1FBE85E6E5EB034FD6B2A1646FCC
        Validity
            Not Before: Oct  3 09:41:19 2026 GMT
            Not After : Oct 10 09:41:19 2026 GMT
        Subject: CN=6ac0cdbf-d9fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:08:0d:cb:12:41:7f:89:0c:48:2e:8b:c8:4d:
                    49:c2:b6:7f:87:84:ac:96:90:0b:01:bb:50:71:d4:
                    32:76:b6:60:d8:f0:2f:af:49:f2:8d:12:7e:53:1b:
                    03:03:8e:82:1a:0c:a1:a3:81:dc:66:b7:9f:5f:18:
                    2a:dc:b5:ed:fc:dd:2f:e7:09:e7:91:4f:28:aa:a4:
                    1f:49:6e:79:0a:cf:48:3e:58:dc:56:f1:2c:bd:8a:
                    1c:a1:02:5b:f6:00:c0:e0:84:4f:c7:34:53:f8:4e:
                    5b:5a:08:2b:e8:f3:7b:36:79:e4:31:7b:d8:0d:27:
                    6d:43:f0:62:97:f7:7c:85:64:31:d0:d0:f3:f4:0d:
                    64:1c:b2:af:c1:bf:c2:4e:f9:95:7e:1a:84:66:db:
                    91:20:9b:a9:bb:36:bf:cf:3f:88:91:20:87:8a:1e:
                    be:52:56:87:dc:c1:a2:7d:0a:50:67:98:60:2a:d7:
                    85:76:c7:a3:6b:f7:40:f7:4c:6d:47:0b:b3:33:2b:
                    2a:6d:5b:73:56:10:d5:72:43:e6:76:db:ad:65:6a:
                    b4:9c:e5:4c:8f:06:d0:fd:4c:26:88:26:dd:c0:fa:
                    8a:a8:f7:2b:49:10:88:9a:ca:fc:fd:4f:8f:7b:0a:
                    f3:62:83:69:b9:1d:0e:78:31:89:63:b5:aa:9b:02:
                    0b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:00:DD:3C:B2:E1:12:38:EC:73:ED:45:9B:9F:BD:52:78:C8:71:86
            X509v3 Authority Key Identifier:
                keyid:17:37:CE:56:F4:0B:1F:BE:85:E6:E5:EB:03:4F:D6:B2:A1:64:6F:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91443EA/C55C1B7E973C11F1B9A51BDA3611F970/FzfOVvQLH76F5uXrA0_WsqFkb8w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FzfOVvQLH76F5uXrA0_WsqFkb8w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91443EA/C55C1B7E973C11F1B9A51BDA3611F970/FzfOVvQLH76F5uXrA0_WsqFkb8w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:1d:38:85:50:a8:fd:82:b6:b6:10:5a:6f:4d:97:f2:44:82:
         18:f6:f6:91:80:4e:d7:bf:91:26:a7:7e:d1:a2:d4:32:99:57:
         e0:f1:95:a5:70:4b:f4:4a:60:54:1b:3f:91:e1:38:9f:5d:cf:
         41:bf:09:bc:cb:11:27:51:cc:7d:e2:25:23:3b:56:c4:c3:79:
         d4:c9:59:b8:9c:66:26:d9:f6:08:7e:45:30:63:1a:59:29:87:
         c3:a3:e8:24:df:ca:0a:6f:b3:6c:0a:73:87:ae:0b:c5:44:a4:
         94:4b:f6:d5:4e:b4:47:86:b8:4b:c8:62:48:b5:38:42:78:cd:
         c3:7d:57:83:64:e5:7c:ed:0d:3c:82:5b:96:86:7e:5a:19:bc:
         4c:8a:63:7d:f5:da:9b:36:85:05:ca:d9:87:e5:28:18:56:89:
         ff:2a:8a:84:20:df:13:59:cd:32:95:58:b8:e3:ae:18:56:ef:
         83:86:11:0a:50:5a:ff:7a:6b:ff:57:ff:34:c6:d6:a8:8d:c4:
         c1:60:39:0b:04:97:cc:70:aa:ef:d7:a8:c8:80:71:4e:93:af:
         22:c6:c9:c0:e6:14:d2:84:1f:09:b3:c6:8b:f7:2d:a3:54:6a:
         40:36:23:16:8c:86:2d:e4:5a:2f:7c:ca:d0:bd:ba:14:67:a5:
         98:d4:81:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 13:38:23 2026 by rpki-client