Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft
File:                     FXsL3g48rbKUg5vJgVZVZE2ybpE.mft (raw, json)
Hash identifier:          MNHuLjyU0KFO+cqTCG6NBhKhmiV0k1nlo8R4m7iRvYE=
Subject key identifier:   09:F3:53:1D:88:4C:C9:C8:91:AE:93:CB:FF:38:4A:9E:32:8B:86:FD
Authority key identifier: 15:7B:0B:DE:0E:3C:AD:B2:94:83:9B:C9:81:56:55:64:4D:B2:6E:91
Certificate issuer:       /CN=A9148BFA/serialNumber=157B0BDE0E3CADB294839BC9815655644DB26E91
Certificate serial:       0692
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft
Manifest number:          0648
Signing time:             Sat 24 Oct 2026 22:52:07 +0000
Manifest this update:     Sat 24 Oct 2026 22:52:06 +0000
Manifest next update:     Sat 31 Oct 2026 22:52:06 +0000
Files and hashes:         1: FXsL3g48rbKUg5vJgVZVZE2ybpE.crl (hash: fpCpownWphYVaO9VIRR4y9T2WwKKciekt7+n47ZvXRk=)
                          2: F5DFB1A6CD1B11F19D97589A0666CEF9.roa (hash: 1z3U6r7srJMsG9DhVTJU+5Mt7lHfVXl6uNKmn6SG2QA=)
                          3: CE7C5CB68D7111F199777AC57111F970.roa (hash: GfLxsqqj8OHM9JcOwSeCnw3ScXddEC0QU7of3bUAy9Y=)
                          4: F6DBFB92B3F311F0929DA35BC4F9AE02.roa (hash: bGSs+GuQ8roH3KjNYjFOeAuN1jZZUS7buyDDBU1Jy+0=)
                          5: B589332C498611EF90B46962C4F9AE02.roa (hash: qQDURXc4miq6wSpyJJAXvi86X+8AWTAJoPUGTUH+F/w=)
                          6: 9DF3BC14E48011F0AC3D40BC426F56BC.roa (hash: 34Y8hUwkkH6eRmIMWTovUQbEQ5leyxSbVRWa0szDZH0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.crl
                          rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 22:52:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1682 (0x692)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148BFA, serialNumber=157B0BDE0E3CADB294839BC9815655644DB26E91
        Validity
            Not Before: Oct 24 22:52:06 2026 GMT
            Not After : Oct 31 22:52:06 2026 GMT
        Subject: CN=6add3697-47d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2b:9f:a7:8c:fd:9a:e4:ba:c5:1d:ea:6b:83:
                    e4:51:b8:14:b7:4d:10:0a:6a:46:f8:1d:72:c0:c8:
                    a5:ca:53:bd:bf:f3:0b:e1:e0:6c:4c:9e:13:dd:e8:
                    76:23:34:af:09:ab:6d:4d:12:40:83:1f:81:2d:2b:
                    58:4c:d6:6d:48:ed:00:3e:03:9e:02:0d:eb:11:65:
                    d9:cd:12:ae:d5:70:e9:3e:f0:09:aa:96:9d:a4:4c:
                    01:77:9c:c9:00:17:cb:93:78:6c:3f:06:d3:77:b3:
                    eb:83:3e:17:37:a2:0b:22:15:50:66:31:39:77:16:
                    74:3d:ce:b5:7d:cf:27:14:bd:ae:0d:51:e0:af:65:
                    1c:96:f0:cf:85:42:21:2d:a5:e5:3f:78:48:31:4d:
                    f0:a3:d1:60:04:f0:7f:b3:b5:78:1c:54:3f:c1:93:
                    c4:93:90:45:bc:18:3d:3c:24:01:0f:56:04:c1:aa:
                    99:9e:e1:48:c6:2d:c6:59:58:cd:5e:16:2f:88:16:
                    26:3a:e2:8d:74:b8:f6:d0:d6:ef:4a:62:05:e3:1a:
                    ff:5b:8e:54:89:46:42:31:94:81:85:61:7c:ed:cf:
                    b9:30:ce:72:13:6d:df:9f:98:6d:ef:83:96:ec:d0:
                    3d:69:e6:98:e2:10:ff:07:90:9e:93:a4:2e:15:ed:
                    26:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:F3:53:1D:88:4C:C9:C8:91:AE:93:CB:FF:38:4A:9E:32:8B:86:FD
            X509v3 Authority Key Identifier:
                keyid:15:7B:0B:DE:0E:3C:AD:B2:94:83:9B:C9:81:56:55:64:4D:B2:6E:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:51:94:c2:2d:43:39:e2:f4:1a:aa:d0:8e:78:16:e8:9b:ce:
         ac:05:98:38:25:8d:17:2c:a9:d6:c0:d0:8a:0f:b7:f7:bd:60:
         23:a6:3e:bb:f4:d6:9d:8a:63:de:88:9d:a4:d6:1c:5e:1a:22:
         2f:8f:fb:9d:e5:e3:d6:9c:29:ab:9a:fe:86:f3:86:82:36:c6:
         c5:f3:26:31:06:a4:b2:85:07:8d:83:39:67:b1:af:d6:f3:13:
         27:6f:8f:d2:81:e5:86:49:60:58:d7:da:7d:70:e1:ca:3d:e4:
         45:98:73:88:a7:59:b9:b1:d4:13:5f:05:d8:1f:c0:87:f1:11:
         08:7b:9f:37:79:2f:ec:aa:cd:4b:11:8e:ba:b2:ac:c0:4d:ab:
         b7:89:a5:e1:ae:73:a5:67:2d:9e:59:28:9e:12:70:af:fe:c7:
         ee:62:cc:fe:77:5c:6a:1d:19:0a:05:5f:f7:e6:de:2c:97:28:
         0b:42:d3:25:2f:d6:a8:b5:d6:7d:90:f1:82:cb:39:6d:50:1f:
         79:a5:17:91:77:61:89:f4:67:ee:dc:bf:ca:c6:0b:17:3c:67:
         9c:01:32:5f:00:38:92:df:30:36:cb:2e:65:e1:75:0b:c0:e3:
         73:9c:83:04:b6:8d:f0:db:a9:a9:63:5a:39:6a:17:4c:9f:18:
         cb:71:e5:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 09:54:21 2026 by rpki-client