Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft
File:                     FXsL3g48rbKUg5vJgVZVZE2ybpE.mft (raw, json)
Hash identifier:          +J2nSbzCqplz+FAp/Kfcymy9ExOSwidlSmNRoxPX6F0=
Subject key identifier:   C7:BF:F6:67:72:BD:1C:5B:23:EE:93:BA:E6:AB:30:DE:CA:4C:40:11
Authority key identifier: 15:7B:0B:DE:0E:3C:AD:B2:94:83:9B:C9:81:56:55:64:4D:B2:6E:91
Certificate issuer:       /CN=A9148BFA/serialNumber=157B0BDE0E3CADB294839BC9815655644DB26E91
Certificate serial:       0677
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft
Manifest number:          062E
Signing time:             Fri 04 Sep 2026 22:45:09 +0000
Manifest this update:     Fri 04 Sep 2026 22:45:08 +0000
Manifest next update:     Fri 11 Sep 2026 22:45:08 +0000
Files and hashes:         1: FXsL3g48rbKUg5vJgVZVZE2ybpE.crl (hash: DrG9ccTDrfcuqhpT83cZh7WjPkKN44gbsdn/ubzIxCg=)
                          2: F6DBFB92B3F311F0929DA35BC4F9AE02.roa (hash: bGSs+GuQ8roH3KjNYjFOeAuN1jZZUS7buyDDBU1Jy+0=)
                          3: B589332C498611EF90B46962C4F9AE02.roa (hash: qQDURXc4miq6wSpyJJAXvi86X+8AWTAJoPUGTUH+F/w=)
                          4: 9DF3BC14E48011F0AC3D40BC426F56BC.roa (hash: 34Y8hUwkkH6eRmIMWTovUQbEQ5leyxSbVRWa0szDZH0=)
                          5: CE7C5CB68D7111F199777AC57111F970.roa (hash: GfLxsqqj8OHM9JcOwSeCnw3ScXddEC0QU7of3bUAy9Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.crl
                          rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 20:14:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1655 (0x677)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148BFA, serialNumber=157B0BDE0E3CADB294839BC9815655644DB26E91
        Validity
            Not Before: Sep  4 22:45:08 2026 GMT
            Not After : Sep 11 22:45:08 2026 GMT
        Subject: CN=6a9b49f4-a46d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f5:1c:a2:b8:eb:b8:e0:eb:a4:ab:81:88:ae:
                    9d:d5:6a:1d:24:ea:a0:05:57:00:68:6d:95:9b:29:
                    42:0c:b3:d7:74:2c:50:2b:95:f2:ad:d7:c5:a7:3b:
                    03:7d:19:5d:d6:61:85:eb:1f:5a:6a:8c:ac:f2:0d:
                    aa:a9:01:bf:f8:6a:ae:eb:98:cd:53:12:5d:0e:42:
                    c2:e6:79:f7:be:da:b3:11:7e:d5:06:75:7b:88:d7:
                    52:8e:df:a1:ab:f8:fb:70:20:1f:bf:f4:c6:71:57:
                    7e:c3:97:17:85:14:cc:47:cc:6d:60:d4:e1:f2:1e:
                    30:3d:89:8e:0d:dd:07:0d:62:5b:d2:60:b6:b2:3a:
                    8e:b5:40:e0:14:37:22:1d:64:a2:00:5b:df:63:74:
                    ed:b5:9d:0a:bf:78:d7:a0:57:f7:fc:22:d5:dc:02:
                    58:04:f7:43:84:da:4a:91:8c:8f:46:14:a8:1a:76:
                    d9:47:a9:65:ef:7e:fe:ac:e2:ab:43:cd:c3:19:29:
                    32:28:30:ea:54:24:6c:c4:9e:3f:52:fe:de:4a:73:
                    a1:95:d1:33:47:73:1c:fe:c3:5d:20:bc:5b:0c:0a:
                    f2:1b:10:29:11:2d:85:d0:3f:fe:c3:7e:6f:a7:5d:
                    31:d7:02:16:dd:45:ad:7a:61:b0:b1:6b:c2:8f:60:
                    d4:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:BF:F6:67:72:BD:1C:5B:23:EE:93:BA:E6:AB:30:DE:CA:4C:40:11
            X509v3 Authority Key Identifier:
                keyid:15:7B:0B:DE:0E:3C:AD:B2:94:83:9B:C9:81:56:55:64:4D:B2:6E:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:b0:2d:62:f5:15:78:ca:56:3a:f9:6e:80:42:08:2c:72:f2:
         a8:fd:da:c0:66:33:b2:4a:49:af:47:3d:8d:6b:ba:06:29:8a:
         47:b7:96:27:b0:c0:7b:e3:40:50:c5:f9:f0:aa:a2:50:a0:63:
         25:36:ea:dd:25:c3:64:50:e9:52:f9:f3:9f:19:7f:5a:f0:8d:
         2f:4e:f2:83:d1:97:ed:ea:91:43:69:d0:fd:3b:cf:3f:4f:92:
         8f:92:d1:7d:4b:6c:04:be:6b:6e:9e:04:33:1e:07:53:75:9f:
         44:e7:29:b1:d2:9f:0c:74:78:8b:3c:e0:67:a3:8f:4e:ee:82:
         8c:47:28:d5:7d:75:3f:de:53:10:d0:18:84:9c:fd:ea:4d:7a:
         a8:b8:be:1d:89:52:fb:97:4e:ad:fd:0e:0b:da:2d:5c:2e:30:
         65:b0:62:3a:ed:6e:b2:b7:b9:71:78:cb:1c:c4:b5:50:94:89:
         1e:0e:e3:67:a0:aa:6a:25:1a:6d:88:3f:59:d7:d8:5c:07:4a:
         47:8c:ea:42:31:0f:e0:83:93:cc:72:5b:c0:f9:5f:85:5e:cc:
         93:0f:2e:24:ed:c8:fb:8e:4e:b1:6a:ab:70:65:6d:fc:4b:76:
         aa:e4:77:dd:16:a3:1f:cc:4f:2b:81:90:24:ff:bc:fc:a1:4d:
         11:b1:33:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:50:58 2026 by rpki-client