Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.mft
File:                     FN2GhClPGzOjE6-48OuhyKADeAk.mft (raw, json)
Hash identifier:          hRpwCuVUYxpUNctxQaj5VDM7NDNmR9+QynYngGlZPII=
Subject key identifier:   40:EF:C5:5D:75:A3:45:5D:D0:82:16:10:AA:A4:0E:43:09:A6:36:99
Authority key identifier: 14:DD:86:84:29:4F:1B:33:A3:13:AF:B8:F0:EB:A1:C8:A0:03:78:09
Certificate issuer:       /CN=A9160A05/serialNumber=14DD8684294F1B33A313AFB8F0EBA1C8A0037809
Certificate serial:       019F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FN2GhClPGzOjE6-48OuhyKADeAk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.mft
Manifest number:          018C
Signing time:             Sun 25 Oct 2026 04:58:24 +0000
Manifest this update:     Sun 25 Oct 2026 04:58:24 +0000
Manifest next update:     Sun 01 Nov 2026 04:58:24 +0000
Files and hashes:         1: FN2GhClPGzOjE6-48OuhyKADeAk.crl (hash: jj+vEvK5aks92w9HGZnAAySVtYb/qQzGOBjbCFCH0+w=)
                          2: E9B0903AF38811EF81B8CE39C4F9AE02.roa (hash: SSKa739rT23rOpIYYisZx12/v/K7+nclE63wWrbXXlU=)
                          3: F7981812F38811EFAC05053AC4F9AE02.roa (hash: EK3pUqrH9H4fquoX1peOlD1L2xEfn/Ee2ouiE9JS3Uk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.crl
                          rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FN2GhClPGzOjE6-48OuhyKADeAk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Nov 2026 04:58:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 415 (0x19f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9160A05, serialNumber=14DD8684294F1B33A313AFB8F0EBA1C8A0037809
        Validity
            Not Before: Oct 25 04:58:24 2026 GMT
            Not After : Nov  1 04:58:24 2026 GMT
        Subject: CN=6add8c70-11f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4a:2a:72:8f:01:f5:f2:51:ea:6c:bd:17:6d:
                    04:7f:e3:33:be:25:68:fd:9d:74:c1:4a:62:dd:53:
                    0a:75:cd:12:3c:61:84:34:43:cb:99:f5:2a:81:61:
                    b8:7a:c1:4a:ee:66:d7:fe:61:19:44:78:92:26:a8:
                    50:bc:4d:1e:68:b9:72:f5:d7:95:16:e2:51:7f:0f:
                    f2:73:39:50:64:fe:98:e2:ca:1c:21:db:0c:51:e1:
                    8d:83:55:e6:85:a4:e0:6f:d2:38:3a:bb:9e:fe:57:
                    ef:6f:ed:d1:dd:80:ed:1f:36:8b:60:2d:60:e2:37:
                    30:27:5b:67:40:ed:35:c5:8d:6d:a0:bf:09:b2:8d:
                    8f:ff:40:f3:b5:da:ba:ca:e0:52:52:fa:08:1f:64:
                    7e:69:b6:ae:3c:b9:b7:89:d7:1b:5a:8e:0b:95:93:
                    e2:28:19:48:e4:6c:9a:2b:72:87:74:94:75:c8:2d:
                    ab:78:b3:d4:99:fa:5c:13:74:0a:15:4e:80:1c:6e:
                    8b:c2:ef:0c:55:df:24:75:d7:40:56:49:96:3d:29:
                    6a:18:64:67:9f:7e:7a:1e:b5:42:8f:c5:28:3d:22:
                    ba:5c:43:00:08:92:83:6a:a3:74:09:04:e6:a3:b4:
                    0d:c5:9a:7c:5e:f0:0b:8c:22:ca:e6:ee:ce:ef:d2:
                    3d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:EF:C5:5D:75:A3:45:5D:D0:82:16:10:AA:A4:0E:43:09:A6:36:99
            X509v3 Authority Key Identifier:
                keyid:14:DD:86:84:29:4F:1B:33:A3:13:AF:B8:F0:EB:A1:C8:A0:03:78:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FN2GhClPGzOjE6-48OuhyKADeAk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:f3:1e:8f:9d:b2:96:7d:ab:af:99:00:d9:10:96:d1:98:4a:
         a6:8c:8e:22:65:2b:dd:fc:bf:17:f0:03:7e:9f:f2:f0:85:b2:
         c5:c3:84:38:2a:c7:bc:6f:ef:03:32:48:c6:17:24:90:2a:6f:
         f2:4d:3b:d6:b9:fc:2c:8c:2f:e9:d1:71:e6:95:c3:90:71:06:
         3a:5e:f2:b6:57:b9:75:59:d2:c8:61:42:5c:60:bf:81:77:e2:
         e0:28:78:ca:eb:b9:ae:a2:66:1c:83:ee:6a:93:34:5d:46:31:
         28:f7:a7:9c:df:2b:57:51:a8:76:db:26:b5:55:19:2a:25:7e:
         6f:3b:42:49:f7:5b:57:96:5e:34:f8:5e:71:56:7f:8f:7a:dc:
         91:1b:6f:68:dc:0f:55:8d:f2:87:c1:40:43:a0:87:a4:02:23:
         8f:e8:bd:e0:16:b7:59:0b:1d:3c:f7:7e:06:bc:92:a9:f0:b9:
         28:79:43:cc:2d:67:b7:4c:ed:12:52:fc:94:86:6f:36:e7:c9:
         12:11:ef:5a:af:1e:08:69:6d:e5:3c:7e:da:2e:f3:7a:25:97:
         87:e9:ab:85:0c:f2:53:43:4c:9b:61:0e:28:e3:57:d7:5d:44:
         d7:a1:6f:3d:90:e1:da:b4:94:f0:ee:45:1a:d6:8d:7d:40:7f:
         cf:8c:27:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 20:39:58 2026 by rpki-client