Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916223F/4EBF27B6F95C11E9B6272285C4F9AE02/Fu3IlWvEE8nFAhkosDvIUPx-ckc.mft
File:                     Fu3IlWvEE8nFAhkosDvIUPx-ckc.mft (raw, json)
Hash identifier:          G+jrM2wCQ8xOgUrvpvFlKcYrQH3wZgImOiyIRLYJabY=
Subject key identifier:   EA:F8:F0:9E:F6:82:3C:A4:A0:DF:B7:1E:82:6D:BB:11:D8:F9:A9:21
Authority key identifier: 16:ED:C8:95:6B:C4:13:C9:C5:02:19:28:B0:3B:C8:50:FC:7E:72:47
Certificate issuer:       /CN=A916223F/serialNumber=16EDC8956BC413C9C5021928B03BC850FC7E7247
Certificate serial:       0D86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fu3IlWvEE8nFAhkosDvIUPx-ckc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916223F/4EBF27B6F95C11E9B6272285C4F9AE02/Fu3IlWvEE8nFAhkosDvIUPx-ckc.mft
Manifest number:          0D7D
Signing time:             Sun 04 Oct 2026 18:02:10 +0000
Manifest this update:     Sun 04 Oct 2026 18:02:10 +0000
Manifest next update:     Sun 11 Oct 2026 18:02:10 +0000
Files and hashes:         1: Fu3IlWvEE8nFAhkosDvIUPx-ckc.crl (hash: Q6lrtFJRu5uaIBoyPH+hqQ+o8DwKtip570EybB+u+qg=)
                          2: 80392340F95D11E9ABF14387C4F9AE02.roa (hash: ASXvIGV5XQpb47JnlEJHWDEczJ8u/zVk1fKYxytG1Yo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916223F/4EBF27B6F95C11E9B6272285C4F9AE02/Fu3IlWvEE8nFAhkosDvIUPx-ckc.crl
                          rsync://rpki.apnic.net/member_repository/A916223F/4EBF27B6F95C11E9B6272285C4F9AE02/Fu3IlWvEE8nFAhkosDvIUPx-ckc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fu3IlWvEE8nFAhkosDvIUPx-ckc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 18:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3462 (0xd86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916223F, serialNumber=16EDC8956BC413C9C5021928B03BC850FC7E7247
        Validity
            Not Before: Oct  4 18:02:10 2026 GMT
            Not After : Oct 11 18:02:10 2026 GMT
        Subject: CN=6ac294a2-7149
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:1e:44:a3:d9:10:3d:1a:44:cb:d6:6c:d9:22:
                    b5:84:12:61:0b:54:20:66:07:85:b8:17:be:c5:9c:
                    d8:03:b1:f2:da:f3:74:a0:cb:ee:49:f2:cd:79:ca:
                    2d:30:3b:bd:3b:b4:60:39:9e:9e:70:54:1a:db:72:
                    69:98:dd:aa:69:99:f7:88:d6:75:2a:2f:fd:a3:50:
                    ee:6f:6f:8f:c5:80:72:07:fe:2c:40:54:62:c0:4f:
                    b1:b9:79:a1:dd:c0:91:88:19:fa:43:06:41:34:4a:
                    da:0f:db:d6:d1:7b:7d:b7:0a:2b:e7:2e:af:58:c4:
                    64:43:23:63:05:f5:20:0b:51:3a:52:03:2c:ad:01:
                    68:c6:68:2d:2c:db:c1:10:a6:da:51:da:9e:bd:ce:
                    c4:67:fb:b5:4f:54:4b:a1:65:d9:60:60:ba:5b:74:
                    c6:d3:b9:bd:17:a9:d7:bd:ad:dd:80:11:1b:eb:15:
                    32:22:7f:62:1d:df:0d:31:87:95:e8:b3:ef:c7:c2:
                    e3:1f:52:1f:23:d7:6e:38:3a:70:78:7c:78:8d:b9:
                    2c:c6:6d:fd:c6:94:c9:75:ec:24:c0:dc:a3:6a:80:
                    3d:66:9c:2f:99:ca:81:70:27:14:b0:47:33:a6:55:
                    d2:05:47:6e:f9:0b:29:7e:4d:8a:1e:68:39:90:5a:
                    05:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:F8:F0:9E:F6:82:3C:A4:A0:DF:B7:1E:82:6D:BB:11:D8:F9:A9:21
            X509v3 Authority Key Identifier:
                keyid:16:ED:C8:95:6B:C4:13:C9:C5:02:19:28:B0:3B:C8:50:FC:7E:72:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916223F/4EBF27B6F95C11E9B6272285C4F9AE02/Fu3IlWvEE8nFAhkosDvIUPx-ckc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fu3IlWvEE8nFAhkosDvIUPx-ckc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916223F/4EBF27B6F95C11E9B6272285C4F9AE02/Fu3IlWvEE8nFAhkosDvIUPx-ckc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:05:8b:cf:ac:81:8b:18:62:cc:6b:17:bf:23:e9:7f:f8:d0:
         08:30:99:7f:5a:cd:e0:6f:cc:3c:77:3d:b6:c7:49:f3:52:f3:
         55:5c:ac:50:5d:d8:65:23:01:e4:68:f1:c4:5f:20:2b:5a:3a:
         1a:d9:a5:c5:b0:e9:06:c5:29:13:cb:92:33:76:74:4e:52:ae:
         af:8a:1d:06:7e:1a:e1:fb:0d:7a:36:f1:55:19:0e:8d:6c:1e:
         ce:09:78:07:2f:a5:87:e1:6b:8b:55:88:9a:8c:16:fb:58:c9:
         90:ef:ff:f6:99:9d:25:7f:44:fe:f8:50:0e:9e:e7:02:9d:a2:
         ed:9d:80:2a:b8:26:40:43:a5:3e:cb:cd:58:f8:cd:a2:e7:07:
         ab:c2:84:36:e8:6b:51:af:4b:f6:b7:6b:0d:ef:5f:26:ad:d8:
         08:32:44:b6:dd:e4:0e:8c:16:c1:62:99:6b:a7:f3:c5:bc:6b:
         c5:ad:50:e0:a6:27:14:d4:f1:5b:c1:cc:44:79:e4:30:0e:41:
         53:4e:75:d5:fa:e4:c6:36:c7:fa:e7:88:48:f8:23:7a:9c:48:
         0b:35:b3:0b:29:ce:63:c0:18:61:ef:3b:e9:bd:09:28:bb:58:
         29:27:3a:f5:7d:e1:d8:6e:f2:21:1a:96:a7:59:77:da:dd:8b:
         16:b6:42:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 02:14:49 2026 by rpki-client