Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91627F3/779F6E9283F811EC816B0367C4F9AE02/FSze4Zs7fRcbTKrQNbUymFTTbcI.mft
File:                     FSze4Zs7fRcbTKrQNbUymFTTbcI.mft (raw, json)
Hash identifier:          fl8pUQLLFRzoOTAKk41x05mGYwGYHFAdNeUHYmY1klI=
Subject key identifier:   0C:42:E6:03:69:B0:36:06:FF:AB:8E:B0:4E:A4:6C:C4:0B:87:20:C1
Authority key identifier: 15:2C:DE:E1:9B:3B:7D:17:1B:4C:AA:D0:35:B5:32:98:54:D3:6D:C2
Certificate issuer:       /CN=A91627F3/serialNumber=152CDEE19B3B7D171B4CAAD035B5329854D36DC2
Certificate serial:       04DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSze4Zs7fRcbTKrQNbUymFTTbcI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91627F3/779F6E9283F811EC816B0367C4F9AE02/FSze4Zs7fRcbTKrQNbUymFTTbcI.mft
Manifest number:          04CF
Signing time:             Fri 04 Sep 2026 23:34:30 +0000
Manifest this update:     Fri 04 Sep 2026 23:34:30 +0000
Manifest next update:     Fri 11 Sep 2026 23:34:30 +0000
Files and hashes:         1: FSze4Zs7fRcbTKrQNbUymFTTbcI.crl (hash: ODYAfoF9MfTKIBPeEP2nyIviGWYLuw5TTnExwARrpgA=)
                          2: FF9D74D8735F11F093707251C4F9AE02.roa (hash: giiA+gbjaObpoGPhZNDd/Pz8GB9dBt3ThgFxVbT5y50=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91627F3/779F6E9283F811EC816B0367C4F9AE02/FSze4Zs7fRcbTKrQNbUymFTTbcI.crl
                          rsync://rpki.apnic.net/member_repository/A91627F3/779F6E9283F811EC816B0367C4F9AE02/FSze4Zs7fRcbTKrQNbUymFTTbcI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSze4Zs7fRcbTKrQNbUymFTTbcI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 23:34:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1243 (0x4db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91627F3, serialNumber=152CDEE19B3B7D171B4CAAD035B5329854D36DC2
        Validity
            Not Before: Sep  4 23:34:30 2026 GMT
            Not After : Sep 11 23:34:30 2026 GMT
        Subject: CN=6a9b5586-409b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b9:ec:f5:e1:29:18:22:97:61:68:e6:fc:d4:
                    a3:38:a5:0e:16:83:3f:b2:e6:87:d5:2a:d9:5d:d7:
                    34:19:26:0f:db:22:1f:6f:55:04:47:8c:71:07:f1:
                    25:81:55:b1:49:91:25:6a:6b:4a:53:d0:78:cd:c4:
                    f1:a4:9c:76:55:2c:92:70:e1:d5:e8:05:04:01:32:
                    6e:15:f3:2b:3e:85:5c:b8:d9:28:1c:43:a1:21:8e:
                    5f:68:15:fd:84:e4:c2:d5:ab:38:f1:e8:f1:78:93:
                    f1:d5:39:78:76:b7:69:71:d6:01:da:16:2e:d8:18:
                    8c:ef:d6:a0:e9:ab:3a:f6:b8:d1:27:9e:e7:15:08:
                    92:5a:ce:9d:a2:ac:2e:a8:f1:3d:77:37:ee:4c:03:
                    30:11:5e:6e:04:f5:50:03:6d:b6:b4:72:6c:95:f9:
                    cb:c7:21:d0:c8:cf:8f:39:ef:3c:e2:f5:ec:f2:da:
                    0c:40:5c:4c:8b:22:c3:2a:74:23:d6:9a:c7:75:48:
                    13:44:cb:7d:45:c3:4f:ce:d4:e6:81:16:ff:46:2f:
                    56:ec:d8:f7:bb:ba:ef:9f:99:d1:5f:6a:f0:ec:3a:
                    f4:f9:83:4d:19:e3:d5:a1:e8:db:ad:b6:19:34:44:
                    1a:a1:61:5f:72:93:f5:4b:df:a2:4a:0d:4d:3e:ec:
                    44:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:42:E6:03:69:B0:36:06:FF:AB:8E:B0:4E:A4:6C:C4:0B:87:20:C1
            X509v3 Authority Key Identifier:
                keyid:15:2C:DE:E1:9B:3B:7D:17:1B:4C:AA:D0:35:B5:32:98:54:D3:6D:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91627F3/779F6E9283F811EC816B0367C4F9AE02/FSze4Zs7fRcbTKrQNbUymFTTbcI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSze4Zs7fRcbTKrQNbUymFTTbcI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91627F3/779F6E9283F811EC816B0367C4F9AE02/FSze4Zs7fRcbTKrQNbUymFTTbcI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:36:83:b5:65:e1:37:9f:68:26:ca:3e:d2:26:a2:12:da:33:
         a9:c3:84:63:f6:67:41:7b:6a:bd:e3:c5:a1:47:3d:c5:a6:88:
         e2:70:bd:7a:24:29:c4:74:4e:ff:e0:6e:7c:36:1e:4b:8b:b5:
         43:c2:f1:bd:0b:54:b1:3d:cb:15:78:63:f7:f5:08:bb:8d:21:
         a8:7a:a4:9f:9f:0d:2e:80:c4:43:a0:d2:5b:61:72:cb:af:4b:
         e9:26:7d:ef:9d:fe:d5:41:0b:02:fd:fe:44:a4:e3:6f:74:75:
         00:1d:c6:ad:78:dd:4b:c6:9f:02:b9:a8:4c:9d:9d:7b:56:57:
         a1:7d:65:bd:9c:0c:60:b2:bb:87:47:01:ce:91:bf:c7:ca:70:
         06:2d:5a:85:85:66:cb:50:4e:45:8a:dc:53:48:d5:31:ae:f2:
         d3:e3:9b:1f:7f:b3:c6:4e:1f:f2:a5:f3:01:ec:d5:7b:9f:36:
         c0:82:69:50:b1:0d:ae:da:d7:bb:2b:65:60:f1:37:09:2c:50:
         7d:05:86:91:de:be:57:84:5d:6b:b5:a0:04:db:8b:a1:8f:bc:
         0f:28:b3:88:6c:b0:96:a7:d7:e0:28:00:c1:37:9e:c6:e7:a0:
         ef:41:56:a7:af:4b:fd:ec:bb:2b:6b:e7:15:46:75:7e:4f:51:
         4d:c6:85:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 08:53:49 2026 by rpki-client