Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917047F/FD72DE14A3A911E99F75777BC4F9AE02/RFYGB9mXqksKc6pXxvY1ND3QGNY.mft
File:                     RFYGB9mXqksKc6pXxvY1ND3QGNY.mft (raw, json)
Hash identifier:          nERE7y8MqQHkQKKj4C5MtWyvRfsWWTHb57xZ2KkNriY=
Subject key identifier:   51:BE:3D:B2:DC:56:22:68:EB:C1:01:80:53:4F:1E:B3:E7:A9:5C:09
Authority key identifier: 44:56:06:07:D9:97:AA:4B:0A:73:AA:57:C6:F6:35:34:3D:D0:18:D6
Certificate issuer:       /CN=A917047F/serialNumber=44560607D997AA4B0A73AA57C6F635343DD018D6
Certificate serial:       74
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RFYGB9mXqksKc6pXxvY1ND3QGNY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917047F/FD72DE14A3A911E99F75777BC4F9AE02/RFYGB9mXqksKc6pXxvY1ND3QGNY.mft
Manifest number:          0FAE
Signing time:             Tue 06 Oct 2026 17:40:09 +0000
Manifest this update:     Tue 06 Oct 2026 17:40:08 +0000
Manifest next update:     Tue 13 Oct 2026 17:40:08 +0000
Files and hashes:         1: RFYGB9mXqksKc6pXxvY1ND3QGNY.crl (hash: gNFXsyp8nNEuBtYypkfIXWO1lrrwUB0l5W1u+W1hjwc=)
                          2: 58A1565020E711F19CC84E688AEE528E.roa (hash: o/P0eN+v/Q1ipjMbR6r2DTz0KGYCL5D3sUlafnPbhyA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917047F/FD72DE14A3A911E99F75777BC4F9AE02/RFYGB9mXqksKc6pXxvY1ND3QGNY.crl
                          rsync://rpki.apnic.net/member_repository/A917047F/FD72DE14A3A911E99F75777BC4F9AE02/RFYGB9mXqksKc6pXxvY1ND3QGNY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RFYGB9mXqksKc6pXxvY1ND3QGNY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 17:40:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116 (0x74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917047F, serialNumber=44560607D997AA4B0A73AA57C6F635343DD018D6
        Validity
            Not Before: Oct  6 17:40:08 2026 GMT
            Not After : Oct 13 17:40:08 2026 GMT
        Subject: CN=6ac53279-2c3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:7b:bb:5a:bc:be:e1:76:b3:2f:82:36:7c:8c:
                    1e:24:ad:b1:b2:fd:b3:dc:e0:9b:8d:f2:31:06:64:
                    67:3b:d9:67:18:4c:7d:ba:51:83:a7:e8:61:ea:f3:
                    c7:7f:24:b7:d2:f8:ba:34:fa:44:e8:82:58:d5:60:
                    14:76:91:3c:34:13:d7:c8:d4:ef:21:51:d5:9c:35:
                    23:70:21:35:3f:38:0c:2c:15:7a:cd:3c:77:d3:e2:
                    53:42:47:f4:e4:7d:7a:c5:58:ea:12:6b:03:59:f3:
                    a0:78:32:12:4f:bf:2a:fd:79:88:d4:11:cb:74:18:
                    9c:e7:74:60:5b:f6:62:a8:36:c6:28:45:d8:6f:af:
                    a6:93:5b:13:25:5f:b3:7e:e2:5e:70:07:d6:ee:bb:
                    f8:6a:11:8f:51:ce:f5:a2:30:3e:90:e7:a4:9b:c3:
                    ba:da:de:d3:02:12:53:1c:9d:d4:50:50:42:48:c0:
                    65:71:df:03:40:39:49:09:02:df:65:af:e5:e0:bf:
                    10:ab:50:94:13:ea:01:05:ab:bc:68:0c:d2:4e:a5:
                    f6:78:38:aa:bc:92:24:52:60:57:3a:c8:64:40:35:
                    6f:bc:66:68:4b:27:69:35:18:cf:34:1e:9c:ba:81:
                    50:6d:b1:fa:c8:6b:18:8e:f2:cb:0c:d8:f2:2c:9d:
                    9d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:BE:3D:B2:DC:56:22:68:EB:C1:01:80:53:4F:1E:B3:E7:A9:5C:09
            X509v3 Authority Key Identifier:
                keyid:44:56:06:07:D9:97:AA:4B:0A:73:AA:57:C6:F6:35:34:3D:D0:18:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917047F/FD72DE14A3A911E99F75777BC4F9AE02/RFYGB9mXqksKc6pXxvY1ND3QGNY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RFYGB9mXqksKc6pXxvY1ND3QGNY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917047F/FD72DE14A3A911E99F75777BC4F9AE02/RFYGB9mXqksKc6pXxvY1ND3QGNY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:11:72:e8:f0:52:fc:35:6b:dd:16:13:b4:e7:3e:7f:a2:df:
         51:5d:16:80:09:1a:f8:d7:e8:67:04:d8:f3:de:43:cb:6d:c7:
         63:43:88:e1:dd:60:b0:1c:45:aa:8a:1c:72:0f:83:cc:4c:a0:
         38:4b:92:ae:a4:6a:6b:f0:be:41:3b:ed:01:e1:a8:fb:f9:8c:
         38:94:f7:cd:ce:ff:9c:ab:e9:c3:36:d3:79:64:e3:74:2d:be:
         d5:7e:82:72:db:eb:5b:86:59:27:9c:ed:c2:91:59:7d:71:58:
         5d:2e:9e:69:51:6a:0e:b5:0e:39:4d:8e:fb:e2:96:4f:c1:98:
         b9:36:59:75:75:5e:cb:ef:e6:07:7f:91:71:70:4c:21:6d:b1:
         0e:17:4c:7f:3b:d5:2c:87:be:04:78:38:f2:90:77:30:8f:9c:
         0c:98:5a:b4:3e:c5:bd:e0:cb:68:22:0e:77:4c:55:72:dc:f0:
         d0:10:73:d1:8d:a2:55:98:b6:d8:ba:1a:b4:b5:74:17:9a:43:
         c1:f5:4b:28:a7:7c:3f:61:69:6f:e4:59:32:7e:9a:18:28:0d:
         9e:95:21:8b:89:5d:63:ae:92:f4:2b:dd:59:96:91:ba:4d:78:
         88:f8:26:48:97:83:a5:c1:86:9b:b7:d0:db:7e:24:4c:ec:45:
         84:3c:b6:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 15:40:13 2026 by rpki-client