Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91757CB/4ED212DCF2F811EEA3506738C4F9AE02/FzXLqe4W_oXz0oP6W7lHnZryzIY.mft
File:                     FzXLqe4W_oXz0oP6W7lHnZryzIY.mft (raw, json)
Hash identifier:          E4kL1ZLiwnEX5i06+tMldlpWRIqSsIF0s7+pRkPiB4Y=
Subject key identifier:   7A:F4:21:85:E5:52:98:39:03:79:7F:BD:1A:E6:3A:2B:4A:19:91:B8
Authority key identifier: 17:35:CB:A9:EE:16:FE:85:F3:D2:83:FA:5B:B9:47:9D:9A:F2:CC:86
Certificate issuer:       /CN=A91757CB/serialNumber=1735CBA9EE16FE85F3D283FA5BB9479D9AF2CC86
Certificate serial:       01D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FzXLqe4W_oXz0oP6W7lHnZryzIY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91757CB/4ED212DCF2F811EEA3506738C4F9AE02/FzXLqe4W_oXz0oP6W7lHnZryzIY.mft
Manifest number:          01D2
Signing time:             Mon 05 Oct 2026 03:58:54 +0000
Manifest this update:     Mon 05 Oct 2026 03:58:54 +0000
Manifest next update:     Mon 12 Oct 2026 03:58:54 +0000
Files and hashes:         1: FzXLqe4W_oXz0oP6W7lHnZryzIY.crl (hash: iUwkly6k1GEBXllDR5WAJYPRqmgbm2hLln48CraxYmU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91757CB/4ED212DCF2F811EEA3506738C4F9AE02/FzXLqe4W_oXz0oP6W7lHnZryzIY.crl
                          rsync://rpki.apnic.net/member_repository/A91757CB/4ED212DCF2F811EEA3506738C4F9AE02/FzXLqe4W_oXz0oP6W7lHnZryzIY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FzXLqe4W_oXz0oP6W7lHnZryzIY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 03:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 466 (0x1d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91757CB, serialNumber=1735CBA9EE16FE85F3D283FA5BB9479D9AF2CC86
        Validity
            Not Before: Oct  5 03:58:54 2026 GMT
            Not After : Oct 12 03:58:54 2026 GMT
        Subject: CN=6ac3207e-0961
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:70:fe:71:35:b1:d9:43:ea:d6:f2:f8:f5:21:
                    be:13:11:9a:b9:00:92:f7:30:f0:6a:16:6c:e5:59:
                    10:a9:a2:6f:47:28:c9:a9:5f:db:2a:b4:e4:ec:9b:
                    7e:52:3f:76:8c:d1:77:4c:da:8b:3f:49:43:5f:8a:
                    cf:b5:8b:5f:34:fb:68:ba:09:92:a3:96:ec:63:15:
                    25:f5:b5:8e:9b:2e:b0:4d:57:e2:c2:42:f9:7a:e0:
                    7d:43:46:69:ee:44:63:db:7d:19:e1:0f:dc:d9:66:
                    1b:2e:4d:3c:b2:65:86:f2:74:ef:82:fe:f1:46:ed:
                    28:fb:8f:e7:80:0a:78:b0:d6:0a:f7:fe:8c:20:e7:
                    51:d9:09:90:86:61:07:22:c7:c3:61:7f:15:6d:ce:
                    6a:53:30:8b:b8:85:2e:8a:3a:77:59:ee:71:e7:fe:
                    02:b9:0e:04:a4:55:94:e9:38:12:4c:19:41:e0:51:
                    fb:8e:6b:0d:d9:a5:84:fb:05:a3:a0:76:ed:5a:18:
                    13:dd:af:72:6a:a3:de:77:03:76:9a:d6:f5:30:84:
                    b4:5b:65:fb:98:d4:a7:35:06:d8:8d:fa:3d:5f:3a:
                    d1:3b:ef:93:99:f8:bc:4b:e0:96:66:5e:1b:23:3d:
                    c7:5e:e8:31:09:86:0f:79:99:ca:46:2a:f0:ba:11:
                    d1:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:F4:21:85:E5:52:98:39:03:79:7F:BD:1A:E6:3A:2B:4A:19:91:B8
            X509v3 Authority Key Identifier:
                keyid:17:35:CB:A9:EE:16:FE:85:F3:D2:83:FA:5B:B9:47:9D:9A:F2:CC:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91757CB/4ED212DCF2F811EEA3506738C4F9AE02/FzXLqe4W_oXz0oP6W7lHnZryzIY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FzXLqe4W_oXz0oP6W7lHnZryzIY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91757CB/4ED212DCF2F811EEA3506738C4F9AE02/FzXLqe4W_oXz0oP6W7lHnZryzIY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:21:e2:ac:4e:e3:f6:e7:04:81:5e:80:85:00:ca:64:c2:bb:
         97:23:38:d4:c3:6e:83:67:d5:bf:b5:99:e8:cd:88:42:81:ad:
         5b:09:40:68:8b:51:28:61:8e:32:5d:21:6d:33:04:d1:3c:7e:
         1c:b0:f7:7e:71:4d:60:3d:80:cc:15:3a:b8:00:0d:9c:63:63:
         d9:f3:d4:1f:ca:cb:a6:37:b3:94:8a:a2:eb:3d:fb:56:1e:f7:
         be:39:c3:40:c5:5b:f7:db:c1:a6:fa:a2:34:52:b0:b8:9d:05:
         4b:11:e4:17:5a:bd:1d:af:88:21:0c:1b:5b:79:67:57:43:dd:
         99:74:5a:af:79:5d:ce:3c:03:d4:f0:9a:67:1c:97:48:b5:94:
         ef:3e:e8:32:b5:fc:e2:37:73:79:da:b2:9c:51:16:37:d6:f0:
         8f:32:e1:90:33:d7:01:16:3b:7d:64:b1:aa:09:9f:ee:c4:c8:
         ae:28:d3:a0:4d:76:4f:19:fc:66:b3:a2:81:6f:b5:c9:f6:98:
         14:f5:15:a5:c7:ec:08:66:52:8f:f6:af:d6:25:ae:5d:1a:77:
         36:15:43:68:ac:1b:71:ee:65:e8:d2:63:f5:58:89:98:d3:17:
         91:90:17:53:92:0f:c9:00:60:2c:51:d2:bf:be:6f:61:d6:62:
         49:d5:62:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 14:40:29 2026 by rpki-client