Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.mft
File:                     FZbEu-cy2oXLg-incIc-o0E3AaU.mft (raw, json)
Hash identifier:          cekqVvVIgjkdnFeVARBv1n8zxtqWzB21KDlu9glInU8=
Subject key identifier:   97:B1:28:F8:8A:FF:95:98:12:1F:83:14:5F:0E:68:E4:EA:63:D5:CC
Authority key identifier: 15:96:C4:BB:E7:32:DA:85:CB:83:E8:A7:70:87:3E:A3:41:37:01:A5
Certificate issuer:       /CN=A91771E3/serialNumber=1596C4BBE732DA85CB83E8A770873EA3413701A5
Certificate serial:       145E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FZbEu-cy2oXLg-incIc-o0E3AaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.mft
Manifest number:          1423
Signing time:             Thu 20 Aug 2026 16:54:01 +0000
Manifest this update:     Thu 20 Aug 2026 16:54:01 +0000
Manifest next update:     Thu 27 Aug 2026 16:54:01 +0000
Files and hashes:         1: FZbEu-cy2oXLg-incIc-o0E3AaU.crl (hash: nqdOgmrPjrZvSn+LVJBAlDJfIxbtZ0TAYgZUAhX3AhI=)
                          2: 463974C6836A11F19811391468A30FBC.roa (hash: 63HJ26bNQe6POKVE1alnti/v5tq8LxhAzgUKN8G3o68=)
                          3: 443241A0321B11EA83044473C4F9AE02.roa (hash: HX+aYGof6uuUT5n6qyG5744PYZCEJDrFxYbRkwQ0maE=)
                          4: 4B18BBA8A9F811EEB85DBD24C4F9AE02.roa (hash: UwKIxZZ+vZaGeU7IZRtNE/Cd4EONSN52pyGN0S6FpMI=)
                          5: BC507E02836A11F1B6AFA07868A30FBC.roa (hash: RgAXYPCqL+GT6+xQaTUTFiCAEuxqgRI1EjIIuWZbsk8=)
                          6: 1FD07ED231FB11EAA335E10FC4F9AE02.roa (hash: YJF7+er3dbDA0eaKTlwDNbJtYejMK42xL43RXDF6IfQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.crl
                          rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FZbEu-cy2oXLg-incIc-o0E3AaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5214 (0x145e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91771E3, serialNumber=1596C4BBE732DA85CB83E8A770873EA3413701A5
        Validity
            Not Before: Aug 20 16:54:01 2026 GMT
            Not After : Aug 27 16:54:01 2026 GMT
        Subject: CN=6a873129-6120
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ec:54:86:23:b3:de:e1:ab:e4:49:a1:8e:61:
                    eb:fb:b1:ff:2f:8a:16:27:dd:15:8b:9c:23:90:b0:
                    46:2b:ac:08:6f:58:c2:af:7d:88:ec:4a:95:4f:5f:
                    81:ad:cf:3a:c4:b7:63:18:15:91:2e:66:2b:6d:ec:
                    c1:72:da:8c:b6:48:51:75:84:ca:30:67:12:87:74:
                    fb:6a:26:25:f5:ab:f8:94:b8:30:e5:cd:e5:a3:9a:
                    c5:3c:f5:4a:80:18:c2:ac:c3:ef:9a:2d:f0:e3:07:
                    c4:02:3b:b6:52:f3:eb:da:77:3f:6b:cb:88:e5:dc:
                    a2:c4:66:41:7e:5d:ca:ea:64:da:c8:42:e6:ce:58:
                    2a:cd:46:ca:bf:1c:7c:99:47:b5:7a:1a:75:49:9b:
                    f8:51:f8:32:37:86:e8:fe:46:12:2e:dc:90:41:61:
                    e4:c4:3a:59:40:7a:4a:08:f8:74:30:d3:3f:46:ec:
                    c3:d2:7e:12:b8:93:20:d6:cf:03:58:26:ab:50:4d:
                    fa:97:bf:e1:90:1e:2e:6e:67:5f:7a:10:4f:5e:ed:
                    f7:84:d1:84:a9:f6:2b:50:5a:19:39:19:24:99:82:
                    88:21:38:3a:3b:30:7a:94:a8:b8:59:37:20:d0:f8:
                    3e:86:1a:a2:59:ca:5f:34:b7:37:70:cd:9f:03:21:
                    9a:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:B1:28:F8:8A:FF:95:98:12:1F:83:14:5F:0E:68:E4:EA:63:D5:CC
            X509v3 Authority Key Identifier:
                keyid:15:96:C4:BB:E7:32:DA:85:CB:83:E8:A7:70:87:3E:A3:41:37:01:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FZbEu-cy2oXLg-incIc-o0E3AaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:31:fa:31:16:50:5c:f1:56:ea:6b:e0:17:c6:f2:70:cb:d6:
         4f:4f:43:25:06:7b:74:28:9c:39:57:08:7d:8d:50:2f:d4:c3:
         64:a5:65:e6:18:27:40:d3:9e:71:82:a3:27:1e:8f:60:f8:c5:
         44:e8:a5:db:b1:da:8d:fd:0f:0a:23:5b:49:04:e9:7b:4a:b2:
         a7:15:d8:61:c9:92:6f:ce:49:34:a7:52:33:46:25:66:cb:e4:
         8b:07:15:6c:61:36:48:17:36:61:3e:fc:6d:fb:69:ca:97:a1:
         7c:32:b0:49:f2:a7:ad:03:04:79:96:03:05:fe:5d:6f:5c:2e:
         ec:f5:da:a8:c5:70:3c:b7:f2:33:9c:aa:74:76:3a:8d:5b:f0:
         6a:c2:9f:5e:cf:9d:3b:20:02:b2:60:35:aa:ed:78:b3:4c:51:
         f1:38:50:17:2a:79:96:35:df:f3:c3:1d:1c:50:68:d8:d3:94:
         06:2b:25:5f:87:b7:80:63:08:50:fb:3b:43:a2:be:47:b2:77:
         4d:27:65:03:10:39:eb:91:10:41:8f:db:b8:9b:9e:2c:18:9f:
         ab:94:1a:89:31:7b:d3:a5:85:e4:6b:53:4e:0e:83:52:ed:1c:
         5a:f6:a2:a3:56:f1:52:ba:31:5c:2f:65:cc:8b:a7:00:f9:5b:
         c4:56:99:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 05:55:14 2026 by rpki-client