Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917EFB8/D980A1721D9511E292150E7E08B02CD2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.mft
File:                     Fw6cdnZDw8H2BXlAhkij8NqEBFo.mft (raw, json)
Hash identifier:          1XAhdD/CguvxLh1tiMFWYFooU0SHYyCnEY9GyYHvecQ=
Subject key identifier:   06:F4:63:3D:03:50:F1:8C:BD:5B:37:4F:21:CF:55:21:E2:2E:10:A9
Authority key identifier: 17:0E:9C:76:76:43:C3:C1:F6:05:79:40:86:48:A3:F0:DA:84:04:5A
Certificate issuer:       /CN=A917EFB8/serialNumber=170E9C767643C3C1F60579408648A3F0DA84045A
Certificate serial:       3593
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917EFB8/D980A1721D9511E292150E7E08B02CD2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.mft
Manifest number:          358A
Signing time:             Sun 04 Oct 2026 14:49:19 +0000
Manifest this update:     Sun 04 Oct 2026 14:49:19 +0000
Manifest next update:     Sun 11 Oct 2026 14:49:19 +0000
Files and hashes:         1: Fw6cdnZDw8H2BXlAhkij8NqEBFo.crl (hash: cP22a7SIkBS0Px+E3a41+joNhjK+lGXioF197CXpA20=)
                          2: E68E0FD4077B11EB98CA5D1CC4F9AE02.roa (hash: rIwXuVAKzTQeQgdJujiwbvj/r919Ii7m2oS5MI0eTgQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917EFB8/D980A1721D9511E292150E7E08B02CD2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.crl
                          rsync://rpki.apnic.net/member_repository/A917EFB8/D980A1721D9511E292150E7E08B02CD2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 14:49:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13715 (0x3593)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917EFB8, serialNumber=170E9C767643C3C1F60579408648A3F0DA84045A
        Validity
            Not Before: Oct  4 14:49:19 2026 GMT
            Not After : Oct 11 14:49:19 2026 GMT
        Subject: CN=6ac2676f-677c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:23:f1:81:ea:45:48:ea:96:4f:7d:4b:fd:95:
                    f1:a4:6b:8c:28:ec:0a:59:54:01:ff:0d:32:6e:e2:
                    ac:44:b9:f5:ab:13:81:af:45:40:d7:94:0d:86:59:
                    34:8a:5e:2c:0c:12:c1:73:b7:76:9a:d1:e0:be:7c:
                    17:6c:6a:f0:ab:94:ae:da:5a:6b:05:89:cc:b0:08:
                    68:28:b2:67:40:a3:07:81:2e:65:b3:71:7c:6b:9b:
                    1c:28:0b:99:da:c0:d2:14:18:4a:75:dc:30:f2:ec:
                    b3:e8:5c:3c:00:c6:fe:e5:68:a5:10:c8:4f:9e:12:
                    fe:d5:88:cf:a1:b5:eb:29:07:ef:33:e0:cb:10:a4:
                    a1:1d:7a:9d:fa:f6:2c:a7:be:d9:4c:ea:39:45:d2:
                    29:22:36:95:cc:22:84:de:23:4a:97:4e:d7:71:98:
                    4d:15:0c:24:e5:26:db:b3:d7:91:a8:19:dc:6f:54:
                    65:9b:f1:5e:fc:be:15:f4:d5:f4:fe:c5:80:65:62:
                    a8:46:2b:e8:fa:e8:db:91:7b:f8:5d:ae:a9:ff:7b:
                    d0:29:a6:cb:df:61:31:ef:01:28:05:cb:73:bb:d6:
                    d2:25:f2:23:4f:a4:aa:c1:ec:d5:be:3a:50:76:cb:
                    d8:c8:e7:4b:9a:1f:7c:a3:0f:0b:e8:3b:3f:b7:09:
                    72:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:F4:63:3D:03:50:F1:8C:BD:5B:37:4F:21:CF:55:21:E2:2E:10:A9
            X509v3 Authority Key Identifier:
                keyid:17:0E:9C:76:76:43:C3:C1:F6:05:79:40:86:48:A3:F0:DA:84:04:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917EFB8/D980A1721D9511E292150E7E08B02CD2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EFB8/D980A1721D9511E292150E7E08B02CD2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:54:34:a3:ae:36:7f:90:04:ac:38:79:ea:f6:90:f2:c9:d7:
         40:ab:e8:29:78:08:93:8f:5f:35:12:ff:2d:b2:b9:8d:0d:a9:
         5d:91:0a:e8:4d:84:88:cb:5a:38:db:ab:b0:06:73:3e:12:1d:
         ee:14:f8:b2:7b:b0:e7:00:de:4e:6c:ad:65:16:d5:97:49:6e:
         c5:87:d9:56:0f:75:25:85:8f:d7:2e:b2:1f:bb:97:1b:1e:32:
         9f:6d:e0:5f:08:97:08:b4:36:e8:75:6f:59:5a:e8:d3:be:1b:
         2a:58:1b:55:18:ce:4e:41:97:7c:4f:3e:f8:bd:b4:57:cd:03:
         a1:28:c4:42:f0:0f:ba:b9:02:ff:34:82:fc:b8:de:b2:67:e4:
         d7:78:24:94:83:f0:2f:3e:40:0d:70:ff:54:d5:d2:38:4b:7f:
         9e:7d:be:11:fd:43:ec:ac:63:c4:7e:cd:8f:9d:0d:da:77:e4:
         dd:cf:25:1d:e6:e3:10:fb:56:a1:c8:66:d8:73:f2:13:e3:dc:
         79:16:39:89:b2:ae:ff:82:03:9c:97:0f:d4:40:26:a6:20:4b:
         82:1a:42:9b:54:e8:28:41:38:2c:be:97:7a:1d:65:2b:88:7c:
         1d:68:93:7b:91:c0:2c:f7:b8:c7:50:18:ec:a5:28:fc:47:30:
         95:a1:c8:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 15:50:17 2026 by rpki-client