Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.mft
File:                     FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.mft (raw, json)
Hash identifier:          W/95vsoadWxKlak7lk64ENdA4uzCWy1V4qAonfpy53c=
Subject key identifier:   DD:43:30:95:97:22:2B:08:C6:36:FD:D1:D9:05:87:EB:41:0C:76:A9
Authority key identifier: 15:F0:A4:06:85:E6:9A:64:1D:B7:0E:82:BF:78:0A:9A:BF:E3:F1:59
Certificate issuer:       /CN=A918B0C4/serialNumber=15F0A40685E69A641DB70E82BF780A9ABFE3F159
Certificate serial:       02D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.mft
Manifest number:          02CE
Signing time:             Sat 03 Oct 2026 01:49:43 +0000
Manifest this update:     Sat 03 Oct 2026 01:49:42 +0000
Manifest next update:     Sat 10 Oct 2026 01:49:42 +0000
Files and hashes:         1: FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.crl (hash: TtL8Z2zX5H6lfk+HH7Ced8ARTww0wSTWixD3I7vdgRk=)
                          2: F59959807A0511EDA112EF32C4F9AE02.roa (hash: eqgTERuahSjzz9pW7GuiZOD769SsfIbxCUG6Gzb86w4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.crl
                          rsync://rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 01:49:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 727 (0x2d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918B0C4, serialNumber=15F0A40685E69A641DB70E82BF780A9ABFE3F159
        Validity
            Not Before: Oct  3 01:49:42 2026 GMT
            Not After : Oct 10 01:49:42 2026 GMT
        Subject: CN=6ac05f36-d348
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:bd:aa:3b:64:c1:e1:66:d4:3c:c2:5e:18:00:
                    7e:f9:f7:13:f6:8c:9e:29:a4:7c:84:13:78:32:f5:
                    6d:03:7d:26:b1:49:18:c0:bf:b8:d8:00:41:17:60:
                    e7:c7:17:33:46:51:47:8b:65:28:f6:b6:58:dd:27:
                    43:a3:71:4c:04:5b:8c:a2:e1:8e:b7:69:50:ad:0e:
                    6e:9c:78:c1:b4:2b:24:e4:fc:e8:72:6d:fe:8e:8e:
                    24:aa:20:b3:9d:f1:08:dd:5d:71:bb:6a:6f:b0:07:
                    01:40:5c:6b:14:90:93:33:18:b8:f2:b7:22:e7:27:
                    94:70:4e:bc:98:31:e8:7e:55:68:36:3e:28:b0:55:
                    30:6c:d2:90:f9:5b:d6:46:bd:5f:2c:4f:d5:b5:66:
                    46:c9:b4:3a:b6:5a:eb:45:61:80:d5:31:4d:e6:08:
                    84:0b:d6:f9:9c:e1:e5:20:15:48:23:47:6d:2b:57:
                    9e:3a:3f:57:82:4a:50:14:d8:35:cd:f2:36:f7:09:
                    de:67:2e:92:e8:ea:e9:de:9c:1e:cf:01:61:ff:5a:
                    97:ce:5e:6a:00:2f:53:00:bf:ad:3a:ea:3f:94:95:
                    b1:7d:8e:63:19:82:4c:36:d8:02:93:e1:86:5c:65:
                    4b:3c:5b:56:b8:8d:a2:92:b8:30:84:ae:87:5f:6b:
                    e8:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:43:30:95:97:22:2B:08:C6:36:FD:D1:D9:05:87:EB:41:0C:76:A9
            X509v3 Authority Key Identifier:
                keyid:15:F0:A4:06:85:E6:9A:64:1D:B7:0E:82:BF:78:0A:9A:BF:E3:F1:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:df:5b:55:98:4d:d5:64:a8:8b:fc:f5:cb:85:c1:44:0a:10:
         5e:bd:8c:77:03:de:c3:ca:f4:b2:32:32:7b:1d:0b:d0:83:97:
         05:8f:86:75:1e:d1:7e:84:3e:aa:bc:c2:78:15:d6:da:cb:7d:
         af:fc:ee:9e:78:ea:d6:91:8d:10:f7:b4:89:13:c1:67:a1:e9:
         54:d5:27:27:7f:9f:e2:09:95:91:3b:06:dd:58:a7:23:6c:f6:
         44:b0:a5:bf:57:a6:ad:f8:f7:32:47:2c:35:48:e3:f4:37:de:
         c7:d3:d4:dd:80:f0:0d:a8:bf:dc:14:20:14:7e:e4:3e:08:3a:
         d4:0d:4c:e7:0d:ee:c3:6e:81:06:3d:bc:98:d8:27:1f:95:e1:
         d6:0f:87:75:14:01:c0:93:3d:46:4f:41:2f:bd:1e:eb:1f:ae:
         fb:ab:4d:13:a8:73:32:1e:95:b1:e8:33:52:7f:ad:a3:d1:21:
         38:d7:f7:b2:a1:5d:06:50:e8:5c:d1:28:7c:0a:d3:bb:d6:18:
         42:ba:60:aa:44:a6:2e:87:09:3b:7b:f7:d3:f5:5c:6f:64:a7:
         e1:69:4c:8c:47:aa:2b:fa:2c:6e:8c:7b:94:1b:d7:ab:51:5a:
         3f:fd:b6:97:5d:ef:e1:29:35:4f:7c:31:61:c0:7b:c8:87:4c:
         00:91:44:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:39:56 2026 by rpki-client