Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918CC02/680C6246B86B11EF9A6A5058C4F9AE02/fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.mft
File:                     fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.mft (raw, json)
Hash identifier:          4q6E5FVZlp6Hdm+77Cz72XVeJtA4XV8QD/aYjZUqD2k=
Subject key identifier:   B3:A7:37:43:CD:9E:7F:FB:6E:99:37:EB:9E:8E:F5:3D:2F:8E:C9:C3
Authority key identifier: 7F:06:7A:22:A4:A9:E0:96:FD:86:A6:BA:35:5A:59:24:90:67:D8:0C
Certificate issuer:       /CN=A918CC02/serialNumber=7F067A22A4A9E096FD86A6BA355A59249067D80C
Certificate serial:       0151
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918CC02/680C6246B86B11EF9A6A5058C4F9AE02/fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.mft
Manifest number:          0149
Signing time:             Sat 05 Sep 2026 05:10:47 +0000
Manifest this update:     Sat 05 Sep 2026 05:10:46 +0000
Manifest next update:     Sat 12 Sep 2026 05:10:46 +0000
Files and hashes:         1: fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.crl (hash: P9pxOdyfp3zFdhHYJAIaX48jqCM7OBxRiIinQqOuO74=)
                          2: AF9A0636B86B11EFA561215AC4F9AE02.roa (hash: YXgcQSkLUKZDwiDglhpy7R/9d2DcUAeT2Wp6iWZ+BWw=)
                          3: 34B9DBFAC5C011EF88F56A0AC4F9AE02.roa (hash: EbfBHidljZ2gLeTQHKxBHFBHeGxEqlyHSzXcfx3YSkU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918CC02/680C6246B86B11EF9A6A5058C4F9AE02/fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.crl
                          rsync://rpki.apnic.net/member_repository/A918CC02/680C6246B86B11EF9A6A5058C4F9AE02/fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Sep 2026 04:31:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 337 (0x151)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918CC02, serialNumber=7F067A22A4A9E096FD86A6BA355A59249067D80C
        Validity
            Not Before: Sep  5 05:10:46 2026 GMT
            Not After : Sep 12 05:10:46 2026 GMT
        Subject: CN=6a9ba457-749f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:fb:20:d6:df:fd:52:75:10:64:1f:64:88:29:
                    fe:8e:64:13:23:ba:22:4d:ef:fc:4d:12:bb:8d:c0:
                    84:02:97:b6:3a:46:6e:de:04:c0:9c:e9:ba:9d:bd:
                    e3:0f:84:12:7b:80:4e:5a:50:fc:a0:3c:de:52:1e:
                    d9:f8:59:19:ff:ab:98:bb:fd:26:cc:7d:b0:c8:5e:
                    cd:86:ff:e6:55:c8:f9:95:92:1d:3f:97:61:b3:68:
                    f0:2d:42:a7:3a:63:48:e7:d0:8c:36:d3:af:33:82:
                    a7:b7:a5:dc:a8:88:1a:9a:89:0b:c1:5e:e4:99:06:
                    c1:95:37:ea:f1:84:1c:3c:09:a8:fa:5c:00:75:b0:
                    95:59:3e:d4:f2:2f:a1:0e:d7:a6:fc:b1:71:c1:22:
                    c5:1a:db:24:ae:1b:13:71:22:f8:bc:56:e4:3a:9c:
                    b7:f4:f6:ae:34:86:cb:87:0f:54:6b:2f:49:e1:7a:
                    0d:0e:37:16:e9:a7:be:70:54:5e:60:be:fd:6a:d0:
                    fd:71:33:34:90:a2:d0:df:ca:58:03:1f:b2:4a:51:
                    a5:18:1e:29:5f:3d:a3:b5:c7:27:2f:94:f3:45:f3:
                    52:f4:95:c1:1f:c3:16:b5:84:cc:2c:72:df:4e:69:
                    b1:75:16:b5:38:22:65:82:f3:37:31:77:d1:fe:1f:
                    cc:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:A7:37:43:CD:9E:7F:FB:6E:99:37:EB:9E:8E:F5:3D:2F:8E:C9:C3
            X509v3 Authority Key Identifier:
                keyid:7F:06:7A:22:A4:A9:E0:96:FD:86:A6:BA:35:5A:59:24:90:67:D8:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918CC02/680C6246B86B11EF9A6A5058C4F9AE02/fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CC02/680C6246B86B11EF9A6A5058C4F9AE02/fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:96:d1:9a:70:86:53:a1:fa:f0:cb:5b:ca:cf:a8:40:39:2e:
         43:14:65:83:d6:6e:10:4b:20:4e:dd:7d:e8:69:da:83:0b:45:
         90:44:50:0c:c0:a1:bf:82:07:1d:bc:8c:56:40:c8:db:34:6c:
         31:c7:95:0f:a5:63:9a:a8:76:07:dc:c4:d7:c6:0b:f1:7f:e7:
         81:cd:d2:97:e9:42:96:10:56:e5:90:57:df:d4:2c:51:15:9e:
         e2:3e:45:85:a2:e3:11:0b:4a:c3:3b:00:5e:20:5d:3a:64:6a:
         99:72:1a:c1:0c:46:6b:82:83:72:7e:36:c7:0a:db:49:de:e3:
         36:aa:b6:a8:79:d7:9d:e6:c1:b2:33:44:46:52:25:1e:d4:75:
         43:08:e9:bb:94:56:46:06:ab:6f:e2:e6:d9:1e:d0:c8:31:16:
         45:e3:65:23:8c:c2:0e:6b:11:b0:86:36:bb:09:a3:f9:31:58:
         13:f4:bd:08:24:b7:e1:1e:3f:a6:39:44:51:83:2f:06:db:44:
         81:88:70:25:3f:b2:1c:54:ef:f6:82:b8:f3:66:dc:3e:52:a0:
         05:db:f8:25:c0:fe:39:be:9e:a3:9f:12:c0:84:2d:c8:3c:48:
         f5:9f:17:c7:f6:ac:76:04:c9:b5:b5:25:83:01:2d:91:50:15:
         04:74:8d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 08:54:09 2026 by rpki-client