Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9193267/8966D6FE6EE111EDB45FF360C4F9AE02/FggPXxr0qlYST_cZXRPoW5OllSE.mft
File:                     FggPXxr0qlYST_cZXRPoW5OllSE.mft (raw, json)
Hash identifier:          4vq4DYxmKSTv4piucO/qACq+ZpotPmVN/8Okt4jof/8=
Subject key identifier:   C0:5D:86:14:DA:ED:68:36:1E:70:E5:3D:44:8F:BC:74:43:2D:4C:7D
Authority key identifier: 16:08:0F:5F:1A:F4:AA:56:12:4F:F7:19:5D:13:E8:5B:93:A5:95:21
Certificate issuer:       /CN=A9193267/serialNumber=16080F5F1AF4AA56124FF7195D13E85B93A59521
Certificate serial:       02D9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FggPXxr0qlYST_cZXRPoW5OllSE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193267/8966D6FE6EE111EDB45FF360C4F9AE02/FggPXxr0qlYST_cZXRPoW5OllSE.mft
Manifest number:          02D3
Signing time:             Wed 07 Oct 2026 01:33:26 +0000
Manifest this update:     Wed 07 Oct 2026 01:33:25 +0000
Manifest next update:     Wed 14 Oct 2026 01:33:25 +0000
Files and hashes:         1: FggPXxr0qlYST_cZXRPoW5OllSE.crl (hash: Q1cLYdH7OGHt8nddsos9/+327gfpTUqkIYo/nHdeAOg=)
                          2: F29D0E026EE311ED94338E61C4F9AE02.roa (hash: 5ttrslPy7LaJO4gSanAc9hK6tw6CcRvwnYxFZwSyMX4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193267/8966D6FE6EE111EDB45FF360C4F9AE02/FggPXxr0qlYST_cZXRPoW5OllSE.crl
                          rsync://rpki.apnic.net/member_repository/A9193267/8966D6FE6EE111EDB45FF360C4F9AE02/FggPXxr0qlYST_cZXRPoW5OllSE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FggPXxr0qlYST_cZXRPoW5OllSE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 01:33:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 729 (0x2d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193267, serialNumber=16080F5F1AF4AA56124FF7195D13E85B93A59521
        Validity
            Not Before: Oct  7 01:33:25 2026 GMT
            Not After : Oct 14 01:33:25 2026 GMT
        Subject: CN=6ac5a166-3b3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:86:9e:7c:9e:a3:2c:bd:71:6e:78:db:ed:22:
                    40:6b:59:57:66:fa:74:80:6b:7a:16:1a:f8:08:79:
                    32:4e:9e:d1:4b:0a:55:28:a6:53:94:65:8a:57:97:
                    1a:d4:50:e3:28:bd:2c:b9:b2:4f:4b:b1:08:10:37:
                    df:bf:bd:b6:31:5e:ce:88:54:85:81:4f:f7:ee:e7:
                    3b:c0:73:5c:e1:be:f6:62:ca:5f:a7:5a:94:cc:98:
                    ea:34:a9:e9:dc:9c:ec:95:4a:67:a8:33:74:c0:5a:
                    2e:ea:f0:f9:d4:a9:a2:bd:73:1a:b6:d2:01:e2:dd:
                    64:c1:e4:f2:66:78:99:a0:3e:73:e0:74:83:43:01:
                    0f:8d:99:3b:01:ab:04:7f:e8:25:b3:c7:1c:70:fa:
                    d0:d9:c4:ec:6b:a4:97:b2:62:1e:ff:d9:4b:c5:65:
                    4e:4f:20:88:dc:65:99:3b:69:88:2c:84:5e:a1:69:
                    f1:e3:6a:11:81:54:73:ef:51:a4:7b:66:a0:60:d6:
                    5a:55:a1:ca:dd:28:48:47:fd:15:89:89:ba:68:a5:
                    13:0b:41:a2:96:cb:bc:f2:cd:23:34:52:be:e1:12:
                    f0:86:31:40:b6:f4:bd:36:82:22:79:15:fb:b6:3d:
                    c9:ba:cd:bb:d0:5b:81:7b:43:75:05:4b:54:fe:11:
                    3f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:5D:86:14:DA:ED:68:36:1E:70:E5:3D:44:8F:BC:74:43:2D:4C:7D
            X509v3 Authority Key Identifier:
                keyid:16:08:0F:5F:1A:F4:AA:56:12:4F:F7:19:5D:13:E8:5B:93:A5:95:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193267/8966D6FE6EE111EDB45FF360C4F9AE02/FggPXxr0qlYST_cZXRPoW5OllSE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FggPXxr0qlYST_cZXRPoW5OllSE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193267/8966D6FE6EE111EDB45FF360C4F9AE02/FggPXxr0qlYST_cZXRPoW5OllSE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:ad:df:32:c5:f2:3c:e2:42:e7:99:94:0b:df:5c:fb:bf:5b:
         e3:ed:b2:44:fd:02:28:25:4f:ea:f6:cb:64:a2:4c:18:b1:62:
         a3:9a:d4:9f:59:f9:77:82:00:f2:05:20:f6:7e:ea:a6:23:8c:
         3d:4d:0d:0f:53:dc:d1:d4:8b:79:6f:c7:d5:80:51:33:3d:40:
         a4:7d:29:97:05:df:6f:f4:19:db:70:e1:c5:6e:5f:95:7e:47:
         ad:b3:aa:d3:b7:39:de:57:d8:11:3b:26:47:a3:1e:e0:c1:d2:
         e6:09:de:3f:5b:bc:f5:84:98:8b:7f:4d:98:0d:92:2d:9a:5f:
         f1:09:02:27:cb:69:96:56:02:e6:7a:ca:3b:53:c1:ad:5f:56:
         bf:35:4b:e5:c8:c1:a5:0f:b2:88:a8:bb:fd:7c:09:94:bc:28:
         12:d4:90:99:1c:6a:5d:56:21:23:42:e4:94:d8:9e:fa:81:c9:
         41:af:ec:24:35:16:77:9e:13:77:31:96:b8:98:80:5b:26:9d:
         21:22:ee:92:18:83:6d:0a:d5:f2:37:45:7d:10:6f:3c:73:6d:
         15:6d:c0:3d:aa:7c:2b:77:63:45:25:f4:b6:cc:7b:5f:c6:23:
         7d:dc:98:d9:f7:9a:f8:a3:d5:51:3b:3c:7b:7c:8c:b0:56:ac:
         2c:16:c5:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 07:48:08 2026 by rpki-client