Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919887F/AB569998B9A811EA8483543FC4F9AE02/FUbDNb7V8qXu5Yrg0mNnEVnSeLo.mft
File:                     FUbDNb7V8qXu5Yrg0mNnEVnSeLo.mft (raw, json)
Hash identifier:          xcNIfjBDdb+zHtd6uZIJxJayQwMp7uHdIVUICWMcM6k=
Subject key identifier:   E3:64:56:2E:CE:47:15:02:EA:A5:6E:5D:1F:7F:F9:9F:7C:DC:C0:8A
Authority key identifier: 15:46:C3:35:BE:D5:F2:A5:EE:E5:8A:E0:D2:63:67:11:59:D2:78:BA
Certificate issuer:       /CN=A919887F/serialNumber=1546C335BED5F2A5EEE58AE0D263671159D278BA
Certificate serial:       09B0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FUbDNb7V8qXu5Yrg0mNnEVnSeLo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919887F/AB569998B9A811EA8483543FC4F9AE02/FUbDNb7V8qXu5Yrg0mNnEVnSeLo.mft
Manifest number:          09A3
Signing time:             Fri 02 Oct 2026 20:12:24 +0000
Manifest this update:     Fri 02 Oct 2026 20:12:23 +0000
Manifest next update:     Fri 09 Oct 2026 20:12:23 +0000
Files and hashes:         1: FUbDNb7V8qXu5Yrg0mNnEVnSeLo.crl (hash: cpn6xoXlg8yiAbeGlp9lW3I4cseumXDfd2jYNnMwLSc=)
                          2: 4D2299ECF7C611EF92C34E4AC4F9AE02.roa (hash: bb8HyNyKIjx5SksD6joAdCJUSHjg2S6d1c1Q2DuBeAE=)
                          3: 1C0E3F82B9AA11EAA5AA3A44C4F9AE02.roa (hash: dpdvSxpnzFoLOrPlT7mye8vYPNMa/TRbkA9BwRASPSw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919887F/AB569998B9A811EA8483543FC4F9AE02/FUbDNb7V8qXu5Yrg0mNnEVnSeLo.crl
                          rsync://rpki.apnic.net/member_repository/A919887F/AB569998B9A811EA8483543FC4F9AE02/FUbDNb7V8qXu5Yrg0mNnEVnSeLo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FUbDNb7V8qXu5Yrg0mNnEVnSeLo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 20:12:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2480 (0x9b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919887F, serialNumber=1546C335BED5F2A5EEE58AE0D263671159D278BA
        Validity
            Not Before: Oct  2 20:12:23 2026 GMT
            Not After : Oct  9 20:12:23 2026 GMT
        Subject: CN=6ac01028-6c08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5c:a5:b1:82:35:7d:9f:54:4f:6a:01:a5:19:
                    c9:06:55:a6:3a:84:c6:53:f9:0b:90:ae:50:50:38:
                    5a:3b:af:78:00:c0:55:b2:eb:0c:d5:09:ba:32:b2:
                    bb:10:c5:5a:3b:cb:71:74:2b:18:38:04:ac:6b:1a:
                    78:0c:2e:fe:d7:23:86:04:71:48:f3:80:1f:ae:24:
                    7c:db:14:6d:fd:ad:46:b7:13:6d:52:e1:e4:1d:50:
                    32:73:1b:76:a6:9d:30:7d:b2:37:5f:9a:3e:6a:4a:
                    19:56:5d:d8:0a:43:b4:a4:8e:73:48:d8:e3:45:33:
                    89:76:34:96:b5:1c:4d:46:4c:84:cc:a0:7e:9d:11:
                    6f:03:d0:d0:e1:f2:f8:71:4c:40:db:d5:30:fe:99:
                    2b:45:4a:a0:9a:2a:6c:6e:3d:db:ca:b1:6b:55:7c:
                    55:ff:4c:dc:59:c1:5c:bb:83:21:87:c1:77:95:ea:
                    0f:27:f3:47:01:f2:9f:2e:d5:4e:e0:55:95:30:ea:
                    cf:9e:63:e3:b0:cb:01:e5:1c:e3:1f:0e:63:c3:72:
                    38:e2:e8:81:59:0d:e4:61:0a:a2:5d:2b:17:96:9f:
                    9e:df:d0:e7:e3:3c:31:c7:6c:38:d6:d4:9f:60:7f:
                    aa:10:4a:35:66:63:9f:6f:65:95:6b:81:7f:22:7f:
                    10:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:64:56:2E:CE:47:15:02:EA:A5:6E:5D:1F:7F:F9:9F:7C:DC:C0:8A
            X509v3 Authority Key Identifier:
                keyid:15:46:C3:35:BE:D5:F2:A5:EE:E5:8A:E0:D2:63:67:11:59:D2:78:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919887F/AB569998B9A811EA8483543FC4F9AE02/FUbDNb7V8qXu5Yrg0mNnEVnSeLo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FUbDNb7V8qXu5Yrg0mNnEVnSeLo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919887F/AB569998B9A811EA8483543FC4F9AE02/FUbDNb7V8qXu5Yrg0mNnEVnSeLo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         e0:ca:a8:02:03:0d:66:e9:5b:03:ab:33:c7:8f:27:b7:c9:30:
         7d:11:eb:96:4f:fb:e9:98:bd:5f:8c:eb:c7:1d:30:0c:38:b6:
         21:3c:30:4d:84:53:32:12:33:20:bc:be:f9:91:6a:5e:8d:ae:
         0c:d4:e4:6b:4b:52:0c:1b:6a:7f:1c:76:61:e6:cf:c9:ca:50:
         40:4c:fd:b7:4c:85:9d:ae:c1:32:a0:26:6e:cf:08:aa:ab:39:
         4b:5e:fd:13:8f:db:a8:62:e3:41:89:b1:7c:74:15:1a:61:f8:
         dd:7f:69:9f:4f:64:32:c0:90:c5:7d:5f:d2:e5:f6:19:30:81:
         76:84:b2:60:5a:ca:44:ed:ea:e4:d7:57:27:89:cf:76:c3:74:
         a0:11:14:bb:4d:ec:df:f0:b6:2d:58:c1:f3:02:d3:37:8e:e5:
         7d:05:16:d1:60:b5:30:53:cd:9c:63:09:b9:f7:0a:d2:62:c6:
         dd:76:a5:b3:3d:93:bd:30:3f:7d:c7:4c:97:fe:2a:f2:8f:5a:
         50:fa:30:9e:f6:e9:c4:16:fd:ae:63:35:65:31:d6:30:73:ac:
         6f:8d:46:b4:7b:ce:cc:67:c7:bd:2b:4e:68:f0:a2:bf:6d:30:
         2f:a7:a6:e0:fd:4f:64:da:8d:5c:d8:69:6b:93:58:63:c2:97:
         d8:21:58:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 05:35:36 2026 by rpki-client