Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.mft
File:                     Fh4CKuiXURLudYnUmzFmDKkKBBA.mft (raw, json)
Hash identifier:          3KqocKehhYZjRPUgQLLdR0r4ydlIIALpUWwPjdmg7aM=
Subject key identifier:   01:10:0F:06:52:CD:8F:1D:74:43:3D:C6:E0:8A:7B:CE:A9:1B:B6:B0
Authority key identifier: 16:1E:02:2A:E8:97:51:12:EE:75:89:D4:9B:31:66:0C:A9:0A:04:10
Certificate issuer:       /CN=A91A865F/serialNumber=161E022AE8975112EE7589D49B31660CA90A0410
Certificate serial:       0CDC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fh4CKuiXURLudYnUmzFmDKkKBBA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.mft
Manifest number:          0CC8
Signing time:             Tue 06 Oct 2026 18:37:38 +0000
Manifest this update:     Tue 06 Oct 2026 18:37:38 +0000
Manifest next update:     Tue 13 Oct 2026 18:37:38 +0000
Files and hashes:         1: Fh4CKuiXURLudYnUmzFmDKkKBBA.crl (hash: KxNWxkXZ4pTByIrQj7IPF2ZKZaqheZkKPUeNE7wLSqs=)
                          2: 8BB1EB9E1C8A11EABAA73A62C4F9AE02.roa (hash: cEvLZrkv6DMpSj0Vfia9IhgiuszRtIWI2Gda9xI8ARY=)
                          3: 8AAF803A1C8A11EABAA73A62C4F9AE02.roa (hash: 9brcnHryI3Y4I0qze8pkKOj7kUBQ8kANoxfoueYgUMM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.crl
                          rsync://rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fh4CKuiXURLudYnUmzFmDKkKBBA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 14:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3292 (0xcdc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A865F, serialNumber=161E022AE8975112EE7589D49B31660CA90A0410
        Validity
            Not Before: Oct  6 18:37:38 2026 GMT
            Not After : Oct 13 18:37:38 2026 GMT
        Subject: CN=6ac53ff2-9f5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:ec:48:52:6a:44:e1:e9:42:3b:aa:a7:25:0b:
                    55:ca:56:0a:30:2d:83:45:bc:59:0f:7a:e5:b1:00:
                    21:33:cb:9b:d4:38:e0:99:e6:f7:1b:de:86:a1:ff:
                    55:fe:9b:11:c2:df:c2:f3:7e:8a:73:16:f2:a9:cb:
                    c2:3a:d1:84:ab:fb:3f:10:b8:94:e7:e7:39:78:c9:
                    5a:70:0c:b9:e3:4b:54:15:92:e7:08:15:ea:b6:f8:
                    e1:7b:b8:8d:0d:b8:c2:27:94:ad:ba:c7:41:09:91:
                    4f:e2:29:41:0a:67:a3:46:bb:f1:f5:f5:e0:01:2a:
                    90:de:3b:4b:33:52:78:f8:b9:88:7a:97:26:f2:83:
                    7b:b2:4b:c1:f5:b2:38:5f:86:9d:1e:5a:c5:30:73:
                    7f:4b:75:59:66:9c:ab:3f:58:aa:c3:1c:36:d6:42:
                    42:00:2e:5d:70:f7:4e:48:ec:29:93:7c:c1:9a:02:
                    a9:c1:0b:4b:e3:52:f1:b2:9f:f5:b2:c3:61:82:ce:
                    f8:59:b3:70:d1:64:73:d1:68:c4:2b:60:ca:ba:5f:
                    5b:da:63:b1:60:25:68:10:5c:ac:5d:6f:60:2d:d4:
                    77:13:4e:d0:06:73:58:43:ed:d3:bb:f0:a5:2f:b5:
                    f6:91:c7:ff:77:11:68:90:f0:59:96:8c:be:1f:68:
                    63:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:10:0F:06:52:CD:8F:1D:74:43:3D:C6:E0:8A:7B:CE:A9:1B:B6:B0
            X509v3 Authority Key Identifier:
                keyid:16:1E:02:2A:E8:97:51:12:EE:75:89:D4:9B:31:66:0C:A9:0A:04:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fh4CKuiXURLudYnUmzFmDKkKBBA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:5f:83:39:78:7b:da:f6:47:c1:28:a3:d7:6a:b2:8f:d6:02:
         6d:92:e0:41:5d:ed:88:f3:b9:3f:fc:98:4d:cc:e1:f5:fe:87:
         3e:7d:99:a9:9c:fb:fc:00:dc:7f:fd:73:dc:b3:e5:6d:df:da:
         de:85:52:8d:79:9b:7e:c2:9f:66:ea:a4:4b:ed:e5:02:22:21:
         89:35:af:42:58:7c:ef:d7:c3:6c:6e:8e:6f:6d:2b:28:f8:71:
         f7:8a:54:59:f5:ae:c8:1e:6a:42:db:84:99:e9:6d:17:a2:55:
         b7:9e:6a:70:c5:2e:a5:11:49:f7:8a:4c:5d:d1:3c:d3:ce:38:
         4f:90:8b:08:fe:58:46:ce:16:93:4a:65:de:17:ad:2e:79:df:
         4e:8b:48:35:0a:d4:57:dc:28:f6:9b:c4:fe:c6:72:26:2c:28:
         a5:a6:6b:3d:db:da:2b:51:a3:05:f7:23:af:48:04:af:03:78:
         a5:38:b3:a5:47:91:ec:29:eb:e2:22:e0:18:52:45:01:4e:4d:
         9a:c5:e1:55:e9:67:fd:2f:7a:c2:71:9a:51:06:eb:b7:bb:b2:
         3f:6c:54:a9:be:bd:0d:0d:02:cc:a7:bd:30:77:15:c3:4a:25:
         29:d0:7a:c2:86:cc:6f:80:d0:b6:32:c1:59:85:4a:70:b3:f5:
         d9:f3:f6:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 22:14:30 2026 by rpki-client