Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BC15C/6BA359301DA211E2B4B6449508B02CD2/FeAstOfcuwrM4igRnP-ANDhil78.mft
File:                     FeAstOfcuwrM4igRnP-ANDhil78.mft (raw, json)
Hash identifier:          wefS+WUE5XDaR31/v+hRaVQ8ZJee6IVHRY6vcFicz5M=
Subject key identifier:   D2:79:96:F4:2C:3A:9B:4C:49:D8:67:00:02:D4:38:93:E5:73:F8:AE
Authority key identifier: 15:E0:2C:B4:E7:DC:BB:0A:CC:E2:28:11:9C:FF:80:34:38:62:97:BF
Certificate issuer:       /CN=A91BC15C/serialNumber=15E02CB4E7DCBB0ACCE228119CFF8034386297BF
Certificate serial:       3588
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FeAstOfcuwrM4igRnP-ANDhil78.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BC15C/6BA359301DA211E2B4B6449508B02CD2/FeAstOfcuwrM4igRnP-ANDhil78.mft
Manifest number:          3583
Signing time:             Fri 02 Oct 2026 15:08:04 +0000
Manifest this update:     Fri 02 Oct 2026 15:08:04 +0000
Manifest next update:     Fri 09 Oct 2026 15:08:04 +0000
Files and hashes:         1: FeAstOfcuwrM4igRnP-ANDhil78.crl (hash: u7DB2cJOW4VSff9fnYTvpeRE/2CCYAuj0I6X5c0P9SQ=)
                          2: A88B0898EC9911EE9627923CC4F9AE02.roa (hash: Md4TX499kG6Z3N25ExlcNJXGAzV59nM+xoDsohYAAQI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BC15C/6BA359301DA211E2B4B6449508B02CD2/FeAstOfcuwrM4igRnP-ANDhil78.crl
                          rsync://rpki.apnic.net/member_repository/A91BC15C/6BA359301DA211E2B4B6449508B02CD2/FeAstOfcuwrM4igRnP-ANDhil78.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FeAstOfcuwrM4igRnP-ANDhil78.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 15:08:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13704 (0x3588)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BC15C, serialNumber=15E02CB4E7DCBB0ACCE228119CFF8034386297BF
        Validity
            Not Before: Oct  2 15:08:04 2026 GMT
            Not After : Oct  9 15:08:04 2026 GMT
        Subject: CN=6abfc8d4-9a6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:96:e5:65:85:3c:27:c1:7d:c8:7f:b7:4e:1b:
                    43:06:fe:99:9f:e0:d6:9d:57:94:f6:1a:73:d1:c7:
                    b9:c2:da:ff:4e:fe:89:57:8f:df:38:02:71:09:67:
                    2b:de:22:57:5d:84:88:ee:a9:34:5c:c5:92:51:a2:
                    6e:23:f9:40:31:7c:27:75:68:e5:e3:0c:57:41:e9:
                    70:74:bf:40:a4:ca:92:fd:b4:88:68:0b:7e:a0:70:
                    ba:4c:48:4b:be:ca:68:2f:fa:2e:53:85:a6:a0:56:
                    f3:5b:e8:fc:fd:b9:76:52:f3:f6:af:b3:d2:09:e9:
                    62:09:ba:17:3b:50:f6:f9:5a:a7:64:4b:e1:4c:ad:
                    78:fa:1f:c0:5c:75:53:60:04:a1:13:66:5b:a3:10:
                    5c:4b:19:9a:27:2c:e0:d6:e3:1f:44:ad:f1:a0:61:
                    23:fc:38:77:30:d7:64:59:eb:e4:54:cf:c4:03:0f:
                    43:49:9d:a9:48:06:0f:d8:9e:8b:d2:03:9b:99:b8:
                    65:5b:fa:f0:c8:01:76:f2:97:34:e8:bc:e7:9a:69:
                    0b:89:b0:dc:61:bb:8c:75:f4:fe:fc:ce:47:e5:c7:
                    cf:e6:47:b9:b8:3c:5d:78:01:04:01:54:61:05:cd:
                    28:cd:0c:99:55:cb:28:61:c6:13:1f:ee:56:5e:fe:
                    10:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:79:96:F4:2C:3A:9B:4C:49:D8:67:00:02:D4:38:93:E5:73:F8:AE
            X509v3 Authority Key Identifier:
                keyid:15:E0:2C:B4:E7:DC:BB:0A:CC:E2:28:11:9C:FF:80:34:38:62:97:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BC15C/6BA359301DA211E2B4B6449508B02CD2/FeAstOfcuwrM4igRnP-ANDhil78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FeAstOfcuwrM4igRnP-ANDhil78.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC15C/6BA359301DA211E2B4B6449508B02CD2/FeAstOfcuwrM4igRnP-ANDhil78.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:a8:e9:03:cc:db:b6:3d:f3:0f:87:bf:a0:b3:b9:12:9c:43:
         aa:9b:06:61:83:ef:9f:2a:5e:f7:66:6a:97:f7:3a:82:6d:8d:
         27:d3:7a:47:37:12:05:09:b1:f3:14:54:21:a8:aa:13:d9:71:
         3f:f5:f1:36:52:27:64:b0:23:2c:99:0f:99:82:57:db:fb:23:
         a9:59:bf:76:88:23:28:57:38:f5:44:8a:8c:5f:14:1e:a6:ef:
         e9:e6:3d:f8:eb:b4:94:84:81:bb:cb:c7:50:4d:e9:ce:3f:b4:
         51:21:43:33:1b:b2:95:79:17:59:4e:16:29:c2:64:53:44:df:
         c3:c8:e3:ca:c1:c5:c7:af:cb:5b:10:97:0b:70:ec:b8:47:49:
         ad:09:c1:f5:b6:39:4e:e5:b5:ea:e0:60:3b:7f:f0:c1:4d:7e:
         5f:d0:b7:d0:c3:57:4a:40:77:2f:3f:a5:a6:d1:a2:a5:34:fb:
         bd:1a:93:42:81:5f:45:28:53:2e:b9:f0:3b:74:d4:ab:fd:91:
         a6:e3:a8:b8:9e:d1:0d:da:2b:d9:75:05:ee:bc:bd:5e:75:c1:
         a1:26:d6:86:3d:d5:b7:db:0d:3d:65:80:62:5d:bf:b3:12:79:
         91:18:01:4d:19:b8:e8:e6:58:0d:2b:49:28:e2:8b:39:a3:47:
         f0:4e:b6:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 10:47:48 2026 by rpki-client