Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/fcVok9o1SD_ZCU3wNQTeIXtuOzs.mft
File:                     fcVok9o1SD_ZCU3wNQTeIXtuOzs.mft (raw, json)
Hash identifier:          nOYeB5iRHI0kN+BK1En5nGo/P06z1LNbAwszLDOLm6g=
Subject key identifier:   CF:02:9C:12:F5:EA:07:9F:12:C9:35:92:FF:9F:91:70:42:83:E4:F1
Authority key identifier: 7D:C5:68:93:DA:35:48:3F:D9:09:4D:F0:35:04:DE:21:7B:6E:3B:3B
Certificate issuer:       /CN=A91C96A7/serialNumber=7DC56893DA35483FD9094DF03504DE217B6E3B3B
Certificate serial:       10CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcVok9o1SD_ZCU3wNQTeIXtuOzs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/fcVok9o1SD_ZCU3wNQTeIXtuOzs.mft
Manifest number:          10BB
Signing time:             Fri 02 Oct 2026 17:30:14 +0000
Manifest this update:     Fri 02 Oct 2026 17:30:14 +0000
Manifest next update:     Fri 09 Oct 2026 17:30:14 +0000
Files and hashes:         1: fcVok9o1SD_ZCU3wNQTeIXtuOzs.crl (hash: UJPTOKKtMb2y9a+3rl0ZFRlg39pVqlYgd7EDosEGxJ8=)
                          2: 1BB9CAB6578011E99E80631AC4F9AE02.roa (hash: NtUkxFg58txLSPjb9pNoXbkItgkopxpxxVb+ENccSYQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/fcVok9o1SD_ZCU3wNQTeIXtuOzs.crl
                          rsync://rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/fcVok9o1SD_ZCU3wNQTeIXtuOzs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcVok9o1SD_ZCU3wNQTeIXtuOzs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 17:30:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4299 (0x10cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C96A7, serialNumber=7DC56893DA35483FD9094DF03504DE217B6E3B3B
        Validity
            Not Before: Oct  2 17:30:14 2026 GMT
            Not After : Oct  9 17:30:14 2026 GMT
        Subject: CN=6abfea26-49c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7e:ed:6d:ba:f9:5a:1e:49:e4:dd:28:c8:1a:
                    0a:f6:6d:ae:6d:16:a3:4f:a9:74:06:14:44:b6:6f:
                    e4:81:3c:77:fa:d3:d4:7e:a6:18:21:9b:3b:9c:27:
                    aa:42:bb:0c:c9:16:52:11:91:d2:c8:aa:05:64:72:
                    51:3e:67:bf:6b:6a:53:6a:26:a5:b8:dd:78:06:22:
                    5e:26:31:32:a3:03:fb:8c:5f:f6:bf:ae:f7:67:22:
                    88:e9:a4:17:74:42:5d:b6:da:0e:4a:0b:74:6e:ce:
                    8b:80:cd:ec:4d:25:82:ea:3f:4d:c1:58:e6:37:86:
                    09:2b:0a:40:c2:19:31:ea:f8:5e:98:28:60:d9:be:
                    f4:30:80:5e:65:88:b9:e2:45:ed:b9:7b:a6:af:17:
                    32:8a:62:5e:af:39:ce:4a:64:6d:d6:f3:fe:ee:8c:
                    01:37:c0:ad:79:4a:36:a2:b4:74:52:07:4d:d4:01:
                    c4:9b:2f:96:ea:3f:05:1f:5e:ed:8a:35:11:76:de:
                    c6:95:7f:85:1f:c1:5e:11:1c:07:1b:44:66:aa:03:
                    05:82:b0:03:71:b7:5e:67:bd:7d:6c:83:01:a9:ab:
                    55:12:61:e7:f0:c0:99:5e:20:46:40:12:64:a9:19:
                    51:6f:ba:d2:bb:73:33:2a:62:1c:14:84:57:dc:f6:
                    74:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:02:9C:12:F5:EA:07:9F:12:C9:35:92:FF:9F:91:70:42:83:E4:F1
            X509v3 Authority Key Identifier:
                keyid:7D:C5:68:93:DA:35:48:3F:D9:09:4D:F0:35:04:DE:21:7B:6E:3B:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/fcVok9o1SD_ZCU3wNQTeIXtuOzs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcVok9o1SD_ZCU3wNQTeIXtuOzs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/fcVok9o1SD_ZCU3wNQTeIXtuOzs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:24:f6:ec:16:0c:90:9a:c1:99:f8:e0:cc:35:99:4c:65:82:
         10:d8:eb:74:f0:4a:b0:e6:59:e5:cb:ac:77:05:3c:ae:07:68:
         85:f1:b0:d8:41:cb:86:d1:3f:73:cb:60:00:91:16:c5:f4:07:
         57:be:53:77:c9:d1:42:bb:1b:1d:b8:97:d0:ee:4d:ee:b9:f1:
         0e:24:7a:45:88:61:6b:f8:af:60:d2:d1:45:89:e8:03:af:6a:
         21:cc:33:bd:8d:69:06:68:8d:37:ac:7b:02:e6:13:3a:3a:7e:
         2a:63:b2:89:62:18:a0:c1:e8:82:36:65:14:c5:16:e9:ea:36:
         bb:2e:4f:ae:bc:f5:d9:5a:32:7f:e4:93:46:bc:70:ba:68:0d:
         63:f8:1e:9f:08:fe:97:cd:d3:69:7c:a3:e0:04:80:6d:f6:f3:
         1f:06:0e:2f:ff:78:35:68:b6:31:d1:fa:78:4e:58:43:5a:b0:
         99:33:3b:b4:d0:00:3c:20:c3:e4:2c:7b:de:24:0a:94:83:48:
         82:b6:f3:b0:5a:ab:bb:82:61:8b:4a:fa:0d:94:52:18:11:2f:
         9b:7d:ea:4b:a3:73:97:0c:19:dc:ef:0b:db:43:b6:fa:7e:8d:
         31:97:a8:f6:f1:b0:d4:1e:03:a1:cb:4e:a5:b7:23:33:b1:fe:
         42:64:0e:f0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Qzk2QTcxMTAvBgNVBAUTKDdEQzU2ODkzREEzNTQ4M0ZEOTA5NERGMDM1MDRERTIx
N0I2RTNCM0IwHhcNMjYxMDAyMTczMDE0WhcNMjYxMDA5MTczMDE0WjAYMRYwFAYD
VQQDEw02YWJmZWEyNi00OWM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwX7tbbr5Wh5J5N0oyBoK9m2ubRajT6l0BhREtm/kgTx3+tPUfqYYIZs7nCeq
QrsMyRZSEZHSyKoFZHJRPme/a2pTaialuN14BiJeJjEyowP7jF/2v673ZyKI6aQX
dEJdttoOSgt0bs6LgM3sTSWC6j9NwVjmN4YJKwpAwhkx6vhemChg2b70MIBeZYi5
4kXtuXumrxcyimJerznOSmRt1vP+7owBN8CteUo2orR0UgdN1AHEmy+W6j8FH17t
ijURdt7GlX+FH8FeERwHG0RmqgMFgrADcbdeZ719bIMBqatVEmHn8MCZXiBGQBJk
qRlRb7rSu3MzKmIcFIRX3PZ0YQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM8CnBL1
6gefEsk1kv+fkXBCg+TxMB8GA1UdIwQYMBaAFH3FaJPaNUg/2QlN8DUE3iF7bjs7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTZBNy8yNkU3NDk5NjU3
N0YxMUU5OEU5MENBMThDNEY5QUUwMi9mY1ZvazlvMVNEX1pDVTN3TlFUZUlYdHVP
enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZjVm9rOW8xU0RfWkNVM3dOUVRlSVh0dU96cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
OTZBNy8yNkU3NDk5NjU3N0YxMUU5OEU5MENBMThDNEY5QUUwMi9mY1ZvazlvMVNE
X1pDVTN3TlFUZUlYdHVPenMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMST27BYMkJrBmfjgzDWZTGWCENjrdPBKsOZZ5cusdwU8rgdohfGw2EHLhtE/
c8tgAJEWxfQHV75Td8nRQrsbHbiX0O5N7rnxDiR6RYhha/ivYNLRRYnoA69qIcwz
vY1pBmiNN6x7AuYTOjp+KmOyiWIYoMHogjZlFMUW6eo2uy5Prrz12Voyf+STRrxw
umgNY/genwj+l83TaXyj4ASAbfbzHwYOL/94NWi2MdH6eE5YQ1qwmTM7tNAAPCDD
5Cx73iQKlINIgrbzsFqru4Jhi0r6DZRSGBEvm33qS6NzlwwZ3O8L20O2+n6NMZeo
9vGw1B4DoctOpbcjM7H+QmQO8A==
-----END CERTIFICATE-----
Generated at Sun Oct 4 13:37:50 2026 by rpki-client