Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CDB75/DCD2D494BB7711EEAAD7B241C4F9AE02/FYg0tWOnwztJgzS8-jD41rZ03J4.mft
File:                     FYg0tWOnwztJgzS8-jD41rZ03J4.mft (raw, json)
Hash identifier:          lnosuY8fVlnQW27B2RBjojSozsHd0y16N5GS42sAMlo=
Subject key identifier:   39:DC:1B:B0:3C:74:AA:A8:41:92:CD:3D:AB:EF:B4:69:15:89:3D:55
Authority key identifier: 15:88:34:B5:63:A7:C3:3B:49:83:34:BC:FA:30:F8:D6:B6:74:DC:9E
Certificate issuer:       /CN=A91CDB75/serialNumber=158834B563A7C33B498334BCFA30F8D6B674DC9E
Certificate serial:       0208
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FYg0tWOnwztJgzS8-jD41rZ03J4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CDB75/DCD2D494BB7711EEAAD7B241C4F9AE02/FYg0tWOnwztJgzS8-jD41rZ03J4.mft
Manifest number:          0201
Signing time:             Tue 13 Oct 2026 03:46:06 +0000
Manifest this update:     Tue 13 Oct 2026 03:46:06 +0000
Manifest next update:     Tue 20 Oct 2026 03:46:06 +0000
Files and hashes:         1: FYg0tWOnwztJgzS8-jD41rZ03J4.crl (hash: qGjAmTZIHdJDcBV6NueaRYR1qU5ay44keln/fiuuTRk=)
                          2: C5589FB4BF9C11EEAAE7743EC4F9AE02.roa (hash: oVA7A9xbq/3XzKnToy39T95rB3d7qRIRIGsB5By2kNI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CDB75/DCD2D494BB7711EEAAD7B241C4F9AE02/FYg0tWOnwztJgzS8-jD41rZ03J4.crl
                          rsync://rpki.apnic.net/member_repository/A91CDB75/DCD2D494BB7711EEAAD7B241C4F9AE02/FYg0tWOnwztJgzS8-jD41rZ03J4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FYg0tWOnwztJgzS8-jD41rZ03J4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 Oct 2026 03:46:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 520 (0x208)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CDB75, serialNumber=158834B563A7C33B498334BCFA30F8D6B674DC9E
        Validity
            Not Before: Oct 13 03:46:06 2026 GMT
            Not After : Oct 20 03:46:06 2026 GMT
        Subject: CN=6acda97e-8bcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9a:4a:c1:80:ee:ac:0d:1b:2a:8a:a3:a1:7f:
                    33:c8:63:a0:fa:6d:6d:ff:ac:4d:43:2d:db:7d:db:
                    47:d8:68:16:82:da:be:c4:17:66:90:03:07:51:bc:
                    9b:06:ca:56:fe:c9:98:1b:b9:20:60:c9:2f:93:13:
                    0c:29:0c:37:7e:21:63:dc:6e:64:21:f3:5e:9c:0a:
                    80:69:fe:35:18:c6:a7:00:80:01:63:5b:19:60:be:
                    a6:0c:37:70:9e:5c:d8:fd:fe:1a:78:f2:9b:5f:24:
                    62:14:5f:a6:0a:b3:4a:99:87:49:7e:f7:9f:2b:6b:
                    32:46:d3:ee:79:c8:f7:93:12:16:6b:5e:65:16:2f:
                    f2:af:28:01:c3:25:57:68:07:87:f7:51:7d:1b:08:
                    4e:7e:ee:c6:60:84:93:aa:63:d7:84:41:e2:f6:52:
                    0e:7f:09:f3:b1:67:19:84:a2:dd:ae:8b:63:a3:a3:
                    5f:a7:0f:27:94:1a:98:31:9b:88:86:9f:84:e1:d9:
                    e3:4d:0a:d7:2d:0c:f0:f0:b1:25:3f:e4:b7:3b:d7:
                    ef:97:2e:e8:67:d5:41:98:26:cb:1c:33:e2:36:13:
                    d5:2a:e1:7e:ae:eb:ae:a0:15:59:ba:40:58:ca:90:
                    04:ab:9b:a1:00:12:f8:bb:ee:db:e5:2a:c7:02:31:
                    75:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:DC:1B:B0:3C:74:AA:A8:41:92:CD:3D:AB:EF:B4:69:15:89:3D:55
            X509v3 Authority Key Identifier:
                keyid:15:88:34:B5:63:A7:C3:3B:49:83:34:BC:FA:30:F8:D6:B6:74:DC:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CDB75/DCD2D494BB7711EEAAD7B241C4F9AE02/FYg0tWOnwztJgzS8-jD41rZ03J4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FYg0tWOnwztJgzS8-jD41rZ03J4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDB75/DCD2D494BB7711EEAAD7B241C4F9AE02/FYg0tWOnwztJgzS8-jD41rZ03J4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         e2:da:76:05:8e:14:da:74:47:59:8c:93:fb:10:0d:b2:c2:f4:
         d5:4d:08:8f:be:b6:40:84:2b:86:9a:1f:86:95:ee:35:31:e0:
         c5:fa:f4:5e:82:79:fc:5c:d0:92:d2:9c:92:14:c7:32:35:98:
         12:d1:38:f5:61:e9:18:ee:24:69:bf:86:28:23:c3:37:0a:be:
         12:f9:7c:da:a2:30:73:cc:69:7b:0a:69:0a:c2:7f:cb:da:54:
         77:be:e3:67:64:aa:6a:84:12:01:35:98:08:76:88:36:7f:53:
         66:46:86:df:f5:98:0f:fd:ac:39:86:6a:9c:82:e0:72:d1:40:
         44:c6:df:59:9d:ac:1f:78:8f:e9:59:a0:01:8f:6f:80:65:6f:
         c1:bf:75:df:9c:66:90:e2:01:c5:c3:5c:e0:82:42:a5:78:9f:
         08:b6:45:5f:85:c3:78:77:8b:6c:a5:24:82:8b:0e:11:50:2c:
         ed:02:cd:b1:8d:49:10:27:e8:3d:11:61:f4:eb:e4:b9:24:f7:
         0c:50:c2:58:6a:e4:90:1a:fa:91:8c:b9:79:d5:6a:cf:d2:7c:
         37:6c:d5:77:64:1d:b9:30:78:9f:fb:07:44:49:26:57:cf:78:
         5c:aa:13:9f:c5:1c:21:95:f3:3a:33:6a:50:9a:4d:99:7a:ea:
         5c:9e:b8:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 20:57:28 2026 by rpki-client