Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CE4A1/85FA0CE880B711EC9FEB2C67C4F9AE02/FUc--zxa6KDEdke34P3liGtrH6M.mft
File:                     FUc--zxa6KDEdke34P3liGtrH6M.mft (raw, json)
Hash identifier:          JRATx5UuQx4jlwgM9mNCTB+zRrDe5OfI2zJqJCSlzFY=
Subject key identifier:   C7:0D:0E:F1:40:6F:C3:A1:83:13:26:CC:BF:4F:96:89:4B:2C:8B:72
Authority key identifier: 15:47:3E:FB:3C:5A:E8:A0:C4:76:47:B7:E0:FD:E5:88:6B:6B:1F:A3
Certificate issuer:       /CN=A91CE4A1/serialNumber=15473EFB3C5AE8A0C47647B7E0FDE5886B6B1FA3
Certificate serial:       0509
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FUc--zxa6KDEdke34P3liGtrH6M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE4A1/85FA0CE880B711EC9FEB2C67C4F9AE02/FUc--zxa6KDEdke34P3liGtrH6M.mft
Manifest number:          0517
Signing time:             Tue 06 Oct 2026 23:52:04 +0000
Manifest this update:     Tue 06 Oct 2026 23:52:04 +0000
Manifest next update:     Tue 13 Oct 2026 23:52:04 +0000
Files and hashes:         1: FUc--zxa6KDEdke34P3liGtrH6M.crl (hash: o5+6nWwY6A9lYtn3EzxKRi3G7O2RXbZCGYV46rAx+hg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE4A1/85FA0CE880B711EC9FEB2C67C4F9AE02/FUc--zxa6KDEdke34P3liGtrH6M.crl
                          rsync://rpki.apnic.net/member_repository/A91CE4A1/85FA0CE880B711EC9FEB2C67C4F9AE02/FUc--zxa6KDEdke34P3liGtrH6M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FUc--zxa6KDEdke34P3liGtrH6M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 23:52:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1289 (0x509)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE4A1, serialNumber=15473EFB3C5AE8A0C47647B7E0FDE5886B6B1FA3
        Validity
            Not Before: Oct  6 23:52:04 2026 GMT
            Not After : Oct 13 23:52:04 2026 GMT
        Subject: CN=6ac589a4-60b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:58:05:48:00:21:50:7e:1d:34:6d:79:3a:7a:
                    64:2c:7d:f0:86:8a:47:0c:72:62:6d:69:e6:d3:17:
                    32:33:37:56:83:8e:8b:f9:69:20:48:cb:2c:28:c1:
                    6b:fa:b1:d1:82:d9:1f:c2:27:1f:74:39:f4:4f:db:
                    40:f3:48:6f:14:5f:25:33:0f:10:ff:29:b5:6c:60:
                    92:6b:76:74:d7:42:27:29:ff:22:95:ca:f0:2b:64:
                    de:56:72:1f:e8:60:0c:fe:db:5a:63:5f:b1:5f:c7:
                    80:6a:3f:c7:33:0e:87:35:a4:8f:97:82:05:2c:86:
                    51:a8:d2:93:54:64:c2:2c:cc:37:52:80:76:45:13:
                    5b:4a:f8:cc:4c:02:d8:f4:51:85:22:77:f5:e9:8a:
                    10:f9:ea:1e:3d:03:35:05:35:dd:49:66:1d:d8:a2:
                    cc:51:e2:9f:20:86:59:91:ca:bb:a4:6d:a7:11:aa:
                    71:db:1e:a3:0d:27:4b:b2:69:b5:8d:9b:4a:45:de:
                    87:92:39:2c:28:ad:63:23:22:f8:6e:7f:45:1d:d0:
                    99:72:03:07:5d:a7:97:39:71:57:ca:ee:34:12:51:
                    74:a3:c8:16:94:39:7b:03:f7:b6:c9:81:74:6f:89:
                    2a:7e:df:18:90:ff:1b:00:e8:4d:58:b9:80:9f:94:
                    35:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:0D:0E:F1:40:6F:C3:A1:83:13:26:CC:BF:4F:96:89:4B:2C:8B:72
            X509v3 Authority Key Identifier:
                keyid:15:47:3E:FB:3C:5A:E8:A0:C4:76:47:B7:E0:FD:E5:88:6B:6B:1F:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE4A1/85FA0CE880B711EC9FEB2C67C4F9AE02/FUc--zxa6KDEdke34P3liGtrH6M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FUc--zxa6KDEdke34P3liGtrH6M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE4A1/85FA0CE880B711EC9FEB2C67C4F9AE02/FUc--zxa6KDEdke34P3liGtrH6M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:90:8f:ff:65:b1:de:2d:4e:f5:c5:24:1c:36:00:da:88:44:
         9b:b9:75:b5:64:46:99:f7:1e:f4:cf:56:b0:68:8b:d7:2c:43:
         5d:0e:5f:0f:a8:82:0d:3c:b9:e2:1e:fc:a9:6e:09:69:86:82:
         78:30:b5:4f:8b:02:0a:9d:3c:94:3c:c2:82:9f:3e:b3:27:ae:
         92:01:e7:c1:34:ab:a0:b5:ff:f9:56:70:4b:1b:e2:0d:13:d1:
         c9:19:93:87:1d:5c:99:ce:c2:48:e2:c2:46:67:99:2e:8e:6a:
         76:70:a1:e9:e8:0a:7a:c4:79:31:8b:ac:60:59:ad:fe:c9:13:
         14:4c:6f:5e:27:8d:0c:7c:01:91:6f:31:05:7a:09:21:82:3b:
         98:dc:be:3e:7b:59:65:8d:9b:0a:c3:cd:cc:e0:ed:cf:4d:67:
         40:82:ad:30:bd:d2:48:4e:f3:04:2b:44:fa:fa:de:e1:31:a0:
         49:42:22:84:cd:32:47:c9:16:b4:61:b2:8d:37:b8:77:52:ba:
         75:d9:33:55:26:17:57:4f:dd:0c:74:41:7e:8f:e4:2d:39:fc:
         10:84:bc:23:3a:13:f7:dd:3f:ac:8f:dc:e0:2d:cd:48:94:50:
         09:3a:2a:7e:5a:12:5a:93:fc:55:a9:00:d8:a9:0e:07:f4:d0:
         69:1a:53:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 13:06:46 2026 by rpki-client