Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.mft
File:                     FrVkt1jfzVLFzokRkuMbcVscv-g.mft (raw, json)
Hash identifier:          2lh42xNpsdfKnRGoXV1DVA9AQQl1Q0tse7BfE6R+gHA=
Subject key identifier:   3F:A7:EC:75:86:38:8C:BB:58:11:87:58:4D:7F:7F:10:2D:4D:4B:AF
Authority key identifier: 16:B5:64:B7:58:DF:CD:52:C5:CE:89:11:92:E3:1B:71:5B:1C:BF:E8
Certificate issuer:       /CN=A91CF4FE/serialNumber=16B564B758DFCD52C5CE891192E31B715B1CBFE8
Certificate serial:       36AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.mft
Manifest number:          3602
Signing time:             Fri 18 Sep 2026 14:26:03 +0000
Manifest this update:     Fri 18 Sep 2026 14:26:03 +0000
Manifest next update:     Fri 25 Sep 2026 14:26:03 +0000
Files and hashes:         1: FrVkt1jfzVLFzokRkuMbcVscv-g.crl (hash: 0xI4J/eZGisq8nCGlthVmia0y/JCor0uy7fJDzGDmgs=)
                          2: 427BAA66E23211E8BD132210C4F9AE02.roa (hash: qvyFhV5nfC47Pz/c2vFFgaDNyFH03/suCvs+Lzbb6l8=)
                          3: 534379FCEE1611ECA6DE1824C4F9AE02.roa (hash: WrBoB3k+TzkgstCIfTVURqYqkE8urIjGdVsTJXRt8nM=)
                          4: 10DAE05EB04811EABB4AEF61C4F9AE02.roa (hash: eUE+3jMWRE91uNAz/UrqOI3BwQdgVh4p6mb1bKLIKjg=)
                          5: FE04732C49D011F1880DD96DA7833773.roa (hash: jgs72j8BhXg/9NR1Osjy0LnTtcyYQeZQ7M/1/+KlbT8=)
                          6: 427996B2D4CF11F0BFE5643BC4F9AE02.roa (hash: H7pGeAUfsX1Ef7hbxb99LMdw8SUiA5hk/Rk7uMPdOQU=)
                          7: A4C78624D4CC11F083620C83C4F9AE02.roa (hash: 0F3WwX6JLWtvVg/ceJ0+Xc+w1kqKsMeH8GrxG9Um5ig=)
                          8: A45B04065A3F11F1886D544AAD833773.roa (hash: 1AN5k0MNLAYAKTZr9CZ0ez53EwSpf4f9LN0CXmXrk70=)
                          9: F6FAB490BB5811EF8C37CB81C4F9AE02.roa (hash: KmrmvAFX3BTDWk59dNTGnglJUjuw4X1fTptZ/iswC68=)
                          10: 5F22E1129B3011EF952F2762C4F9AE02.roa (hash: cBL31aNqyNsIeJXA3Iuq1SJRi4eOoI2ZiZ/y1qNLNdA=)
                          11: 1BFF9222D63F11F0B4EDAD32A6248E41.roa (hash: fXY7n/YUUYNROC6oMNKBDx9Co6GGde/fC8cz3XgdF84=)
                          12: 4214F694D4CF11F0822D643BC4F9AE02.roa (hash: toaIt9aua90UvezwtJBkMjp9ByR6flck72bGeCuWe2c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.crl
                          rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13995 (0x36ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CF4FE, serialNumber=16B564B758DFCD52C5CE891192E31B715B1CBFE8
        Validity
            Not Before: Sep 18 14:26:03 2026 GMT
            Not After : Sep 25 14:26:03 2026 GMT
        Subject: CN=6aad49fb-4e1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:17:df:28:f7:5b:7c:ff:1e:1e:a0:e8:48:20:
                    c1:1a:30:ca:2a:f3:fc:ca:b3:31:98:11:0f:9b:f6:
                    6b:87:a5:73:86:b8:3b:5c:ed:aa:4f:a0:1a:85:89:
                    71:a5:5f:c2:c4:3b:8e:10:eb:d8:00:1a:ab:f0:a3:
                    1e:fd:5b:2a:32:ba:ff:e9:bc:d9:af:01:16:10:c7:
                    fc:aa:a0:81:f8:aa:97:c0:4c:35:ab:ca:53:e2:63:
                    ff:e3:6f:12:b0:2d:7a:6f:98:06:9a:4f:e5:80:85:
                    94:90:37:ff:59:c9:4a:35:18:d6:8d:db:1a:dd:2c:
                    8b:09:05:42:41:4e:76:b2:9c:e7:da:b8:5e:ad:84:
                    05:54:66:d0:f5:04:fb:51:0e:10:cf:af:b4:71:ba:
                    4f:8d:65:69:65:78:a7:87:c5:99:c4:9a:f3:72:ef:
                    a8:30:22:6b:4c:7f:e0:1c:1f:ef:b9:fc:a7:85:64:
                    2c:d8:83:49:02:d4:49:47:64:95:dd:67:b2:8d:c7:
                    04:2e:5e:93:b5:af:31:92:c5:c1:51:2b:3e:6b:c5:
                    d7:e8:da:3f:d6:64:6a:b7:e3:90:9b:10:b2:de:2d:
                    d2:33:93:c3:f9:8a:cf:4a:86:22:9a:91:77:5d:f3:
                    73:99:89:58:a2:e0:b8:ca:56:21:9d:c4:47:0f:9d:
                    ed:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:A7:EC:75:86:38:8C:BB:58:11:87:58:4D:7F:7F:10:2D:4D:4B:AF
            X509v3 Authority Key Identifier:
                keyid:16:B5:64:B7:58:DF:CD:52:C5:CE:89:11:92:E3:1B:71:5B:1C:BF:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:6d:b4:72:93:72:ef:ef:00:c5:f7:7b:89:5e:03:ca:47:2e:
         64:20:f7:bc:bb:a5:1c:2b:74:f1:9b:86:00:6f:b2:03:d4:00:
         3f:b6:6d:12:74:2f:0a:da:47:c3:cb:63:6e:c5:1c:1c:fc:ff:
         47:6c:44:0a:da:08:07:46:f1:69:e4:59:f7:a8:d2:40:89:88:
         75:be:41:16:2f:57:8f:7f:a4:2f:e1:9a:fa:3c:61:10:5d:96:
         b7:b8:8b:10:08:2f:37:ad:f4:cf:37:bd:67:7f:dc:3e:e9:15:
         0c:57:11:63:9f:6c:50:c5:58:9a:24:2f:a7:33:83:5d:a1:60:
         47:f0:06:1a:f6:39:f2:51:95:fe:81:36:54:cf:4f:fc:6c:b6:
         0c:1d:f0:8d:ea:ab:5a:c8:1f:4c:90:26:a5:08:45:16:5b:c1:
         3e:02:bc:e1:d8:b6:82:47:fa:b4:69:ef:0a:46:63:be:26:12:
         56:2e:05:f5:9a:ce:f4:58:be:fb:09:cc:25:4f:b4:2d:e3:3f:
         d7:4d:6b:f9:8e:e0:39:f3:46:d6:21:4d:7d:9d:fb:b5:b2:09:
         b2:a2:0a:09:f2:2c:44:16:f3:ac:e1:a0:35:eb:1b:f4:72:a8:
         d2:03:f9:8d:5f:c6:0a:6e:55:1a:c3:16:24:9e:bd:ce:95:c9:
         24:bd:12:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 08:43:40 2026 by rpki-client