Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DD0A4/95D5E392AA7311EAA10ACC84C4F9AE02/ficJop5GIOVCf3NfN8A0c-NrWXo.mft
File:                     ficJop5GIOVCf3NfN8A0c-NrWXo.mft (raw, json)
Hash identifier:          //SoMLA1b+T7OnrP9c0V6DJfr1gIDIyF1Se7igqoP2E=
Subject key identifier:   26:68:98:7D:12:F9:0B:61:A0:3E:C6:96:0B:44:89:28:13:3F:43:76
Authority key identifier: 7E:27:09:A2:9E:46:20:E5:42:7F:73:5F:37:C0:34:73:E3:6B:59:7A
Certificate issuer:       /CN=A91DD0A4/serialNumber=7E2709A29E4620E5427F735F37C03473E36B597A
Certificate serial:       0A13
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ficJop5GIOVCf3NfN8A0c-NrWXo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DD0A4/95D5E392AA7311EAA10ACC84C4F9AE02/ficJop5GIOVCf3NfN8A0c-NrWXo.mft
Manifest number:          0A07
Signing time:             Thu 08 Oct 2026 19:55:36 +0000
Manifest this update:     Thu 08 Oct 2026 19:55:35 +0000
Manifest next update:     Thu 15 Oct 2026 19:55:35 +0000
Files and hashes:         1: ficJop5GIOVCf3NfN8A0c-NrWXo.crl (hash: XqfBzu8PpBqjdm/STlKgktUOdktO9IqhTTpMRuVu/ME=)
                          2: C8CCE2CCAA7411EA9DF2E685C4F9AE02.roa (hash: MxcRCOMDVxWYLuz/1DuRHNURRxOV2Q55QL6ZvvYDCSE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DD0A4/95D5E392AA7311EAA10ACC84C4F9AE02/ficJop5GIOVCf3NfN8A0c-NrWXo.crl
                          rsync://rpki.apnic.net/member_repository/A91DD0A4/95D5E392AA7311EAA10ACC84C4F9AE02/ficJop5GIOVCf3NfN8A0c-NrWXo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ficJop5GIOVCf3NfN8A0c-NrWXo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Oct 2026 19:55:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2579 (0xa13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DD0A4, serialNumber=7E2709A29E4620E5427F735F37C03473E36B597A
        Validity
            Not Before: Oct  8 19:55:35 2026 GMT
            Not After : Oct 15 19:55:35 2026 GMT
        Subject: CN=6ac7f538-70e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:dd:ae:fc:ca:79:d2:98:23:ff:3d:26:22:42:
                    9e:61:4c:d1:ec:70:5d:80:54:f7:0c:80:2e:f1:76:
                    0a:e4:19:18:25:35:d0:a6:f0:78:0b:9b:c8:45:6b:
                    8c:e8:c5:1b:b7:7f:d0:1f:5a:4b:92:ab:bb:53:d7:
                    00:7d:8d:01:9a:bf:90:45:a7:ba:64:d3:e9:32:6d:
                    9e:2c:c7:c0:c9:86:d9:61:65:72:cc:1a:af:06:da:
                    cd:b3:1d:66:d6:a1:ad:ca:b5:f2:9f:01:99:30:83:
                    3d:bd:1f:28:8f:71:57:52:40:19:2d:cd:14:6e:ff:
                    6f:b1:a9:cf:34:cf:f8:f2:fe:dd:5a:94:42:23:94:
                    9c:c0:d9:c0:7f:0a:81:f5:37:d1:98:7a:ab:34:1b:
                    b4:5f:90:cc:f5:b5:25:e2:38:b4:b4:f7:d3:16:5a:
                    fd:3f:8c:2e:e9:55:02:c8:af:18:70:77:81:5c:4d:
                    f9:1c:f7:91:ad:c3:77:cc:f5:b0:b4:80:fc:2f:cc:
                    07:94:f3:ac:bd:81:dd:06:49:46:e6:a8:27:63:0c:
                    ba:5c:db:bf:bc:6e:0b:dd:ab:78:a1:54:d2:af:09:
                    e5:8b:a1:2f:1e:c0:1d:dd:49:2f:96:a6:2d:94:f5:
                    aa:cf:e2:ad:7b:13:42:9e:cf:a9:36:ef:25:a2:5a:
                    6f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:68:98:7D:12:F9:0B:61:A0:3E:C6:96:0B:44:89:28:13:3F:43:76
            X509v3 Authority Key Identifier:
                keyid:7E:27:09:A2:9E:46:20:E5:42:7F:73:5F:37:C0:34:73:E3:6B:59:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DD0A4/95D5E392AA7311EAA10ACC84C4F9AE02/ficJop5GIOVCf3NfN8A0c-NrWXo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ficJop5GIOVCf3NfN8A0c-NrWXo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD0A4/95D5E392AA7311EAA10ACC84C4F9AE02/ficJop5GIOVCf3NfN8A0c-NrWXo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:07:aa:31:eb:1b:aa:29:0e:27:30:95:28:4f:83:ac:74:98:
         83:0b:ad:37:53:ce:2c:73:89:50:7a:bc:61:40:2c:99:c5:f7:
         d9:54:09:a4:00:98:63:6f:f5:7a:0e:6b:b2:a0:8a:7b:fd:e9:
         55:bd:eb:11:b7:ec:68:74:f0:4c:c3:45:bd:04:73:33:0b:39:
         7c:7b:11:67:40:e3:be:57:dd:dd:41:53:38:83:52:2f:55:16:
         87:01:70:d4:d1:f4:dc:05:50:db:80:60:a5:e8:c9:54:cd:de:
         1b:7d:a4:31:de:2e:d0:03:bb:a0:15:94:c4:df:49:c5:10:d6:
         90:1a:e1:0c:75:0a:ff:08:48:ed:f6:c3:c2:c4:67:80:87:98:
         87:7a:9f:8e:3b:3b:2d:58:6f:10:17:36:b0:e7:f9:2a:aa:c2:
         9e:25:c7:2e:d7:37:9c:7a:68:6b:ae:67:75:83:d3:b7:37:38:
         ac:d3:00:66:67:2c:f6:80:47:b2:2a:42:64:0b:10:2f:82:a5:
         9a:de:c9:02:84:be:d3:77:e3:fe:fd:0e:44:c4:bf:67:3c:76:
         c6:99:24:21:42:36:f1:2d:98:65:dc:df:23:cd:24:fa:4b:10:
         60:c7:6e:e1:bc:10:40:3e:3f:7c:26:b0:19:11:08:5e:70:9b:
         87:4b:ff:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 08:17:37 2026 by rpki-client