Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.mft
File:                     FnnqBmaD8qFVDecPRYQy3RqDJw8.mft (raw, json)
Hash identifier:          W9Hb64Lhs1ec0nyJglTv+JGYw8RNwnN3NFy4KP7CCHI=
Subject key identifier:   5C:F7:01:9C:BB:59:80:20:F9:B1:D9:BB:DC:9E:9B:F6:40:DE:B3:DF
Authority key identifier: 16:79:EA:06:66:83:F2:A1:55:0D:E7:0F:45:84:32:DD:1A:83:27:0F
Certificate issuer:       /CN=A91DDCD9/serialNumber=1679EA066683F2A1550DE70F458432DD1A83270F
Certificate serial:       0BE7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnnqBmaD8qFVDecPRYQy3RqDJw8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.mft
Manifest number:          0C97
Signing time:             Tue 06 Oct 2026 19:07:48 +0000
Manifest this update:     Tue 06 Oct 2026 19:07:48 +0000
Manifest next update:     Tue 13 Oct 2026 19:07:48 +0000
Files and hashes:         1: FnnqBmaD8qFVDecPRYQy3RqDJw8.crl (hash: RTjya09r4Qy9Av+0EU41GJz46Up3/baG7/QACTB34xs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.crl
                          rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnnqBmaD8qFVDecPRYQy3RqDJw8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 19:07:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3047 (0xbe7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DDCD9, serialNumber=1679EA066683F2A1550DE70F458432DD1A83270F
        Validity
            Not Before: Oct  6 19:07:48 2026 GMT
            Not After : Oct 13 19:07:48 2026 GMT
        Subject: CN=6ac54704-ee86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f4:84:d4:b0:ab:ad:af:af:e6:2b:6d:61:04:
                    63:ca:c9:78:51:b3:ec:a5:2c:e5:04:1e:71:cf:e2:
                    6d:b0:f1:dc:72:1e:3a:4c:65:a0:79:76:03:df:26:
                    7c:f3:1b:70:8d:70:25:1e:ee:76:01:1b:61:80:bb:
                    00:f1:b0:e4:15:fd:d1:7a:91:a1:7e:2a:94:bc:3a:
                    16:87:8b:6c:dd:d3:76:c9:f5:6d:2e:6c:f0:f9:d9:
                    06:e6:a1:28:e5:d3:7d:64:4b:74:c3:78:ec:98:8e:
                    dc:71:05:52:2a:10:e2:ed:14:f8:62:12:7f:52:1a:
                    ba:bb:b2:4b:71:1e:09:5c:42:48:3d:28:26:08:25:
                    b3:d8:ad:56:5f:41:6f:92:77:ab:23:0c:ea:0a:e9:
                    dd:d2:90:b7:ed:dd:4e:bc:68:a5:ce:25:db:20:c4:
                    52:54:f1:f8:8e:09:8c:e6:d4:9c:b1:3a:32:df:96:
                    ee:8b:4a:be:fa:24:b5:fb:0d:0f:f5:48:0a:f4:67:
                    11:8c:09:45:e2:22:f2:e8:f7:7c:a8:74:0a:f4:02:
                    31:c0:3b:3f:17:f9:bf:37:d5:e3:86:5e:fe:83:c3:
                    9d:07:58:54:45:e4:c0:f5:a1:2c:c2:33:1b:06:7d:
                    3b:6a:55:58:95:40:c5:d2:2d:88:02:4f:d1:f8:1d:
                    5c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:F7:01:9C:BB:59:80:20:F9:B1:D9:BB:DC:9E:9B:F6:40:DE:B3:DF
            X509v3 Authority Key Identifier:
                keyid:16:79:EA:06:66:83:F2:A1:55:0D:E7:0F:45:84:32:DD:1A:83:27:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnnqBmaD8qFVDecPRYQy3RqDJw8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:54:73:20:60:c3:a4:60:69:f8:d5:71:39:8d:77:b4:20:fc:
         e5:5d:26:36:73:57:f4:df:79:15:a9:86:c3:f4:cf:d2:49:58:
         8a:90:ef:1e:d8:06:1c:49:56:34:5d:88:78:e8:4a:d3:29:b7:
         21:76:b5:2e:dd:c5:6d:56:93:52:12:88:82:f9:72:d9:60:30:
         89:6f:a8:de:23:94:31:0f:86:41:9e:ee:ad:bb:d2:75:7e:f7:
         56:e9:fa:3f:f4:ca:34:04:7d:8c:49:60:c9:fe:59:cb:79:20:
         35:bf:19:dd:da:00:76:24:8a:15:c1:08:4a:e6:bb:0d:0e:77:
         d8:1b:87:89:df:5f:ab:66:5c:ba:52:a8:3f:0a:69:db:9c:e9:
         ac:42:a9:e2:aa:12:d0:ff:82:a2:77:cc:5c:24:2a:43:d4:c9:
         f7:ab:f3:4a:2b:2a:1e:9b:05:d3:c6:f4:3e:64:cf:ee:06:c9:
         25:26:b0:4a:10:6f:a3:1e:e9:63:97:b5:d0:78:09:bc:97:85:
         ae:ad:5e:c6:a1:65:57:7a:e6:27:10:b6:50:88:18:86:5b:77:
         c1:c4:d2:92:e7:64:97:98:b3:9d:58:36:b7:c8:1b:ff:bb:fd:
         a7:b3:0b:1a:b0:a4:dd:5a:b6:07:c1:52:e1:63:9e:7d:9a:c9:
         c7:36:fc:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 10:59:22 2026 by rpki-client