Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E1841/4D3F4612599711F18B504558B3833773/FN3HrsvJJccEVg46_IW8PE9PzCg.mft
File:                     FN3HrsvJJccEVg46_IW8PE9PzCg.mft (raw, json)
Hash identifier:          G7KMHl9BPrGxRuynDRJv8FdS3hBLlaTjwCl1f9S8BfM=
Subject key identifier:   1B:84:66:BA:7C:9B:3A:10:7C:34:73:A7:E1:D5:83:58:F3:75:F5:01
Authority key identifier: 14:DD:C7:AE:CB:C9:25:C7:04:56:0E:3A:FC:85:BC:3C:4F:4F:CC:28
Certificate issuer:       /CN=A91E1841/serialNumber=14DDC7AECBC925C704560E3AFC85BC3C4F4FCC28
Certificate serial:       45
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FN3HrsvJJccEVg46_IW8PE9PzCg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E1841/4D3F4612599711F18B504558B3833773/FN3HrsvJJccEVg46_IW8PE9PzCg.mft
Manifest number:          43
Signing time:             Sat 03 Oct 2026 09:13:00 +0000
Manifest this update:     Sat 03 Oct 2026 09:13:00 +0000
Manifest next update:     Sat 10 Oct 2026 09:13:00 +0000
Files and hashes:         1: FN3HrsvJJccEVg46_IW8PE9PzCg.crl (hash: nK+dG9V6SmVNbUW1SXw1J6auyFfIwasg0Bn1q7GxFsc=)
                          2: 94407440599811F1AD66B561B3833773.roa (hash: 2WudMR/odwQksivlnEVP4Q5mVY5nV7wrY1X/gZ9EiBA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E1841/4D3F4612599711F18B504558B3833773/FN3HrsvJJccEVg46_IW8PE9PzCg.crl
                          rsync://rpki.apnic.net/member_repository/A91E1841/4D3F4612599711F18B504558B3833773/FN3HrsvJJccEVg46_IW8PE9PzCg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FN3HrsvJJccEVg46_IW8PE9PzCg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 09:12:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 69 (0x45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E1841, serialNumber=14DDC7AECBC925C704560E3AFC85BC3C4F4FCC28
        Validity
            Not Before: Oct  3 09:13:00 2026 GMT
            Not After : Oct 10 09:13:00 2026 GMT
        Subject: CN=6ac0c71c-59e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:58:66:41:5b:d0:81:1a:09:ca:19:b1:83:fc:
                    10:c8:02:2c:64:14:7e:88:a2:a4:cd:b0:46:7e:8d:
                    2a:b3:b4:62:b8:27:11:a1:f8:50:93:5a:05:f0:14:
                    f0:1c:4a:0a:0d:05:cb:d2:a6:ca:4b:24:56:ba:b3:
                    38:64:c6:5c:35:e2:ac:69:3a:1d:3f:cc:37:90:30:
                    0c:91:f3:d3:dd:01:e2:47:7e:f4:56:3e:b5:cd:e1:
                    c9:f2:e0:b5:6c:ca:25:d5:34:ae:7f:a2:7d:6d:b9:
                    f9:9b:66:36:71:fa:70:7d:11:26:9a:de:72:f2:29:
                    35:d8:f3:fa:3e:20:ae:02:dd:6d:26:3e:9f:f1:31:
                    ab:84:02:4e:09:ac:48:72:14:59:42:c3:49:77:4c:
                    15:bf:2b:ea:70:2c:d5:e9:fd:88:3c:03:ec:91:2d:
                    65:85:1f:9a:25:dd:c1:07:8e:ac:62:06:64:92:6d:
                    a0:b4:57:ea:28:47:8c:42:b3:c7:b3:13:d9:ec:a5:
                    64:61:00:a5:92:e6:c7:f2:d7:4f:88:9e:d7:d6:0e:
                    04:41:9f:68:1b:f9:e4:fd:9b:be:57:9d:e6:11:00:
                    3a:78:4c:95:ec:ae:e8:f9:a8:87:c0:ea:c1:bc:84:
                    34:df:e5:4c:3c:17:a0:70:07:29:6c:ad:c2:e1:11:
                    c6:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:84:66:BA:7C:9B:3A:10:7C:34:73:A7:E1:D5:83:58:F3:75:F5:01
            X509v3 Authority Key Identifier:
                keyid:14:DD:C7:AE:CB:C9:25:C7:04:56:0E:3A:FC:85:BC:3C:4F:4F:CC:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E1841/4D3F4612599711F18B504558B3833773/FN3HrsvJJccEVg46_IW8PE9PzCg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FN3HrsvJJccEVg46_IW8PE9PzCg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1841/4D3F4612599711F18B504558B3833773/FN3HrsvJJccEVg46_IW8PE9PzCg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:3e:18:31:76:01:49:2c:2b:8e:d4:49:94:2d:e4:16:14:3a:
         7f:9b:dd:4a:8f:40:ec:93:91:a9:be:86:8a:b9:d1:15:1f:bb:
         ba:a8:11:7a:47:70:bb:3e:19:f6:d8:9c:94:d0:c4:d7:de:9a:
         38:15:d6:e4:b6:47:2a:d3:66:84:fe:d2:69:4d:5b:6f:f2:15:
         17:35:14:2b:1b:cc:9b:01:59:e6:90:7a:73:02:a0:ac:35:2d:
         56:16:7f:5c:e4:1e:a0:ba:79:2d:08:1d:73:49:bf:66:e8:18:
         3a:41:35:e7:6f:ad:29:ee:49:a2:63:2d:4f:87:94:eb:95:f0:
         8a:bb:90:8e:f3:d5:a7:39:d9:e1:43:77:15:6e:86:35:b0:b1:
         47:45:79:40:12:71:34:ca:57:f3:90:2d:2a:92:85:00:1d:73:
         ad:13:7d:a1:6f:b1:5b:ad:a8:fa:d2:85:33:fc:ba:43:cc:ff:
         a6:63:6d:84:dd:26:2b:11:6b:b7:04:53:42:9c:52:e8:c1:54:
         61:d4:ca:1e:c2:59:75:40:f5:52:7e:e6:42:24:a0:7b:ee:59:
         fe:ce:35:d1:87:2d:7b:90:80:a3:ca:56:bb:b1:f2:cc:9a:d4:
         1c:33:74:95:67:67:d7:cd:dc:e6:87:c5:b7:3f:ae:ae:b0:d1:
         b7:1f:d9:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 16:53:34 2026 by rpki-client