Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.mft
File:                     FrmIQthhrv6AMEAgDJqqiVYPK8o.mft (raw, json)
Hash identifier:          JYmVI7I6yrAsjYBTBPHEh74BVQXXEcsNRgG1WkdaTnY=
Subject key identifier:   EF:81:A8:68:D4:0D:3A:C7:12:61:78:69:86:D4:FD:CC:2C:3E:CB:4A
Authority key identifier: 16:B9:88:42:D8:61:AE:FE:80:30:40:20:0C:9A:AA:89:56:0F:2B:CA
Certificate issuer:       /CN=A91EABCB/serialNumber=16B98842D861AEFE803040200C9AAA89560F2BCA
Certificate serial:       0784
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrmIQthhrv6AMEAgDJqqiVYPK8o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.mft
Manifest number:          076F
Signing time:             Wed 02 Sep 2026 21:39:51 +0000
Manifest this update:     Wed 02 Sep 2026 21:39:51 +0000
Manifest next update:     Wed 09 Sep 2026 21:39:51 +0000
Files and hashes:         1: FrmIQthhrv6AMEAgDJqqiVYPK8o.crl (hash: zkCULz+SYNhldUWz+uGV65pWCfGliF3uMZrTIZE4WlQ=)
                          2: 0F0EC4A67A8811EB95169F62C4F9AE02.roa (hash: 7vpCi6tiC+nYwk1GKGUUszYv1YKzqefKr3Cq0hLOpLI=)
                          3: 2E248E2CAD8511F08469DF53C4F9AE02.roa (hash: WTkCXMD4s9+pTdAVOc0KZG2ehtUBwPP4uPitEquEFeQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.crl
                          rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrmIQthhrv6AMEAgDJqqiVYPK8o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Sep 2026 21:39:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1924 (0x784)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EABCB, serialNumber=16B98842D861AEFE803040200C9AAA89560F2BCA
        Validity
            Not Before: Sep  2 21:39:51 2026 GMT
            Not After : Sep  9 21:39:51 2026 GMT
        Subject: CN=6a9897a7-a1bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:20:f3:a1:58:05:c2:85:18:b0:f6:46:8c:e7:
                    81:15:12:d4:7d:18:1b:c7:d2:58:e8:ed:1d:b6:6c:
                    8e:dd:ef:04:76:bb:31:72:46:0e:8d:9f:78:95:8d:
                    13:32:37:96:0a:c1:46:32:77:7a:d9:ea:ca:f0:a6:
                    9c:ae:73:af:2b:83:62:58:77:0c:be:c1:ec:5f:0d:
                    23:01:df:ae:2a:01:8c:e8:9b:1e:1e:2e:0e:88:9a:
                    d4:73:b6:c6:a7:1a:15:82:34:8f:e8:8c:e4:53:39:
                    58:ae:d8:d1:89:e4:09:e7:20:43:4e:5a:3a:2e:4c:
                    ae:8e:f2:da:a1:96:e0:5a:98:cd:5d:8e:25:43:df:
                    0c:0c:14:64:61:79:7b:3e:06:4c:b0:54:ff:f4:b9:
                    e6:d6:e4:10:ca:bd:a5:ba:0e:9f:92:4d:f5:e9:c5:
                    6a:51:5d:2a:d3:13:e9:ea:e7:fd:cb:5f:d2:35:19:
                    ae:87:7d:06:33:13:01:4a:1d:87:26:25:1f:4d:87:
                    98:1f:a0:ce:b5:ae:f7:4d:48:bd:5e:7a:47:f9:72:
                    d1:8c:a0:39:e2:1f:e2:bc:3e:58:77:c3:5c:63:ac:
                    6c:59:ad:29:10:99:93:d1:d6:21:71:56:07:b4:41:
                    51:55:96:38:4e:9d:2f:d2:ea:ab:be:12:36:1c:34:
                    e3:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:81:A8:68:D4:0D:3A:C7:12:61:78:69:86:D4:FD:CC:2C:3E:CB:4A
            X509v3 Authority Key Identifier:
                keyid:16:B9:88:42:D8:61:AE:FE:80:30:40:20:0C:9A:AA:89:56:0F:2B:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrmIQthhrv6AMEAgDJqqiVYPK8o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:fa:b9:55:a7:4d:c2:73:71:e1:42:3c:49:b8:05:e0:7c:e5:
         78:bf:c4:44:f0:d9:ba:06:a2:84:e3:c0:c6:33:da:a0:93:6a:
         59:41:b0:96:b3:05:be:30:77:0d:62:93:00:fd:eb:2c:28:80:
         85:23:e8:5d:f5:45:f8:a0:b8:f6:da:89:76:00:8a:5d:56:ae:
         39:fe:7c:5a:c0:00:98:cb:20:2f:d7:d8:41:68:1f:0c:f3:78:
         ae:23:6f:c1:27:29:15:aa:4e:c0:f1:db:06:b9:2a:97:25:4a:
         53:22:26:41:7c:22:b5:48:77:92:a9:fc:9e:77:a2:e9:1a:4e:
         df:ea:37:8c:eb:3a:98:ec:50:b2:a5:d8:de:73:01:08:fc:08:
         71:c0:ec:6a:8e:39:57:2a:45:ab:03:af:cf:5e:0c:3b:4c:52:
         ac:70:9d:01:11:35:2a:75:bc:f7:4e:ec:8a:96:7a:3f:42:ef:
         00:b8:b3:c0:2b:bd:9b:97:8b:2a:c7:de:d9:f1:eb:4a:09:07:
         ff:b3:d4:0f:3b:56:dc:68:67:38:f1:4f:e8:14:ed:90:a4:32:
         f4:b6:21:34:e4:7b:cf:91:ab:97:04:79:11:af:dc:56:ce:26:
         95:c9:de:3a:9b:1c:2d:2c:b3:4e:ef:96:6e:0c:27:80:2a:09:
         43:10:06:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:18:38 2026 by rpki-client