Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FB95D/94E350C057EA11F1B6A8C17A93833773/fF5VtqzOVCaQTRY8LwRcJpoUqPw.mft
File:                     fF5VtqzOVCaQTRY8LwRcJpoUqPw.mft (raw, json)
Hash identifier:          GFFmoFVy01FmLRXcm2PEshWk+5bD6e72uLLcxmfVhgI=
Subject key identifier:   7D:5A:30:A0:EA:41:88:27:7D:20:7F:DA:A2:9B:D8:8B:9E:D8:C9:03
Authority key identifier: 7C:5E:55:B6:AC:CE:54:26:90:4D:16:3C:2F:04:5C:26:9A:14:A8:FC
Certificate issuer:       /CN=A91FB95D/serialNumber=7C5E55B6ACCE5426904D163C2F045C269A14A8FC
Certificate serial:       45
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fF5VtqzOVCaQTRY8LwRcJpoUqPw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FB95D/94E350C057EA11F1B6A8C17A93833773/fF5VtqzOVCaQTRY8LwRcJpoUqPw.mft
Manifest number:          45
Signing time:             Wed 07 Oct 2026 09:01:38 +0000
Manifest this update:     Wed 07 Oct 2026 09:01:37 +0000
Manifest next update:     Wed 14 Oct 2026 09:01:37 +0000
Files and hashes:         1: fF5VtqzOVCaQTRY8LwRcJpoUqPw.crl (hash: +YtybwTXw8MOvRbqGMe4eekYk4bTGeQiHw5cG7dlGNM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FB95D/94E350C057EA11F1B6A8C17A93833773/fF5VtqzOVCaQTRY8LwRcJpoUqPw.crl
                          rsync://rpki.apnic.net/member_repository/A91FB95D/94E350C057EA11F1B6A8C17A93833773/fF5VtqzOVCaQTRY8LwRcJpoUqPw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fF5VtqzOVCaQTRY8LwRcJpoUqPw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 09:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 69 (0x45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FB95D, serialNumber=7C5E55B6ACCE5426904D163C2F045C269A14A8FC
        Validity
            Not Before: Oct  7 09:01:37 2026 GMT
            Not After : Oct 14 09:01:37 2026 GMT
        Subject: CN=6ac60a72-db91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:7e:36:b6:b5:4c:5b:ab:17:28:2b:dd:ba:2b:
                    a5:d8:50:8d:7f:79:22:2c:50:32:a0:79:e5:90:47:
                    58:93:27:fc:62:e3:08:3d:e3:aa:55:e8:60:c1:eb:
                    7d:96:09:1c:32:22:07:e2:6d:c0:ac:c6:88:35:ef:
                    13:c4:da:2e:fa:e6:d4:3e:ca:b2:f5:ce:5b:4c:32:
                    bb:b8:7d:b9:c3:f2:46:3c:e2:b3:93:35:29:4e:3a:
                    03:18:53:ce:4f:9e:88:73:ec:09:ee:89:b0:bb:4c:
                    f9:8d:8d:ed:23:ce:2f:b8:66:45:94:af:27:99:f0:
                    8a:da:b7:f6:6c:9f:e8:e7:61:0c:b2:e6:1b:ec:f3:
                    8e:a9:dd:c9:24:55:91:c6:19:fb:5c:02:4c:47:87:
                    7c:12:c7:69:14:a2:a8:98:e4:9e:ff:b9:60:d1:6c:
                    ba:d3:85:66:76:3e:15:3e:a5:56:02:d9:b6:79:d4:
                    45:28:50:2e:bd:88:68:19:89:e7:04:41:f5:4f:ff:
                    f7:00:7f:11:66:2b:db:90:11:79:81:e2:5c:19:ee:
                    40:e4:d5:07:e7:5c:59:98:90:44:3c:2a:e8:10:c9:
                    af:a2:f6:55:2b:16:8b:30:26:3e:74:49:77:d8:99:
                    d1:50:6b:f3:56:43:91:5d:97:3f:ea:af:a8:e2:58:
                    a1:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:5A:30:A0:EA:41:88:27:7D:20:7F:DA:A2:9B:D8:8B:9E:D8:C9:03
            X509v3 Authority Key Identifier:
                keyid:7C:5E:55:B6:AC:CE:54:26:90:4D:16:3C:2F:04:5C:26:9A:14:A8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FB95D/94E350C057EA11F1B6A8C17A93833773/fF5VtqzOVCaQTRY8LwRcJpoUqPw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fF5VtqzOVCaQTRY8LwRcJpoUqPw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB95D/94E350C057EA11F1B6A8C17A93833773/fF5VtqzOVCaQTRY8LwRcJpoUqPw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:ad:6d:4d:35:f3:37:87:55:59:4f:0c:04:d4:7c:34:00:09:
         b5:b1:23:b4:62:98:80:c4:ca:f7:9a:1d:b9:08:db:c6:c1:7c:
         35:59:76:05:b8:aa:10:f9:01:72:b4:c1:1d:68:b9:a4:cd:bc:
         db:d0:2a:ce:d7:eb:85:38:88:a0:62:33:7f:06:eb:bf:ea:3b:
         fe:f0:6f:6a:34:39:fe:c5:52:0f:eb:11:2f:cd:c5:26:8b:2d:
         cc:6a:78:0a:3f:c8:8c:29:c9:03:e3:76:db:3f:88:38:54:41:
         82:80:38:c6:2f:3d:21:92:0a:f3:3e:a1:ef:9e:18:79:f2:82:
         57:e1:db:ea:4b:21:6c:31:fc:3b:ba:86:2e:23:d5:82:2e:a5:
         42:10:90:f5:7e:6a:d4:bd:4e:17:8e:ff:ad:74:63:4f:b8:16:
         d8:a6:91:a3:26:51:97:2c:ae:58:88:42:84:ce:cc:df:1a:92:
         c6:06:d4:16:ef:d9:c3:6a:f6:a1:1b:e6:bb:60:ed:49:69:c7:
         fb:a4:aa:14:61:bc:a5:0c:54:8e:ee:eb:4d:c8:c1:e8:ef:af:
         b9:59:4e:b7:ac:e8:b8:a0:73:b5:d1:40:d1:00:15:33:c0:b7:
         19:8d:0d:f1:8a:8a:45:95:7a:c7:3c:6e:6e:af:cc:c4:01:0d:
         78:d7:72:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 16:53:25 2026 by rpki-client