Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91193C1/736E3B48059311EC8921ED85C4F9AE02/FFSOcJSeUF-LqKU5HkZuHpnTtyc.mft
File:                     FFSOcJSeUF-LqKU5HkZuHpnTtyc.mft (raw, json)
Hash identifier:          olwwpcNqxYUiCXuEjATVKD+ISugU/mXeSpVAhDBqhCA=
Subject key identifier:   1A:20:8A:85:A9:4D:63:B3:26:B7:9A:77:B7:D5:7C:74:94:56:80:9F
Authority key identifier: 14:54:8E:70:94:9E:50:5F:8B:A8:A5:39:1E:46:6E:1E:99:D3:B7:27
Certificate issuer:       /CN=A91193C1/serialNumber=14548E70949E505F8BA8A5391E466E1E99D3B727
Certificate serial:       062A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFSOcJSeUF-LqKU5HkZuHpnTtyc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91193C1/736E3B48059311EC8921ED85C4F9AE02/FFSOcJSeUF-LqKU5HkZuHpnTtyc.mft
Manifest number:          0616
Signing time:             Tue 22 Sep 2026 22:44:52 +0000
Manifest this update:     Tue 22 Sep 2026 22:44:51 +0000
Manifest next update:     Tue 29 Sep 2026 22:44:51 +0000
Files and hashes:         1: FFSOcJSeUF-LqKU5HkZuHpnTtyc.crl (hash: nFC0BzGGpE5kLIz/TJcoKTX/2ijADE5R9O7heLIXFQw=)
                          2: AC58009E782A11EFA7DD8F7CC4F9AE02.roa (hash: UxSfVK8mOg7oI1TREX9lZ6O+DFZlz9v5PI0cc9vSjto=)
                          3: C8900982059611ECB2896C55C4F9AE02.roa (hash: HKuyh9i460jyPjgVsedDP+wI2X5laRM2DWFL1VhZUHk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91193C1/736E3B48059311EC8921ED85C4F9AE02/FFSOcJSeUF-LqKU5HkZuHpnTtyc.crl
                          rsync://rpki.apnic.net/member_repository/A91193C1/736E3B48059311EC8921ED85C4F9AE02/FFSOcJSeUF-LqKU5HkZuHpnTtyc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFSOcJSeUF-LqKU5HkZuHpnTtyc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 22:44:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1578 (0x62a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91193C1, serialNumber=14548E70949E505F8BA8A5391E466E1E99D3B727
        Validity
            Not Before: Sep 22 22:44:51 2026 GMT
            Not After : Sep 29 22:44:51 2026 GMT
        Subject: CN=6ab304e4-43b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b5:53:21:33:73:9d:77:54:bd:b0:61:fa:b2:
                    5d:f8:23:09:64:1e:60:1d:a2:f0:52:ae:1b:cc:41:
                    94:30:b8:5e:c9:89:de:d1:f4:e7:39:1b:46:bc:4b:
                    ba:67:09:e2:40:8d:d4:3b:c7:64:9f:c4:d7:bf:c2:
                    21:67:8f:05:f6:13:10:3b:45:65:74:0f:d1:1d:bb:
                    f3:46:6a:f2:3f:a3:60:a6:03:e7:86:ee:7e:b9:27:
                    8e:5e:b8:c0:a5:6e:93:cb:73:a9:ac:10:92:7c:8c:
                    e8:cd:0c:c5:d5:95:66:a8:a2:d0:7e:af:2f:1f:e6:
                    c1:9e:3d:9e:a5:cd:61:5c:a0:6a:f7:8a:99:9b:3e:
                    91:74:b1:b9:20:cc:a8:a2:03:da:48:02:60:61:38:
                    2b:8b:bc:90:99:b4:32:7d:d1:0f:c0:03:44:19:71:
                    48:5d:7d:84:7d:98:5c:4d:79:9a:df:ff:7f:3a:9c:
                    9c:75:07:df:c4:2e:93:64:93:c4:48:0f:ea:fa:a0:
                    19:d6:72:a3:ac:88:b8:4a:59:10:3a:25:21:ce:cb:
                    c2:9a:66:91:f3:1e:fd:cc:96:cc:77:31:c1:2b:37:
                    3d:d9:18:ab:58:3e:ca:34:c8:0d:72:72:18:55:b3:
                    a2:bf:11:51:ba:84:07:b3:7b:ca:69:d2:e0:12:c5:
                    ee:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:20:8A:85:A9:4D:63:B3:26:B7:9A:77:B7:D5:7C:74:94:56:80:9F
            X509v3 Authority Key Identifier:
                keyid:14:54:8E:70:94:9E:50:5F:8B:A8:A5:39:1E:46:6E:1E:99:D3:B7:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91193C1/736E3B48059311EC8921ED85C4F9AE02/FFSOcJSeUF-LqKU5HkZuHpnTtyc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFSOcJSeUF-LqKU5HkZuHpnTtyc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91193C1/736E3B48059311EC8921ED85C4F9AE02/FFSOcJSeUF-LqKU5HkZuHpnTtyc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:48:45:dc:89:11:6a:f0:60:32:e3:1f:6f:12:2d:2f:a5:aa:
         75:7a:99:60:37:24:30:38:56:28:61:f6:5a:ad:05:07:43:44:
         4f:35:35:1c:05:4a:32:a3:fc:01:cd:11:44:65:23:e9:c6:6a:
         95:2a:a2:0c:5c:fc:7d:e3:c3:01:38:4a:32:d3:fa:2a:a4:0e:
         4d:3d:57:84:3e:45:1d:cd:48:72:63:2b:2e:e1:a0:b0:0d:e8:
         9f:22:38:32:35:1c:2f:79:2a:76:52:b8:87:eb:17:f8:38:42:
         28:8f:d3:06:ae:e2:a8:33:48:1c:78:e5:d3:8d:33:b9:a7:33:
         f1:36:48:8e:9a:70:97:5e:7b:d8:ed:39:7e:07:11:c1:10:b5:
         7a:e4:12:5f:1e:f6:c0:6a:7c:36:d6:f3:e7:9c:f9:04:59:49:
         41:e3:ab:88:c0:1d:e4:e7:b5:43:5c:41:d7:bb:a4:1b:0e:8b:
         28:25:b6:eb:a5:35:f9:18:30:0d:4a:a6:42:15:47:3f:6c:6b:
         39:fd:14:d6:69:74:59:1b:52:f3:7e:e9:2c:44:fc:7b:11:c5:
         d9:74:74:87:42:08:1a:2a:03:59:01:f4:51:66:54:00:28:64:
         00:f1:b7:e1:10:4f:81:f4:4d:18:b9:96:82:4f:5f:a5:63:10:
         1e:23:71:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 03:00:55 2026 by rpki-client