Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/FgZOq4GuGHOhAZ0JKJb5Inpe70U.mft
File:                     FgZOq4GuGHOhAZ0JKJb5Inpe70U.mft (raw, json)
Hash identifier:          1F3oak6Wjrs0sMIKN6qCg64W9YeC1DGha6OvnmYswFs=
Subject key identifier:   9C:25:FD:2D:EB:B8:84:62:8E:61:14:54:D9:7A:9B:CE:3C:C6:C2:F9
Authority key identifier: 16:06:4E:AB:81:AE:18:73:A1:01:9D:09:28:96:F9:22:7A:5E:EF:45
Certificate issuer:       /CN=A911A0C0/serialNumber=16064EAB81AE1873A1019D092896F9227A5EEF45
Certificate serial:       1A16
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgZOq4GuGHOhAZ0JKJb5Inpe70U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/FgZOq4GuGHOhAZ0JKJb5Inpe70U.mft
Manifest number:          1A06
Signing time:             Thu 24 Sep 2026 16:20:18 +0000
Manifest this update:     Thu 24 Sep 2026 16:20:17 +0000
Manifest next update:     Thu 01 Oct 2026 16:20:17 +0000
Files and hashes:         1: FgZOq4GuGHOhAZ0JKJb5Inpe70U.crl (hash: cIelvsZSB9PUa3OuO+Xfr0XD6e9hxSDXQ/N2QhmgV+0=)
                          2: 543AF5B283D911E78F2FA066C4F9AE02.roa (hash: VmS/Q3+6coESHGoEMtOrtTGznEUVw0iY/NUTCTx6zGg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/FgZOq4GuGHOhAZ0JKJb5Inpe70U.crl
                          rsync://rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/FgZOq4GuGHOhAZ0JKJb5Inpe70U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgZOq4GuGHOhAZ0JKJb5Inpe70U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 16:20:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6678 (0x1a16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911A0C0, serialNumber=16064EAB81AE1873A1019D092896F9227A5EEF45
        Validity
            Not Before: Sep 24 16:20:17 2026 GMT
            Not After : Oct  1 16:20:17 2026 GMT
        Subject: CN=6ab54dc2-a017
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:da:e4:72:53:af:17:b9:f1:dd:a5:05:34:f8:
                    24:6d:71:28:51:14:55:41:36:be:21:f3:70:ec:ae:
                    c3:4f:fd:e8:f5:2c:fc:cb:53:fc:21:b2:4d:23:3b:
                    69:50:65:90:d9:49:3f:d9:77:82:3a:b9:a1:da:f7:
                    8d:ef:0d:ce:ff:ff:c3:09:2c:6b:56:7e:e4:6c:4e:
                    f3:13:eb:5f:2a:49:e3:5d:42:30:9c:c6:61:5a:57:
                    24:20:b8:f9:8e:b3:6d:80:e4:97:89:99:f8:d6:ef:
                    1c:1d:55:b9:8b:1d:67:48:5d:1d:73:d7:e9:ba:27:
                    7e:2c:48:14:eb:1a:44:9d:56:a2:19:7c:0e:76:3e:
                    e1:10:f1:02:83:97:6c:85:40:f7:78:2d:ae:20:c5:
                    19:c2:67:25:ad:15:6e:86:b1:7b:59:76:a8:ef:a6:
                    5e:8d:d7:ae:25:89:29:bd:09:fa:78:3e:10:50:19:
                    c6:b9:0c:4b:b3:a4:9e:7f:79:55:05:9b:a7:2b:b2:
                    8d:3f:ed:1b:83:90:0c:3f:ff:67:1c:e5:c1:d6:0a:
                    e5:ff:97:fa:c4:c6:23:5c:02:12:c0:14:a8:c3:97:
                    29:1b:6d:23:8d:b8:7a:d1:36:92:b1:39:81:65:19:
                    46:ca:42:7d:87:d0:85:84:b4:72:7d:f9:b6:a1:23:
                    ab:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:25:FD:2D:EB:B8:84:62:8E:61:14:54:D9:7A:9B:CE:3C:C6:C2:F9
            X509v3 Authority Key Identifier:
                keyid:16:06:4E:AB:81:AE:18:73:A1:01:9D:09:28:96:F9:22:7A:5E:EF:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/FgZOq4GuGHOhAZ0JKJb5Inpe70U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgZOq4GuGHOhAZ0JKJb5Inpe70U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/FgZOq4GuGHOhAZ0JKJb5Inpe70U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:19:e8:91:9f:48:18:85:18:91:4c:02:bc:f6:a9:09:28:4e:
         0e:19:af:cb:46:d3:b9:35:4b:f9:ba:21:46:29:22:9a:51:1b:
         48:3e:70:8f:89:c0:88:ff:b4:e9:8a:b0:bc:00:29:b6:61:c3:
         af:e2:66:fc:6a:5f:a9:e7:35:7b:71:4c:78:39:41:45:4e:89:
         a4:36:bd:30:1d:3d:11:08:16:ee:56:ef:e9:40:3e:55:03:c2:
         79:90:e4:ed:5b:9f:82:7f:12:d4:c6:f9:27:1b:d8:ab:0f:0a:
         09:ce:ff:41:ea:e3:53:17:77:24:17:1e:cd:c8:6e:fd:f2:cb:
         b2:4a:18:0a:8b:df:63:12:39:62:d4:73:05:ba:be:36:55:b6:
         ec:4a:43:aa:d2:d9:ff:03:ac:f2:9d:ac:6c:4a:5b:67:77:06:
         27:62:be:5e:98:9f:93:a2:78:68:c9:92:af:4d:01:75:68:bc:
         83:af:0c:11:e7:b7:b8:2a:57:c7:97:3b:1a:f6:08:b3:dc:1d:
         84:1b:20:4c:e6:b9:6e:47:3b:b5:94:e8:3f:a4:72:1f:d8:6b:
         30:46:02:fc:01:2e:ab:55:f3:30:7b:aa:38:8e:0c:6f:3a:9d:
         70:69:dc:5f:10:08:27:c3:ac:1d:e3:fb:18:ce:b9:68:ff:f8:
         d3:bb:25:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 17:29:07 2026 by rpki-client