Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912FEAB/FDD899EC2F8411ED98B91B0AC4F9AE02/FWZDTXxsxlkckNwnSr9z3gDrBQE.mft
File:                     FWZDTXxsxlkckNwnSr9z3gDrBQE.mft (raw, json)
Hash identifier:          BDbDPlaLg9G0vuWu0OAW7AAzzr0owXzIfaLeQF0z+aQ=
Subject key identifier:   F9:7B:83:59:44:51:D9:53:6A:1D:7C:BF:8B:A2:B4:D3:6F:1F:59:2F
Authority key identifier: 15:66:43:4D:7C:6C:C6:59:1C:90:DC:27:4A:BF:73:DE:00:EB:05:01
Certificate issuer:       /CN=A912FEAB/serialNumber=1566434D7C6CC6591C90DC274ABF73DE00EB0501
Certificate serial:       0324
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWZDTXxsxlkckNwnSr9z3gDrBQE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912FEAB/FDD899EC2F8411ED98B91B0AC4F9AE02/FWZDTXxsxlkckNwnSr9z3gDrBQE.mft
Manifest number:          031D
Signing time:             Sun 27 Sep 2026 01:07:53 +0000
Manifest this update:     Sun 27 Sep 2026 01:07:52 +0000
Manifest next update:     Sun 04 Oct 2026 01:07:52 +0000
Files and hashes:         1: FWZDTXxsxlkckNwnSr9z3gDrBQE.crl (hash: tz/WALwCQGTHM8Ltmkle7u0b8rzG9S2XP4Hk7Whjzos=)
                          2: 9082B9C42F8711ED90F1090CC4F9AE02.roa (hash: EDyKn0kWcDVHT/YkbTzVjcZ2ssAl9mljUo5MrerRei0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912FEAB/FDD899EC2F8411ED98B91B0AC4F9AE02/FWZDTXxsxlkckNwnSr9z3gDrBQE.crl
                          rsync://rpki.apnic.net/member_repository/A912FEAB/FDD899EC2F8411ED98B91B0AC4F9AE02/FWZDTXxsxlkckNwnSr9z3gDrBQE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWZDTXxsxlkckNwnSr9z3gDrBQE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 01:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 804 (0x324)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912FEAB, serialNumber=1566434D7C6CC6591C90DC274ABF73DE00EB0501
        Validity
            Not Before: Sep 27 01:07:52 2026 GMT
            Not After : Oct  4 01:07:52 2026 GMT
        Subject: CN=6ab86c69-61ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:fb:ab:77:1b:69:80:ed:05:9c:92:23:e6:14:
                    a3:a5:21:0d:d7:34:8e:d2:75:b8:55:47:40:d1:7f:
                    63:ce:cc:52:e7:9d:81:55:70:d0:d6:97:0a:dd:af:
                    eb:1f:5e:bf:3c:75:a4:a0:93:f8:f2:0b:d8:f1:35:
                    02:44:ad:92:7e:38:54:15:04:67:9a:4c:62:e0:26:
                    21:5c:04:20:cc:59:a8:e6:63:ee:c7:c2:8f:2b:56:
                    46:cb:5b:0c:48:90:d2:32:b3:44:f2:f1:b8:db:b5:
                    27:3d:a4:82:b0:f9:b4:93:f1:2d:26:93:b8:42:39:
                    ff:fd:64:76:35:e1:d4:c4:03:1e:5f:0f:b8:f4:d5:
                    cb:35:22:4d:53:70:2b:04:bd:11:e7:1c:30:08:db:
                    64:c8:a5:ac:86:a5:da:4c:b2:a6:87:9b:5d:20:e9:
                    46:83:49:47:46:0e:ef:cf:ad:c6:cb:af:41:c9:d7:
                    83:24:3d:95:fd:21:fd:a3:0d:30:0d:57:ca:7f:e7:
                    8a:88:b4:54:52:f3:8d:31:cc:3f:47:67:ca:46:0f:
                    f2:50:17:ee:03:96:b5:44:56:ab:96:a7:79:e7:e3:
                    73:84:f4:bf:b2:03:c3:18:24:35:7e:ff:25:bf:d2:
                    97:eb:62:df:4a:2d:3b:98:7f:7b:5f:28:41:b6:2c:
                    ab:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:7B:83:59:44:51:D9:53:6A:1D:7C:BF:8B:A2:B4:D3:6F:1F:59:2F
            X509v3 Authority Key Identifier:
                keyid:15:66:43:4D:7C:6C:C6:59:1C:90:DC:27:4A:BF:73:DE:00:EB:05:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912FEAB/FDD899EC2F8411ED98B91B0AC4F9AE02/FWZDTXxsxlkckNwnSr9z3gDrBQE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWZDTXxsxlkckNwnSr9z3gDrBQE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FEAB/FDD899EC2F8411ED98B91B0AC4F9AE02/FWZDTXxsxlkckNwnSr9z3gDrBQE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:10:23:5e:b6:c3:95:45:b0:7c:2e:e6:54:e5:64:08:c2:d8:
         f5:56:33:3e:99:c1:8d:cf:7e:f0:0b:73:2b:76:27:4c:c4:bf:
         9a:b2:eb:e1:01:95:80:b9:94:85:31:d4:52:4c:f5:40:e2:1d:
         00:98:5d:0a:27:61:9e:21:23:31:5c:f4:05:8d:27:91:d6:92:
         b6:4e:bc:d5:6d:83:87:23:9f:ab:54:80:a9:3c:d9:b1:a6:08:
         ee:83:a5:af:c7:4b:4a:0e:2d:93:19:40:0e:2d:ec:03:e2:63:
         60:48:3d:92:7b:13:e4:42:00:11:53:25:7a:4b:26:6e:bd:b8:
         23:68:fd:91:2c:f6:fa:1b:3a:a4:34:f6:c1:20:b3:d7:32:54:
         d7:13:1d:23:9a:1b:22:74:1b:5c:cd:18:96:bb:dc:78:92:71:
         7c:bb:a8:13:01:54:1c:44:60:5e:51:f5:1d:55:75:84:88:1f:
         db:04:ec:b1:f5:5a:dd:f7:8e:a8:31:d2:6a:b6:ba:55:2a:cf:
         02:fd:01:27:89:23:4e:50:7f:33:b3:81:15:64:0e:8f:1d:b9:
         c2:a8:aa:f6:8e:0f:b0:6b:7a:d3:fc:8c:cd:81:d8:01:89:01:
         48:e7:08:ae:bb:03:ed:c5:c3:0b:27:a4:9a:99:9a:73:d4:25:
         c6:60:e8:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 10:35:02 2026 by rpki-client