Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91352D1/64A5AB84C0EA11F09BA9DB74C4F9AE02/fTWFKD3zPrULnDiNWc14bLudw54.mft
File:                     fTWFKD3zPrULnDiNWc14bLudw54.mft (raw, json)
Hash identifier:          P7oNqylW3fkUT64sAvEvyoePzTXSP/Fs8/u11BZpdlI=
Subject key identifier:   A7:5E:F2:B6:B8:F5:24:97:9A:20:82:C5:46:EC:6D:9B:FA:50:7C:98
Authority key identifier: 7D:35:85:28:3D:F3:3E:B5:0B:9C:38:8D:59:CD:78:6C:BB:9D:C3:9E
Certificate issuer:       /CN=A91352D1/serialNumber=7D3585283DF33EB50B9C388D59CD786CBB9DC39E
Certificate serial:       AC
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fTWFKD3zPrULnDiNWc14bLudw54.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91352D1/64A5AB84C0EA11F09BA9DB74C4F9AE02/fTWFKD3zPrULnDiNWc14bLudw54.mft
Manifest number:          A8
Signing time:             Sun 27 Sep 2026 07:44:21 +0000
Manifest this update:     Sun 27 Sep 2026 07:44:20 +0000
Manifest next update:     Sun 04 Oct 2026 07:44:20 +0000
Files and hashes:         1: fTWFKD3zPrULnDiNWc14bLudw54.crl (hash: q45m8+SD2EcNafjEssQg/5+btNGPhn+2ohJy/hwqhiI=)
                          2: F0F521DEC10B11F0B1AC197FC4F9AE02.roa (hash: GOuUl8j+KrJKN/gcw/cqwqcTvAUg8ALJCq8KS5t0JeI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91352D1/64A5AB84C0EA11F09BA9DB74C4F9AE02/fTWFKD3zPrULnDiNWc14bLudw54.crl
                          rsync://rpki.apnic.net/member_repository/A91352D1/64A5AB84C0EA11F09BA9DB74C4F9AE02/fTWFKD3zPrULnDiNWc14bLudw54.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fTWFKD3zPrULnDiNWc14bLudw54.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 172 (0xac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91352D1, serialNumber=7D3585283DF33EB50B9C388D59CD786CBB9DC39E
        Validity
            Not Before: Sep 27 07:44:20 2026 GMT
            Not After : Oct  4 07:44:20 2026 GMT
        Subject: CN=6ab8c954-831d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:1b:00:c7:53:8d:30:c6:04:9a:c2:c4:63:5d:
                    c4:66:25:40:b1:53:ad:3f:2f:ea:e1:36:e8:e9:33:
                    d4:c4:00:11:f1:29:4e:a4:e4:56:f3:2d:ee:38:93:
                    f2:2f:a0:d2:e3:dd:2c:3a:16:bb:59:12:5d:a7:e6:
                    36:9e:1b:9e:91:f4:31:a3:9f:30:46:99:2f:c3:25:
                    8e:5d:0e:fd:1e:39:cb:e8:a9:6f:0c:55:fa:24:89:
                    29:a3:4b:a4:6b:5c:80:a3:8d:13:29:7b:bf:0f:9f:
                    90:d2:9f:2a:8f:aa:c1:13:1c:15:d3:00:c1:cb:ad:
                    85:01:6e:52:7e:51:6c:01:de:bd:cd:f4:3c:2b:e7:
                    54:c9:32:7e:e1:d7:39:fb:de:63:1f:15:e6:10:61:
                    39:84:06:9b:ed:52:f6:33:31:28:f7:1b:76:03:1e:
                    b5:6c:27:c5:69:4f:c1:dd:fc:08:fb:4d:a5:6c:d6:
                    b4:4c:bd:5c:45:f3:fa:1d:f1:ec:fa:99:93:1a:ca:
                    2f:fb:1e:f9:ca:78:49:60:6b:b7:24:56:58:86:45:
                    aa:64:0e:c0:3c:7b:e1:a9:8a:4b:69:32:98:5a:1f:
                    55:8a:fe:47:41:82:97:9c:85:1e:de:74:f2:d1:dc:
                    14:1e:ac:a7:cf:b4:57:56:78:6d:1b:9a:eb:d3:4f:
                    ee:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:5E:F2:B6:B8:F5:24:97:9A:20:82:C5:46:EC:6D:9B:FA:50:7C:98
            X509v3 Authority Key Identifier:
                keyid:7D:35:85:28:3D:F3:3E:B5:0B:9C:38:8D:59:CD:78:6C:BB:9D:C3:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91352D1/64A5AB84C0EA11F09BA9DB74C4F9AE02/fTWFKD3zPrULnDiNWc14bLudw54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fTWFKD3zPrULnDiNWc14bLudw54.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91352D1/64A5AB84C0EA11F09BA9DB74C4F9AE02/fTWFKD3zPrULnDiNWc14bLudw54.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:4d:47:52:17:63:58:27:7b:a7:f5:28:f8:0f:a8:ec:15:26:
         7b:17:78:9f:5b:a1:6a:c3:b5:c2:be:1c:fe:c0:7a:98:9e:a7:
         70:19:ab:2e:95:29:7f:f2:54:67:73:14:d3:b8:39:fb:01:fb:
         36:9b:c5:f1:a0:35:e4:fd:bd:ed:9b:a0:66:9b:d9:a3:03:36:
         f9:14:40:f3:ff:72:1a:47:a5:55:40:60:07:7c:e5:9b:1e:a2:
         51:30:ff:40:e2:04:d3:b2:81:3a:92:c3:a3:fd:45:8f:47:f9:
         2f:97:34:ed:ec:fb:c2:d5:25:00:c4:46:47:b3:8f:b9:32:c2:
         28:33:e5:3b:08:8d:16:a9:54:bd:cb:fb:b3:b1:87:16:20:c0:
         b1:2d:62:0a:34:b1:0c:9f:0e:d2:8d:7d:5c:9a:33:24:43:7c:
         85:6b:1f:7a:98:2f:ca:ad:d1:98:86:e9:79:f4:f0:a1:8c:d0:
         85:62:12:2b:c2:d9:3e:08:33:38:df:62:92:89:99:91:f5:28:
         9c:9e:5e:bb:83:c1:11:66:ee:f0:77:a7:53:0d:0e:e8:a6:18:
         42:db:d3:da:28:53:da:94:6c:8b:60:35:33:6f:63:22:b5:ac:
         86:ae:29:f0:64:94:73:b4:f1:76:fc:22:08:1c:8f:96:2d:ee:
         b1:25:09:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:14:40 2026 by rpki-client