Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91390D1/FFA43F143E0411F1AD63DF8CA6833773/CFDUhlPa5QGZunr6XjP5gKNfk-U.mft
File:                     CFDUhlPa5QGZunr6XjP5gKNfk-U.mft (raw, json)
Hash identifier:          uVN1F+Xsypmqwh/x4fRWBsJO6sHPNYhw9Rrip5lcN0k=
Subject key identifier:   98:5C:08:F6:D6:74:1C:3A:67:2A:81:79:97:91:4F:F7:1D:80:BE:12
Authority key identifier: 08:50:D4:86:53:DA:E5:01:99:BA:7A:FA:5E:33:F9:80:A3:5F:93:E5
Certificate issuer:       /CN=A91390D1/serialNumber=0850D48653DAE50199BA7AFA5E33F980A35F93E5
Certificate serial:       51
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CFDUhlPa5QGZunr6XjP5gKNfk-U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91390D1/FFA43F143E0411F1AD63DF8CA6833773/CFDUhlPa5QGZunr6XjP5gKNfk-U.mft
Manifest number:          4F
Signing time:             Wed 23 Sep 2026 08:00:56 +0000
Manifest this update:     Wed 23 Sep 2026 08:00:55 +0000
Manifest next update:     Wed 30 Sep 2026 08:00:55 +0000
Files and hashes:         1: CFDUhlPa5QGZunr6XjP5gKNfk-U.crl (hash: G2cEdQkS+6FSF//lB2MK0E2cvsH+yj+gIX0fIMIllBE=)
                          2: 2FF9F3D63E1211F1A9349102AE833773.roa (hash: VWpcu8O6MRinpVbPmabr8oFyo8vRo6lsrBwyQBIngak=)
                          3: 309048B83E1211F1A9349102AE833773.roa (hash: sqKxThroamkDhc6JSRBhISx43pCPlzadkHUPyjm96LY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91390D1/FFA43F143E0411F1AD63DF8CA6833773/CFDUhlPa5QGZunr6XjP5gKNfk-U.crl
                          rsync://rpki.apnic.net/member_repository/A91390D1/FFA43F143E0411F1AD63DF8CA6833773/CFDUhlPa5QGZunr6XjP5gKNfk-U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CFDUhlPa5QGZunr6XjP5gKNfk-U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 08:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81 (0x51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91390D1, serialNumber=0850D48653DAE50199BA7AFA5E33F980A35F93E5
        Validity
            Not Before: Sep 23 08:00:55 2026 GMT
            Not After : Sep 30 08:00:55 2026 GMT
        Subject: CN=6ab38738-0968
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:af:86:cf:18:38:ab:0e:92:de:82:82:50:aa:
                    ef:12:85:e5:36:50:ea:26:85:f0:b0:09:6c:3c:33:
                    2e:7c:cd:08:10:ad:d3:74:00:e3:32:97:03:a9:89:
                    3e:28:9a:a5:04:5e:e3:7d:ac:8d:45:c5:93:6e:46:
                    0a:bc:00:3c:47:99:f5:1b:64:61:36:59:70:c7:9f:
                    b5:57:42:b7:2a:83:30:b4:84:31:08:b9:3d:e7:87:
                    29:2f:88:b0:a2:60:85:05:67:84:9e:84:b5:a6:18:
                    03:f7:75:12:da:88:b9:ae:23:67:08:f4:b1:5b:41:
                    bd:ca:86:f2:16:2e:94:34:67:8d:cd:5c:50:69:16:
                    a1:2e:84:09:08:e5:8b:f7:5c:e5:ae:7f:7c:69:e2:
                    35:91:6f:68:57:66:66:a6:e8:a6:1f:1a:ef:3c:4c:
                    9c:d0:c0:e5:8d:de:81:97:d9:c1:7e:dc:90:96:dd:
                    50:d2:2d:35:36:f7:d4:84:eb:e1:9c:46:63:1a:f9:
                    2b:52:40:14:e8:cb:f7:3b:e4:7b:bd:e2:72:2c:54:
                    36:9c:33:be:a2:cd:55:ef:0a:0d:bd:0f:38:8d:38:
                    4e:8e:df:14:a2:8a:bc:7f:f3:ec:5d:f0:b6:e1:b1:
                    c2:59:44:7b:87:32:1b:d5:f3:a5:73:2b:36:a5:e6:
                    e3:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:5C:08:F6:D6:74:1C:3A:67:2A:81:79:97:91:4F:F7:1D:80:BE:12
            X509v3 Authority Key Identifier:
                keyid:08:50:D4:86:53:DA:E5:01:99:BA:7A:FA:5E:33:F9:80:A3:5F:93:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91390D1/FFA43F143E0411F1AD63DF8CA6833773/CFDUhlPa5QGZunr6XjP5gKNfk-U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CFDUhlPa5QGZunr6XjP5gKNfk-U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91390D1/FFA43F143E0411F1AD63DF8CA6833773/CFDUhlPa5QGZunr6XjP5gKNfk-U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:8d:c2:79:2e:c5:aa:e0:c1:d0:39:62:c3:0b:24:48:c7:0c:
         d7:63:b9:3f:5f:f7:98:a9:60:02:0d:8f:03:fb:82:e9:89:92:
         46:55:29:14:8e:2f:ae:14:8b:fb:e5:27:0f:6b:4f:ed:cb:39:
         23:6a:c2:64:7a:51:20:75:9f:3f:ff:9a:6b:72:95:7b:b3:1f:
         7d:21:6f:6a:2e:ad:80:24:39:fe:16:d1:69:d5:3b:67:b5:4f:
         5b:8d:0c:6b:8b:05:f2:aa:55:81:79:ee:4e:39:ea:e3:a2:5e:
         2b:92:1a:86:40:a9:69:bc:16:8a:68:af:72:2c:47:65:15:64:
         6c:ed:97:f8:ec:5f:98:ea:a4:3b:e5:b8:0b:64:21:42:ed:94:
         bc:8a:a9:97:b3:da:60:bd:a5:29:80:47:09:2e:5b:5b:db:fc:
         26:e7:3d:b1:e3:8b:3f:01:b3:91:a3:5d:57:cb:fb:ad:8a:6a:
         88:6a:ad:03:d7:c5:2e:a1:26:e9:d0:e8:69:a2:b3:46:89:8a:
         1d:1e:b4:41:4e:55:90:da:44:74:38:33:56:a0:11:b2:5f:7c:
         38:fc:49:4f:20:74:50:bd:e5:01:58:b2:46:53:18:c0:0c:cb:
         94:29:39:c8:2d:9b:ce:ca:7b:dd:78:8e:9e:80:e5:aa:93:b4:
         dd:6b:3b:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:29:04 2026 by rpki-client