Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913BE1E/81A7668CC66C11F09F555C72C4F9AE02/Fzk_INExMPlUT-jsG7D36IBegk4.mft
File:                     Fzk_INExMPlUT-jsG7D36IBegk4.mft (raw, json)
Hash identifier:          BfZ4EmSA9I+5kZxmu6wH+oL9LUFsEB3mfWuQ4TqeU7A=
Subject key identifier:   9E:A1:E2:42:43:89:9B:BA:D6:FC:AE:EF:43:DF:3A:4C:1E:B8:15:53
Authority key identifier: 17:39:3F:20:D1:31:30:F9:54:4F:E8:EC:1B:B0:F7:E8:80:5E:82:4E
Certificate issuer:       /CN=A913BE1E/serialNumber=17393F20D13130F9544FE8EC1BB0F7E8805E824E
Certificate serial:       A6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fzk_INExMPlUT-jsG7D36IBegk4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913BE1E/81A7668CC66C11F09F555C72C4F9AE02/Fzk_INExMPlUT-jsG7D36IBegk4.mft
Manifest number:          A3
Signing time:             Wed 23 Sep 2026 07:02:16 +0000
Manifest this update:     Wed 23 Sep 2026 07:02:15 +0000
Manifest next update:     Wed 30 Sep 2026 07:02:15 +0000
Files and hashes:         1: Fzk_INExMPlUT-jsG7D36IBegk4.crl (hash: CIuv4fIDQ1MNscFMcmr7o5BvmTSdsRGwMZaWe4e9Sz8=)
                          2: A297874813A911F1B9392CB0413D8C67.roa (hash: MxvTFf8SXvvxP5oPM6no80ur4w4Wx2WVPyl0DRP35J0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913BE1E/81A7668CC66C11F09F555C72C4F9AE02/Fzk_INExMPlUT-jsG7D36IBegk4.crl
                          rsync://rpki.apnic.net/member_repository/A913BE1E/81A7668CC66C11F09F555C72C4F9AE02/Fzk_INExMPlUT-jsG7D36IBegk4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fzk_INExMPlUT-jsG7D36IBegk4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 07:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 166 (0xa6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913BE1E, serialNumber=17393F20D13130F9544FE8EC1BB0F7E8805E824E
        Validity
            Not Before: Sep 23 07:02:15 2026 GMT
            Not After : Sep 30 07:02:15 2026 GMT
        Subject: CN=6ab37978-c467
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1f:0f:e3:be:16:a6:3e:69:f3:6d:4b:ce:25:
                    8b:24:00:b3:c9:30:62:35:b6:df:12:db:74:c0:0e:
                    d8:9d:36:f1:31:94:e2:99:d6:f3:20:9d:59:a8:15:
                    83:b3:3e:27:fe:20:88:d0:35:d7:8f:b2:10:0b:4f:
                    38:c2:4b:4d:99:34:ae:8c:86:49:46:98:c9:65:50:
                    df:1d:e5:16:4c:f7:c1:3e:7d:5e:59:77:6a:f9:7b:
                    1d:cd:e3:9a:44:0e:e1:b1:3c:19:31:fb:7f:64:95:
                    69:10:15:7e:4c:5c:75:bb:d2:74:5e:72:06:07:db:
                    38:de:77:a4:13:e1:95:81:ca:b1:37:04:6d:01:92:
                    b6:3e:2f:95:33:ff:0f:7a:13:ea:bd:91:84:2f:a6:
                    53:f9:2b:4d:f3:15:88:1b:5e:a7:60:8a:25:27:21:
                    48:f7:98:e4:4a:37:f6:38:33:64:ed:6a:11:e6:43:
                    ee:ee:d6:0a:b3:75:9a:b4:52:d0:fb:94:77:9b:0d:
                    11:59:49:1b:62:ba:8a:5d:a1:92:a6:e2:a8:bd:e2:
                    61:87:60:ae:e0:c6:e0:7f:5b:3f:59:63:5b:b5:d5:
                    1a:48:39:8d:a0:14:f0:e3:a8:73:be:ad:fb:95:61:
                    2d:f4:29:42:af:45:a0:c6:dd:a5:8f:80:86:4d:13:
                    ff:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:A1:E2:42:43:89:9B:BA:D6:FC:AE:EF:43:DF:3A:4C:1E:B8:15:53
            X509v3 Authority Key Identifier:
                keyid:17:39:3F:20:D1:31:30:F9:54:4F:E8:EC:1B:B0:F7:E8:80:5E:82:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913BE1E/81A7668CC66C11F09F555C72C4F9AE02/Fzk_INExMPlUT-jsG7D36IBegk4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fzk_INExMPlUT-jsG7D36IBegk4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BE1E/81A7668CC66C11F09F555C72C4F9AE02/Fzk_INExMPlUT-jsG7D36IBegk4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:f8:57:a7:96:39:7c:7f:43:87:e3:ff:42:ab:b6:75:59:bd:
         e9:55:ec:a2:0e:e0:56:4f:fa:95:82:18:62:69:58:25:c4:57:
         ce:34:b6:39:2f:a8:80:78:de:ec:1f:92:53:6e:d7:16:98:b9:
         9d:4f:ce:9d:c8:05:76:d2:19:5b:44:b1:ac:d2:b9:6d:f4:0e:
         ca:1e:fc:02:61:2b:04:de:27:be:4a:66:b6:7f:80:39:d8:54:
         f2:3c:09:7e:ca:22:d0:19:d4:f8:6b:1a:26:7e:97:f5:48:13:
         37:80:70:3a:4c:77:20:57:a4:f6:50:7c:18:d2:61:07:14:7d:
         03:76:94:67:01:96:4d:61:43:d2:40:ac:19:79:d7:8c:ea:22:
         0e:73:92:0e:d9:8d:2b:38:f7:b0:ea:eb:7e:8f:1b:ab:50:9c:
         b0:7a:f2:82:ad:86:07:de:f5:52:e6:5a:fb:b6:6c:71:6b:6b:
         d3:40:75:bc:8d:ef:39:e4:d4:2a:fb:3e:94:0b:0d:cf:44:76:
         3f:6b:9a:97:77:a5:c9:56:ce:c6:84:9a:73:1b:3c:ce:1f:9a:
         b3:e3:95:7b:47:87:cd:a5:31:45:98:aa:47:21:19:12:7d:52:
         e2:3e:0d:0b:ba:55:55:a8:5d:66:00:c6:08:c1:43:6c:fd:14:
         e3:f6:91:fe
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0JFMUUxMTAvBgNVBAUTKDE3MzkzRjIwRDEzMTMwRjk1NDRGRThFQzFCQjBGN0U4
ODA1RTgyNEUwHhcNMjYwOTIzMDcwMjE1WhcNMjYwOTMwMDcwMjE1WjAYMRYwFAYD
VQQDEw02YWIzNzk3OC1jNDY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsR8P474Wpj5p821LziWLJACzyTBiNbbfEtt0wA7YnTbxMZTimdbzIJ1ZqBWD
sz4n/iCI0DXXj7IQC084wktNmTSujIZJRpjJZVDfHeUWTPfBPn1eWXdq+XsdzeOa
RA7hsTwZMft/ZJVpEBV+TFx1u9J0XnIGB9s43nekE+GVgcqxNwRtAZK2Pi+VM/8P
ehPqvZGEL6ZT+StN8xWIG16nYIolJyFI95jkSjf2ODNk7WoR5kPu7tYKs3WatFLQ
+5R3mw0RWUkbYrqKXaGSpuKoveJhh2Cu4Mbgf1s/WWNbtdUaSDmNoBTw46hzvq37
lWEt9ClCr0Wgxt2lj4CGTRP/UQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ6h4kJD
iZu61vyu70PfOkweuBVTMB8GA1UdIwQYMBaAFBc5PyDRMTD5VE/o7Buw9+iAXoJO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQkUxRS84MUE3NjY4Q0M2
NkMxMUYwOUY1NTVDNzJDNEY5QUUwMi9GemtfSU5FeE1QbFVULWpzRzdEMzZJQmVn
azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0Z6a19JTkV4TVBsVVQtanNHN0QzNklCZWdrNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
QkUxRS84MUE3NjY4Q0M2NkMxMUYwOUY1NTVDNzJDNEY5QUUwMi9GemtfSU5FeE1Q
bFVULWpzRzdEMzZJQmVnazQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAx/hXp5Y5fH9Dh+P/Qqu2dVm96VXsog7gVk/6lYIYYmlYJcRXzjS2OS+ogHje
7B+SU27XFpi5nU/OncgFdtIZW0SxrNK5bfQOyh78AmErBN4nvkpmtn+AOdhU8jwJ
fsoi0BnU+GsaJn6X9UgTN4BwOkx3IFek9lB8GNJhBxR9A3aUZwGWTWFD0kCsGXnX
jOoiDnOSDtmNKzj3sOrrfo8bq1CcsHrygq2GB971UuZa+7ZscWtr00B1vI3vOeTU
Kvs+lAsNz0R2P2ual3elyVbOxoSacxs8zh+as+OVe0eHzaUxRZiqRyEZEn1S4j4N
C7pVVahdZgDGCMFDbP0U4/aR/g==
-----END CERTIFICATE-----
Generated at Thu Sep 24 17:13:43 2026 by rpki-client