Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.mft
File:                     fFO_avST0kw7fGuiFrOCsMf3_CQ.mft (raw, json)
Hash identifier:          ippiHTe84HUw12O0Gnl9dF/sGaXxTmz3YGKsRs9fLfY=
Subject key identifier:   7F:09:E9:8B:0F:5B:89:E4:E1:1C:49:38:91:76:EC:CA:C8:CE:DF:41
Authority key identifier: 7C:53:BF:6A:F4:93:D2:4C:3B:7C:6B:A2:16:B3:82:B0:C7:F7:FC:24
Certificate issuer:       /CN=A913FA1D/serialNumber=7C53BF6AF493D24C3B7C6BA216B382B0C7F7FC24
Certificate serial:       0995
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFO_avST0kw7fGuiFrOCsMf3_CQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.mft
Manifest number:          0982
Signing time:             Sat 26 Sep 2026 20:08:17 +0000
Manifest this update:     Sat 26 Sep 2026 20:08:16 +0000
Manifest next update:     Sat 03 Oct 2026 20:08:16 +0000
Files and hashes:         1: fFO_avST0kw7fGuiFrOCsMf3_CQ.crl (hash: Ylgx2X1OrMDaQXtk90XOqARvS13oksQmiXR9RSUzUE4=)
                          2: 2636893049C611F1A0494403A4833773.roa (hash: LbI/zXwrZvEy2m8RCRFUKgZJykGAWt1/GiJpmBz1/G0=)
                          3: F86B8216BFED11EABE972E5AC4F9AE02.roa (hash: gfpq5Vgb/YI4qo4hAIBsJzMcZgPK7w4lTbQ0JqnYdL0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.crl
                          rsync://rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFO_avST0kw7fGuiFrOCsMf3_CQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 20:08:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2453 (0x995)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913FA1D, serialNumber=7C53BF6AF493D24C3B7C6BA216B382B0C7F7FC24
        Validity
            Not Before: Sep 26 20:08:16 2026 GMT
            Not After : Oct  3 20:08:16 2026 GMT
        Subject: CN=6ab82631-c2eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:24:13:9d:36:97:5c:45:37:d2:c0:c8:d5:29:
                    c5:98:72:cc:70:23:48:dd:76:3d:0a:27:5a:bc:83:
                    e7:76:7d:72:a4:a6:df:ae:44:21:af:95:e1:c3:6f:
                    6b:67:6e:1a:83:3c:fd:70:fa:95:a0:41:54:23:7b:
                    2d:a1:e6:7d:66:b1:77:2d:c9:b6:c1:6b:8a:07:72:
                    14:76:e6:31:ee:b7:aa:68:69:e9:49:ce:70:f1:89:
                    00:a4:d0:5a:de:e7:b7:0b:97:74:7a:11:90:55:ca:
                    20:6b:fa:97:65:37:ba:e6:b1:a8:58:ec:bd:ec:14:
                    ff:d7:22:f5:53:3e:61:8a:c6:82:07:58:85:e6:a8:
                    17:25:f8:be:88:4e:b3:6d:2c:cf:52:df:7f:92:77:
                    63:37:c1:08:f8:ed:6a:56:11:9e:d4:3f:0d:5c:02:
                    3f:82:65:6f:c7:5c:cc:d3:26:9d:a8:05:45:35:cc:
                    4c:45:16:30:b1:ad:93:4d:cd:2b:ab:da:e7:ca:f3:
                    04:04:ff:e0:35:59:ac:54:cb:d2:d8:81:b4:11:41:
                    13:d3:7f:c6:92:d3:8a:ee:dd:d3:cf:d7:ba:1e:01:
                    e8:24:9e:01:8b:7b:ce:4a:0c:6d:c0:1d:f0:32:ea:
                    52:15:8a:25:40:f6:4e:94:36:88:b7:cc:f1:c4:af:
                    2a:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:09:E9:8B:0F:5B:89:E4:E1:1C:49:38:91:76:EC:CA:C8:CE:DF:41
            X509v3 Authority Key Identifier:
                keyid:7C:53:BF:6A:F4:93:D2:4C:3B:7C:6B:A2:16:B3:82:B0:C7:F7:FC:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFO_avST0kw7fGuiFrOCsMf3_CQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:38:8b:87:5e:38:f5:6a:85:08:c1:7f:e6:64:76:1f:5c:18:
         02:35:f3:60:f3:8e:90:e6:e3:51:90:b4:f4:b1:2e:b1:25:33:
         8b:1c:5d:1a:f3:56:ce:9d:ea:3a:44:a5:05:32:b2:80:60:c7:
         5b:fb:00:21:dc:57:e2:dc:64:fd:b8:0e:91:a0:b4:90:b3:0c:
         61:91:47:8f:0e:e3:76:74:b1:6d:e5:e8:a1:55:af:78:bf:44:
         03:1a:ff:19:cf:90:a9:96:20:e4:ae:d4:89:f6:eb:fb:a0:06:
         26:ba:35:4e:ed:97:1e:04:7a:af:1a:b5:0f:14:20:ad:29:c6:
         ea:5e:fa:03:98:43:11:48:b6:8c:2a:cf:0c:78:4d:ae:d7:33:
         0f:ad:1c:ad:ee:a9:93:83:52:de:3e:33:48:ce:eb:f9:92:5b:
         e5:bc:e5:a2:77:42:46:74:25:40:90:b5:3b:30:33:e0:9c:96:
         a1:48:8f:12:36:1d:1a:3b:bb:4c:26:16:92:84:84:77:90:ec:
         cc:2b:73:bf:3c:db:8a:e0:9d:6d:27:9d:a5:50:3a:3b:9e:13:
         63:97:67:0f:b3:48:06:1e:d4:7a:66:14:ac:ac:01:db:38:cb:
         dc:51:b4:7b:a3:00:a4:2d:05:fb:d5:a3:e1:5e:de:cc:08:a8:
         c6:9d:32:1d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCZUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0ZBMUQxMTAvBgNVBAUTKDdDNTNCRjZBRjQ5M0QyNEMzQjdDNkJBMjE2QjM4MkIw
QzdGN0ZDMjQwHhcNMjYwOTI2MjAwODE2WhcNMjYxMDAzMjAwODE2WjAYMRYwFAYD
VQQDEw02YWI4MjYzMS1jMmViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3SQTnTaXXEU30sDI1SnFmHLMcCNI3XY9CidavIPndn1ypKbfrkQhr5Xhw29r
Z24agzz9cPqVoEFUI3stoeZ9ZrF3Lcm2wWuKB3IUduYx7reqaGnpSc5w8YkApNBa
3ue3C5d0ehGQVcoga/qXZTe65rGoWOy97BT/1yL1Uz5hisaCB1iF5qgXJfi+iE6z
bSzPUt9/kndjN8EI+O1qVhGe1D8NXAI/gmVvx1zM0yadqAVFNcxMRRYwsa2TTc0r
q9rnyvMEBP/gNVmsVMvS2IG0EUET03/GktOK7t3Tz9e6HgHoJJ4Bi3vOSgxtwB3w
MupSFYolQPZOlDaIt8zxxK8qZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH8J6YsP
W4nk4RxJOJF27MrIzt9BMB8GA1UdIwQYMBaAFHxTv2r0k9JMO3xrohazgrDH9/wk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRkExRC85RUVBNEQ2OEJG
RUMxMUVBODk5MjlBNThDNEY5QUUwMi9mRk9fYXZTVDBrdzdmR3VpRnJPQ3NNZjNf
Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZGT19hdlNUMGt3N2ZHdWlGck9Dc01mM19DUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
RkExRC85RUVBNEQ2OEJGRUMxMUVBODk5MjlBNThDNEY5QUUwMi9mRk9fYXZTVDBr
dzdmR3VpRnJPQ3NNZjNfQ1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcjiLh1449WqFCMF/5mR2H1wYAjXzYPOOkObjUZC09LEusSUzixxdGvNWzp3q
OkSlBTKygGDHW/sAIdxX4txk/bgOkaC0kLMMYZFHjw7jdnSxbeXooVWveL9EAxr/
Gc+QqZYg5K7Uifbr+6AGJro1Tu2XHgR6rxq1DxQgrSnG6l76A5hDEUi2jCrPDHhN
rtczD60cre6pk4NS3j4zSM7r+ZJb5bzlondCRnQlQJC1OzAz4JyWoUiPEjYdGju7
TCYWkoSEd5DszCtzvzzbiuCdbSedpVA6O54TY5dnD7NIBh7UemYUrKwB2zjL3FG0
e6MApC0F+9Wj4V7ezAioxp0yHQ==
-----END CERTIFICATE-----
Generated at Sun Sep 27 08:31:45 2026 by rpki-client