Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.mft
File:                     FSDys0q93K6U-pIu9HV802FA8lQ.mft (raw, json)
Hash identifier:          bFlh5NESTmg1aJT9EiLwwxwk7jZMfbObHtIrjEJ8mcs=
Subject key identifier:   CE:8B:27:9F:4A:15:F5:16:89:1A:1E:B3:AC:00:D8:48:5F:B0:33:47
Authority key identifier: 15:20:F2:B3:4A:BD:DC:AE:94:FA:92:2E:F4:75:7C:D3:61:40:F2:54
Certificate issuer:       /CN=A9143FE9/serialNumber=1520F2B34ABDDCAE94FA922EF4757CD36140F254
Certificate serial:       0813
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSDys0q93K6U-pIu9HV802FA8lQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.mft
Manifest number:          0801
Signing time:             Tue 22 Sep 2026 21:02:27 +0000
Manifest this update:     Tue 22 Sep 2026 21:02:26 +0000
Manifest next update:     Tue 29 Sep 2026 21:02:26 +0000
Files and hashes:         1: FSDys0q93K6U-pIu9HV802FA8lQ.crl (hash: srnal7ZNd3/lebwjxs7lh++P3E/0W4/G4JIf/yU0o3U=)
                          2: D99D60F67D4D11F1A3C50AF076A30FBC.roa (hash: lS9pDcsYoMEnDdngCy8rUbtA4EF+p1a4rmGseP52Ins=)
                          3: A6864ACE7BA911EDB41A851EC4F9AE02.roa (hash: +mWQDhR0SQRE9fYy6utyEy97LqtAqWWlca4RF6I7GEw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.crl
                          rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSDys0q93K6U-pIu9HV802FA8lQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 15:21:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2067 (0x813)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9143FE9, serialNumber=1520F2B34ABDDCAE94FA922EF4757CD36140F254
        Validity
            Not Before: Sep 22 21:02:26 2026 GMT
            Not After : Sep 29 21:02:26 2026 GMT
        Subject: CN=6ab2ece2-c1d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:e3:1b:61:a1:95:1b:c6:c8:fd:18:9d:be:10:
                    93:d6:90:e3:a2:03:ae:8a:f4:dc:4f:81:70:ce:d8:
                    88:9a:a7:26:bd:02:a5:c1:55:c1:f9:8c:ee:42:d2:
                    74:6e:94:d7:63:2d:db:a1:74:80:34:f9:35:c8:1a:
                    f0:3b:90:6e:56:82:cf:03:d5:97:cf:0b:12:03:b1:
                    70:9a:f4:e5:c6:58:c3:05:53:77:d5:e8:82:b7:84:
                    6c:f4:ac:66:1c:71:a1:7a:dc:c9:04:8f:e9:a1:54:
                    0c:f0:98:2d:54:e0:01:07:25:77:4d:7c:ea:d6:52:
                    69:20:5b:0f:9f:e5:8b:61:bf:a6:ee:9c:b1:12:1a:
                    89:fc:b3:d5:f1:29:38:a0:72:05:21:a2:03:26:0e:
                    40:8f:8c:6d:af:c8:0a:ff:08:d8:4f:a4:7c:22:e0:
                    6f:3b:60:54:52:58:0d:01:7c:88:3d:bc:9e:47:3d:
                    59:d2:13:37:87:8b:e7:b3:bb:57:af:87:c8:e9:75:
                    d5:b8:6a:ed:54:3c:b8:f7:16:7f:5d:02:12:54:ed:
                    0c:14:73:fe:84:5c:b8:45:12:47:7a:52:0a:f8:90:
                    f1:5e:4d:e4:fd:42:2c:1e:89:07:cb:5c:6b:7d:3c:
                    8c:90:5c:44:92:47:f5:fb:24:93:f2:8e:02:06:90:
                    34:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:8B:27:9F:4A:15:F5:16:89:1A:1E:B3:AC:00:D8:48:5F:B0:33:47
            X509v3 Authority Key Identifier:
                keyid:15:20:F2:B3:4A:BD:DC:AE:94:FA:92:2E:F4:75:7C:D3:61:40:F2:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSDys0q93K6U-pIu9HV802FA8lQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:04:b1:1a:6a:6c:c6:eb:b6:fc:ba:55:27:5b:30:0e:89:53:
         96:1a:fc:ea:51:89:40:9a:e7:df:04:0c:b8:6c:ca:c4:2e:fe:
         38:17:ad:07:da:f7:3f:19:a9:02:c0:58:25:1e:15:3d:a0:20:
         7f:84:f2:2f:1e:7e:4c:36:15:01:41:f6:3e:26:05:06:5e:e3:
         d6:71:6f:cc:b9:a3:2c:09:0c:ec:27:27:89:48:07:7b:7e:f3:
         4b:4b:20:59:67:73:0d:57:19:81:91:38:95:af:f9:99:0f:d1:
         58:77:f7:52:5d:b8:32:43:9d:fc:0a:dd:3a:08:82:1e:fb:60:
         b6:cc:83:7c:5c:b1:e0:05:ef:46:48:1c:0b:c6:be:ec:28:cd:
         8e:13:9b:1b:63:28:2e:97:f4:75:0c:9a:65:d7:23:53:d2:d5:
         99:eb:89:f7:56:b5:58:55:16:db:cf:1d:73:e6:aa:24:59:fa:
         b5:e5:91:e6:8a:6f:95:e8:0d:43:95:38:e0:41:07:c3:61:ff:
         54:75:97:85:3c:dc:31:12:ca:f6:ed:bb:01:e7:66:2d:ea:d1:
         6a:ad:a9:96:f8:bb:f1:2a:f8:11:d9:fb:7c:aa:a2:ac:c6:b2:
         05:44:84:3b:14:b0:a0:58:0f:e3:3d:a1:df:9e:12:75:d8:15:
         d7:aa:a0:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:47:00 2026 by rpki-client