Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9145418/771931803AE011EC93728D66C4F9AE02/X-FUPIWwZTChZM-Q4aJ9qNtyRQ4.mft
File:                     X-FUPIWwZTChZM-Q4aJ9qNtyRQ4.mft (raw, json)
Hash identifier:          mN8P+h7NZU2cvNkapzI9RSWI1TPzETrQNkd5uOQx7lM=
Subject key identifier:   9A:8A:C3:B2:3E:B3:9F:05:F5:1B:30:1C:D5:87:A3:17:0B:2B:22:19
Authority key identifier: 5F:E1:54:3C:85:B0:65:30:A1:64:CF:90:E1:A2:7D:A8:DB:72:45:0E
Certificate issuer:       /CN=A9145418/serialNumber=5FE1543C85B06530A164CF90E1A27DA8DB72450E
Certificate serial:       0595
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-FUPIWwZTChZM-Q4aJ9qNtyRQ4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9145418/771931803AE011EC93728D66C4F9AE02/X-FUPIWwZTChZM-Q4aJ9qNtyRQ4.mft
Manifest number:          058C
Signing time:             Tue 22 Sep 2026 22:55:21 +0000
Manifest this update:     Tue 22 Sep 2026 22:55:20 +0000
Manifest next update:     Tue 29 Sep 2026 22:55:20 +0000
Files and hashes:         1: X-FUPIWwZTChZM-Q4aJ9qNtyRQ4.crl (hash: abYzR5HNtAu4pV2HPxTpCO/UmXsVz6x+IItk/LVblLo=)
                          2: FA5399BC3AE211ECA119BA68C4F9AE02.roa (hash: x1DOv6cF85uK2W/k4T89nA4T7d/X6L92YVXFUsvPnr8=)
                          3: C9C2D86874FC11F1A737AC8869A30FBC.roa (hash: I52c5n8f1ZmCxHkwKhWCBl/YqMPCfhHB5y7LP5rCQB8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9145418/771931803AE011EC93728D66C4F9AE02/X-FUPIWwZTChZM-Q4aJ9qNtyRQ4.crl
                          rsync://rpki.apnic.net/member_repository/A9145418/771931803AE011EC93728D66C4F9AE02/X-FUPIWwZTChZM-Q4aJ9qNtyRQ4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-FUPIWwZTChZM-Q4aJ9qNtyRQ4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 22:55:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1429 (0x595)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9145418, serialNumber=5FE1543C85B06530A164CF90E1A27DA8DB72450E
        Validity
            Not Before: Sep 22 22:55:20 2026 GMT
            Not After : Sep 29 22:55:20 2026 GMT
        Subject: CN=6ab30759-a950
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:91:08:18:06:3a:dd:48:51:44:b3:28:78:fa:
                    30:52:26:9b:11:f0:75:de:40:af:7e:71:72:70:d2:
                    51:02:03:cb:8b:ec:17:27:fd:dd:45:d1:f1:2b:37:
                    71:22:83:8f:a8:2d:f9:98:3d:37:42:18:14:67:80:
                    29:46:42:b2:35:2b:52:05:52:4c:42:08:19:ee:75:
                    7f:6a:72:1e:42:76:28:da:c1:6b:eb:40:7c:fd:26:
                    a0:da:9f:b1:d7:3a:22:70:57:2a:24:a5:3a:80:ab:
                    d5:3c:87:88:f1:ae:79:ce:9b:74:f5:14:f7:ae:22:
                    37:ce:91:91:de:28:7d:1f:d3:83:31:d6:8d:e1:92:
                    31:73:e4:91:3e:26:eb:f9:65:55:7a:a4:cb:bc:d7:
                    0c:02:ac:cf:c2:92:48:70:be:34:1d:57:80:10:89:
                    a6:44:de:d3:f0:c2:d6:e9:c2:64:c2:db:aa:16:3d:
                    2c:e5:b5:41:58:bb:57:7d:c0:e0:c3:65:d4:a1:b5:
                    5c:96:33:c6:d2:9e:18:98:10:76:c3:4f:f4:28:02:
                    9e:fc:14:32:38:20:ac:0a:4a:56:24:9c:6b:ba:cf:
                    05:e2:30:18:b2:2f:3b:df:f2:33:d2:f6:4a:bc:ca:
                    fc:29:e1:fe:49:ab:f9:b3:a6:bd:54:02:0f:67:af:
                    94:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:8A:C3:B2:3E:B3:9F:05:F5:1B:30:1C:D5:87:A3:17:0B:2B:22:19
            X509v3 Authority Key Identifier:
                keyid:5F:E1:54:3C:85:B0:65:30:A1:64:CF:90:E1:A2:7D:A8:DB:72:45:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9145418/771931803AE011EC93728D66C4F9AE02/X-FUPIWwZTChZM-Q4aJ9qNtyRQ4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-FUPIWwZTChZM-Q4aJ9qNtyRQ4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145418/771931803AE011EC93728D66C4F9AE02/X-FUPIWwZTChZM-Q4aJ9qNtyRQ4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:36:cf:e3:42:68:be:b1:45:2e:2d:f5:e8:47:a6:52:c2:6c:
         d3:d1:91:3e:6a:fc:d6:59:17:71:36:19:8f:ff:23:05:f7:5f:
         80:d6:4a:9c:e2:8e:d2:70:08:c0:1a:a8:27:fd:5e:4a:79:62:
         31:f8:fd:97:04:47:92:d1:51:0d:a9:6d:09:f9:2e:82:0a:82:
         fa:05:db:b2:5b:07:58:94:df:ff:25:ab:86:de:c9:d8:53:40:
         35:ef:a9:fb:97:c6:ae:a2:28:33:63:7d:da:90:45:e0:18:86:
         90:f1:e0:7f:22:42:fd:a8:46:2f:a4:61:40:00:77:95:5d:70:
         d6:8b:dd:b2:65:9a:fe:a6:7e:8c:cf:b9:a3:14:31:60:06:97:
         b3:f1:cb:8f:89:9a:be:e9:24:d6:ad:b9:54:6a:2d:40:e1:5d:
         90:c5:bb:49:ca:e3:50:ab:c4:ba:d3:04:2b:76:65:e1:85:f9:
         1d:b7:70:4f:38:da:a8:a5:d8:b9:2d:a5:a9:ce:78:77:60:4e:
         1a:99:25:4d:bb:51:bc:6c:79:56:f6:59:cb:0e:a1:5d:02:ed:
         e5:46:26:a3:cc:2c:35:91:d5:f8:de:0b:09:f9:9a:27:13:4a:
         35:88:6d:9d:18:bb:f0:24:c0:da:5f:3e:4d:68:90:6b:a5:90:
         88:af:60:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 05:30:45 2026 by rpki-client