Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91468A1/2E1CC644511811EA9387C66BC4F9AE02/FSo7QyJc-ixfjeJ6mmiT07I_XeM.mft
File:                     FSo7QyJc-ixfjeJ6mmiT07I_XeM.mft (raw, json)
Hash identifier:          fO5wKJh5obmLgfBbTaV7PZ324BPF3VbMWRYu97lojK0=
Subject key identifier:   53:61:A8:51:81:0D:CA:2F:03:35:76:78:53:26:04:5D:DD:D6:34:F0
Authority key identifier: 15:2A:3B:43:22:5C:FA:2C:5F:8D:E2:7A:9A:68:93:D3:B2:3F:5D:E3
Certificate issuer:       /CN=A91468A1/serialNumber=152A3B43225CFA2C5F8DE27A9A6893D3B23F5DE3
Certificate serial:       0BDC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSo7QyJc-ixfjeJ6mmiT07I_XeM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91468A1/2E1CC644511811EA9387C66BC4F9AE02/FSo7QyJc-ixfjeJ6mmiT07I_XeM.mft
Manifest number:          0BC6
Signing time:             Tue 22 Sep 2026 18:53:32 +0000
Manifest this update:     Tue 22 Sep 2026 18:53:31 +0000
Manifest next update:     Tue 29 Sep 2026 18:53:31 +0000
Files and hashes:         1: FSo7QyJc-ixfjeJ6mmiT07I_XeM.crl (hash: 4YNTEQ9KrcrzUSijAvzNIMQhejqRyo0sDbByoHSAPQY=)
                          2: F0520A385DD611EAA4AD4767C4F9AE02.roa (hash: 9P/caarcdfE5fgEntnYZ7v6bJcDbToqOd+JV3OwQEFA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91468A1/2E1CC644511811EA9387C66BC4F9AE02/FSo7QyJc-ixfjeJ6mmiT07I_XeM.crl
                          rsync://rpki.apnic.net/member_repository/A91468A1/2E1CC644511811EA9387C66BC4F9AE02/FSo7QyJc-ixfjeJ6mmiT07I_XeM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSo7QyJc-ixfjeJ6mmiT07I_XeM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 15:21:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3036 (0xbdc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91468A1, serialNumber=152A3B43225CFA2C5F8DE27A9A6893D3B23F5DE3
        Validity
            Not Before: Sep 22 18:53:31 2026 GMT
            Not After : Sep 29 18:53:31 2026 GMT
        Subject: CN=6ab2ceac-d87b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:76:9c:7a:1e:fd:31:78:74:b3:9b:85:94:5e:
                    b4:93:b8:85:a6:b6:1c:d7:cb:f6:f2:ec:89:d6:b3:
                    fb:ba:be:f8:96:4b:31:3e:05:7c:43:3a:cf:a3:f5:
                    53:6f:90:5f:3a:b3:b2:d0:13:2e:7e:16:d5:b2:49:
                    cc:df:eb:75:6e:01:ed:aa:f5:a0:98:37:27:12:2f:
                    a9:e6:f9:2b:33:99:ee:5d:7d:58:b8:ab:74:2e:5a:
                    d5:0d:bb:4b:f3:8d:48:bd:5b:5f:10:11:6d:45:f0:
                    28:32:35:4e:fe:44:38:ed:7d:1f:f7:2e:74:c9:c5:
                    15:26:9c:9e:41:60:99:df:09:74:3f:b7:07:fa:ec:
                    58:17:9b:b7:71:2e:b9:4f:d1:67:fe:d3:3d:6a:95:
                    bd:cd:1e:ba:8d:ca:46:32:84:8b:39:7e:09:27:b1:
                    93:e6:f5:74:6a:77:1f:0e:ad:63:a2:d6:35:a5:20:
                    33:60:dc:c3:65:47:ab:5a:80:0c:26:f1:3e:99:2c:
                    ff:0f:02:4c:4e:18:96:9d:d7:00:90:27:a2:54:e3:
                    40:77:a4:7c:82:20:0c:cf:2f:bf:a7:9d:b8:9c:be:
                    45:27:18:54:78:39:33:6d:4d:e2:75:fa:84:0c:b4:
                    ea:43:dd:7f:e9:35:b0:3a:84:63:ea:0f:cb:0c:17:
                    25:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:61:A8:51:81:0D:CA:2F:03:35:76:78:53:26:04:5D:DD:D6:34:F0
            X509v3 Authority Key Identifier:
                keyid:15:2A:3B:43:22:5C:FA:2C:5F:8D:E2:7A:9A:68:93:D3:B2:3F:5D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91468A1/2E1CC644511811EA9387C66BC4F9AE02/FSo7QyJc-ixfjeJ6mmiT07I_XeM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSo7QyJc-ixfjeJ6mmiT07I_XeM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91468A1/2E1CC644511811EA9387C66BC4F9AE02/FSo7QyJc-ixfjeJ6mmiT07I_XeM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:87:1a:14:a1:d8:bd:fd:b6:07:30:d3:d8:6f:2d:b4:13:f5:
         cf:0d:8d:2f:34:c6:7e:06:de:a7:2c:86:5c:1c:26:fb:05:31:
         c0:79:95:78:66:e1:67:2e:45:92:d2:15:63:3d:8c:bb:46:fd:
         97:67:d0:1f:2c:62:7f:55:b0:e1:e6:5d:70:01:40:e5:2d:26:
         6a:f8:80:2d:61:c6:a8:6f:d1:14:44:a8:07:11:a4:a4:6d:3e:
         89:00:d5:21:57:8a:c7:22:39:73:8f:56:9f:d3:fb:e8:23:15:
         2b:49:18:38:e2:41:7f:4c:72:ac:c8:4e:29:8c:70:e3:61:7d:
         14:a0:cd:c8:13:93:1d:08:7e:e2:dc:8c:48:b5:00:5a:e3:33:
         a0:69:f6:93:28:98:b2:f0:32:1f:dc:6c:71:6b:0b:52:11:57:
         89:b0:92:b3:31:99:bf:c5:3c:38:1f:6f:bb:0b:d9:da:6e:e2:
         a9:41:ad:70:b4:06:74:98:f4:e6:b8:b8:17:53:02:52:2a:e2:
         f1:17:90:a6:1a:b9:e6:6d:be:47:92:f1:47:47:05:32:b4:2a:
         aa:c2:54:b8:14:36:d3:38:a6:d8:93:62:8d:a2:fe:75:5d:a3:
         eb:49:be:2a:fc:41:99:fa:38:6e:45:1b:1c:8b:4a:5f:cf:2a:
         34:42:cb:35
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC9wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDY4QTExMTAvBgNVBAUTKDE1MkEzQjQzMjI1Q0ZBMkM1RjhERTI3QTlBNjg5M0Qz
QjIzRjVERTMwHhcNMjYwOTIyMTg1MzMxWhcNMjYwOTI5MTg1MzMxWjAYMRYwFAYD
VQQDEw02YWIyY2VhYy1kODdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnXaceh79MXh0s5uFlF60k7iFprYc18v28uyJ1rP7ur74lksxPgV8QzrPo/VT
b5BfOrOy0BMufhbVsknM3+t1bgHtqvWgmDcnEi+p5vkrM5nuXX1YuKt0LlrVDbtL
841IvVtfEBFtRfAoMjVO/kQ47X0f9y50ycUVJpyeQWCZ3wl0P7cH+uxYF5u3cS65
T9Fn/tM9apW9zR66jcpGMoSLOX4JJ7GT5vV0ancfDq1jotY1pSAzYNzDZUerWoAM
JvE+mSz/DwJMThiWndcAkCeiVONAd6R8giAMzy+/p524nL5FJxhUeDkzbU3idfqE
DLTqQ91/6TWwOoRj6g/LDBcl9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFNhqFGB
DcovAzV2eFMmBF3d1jTwMB8GA1UdIwQYMBaAFBUqO0MiXPosX43ieppok9OyP13j
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjhBMS8yRTFDQzY0NDUx
MTgxMUVBOTM4N0M2NkJDNEY5QUUwMi9GU283UXlKYy1peGZqZUo2bW1pVDA3SV9Y
ZU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZTbzdReUpjLWl4ZmplSjZtbWlUMDdJX1hlTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NjhBMS8yRTFDQzY0NDUxMTgxMUVBOTM4N0M2NkJDNEY5QUUwMi9GU283UXlKYy1p
eGZqZUo2bW1pVDA3SV9YZU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWIcaFKHYvf22BzDT2G8ttBP1zw2NLzTGfgbepyyGXBwm+wUxwHmVeGbhZy5F
ktIVYz2Mu0b9l2fQHyxif1Ww4eZdcAFA5S0maviALWHGqG/RFESoBxGkpG0+iQDV
IVeKxyI5c49Wn9P76CMVK0kYOOJBf0xyrMhOKYxw42F9FKDNyBOTHQh+4tyMSLUA
WuMzoGn2kyiYsvAyH9xscWsLUhFXibCSszGZv8U8OB9vuwvZ2m7iqUGtcLQGdJj0
5ri4F1MCUiri8ReQphq55m2+R5LxR0cFMrQqqsJUuBQ20zim2JNijaL+dV2j60m+
KvxBmfo4bkUbHItKX88qNELLNQ==
-----END CERTIFICATE-----
Generated at Tue Sep 22 22:46:17 2026 by rpki-client