Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.mft
File:                     FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.mft (raw, json)
Hash identifier:          k/CDnauuz5M5ntY+ftzBm317AIM9BoHK+gPA9yp36Jc=
Subject key identifier:   C7:EA:5E:87:32:FA:96:47:82:29:66:37:48:45:47:B5:6B:DD:C6:77
Authority key identifier: 16:13:D1:15:ED:83:A0:6E:97:A7:3D:AE:55:16:BA:1B:68:4E:EC:09
Certificate issuer:       /CN=A9158F08/serialNumber=1613D115ED83A06E97A73DAE5516BA1B684EEC09
Certificate serial:       0D32
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.mft
Manifest number:          174A
Signing time:             Thu 24 Sep 2026 18:10:46 +0000
Manifest this update:     Thu 24 Sep 2026 18:10:46 +0000
Manifest next update:     Thu 01 Oct 2026 18:10:46 +0000
Files and hashes:         1: FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.crl (hash: qF4DRv5VDkF8HguWsB/KOlC2ycJ/5HuLOeDEsykJqBg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.crl
                          rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 18:10:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3378 (0xd32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9158F08, serialNumber=1613D115ED83A06E97A73DAE5516BA1B684EEC09
        Validity
            Not Before: Sep 24 18:10:46 2026 GMT
            Not After : Oct  1 18:10:46 2026 GMT
        Subject: CN=6ab567a6-eaf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:dc:df:41:63:2d:c0:d5:c2:34:27:ec:01:b3:
                    27:f1:55:71:a5:c0:f9:ba:bb:ca:ff:eb:e4:10:c5:
                    4b:1e:c9:87:1f:3d:49:bf:0d:5f:94:63:17:32:5b:
                    3e:20:55:e0:c9:33:00:98:05:0c:90:dc:ae:40:c5:
                    c6:79:d5:26:10:a1:9e:fb:df:59:7a:c2:86:91:1f:
                    7d:6b:2d:ba:78:c5:16:73:65:f8:76:f1:b6:b1:9a:
                    59:c2:b1:cb:c7:35:77:0b:74:2c:95:4a:54:88:5b:
                    9c:f2:17:77:9b:0d:b8:36:be:b5:fb:91:f6:11:6e:
                    c7:21:14:46:26:cf:1e:de:8c:55:8b:12:6c:a8:7a:
                    89:76:12:6b:98:13:d0:f4:07:21:69:6d:20:80:77:
                    87:6c:74:7a:5e:a7:65:df:54:42:c9:2f:f1:86:83:
                    a5:9f:41:67:bd:d0:51:a6:14:10:9f:81:d8:31:c2:
                    b8:68:1a:c6:40:f1:93:65:83:e2:6f:a0:23:a2:fe:
                    42:b8:6a:a7:cf:c0:b7:93:5c:c5:75:60:a9:8b:59:
                    2a:d8:07:57:e8:03:7e:30:14:08:85:60:b6:ac:fb:
                    d4:54:72:9c:6e:cf:a5:e4:01:37:c6:a6:96:ab:27:
                    b7:94:5d:0c:9a:94:bd:b2:c8:43:6a:51:63:2a:e5:
                    78:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:EA:5E:87:32:FA:96:47:82:29:66:37:48:45:47:B5:6B:DD:C6:77
            X509v3 Authority Key Identifier:
                keyid:16:13:D1:15:ED:83:A0:6E:97:A7:3D:AE:55:16:BA:1B:68:4E:EC:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:55:aa:97:5f:48:a0:f3:20:10:30:40:2e:9d:15:b2:05:57:
         ea:6e:46:b6:2e:54:c5:51:9f:86:59:58:6e:76:36:0c:27:1b:
         7e:da:37:32:eb:83:49:fc:3e:41:dc:3e:70:ae:03:21:ea:96:
         68:7e:38:47:d3:ae:b7:71:f3:71:2a:e3:50:43:ef:39:13:25:
         d8:f2:0a:0c:55:df:96:12:64:6a:3f:c3:a2:50:f3:71:a8:bd:
         e1:8a:ac:9e:ad:36:3a:f0:c0:76:02:af:62:41:90:9b:88:7f:
         b8:5a:f1:16:f8:8a:fa:c2:7c:8d:fe:29:cb:05:8f:44:cb:9d:
         c5:d7:2d:6e:a4:d7:74:f5:d8:d2:cd:38:32:77:67:3b:64:33:
         fe:04:2a:2c:5a:31:a0:32:51:cb:c2:18:f7:28:bf:a6:65:21:
         98:37:08:0c:96:c7:71:f1:0d:b4:31:ae:54:fc:64:bb:7b:84:
         4f:19:1c:71:a7:8b:99:34:91:17:37:da:d4:0f:20:1f:73:7b:
         0d:3b:ed:03:00:8c:b3:cb:90:33:31:29:24:22:52:1b:f0:3c:
         ac:9d:10:41:ab:4a:53:77:6e:a7:33:1b:2a:cf:c8:4c:fa:d2:
         af:c3:72:d7:7f:63:5a:21:e9:31:1a:20:bb:34:07:86:dd:0b:
         ac:88:0d:17
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDTIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NThGMDgxMTAvBgNVBAUTKDE2MTNEMTE1RUQ4M0EwNkU5N0E3M0RBRTU1MTZCQTFC
Njg0RUVDMDkwHhcNMjYwOTI0MTgxMDQ2WhcNMjYxMDAxMTgxMDQ2WjAYMRYwFAYD
VQQDEw02YWI1NjdhNi1lYWY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp9zfQWMtwNXCNCfsAbMn8VVxpcD5urvK/+vkEMVLHsmHHz1Jvw1flGMXMls+
IFXgyTMAmAUMkNyuQMXGedUmEKGe+99ZesKGkR99ay26eMUWc2X4dvG2sZpZwrHL
xzV3C3QslUpUiFuc8hd3mw24Nr61+5H2EW7HIRRGJs8e3oxVixJsqHqJdhJrmBPQ
9AchaW0ggHeHbHR6Xqdl31RCyS/xhoOln0FnvdBRphQQn4HYMcK4aBrGQPGTZYPi
b6Ajov5CuGqnz8C3k1zFdWCpi1kq2AdX6AN+MBQIhWC2rPvUVHKcbs+l5AE3xqaW
qye3lF0MmpS9sshDalFjKuV4CQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMfqXocy
+pZHgilmN0hFR7Vr3cZ3MB8GA1UdIwQYMBaAFBYT0RXtg6Bul6c9rlUWuhtoTuwJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEYwOC81QjE3RjZEMjA3
RDAxMUVBQTQ4NDg2NDRDNEY5QUUwMi9GaFBSRmUyRG9HNlhwejJ1VlJhNkcyaE83
QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZoUFJGZTJEb0c2WHB6MnVWUmE2RzJoTzdBay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
OEYwOC81QjE3RjZEMjA3RDAxMUVBQTQ4NDg2NDRDNEY5QUUwMi9GaFBSRmUyRG9H
NlhwejJ1VlJhNkcyaE83QWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAK1Wql19IoPMgEDBALp0VsgVX6m5Gti5UxVGfhllYbnY2DCcbfto3MuuDSfw+
Qdw+cK4DIeqWaH44R9Out3HzcSrjUEPvORMl2PIKDFXflhJkaj/DolDzcai94Yqs
nq02OvDAdgKvYkGQm4h/uFrxFviK+sJ8jf4pywWPRMudxdctbqTXdPXY0s04Mndn
O2Qz/gQqLFoxoDJRy8IY9yi/pmUhmDcIDJbHcfENtDGuVPxku3uETxkccaeLmTSR
Fzfa1A8gH3N7DTvtAwCMs8uQMzEpJCJSG/A8rJ0QQatKU3dupzMbKs/ITPrSr8Ny
139jWiHpMRoguzQHht0LrIgNFw==
-----END CERTIFICATE-----
Generated at Fri Sep 25 01:08:10 2026 by rpki-client