Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916E343/3AE739AEB97E11EEB3C22955C4F9AE02/FOVew0KOPSuk3HHBWeX2Bh8WPG0.mft
File:                     FOVew0KOPSuk3HHBWeX2Bh8WPG0.mft (raw, json)
Hash identifier:          bPto8ElSMhhthQFuJXd0PkRqJP4OtXFrURt7KBrBDW8=
Subject key identifier:   BE:8A:6D:A5:78:26:34:16:69:5E:B4:EF:DF:98:53:3D:C1:92:B3:9F
Authority key identifier: 14:E5:5E:C3:42:8E:3D:2B:A4:DC:71:C1:59:E5:F6:06:1F:16:3C:6D
Certificate issuer:       /CN=A916E343/serialNumber=14E55EC3428E3D2BA4DC71C159E5F6061F163C6D
Certificate serial:       01F4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FOVew0KOPSuk3HHBWeX2Bh8WPG0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916E343/3AE739AEB97E11EEB3C22955C4F9AE02/FOVew0KOPSuk3HHBWeX2Bh8WPG0.mft
Manifest number:          01F4
Signing time:             Wed 23 Sep 2026 02:22:32 +0000
Manifest this update:     Wed 23 Sep 2026 02:22:32 +0000
Manifest next update:     Wed 30 Sep 2026 02:22:32 +0000
Files and hashes:         1: FOVew0KOPSuk3HHBWeX2Bh8WPG0.crl (hash: cRymGtg8HOx5+98ymhFGffKvRPnXwKw0Www+9AnZ7UY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916E343/3AE739AEB97E11EEB3C22955C4F9AE02/FOVew0KOPSuk3HHBWeX2Bh8WPG0.crl
                          rsync://rpki.apnic.net/member_repository/A916E343/3AE739AEB97E11EEB3C22955C4F9AE02/FOVew0KOPSuk3HHBWeX2Bh8WPG0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FOVew0KOPSuk3HHBWeX2Bh8WPG0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 02:22:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 500 (0x1f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916E343, serialNumber=14E55EC3428E3D2BA4DC71C159E5F6061F163C6D
        Validity
            Not Before: Sep 23 02:22:32 2026 GMT
            Not After : Sep 30 02:22:32 2026 GMT
        Subject: CN=6ab337e8-b453
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c1:83:b8:b2:fa:c0:79:e9:48:4c:09:f4:25:
                    3a:6f:9d:5f:bb:e4:05:a6:84:4a:ea:1e:0c:09:5d:
                    25:3f:74:ca:6a:ef:20:66:69:51:ce:93:a7:90:53:
                    05:15:c8:5e:43:a1:ff:0d:ca:54:0f:21:63:06:4d:
                    ae:f9:66:4c:14:8d:64:d4:b1:39:4f:51:a0:db:8c:
                    39:ea:38:32:90:ba:04:a9:f9:e7:2d:84:96:e8:16:
                    85:4c:b1:f5:d1:4b:b1:4d:1b:78:58:77:0a:ac:cf:
                    26:c9:ae:ca:2c:77:bc:10:51:7c:c3:b9:4f:d3:22:
                    67:35:1f:94:84:ee:58:9d:32:e0:5b:58:ae:1c:da:
                    37:88:6e:6d:96:fa:e8:84:7b:2d:0a:bc:8b:19:68:
                    f9:3f:e0:c3:97:95:83:90:23:01:9e:ca:43:41:f7:
                    40:1d:d1:41:f3:cb:8d:24:97:fa:4d:38:27:aa:b3:
                    e3:f5:7f:a5:a2:7c:89:e2:06:c6:fc:84:1c:d6:89:
                    28:cb:34:f1:f5:bd:ea:91:2f:0b:b0:89:ef:be:3b:
                    a4:ab:1a:07:9e:66:0d:b4:7d:44:d3:41:77:1c:a7:
                    6f:d3:e6:00:87:e9:31:eb:c5:af:12:af:dc:31:43:
                    35:30:d9:62:5a:36:9f:87:04:08:6b:7d:ce:52:79:
                    fd:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:8A:6D:A5:78:26:34:16:69:5E:B4:EF:DF:98:53:3D:C1:92:B3:9F
            X509v3 Authority Key Identifier:
                keyid:14:E5:5E:C3:42:8E:3D:2B:A4:DC:71:C1:59:E5:F6:06:1F:16:3C:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916E343/3AE739AEB97E11EEB3C22955C4F9AE02/FOVew0KOPSuk3HHBWeX2Bh8WPG0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FOVew0KOPSuk3HHBWeX2Bh8WPG0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E343/3AE739AEB97E11EEB3C22955C4F9AE02/FOVew0KOPSuk3HHBWeX2Bh8WPG0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:d1:d2:31:e5:7e:9e:12:19:d0:0c:2e:3d:36:ab:39:64:d8:
         93:86:cc:00:c0:de:2b:50:d1:dc:54:80:b7:c3:b5:95:01:d6:
         1c:c3:68:2b:98:cd:e6:bd:4b:a8:eb:3c:79:83:cf:96:e4:b3:
         a8:9a:12:b3:c0:b4:22:56:c0:08:5d:5a:ea:6d:35:65:de:c8:
         10:49:6e:92:bb:61:ed:46:bd:03:cc:c1:69:54:07:58:6c:96:
         2a:ca:75:ed:f9:27:08:cc:1b:30:c4:a9:d9:f0:79:ee:81:7d:
         e1:59:de:86:99:f2:75:70:64:ed:eb:23:4e:7e:a5:57:a9:0b:
         02:a5:79:7f:64:49:78:b1:4f:00:f0:23:f8:a6:99:a7:75:23:
         23:7d:00:c8:e0:c5:cb:d9:e6:e6:cc:3b:bd:52:3a:bd:51:13:
         ea:b1:67:48:81:32:fc:bc:74:f1:6a:f0:21:85:cc:fd:e8:3d:
         59:e5:0e:52:71:7d:c7:85:dd:c1:a4:8a:1b:12:9b:d5:0a:cf:
         a9:97:78:85:33:5f:ef:e7:47:1f:6b:9b:83:6f:15:25:39:28:
         a1:2a:53:85:99:1c:83:99:ae:51:6d:73:7a:f3:06:b2:74:5e:
         4c:9f:09:79:b1:48:b4:24:fd:43:aa:5f:10:dc:58:2c:a7:72:
         ef:b5:c8:20
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAfQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkUzNDMxMTAvBgNVBAUTKDE0RTU1RUMzNDI4RTNEMkJBNERDNzFDMTU5RTVGNjA2
MUYxNjNDNkQwHhcNMjYwOTIzMDIyMjMyWhcNMjYwOTMwMDIyMjMyWjAYMRYwFAYD
VQQDEw02YWIzMzdlOC1iNDUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1cGDuLL6wHnpSEwJ9CU6b51fu+QFpoRK6h4MCV0lP3TKau8gZmlRzpOnkFMF
FcheQ6H/DcpUDyFjBk2u+WZMFI1k1LE5T1Gg24w56jgykLoEqfnnLYSW6BaFTLH1
0UuxTRt4WHcKrM8mya7KLHe8EFF8w7lP0yJnNR+UhO5YnTLgW1iuHNo3iG5tlvro
hHstCryLGWj5P+DDl5WDkCMBnspDQfdAHdFB88uNJJf6TTgnqrPj9X+lonyJ4gbG
/IQc1okoyzTx9b3qkS8LsInvvjukqxoHnmYNtH1E00F3HKdv0+YAh+kx68WvEq/c
MUM1MNliWjafhwQIa33OUnn9LQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL6KbaV4
JjQWaV6079+YUz3BkrOfMB8GA1UdIwQYMBaAFBTlXsNCjj0rpNxxwVnl9gYfFjxt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RTM0My8zQUU3MzlBRUI5
N0UxMUVFQjNDMjI5NTVDNEY5QUUwMi9GT1ZldzBLT1BTdWszSEhCV2VYMkJoOFdQ
RzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0ZPVmV3MEtPUFN1azNISEJXZVgyQmg4V1BHMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
RTM0My8zQUU3MzlBRUI5N0UxMUVFQjNDMjI5NTVDNEY5QUUwMi9GT1ZldzBLT1BT
dWszSEhCV2VYMkJoOFdQRzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFNHSMeV+nhIZ0AwuPTarOWTYk4bMAMDeK1DR3FSAt8O1lQHWHMNoK5jN5r1L
qOs8eYPPluSzqJoSs8C0IlbACF1a6m01Zd7IEElukrth7Ua9A8zBaVQHWGyWKsp1
7fknCMwbMMSp2fB57oF94VnehpnydXBk7esjTn6lV6kLAqV5f2RJeLFPAPAj+KaZ
p3UjI30AyODFy9nm5sw7vVI6vVET6rFnSIEy/Lx08WrwIYXM/eg9WeUOUnF9x4Xd
waSKGxKb1QrPqZd4hTNf7+dHH2ubg28VJTkooSpThZkcg5muUW1zevMGsnReTJ8J
ebFItCT9Q6pfENxYLKdy77XIIA==
-----END CERTIFICATE-----
Generated at Thu Sep 24 12:50:45 2026 by rpki-client