Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91836C4/9D4B10688FCA11EDB7911254C4F9AE02/fDPCHh829n5MagTrI5AZrXcryyo.mft
File:                     fDPCHh829n5MagTrI5AZrXcryyo.mft (raw, json)
Hash identifier:          SsEa3dHl41xsKezP+yDyBcKPTOsU1eKEPglh6xqUxw8=
Subject key identifier:   C5:FE:89:33:9A:D9:CB:F8:01:EC:E5:B3:11:59:FC:35:8F:51:4C:17
Authority key identifier: 7C:33:C2:1E:1F:36:F6:7E:4C:6A:04:EB:23:90:19:AD:77:2B:CB:2A
Certificate issuer:       /CN=A91836C4/serialNumber=7C33C21E1F36F67E4C6A04EB239019AD772BCB2A
Certificate serial:       02BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fDPCHh829n5MagTrI5AZrXcryyo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91836C4/9D4B10688FCA11EDB7911254C4F9AE02/fDPCHh829n5MagTrI5AZrXcryyo.mft
Manifest number:          02B5
Signing time:             Wed 23 Sep 2026 01:16:41 +0000
Manifest this update:     Wed 23 Sep 2026 01:16:40 +0000
Manifest next update:     Wed 30 Sep 2026 01:16:40 +0000
Files and hashes:         1: fDPCHh829n5MagTrI5AZrXcryyo.crl (hash: iQOxK58/3OpNFgxylwTpBs7wEZICawgJhdhOOFuPaAE=)
                          2: 37A0ACFC8FCD11EDB4772D55C4F9AE02.roa (hash: TNBEB8bv/VEmVVea2OmlN0ueyYUZVCLkiz8lmx3cgdU=)
                          3: 6sN0jGhdCD0lkteDuxPDINLk_vg.asa (hash: EQTyuRobllbGIYRDMQ0e3dy5q6NIEnhbSpd0MTEU/wk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91836C4/9D4B10688FCA11EDB7911254C4F9AE02/fDPCHh829n5MagTrI5AZrXcryyo.crl
                          rsync://rpki.apnic.net/member_repository/A91836C4/9D4B10688FCA11EDB7911254C4F9AE02/fDPCHh829n5MagTrI5AZrXcryyo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fDPCHh829n5MagTrI5AZrXcryyo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 01:16:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 700 (0x2bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91836C4, serialNumber=7C33C21E1F36F67E4C6A04EB239019AD772BCB2A
        Validity
            Not Before: Sep 23 01:16:40 2026 GMT
            Not After : Sep 30 01:16:40 2026 GMT
        Subject: CN=6ab32878-39d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e7:33:44:a3:f9:40:1f:a4:70:86:e9:59:49:
                    1a:dd:46:ed:48:7b:26:16:a7:f8:49:c9:59:82:61:
                    75:60:97:a8:fa:f1:ae:9c:2b:a3:04:37:8b:9b:83:
                    f3:7a:a7:17:90:cf:88:3f:41:03:74:9e:65:0c:cd:
                    63:f3:36:6d:7c:9c:5a:cd:59:54:78:d5:4a:84:35:
                    42:37:23:c4:9b:bc:11:4f:11:ca:87:b0:4b:91:09:
                    a8:0a:a3:d3:87:81:15:e8:76:9e:73:eb:64:d0:bd:
                    64:41:53:97:cb:2b:82:a2:e4:de:ed:48:7a:57:6f:
                    b2:58:c7:23:1e:48:8b:57:1b:70:18:63:7a:d6:85:
                    66:07:69:ff:a7:6a:c1:3c:8d:86:8f:81:41:f2:ca:
                    0b:cb:00:f7:b6:39:94:41:f4:d6:c4:63:6a:14:0d:
                    5e:06:27:59:ca:0d:20:3f:6a:c3:ae:f4:a9:85:cc:
                    06:cd:2a:78:94:f8:23:f6:50:00:08:ef:2e:8e:89:
                    86:d0:97:9d:fd:95:55:d1:a0:be:04:d8:f2:ba:bd:
                    0a:62:a9:fa:31:73:41:88:81:08:d2:27:0b:f9:82:
                    04:e5:70:3c:f9:6c:25:5a:1b:69:a8:28:f6:b7:ab:
                    2b:0a:25:a3:f5:fd:d7:79:74:e3:a2:b6:6c:fe:ad:
                    86:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:FE:89:33:9A:D9:CB:F8:01:EC:E5:B3:11:59:FC:35:8F:51:4C:17
            X509v3 Authority Key Identifier:
                keyid:7C:33:C2:1E:1F:36:F6:7E:4C:6A:04:EB:23:90:19:AD:77:2B:CB:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91836C4/9D4B10688FCA11EDB7911254C4F9AE02/fDPCHh829n5MagTrI5AZrXcryyo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fDPCHh829n5MagTrI5AZrXcryyo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91836C4/9D4B10688FCA11EDB7911254C4F9AE02/fDPCHh829n5MagTrI5AZrXcryyo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:a2:66:b0:86:e7:ff:9e:bb:f1:2e:48:c7:35:85:c2:4b:e5:
         c3:d1:49:20:d4:f0:22:e3:16:29:12:4a:72:bb:0c:72:14:13:
         ec:0c:9f:cf:41:29:dd:43:9c:d9:c6:20:aa:2d:7c:01:1f:56:
         e6:9b:05:bf:48:ab:c8:c3:e4:43:09:85:db:fa:ef:a4:2c:93:
         8f:7a:17:e6:5b:bf:44:87:8e:9d:58:4a:d9:61:81:3d:2c:68:
         62:e1:31:5a:39:3e:16:d3:2e:2a:e1:39:b8:6c:17:4c:b5:47:
         43:0e:1d:87:34:f6:a6:63:cf:22:05:b9:21:62:b5:12:b7:33:
         63:42:3f:15:b7:3a:8e:7c:29:df:5c:2a:a9:a1:54:6d:bc:3b:
         67:e3:9f:09:c2:92:ad:21:5a:1e:62:fe:14:17:e7:0e:55:85:
         b1:ad:50:ce:6e:16:94:e2:c6:db:5d:eb:49:7e:7e:51:7c:bb:
         bd:71:f0:d1:2d:37:46:e8:c1:67:08:97:3c:28:53:18:7b:4b:
         08:dc:53:37:3b:d2:81:89:10:6a:6f:64:91:67:1b:b7:8e:83:
         01:f6:f7:c8:af:47:e8:47:ec:ac:92:34:66:77:5f:b9:22:fb:
         97:72:2a:0c:ea:04:ca:d7:ab:2e:01:b1:a5:bc:bc:43:5c:c8:
         7d:9d:19:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:32:48 2026 by rpki-client