Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918BB4D/C07E1CD0652211EB80F6E94BC4F9AE02/FjMp9XBd6bwiNaxX11T5gHjH9Ss.mft
File:                     FjMp9XBd6bwiNaxX11T5gHjH9Ss.mft (raw, json)
Hash identifier:          Upd9cLI9CFHxot9IVYiPKp7JhG7aXvYBis3IS98y6cU=
Subject key identifier:   8B:EB:7C:B1:3D:E7:F9:75:9D:B7:AD:13:47:FD:59:F4:AB:3A:7C:93
Authority key identifier: 16:33:29:F5:70:5D:E9:BC:22:35:AC:57:D7:54:F9:80:78:C7:F5:2B
Certificate issuer:       /CN=A918BB4D/serialNumber=163329F5705DE9BC2235AC57D754F98078C7F52B
Certificate serial:       07A1
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FjMp9XBd6bwiNaxX11T5gHjH9Ss.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918BB4D/C07E1CD0652211EB80F6E94BC4F9AE02/FjMp9XBd6bwiNaxX11T5gHjH9Ss.mft
Manifest number:          07A1
Signing time:             Thu 24 Sep 2026 21:23:45 +0000
Manifest this update:     Thu 24 Sep 2026 21:23:44 +0000
Manifest next update:     Thu 01 Oct 2026 21:23:44 +0000
Files and hashes:         1: FjMp9XBd6bwiNaxX11T5gHjH9Ss.crl (hash: nBGW2LuYZOw3io8Tqi/nHIv+cNJ6J+cfnmbfJ+3JMPo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918BB4D/C07E1CD0652211EB80F6E94BC4F9AE02/FjMp9XBd6bwiNaxX11T5gHjH9Ss.crl
                          rsync://rpki.apnic.net/member_repository/A918BB4D/C07E1CD0652211EB80F6E94BC4F9AE02/FjMp9XBd6bwiNaxX11T5gHjH9Ss.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FjMp9XBd6bwiNaxX11T5gHjH9Ss.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 21:23:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1953 (0x7a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918BB4D, serialNumber=163329F5705DE9BC2235AC57D754F98078C7F52B
        Validity
            Not Before: Sep 24 21:23:44 2026 GMT
            Not After : Oct  1 21:23:44 2026 GMT
        Subject: CN=6ab594e1-8a48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ba:a0:e3:ee:d1:5f:18:38:c6:dd:d3:18:56:
                    65:21:2b:42:f8:6d:07:a4:46:80:a2:94:f6:04:17:
                    b4:86:91:23:7b:59:f1:d2:1e:c1:19:e7:3c:12:04:
                    c2:89:b7:47:69:aa:88:cb:29:61:00:2f:5d:c9:61:
                    33:67:9d:83:fa:43:6e:e6:5b:6f:d2:d3:c5:30:6b:
                    28:03:ae:81:81:f0:6d:3a:77:d4:11:60:23:b8:c4:
                    a0:02:c9:9e:ef:87:d0:ae:a9:9b:94:c0:93:d3:49:
                    d2:39:33:3b:25:04:63:c6:bb:30:77:c2:7c:39:27:
                    85:47:6b:f9:6f:c8:4c:2a:b1:84:eb:19:0d:88:05:
                    80:e5:60:32:79:4b:2d:11:87:6e:c4:9b:7c:23:e5:
                    9c:6b:16:3c:35:4f:95:19:8d:b5:b4:00:2d:4d:1c:
                    1d:e8:5c:64:45:bb:14:b3:3f:e4:6c:3e:fc:12:aa:
                    ca:6b:95:77:20:95:52:ef:60:60:1f:0c:92:2c:9c:
                    34:04:09:d6:95:5b:56:8a:eb:e7:16:e1:56:a8:84:
                    b8:af:c0:2b:5c:54:47:16:e2:0b:20:b4:62:58:dd:
                    20:4d:f6:2a:b4:d7:f8:cc:04:e1:2d:d5:fa:8b:01:
                    30:3f:6e:e9:0b:f7:4a:16:2e:b5:5a:bf:74:c6:3a:
                    77:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:EB:7C:B1:3D:E7:F9:75:9D:B7:AD:13:47:FD:59:F4:AB:3A:7C:93
            X509v3 Authority Key Identifier:
                keyid:16:33:29:F5:70:5D:E9:BC:22:35:AC:57:D7:54:F9:80:78:C7:F5:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918BB4D/C07E1CD0652211EB80F6E94BC4F9AE02/FjMp9XBd6bwiNaxX11T5gHjH9Ss.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FjMp9XBd6bwiNaxX11T5gHjH9Ss.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BB4D/C07E1CD0652211EB80F6E94BC4F9AE02/FjMp9XBd6bwiNaxX11T5gHjH9Ss.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:da:f5:eb:57:81:54:d2:ac:19:17:52:93:b9:4e:79:ea:d9:
         81:36:ff:10:5f:91:5e:34:14:a7:25:43:d6:e6:0d:46:c7:db:
         fb:ed:09:81:73:e1:ea:82:12:56:1e:1f:77:0c:23:b2:e6:38:
         aa:9c:6b:16:c9:5f:99:a9:cf:11:83:92:2a:cd:3b:5d:b9:01:
         bf:ee:3f:52:00:11:7f:bf:09:9e:7a:3d:f6:1c:a5:34:d3:4f:
         20:13:bc:64:30:2e:8d:44:d9:b5:48:17:5b:59:d2:25:bc:70:
         14:7f:16:b6:93:f5:14:6f:64:4b:6f:bf:1d:e2:81:5f:3f:a5:
         e2:69:da:02:35:1b:87:95:d2:43:15:27:a2:8a:f8:c9:f2:7f:
         e7:b1:e8:9d:e4:cb:bf:40:69:58:87:ad:ae:54:55:95:d8:a1:
         af:0f:44:dc:9b:df:4f:60:6a:43:f2:a2:b8:43:ec:3d:bb:0d:
         ec:ca:8b:45:8b:9a:73:bc:da:db:71:cd:47:a8:c8:a9:31:10:
         43:bc:ae:3e:c8:17:2a:7d:da:23:55:ba:26:52:2d:2c:09:ba:
         2b:81:f1:76:40:2b:bb:dd:97:89:1d:df:56:9e:ad:97:5d:fb:
         49:cb:0c:c6:a9:62:fd:c5:c8:d9:09:0e:00:c8:d2:21:91:a3:
         f5:0c:1a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:26:18 2026 by rpki-client