Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918C6AE/67853A50797111F189F41A6783A30FBC/fov-ZO-jI92wwwXFZqiz06FxTGE.mft
File:                     fov-ZO-jI92wwwXFZqiz06FxTGE.mft (raw, json)
Hash identifier:          kna2fHb80WxZQbZZT2y96r2Km89z585O79BGrFHHuQw=
Subject key identifier:   6F:50:C7:9E:5E:CF:5F:0E:54:15:20:17:63:BA:8A:31:B2:77:61:BD
Authority key identifier: 7E:8B:FE:64:EF:A3:23:DD:B0:C3:05:C5:66:A8:B3:D3:A1:71:4C:61
Certificate issuer:       /CN=A918C6AE/serialNumber=7E8BFE64EFA323DDB0C305C566A8B3D3A1714C61
Certificate serial:       30
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fov-ZO-jI92wwwXFZqiz06FxTGE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918C6AE/67853A50797111F189F41A6783A30FBC/fov-ZO-jI92wwwXFZqiz06FxTGE.mft
Manifest number:          2B
Signing time:             Fri 25 Sep 2026 08:52:34 +0000
Manifest this update:     Fri 25 Sep 2026 08:52:34 +0000
Manifest next update:     Fri 02 Oct 2026 08:52:34 +0000
Files and hashes:         1: fov-ZO-jI92wwwXFZqiz06FxTGE.crl (hash: GPq0o/39VKlcxF168hlB3v/VqVNEDlQodS9/KRzff2w=)
                          2: F4F87352797111F1951C47AE83A30FBC.roa (hash: wlkX5wn0xVoDQ3WlNTt78hAjU6Lr0q/oltfg+QnTG8I=)
                          3: F28A2354797111F1951C47AE83A30FBC.roa (hash: LgrZbq+x16alluZDWiasqUSZcoWHEFMlHkrQO1zAxFk=)
                          4: F4524220797111F1951C47AE83A30FBC.roa (hash: psYJKF1YKFSmPgjJgaWlJbXxn1nWutvNRtoVP4qXPDg=)
                          5: F187013E797111F1951C47AE83A30FBC.roa (hash: EQ82kkU4v8P25E+h81GNmmJZcIi3ZusZTyMDe2Wm2oU=)
                          6: F37C72F8797111F1951C47AE83A30FBC.roa (hash: CHHlDA057vqljcpyJgf4YGKglLW3Va5VfkhZHlqg1UI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918C6AE/67853A50797111F189F41A6783A30FBC/fov-ZO-jI92wwwXFZqiz06FxTGE.crl
                          rsync://rpki.apnic.net/member_repository/A918C6AE/67853A50797111F189F41A6783A30FBC/fov-ZO-jI92wwwXFZqiz06FxTGE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fov-ZO-jI92wwwXFZqiz06FxTGE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 08:52:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 48 (0x30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C6AE, serialNumber=7E8BFE64EFA323DDB0C305C566A8B3D3A1714C61
        Validity
            Not Before: Sep 25 08:52:34 2026 GMT
            Not After : Oct  2 08:52:34 2026 GMT
        Subject: CN=6ab63652-67da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:4d:5e:11:72:7e:82:1a:a5:dc:7b:f9:75:2d:
                    5b:04:ff:41:ec:41:ca:b5:2b:eb:8c:f9:72:4a:e7:
                    01:ac:df:53:40:24:f9:77:e2:02:80:63:b3:86:94:
                    a7:89:46:d7:5e:25:b6:e0:6e:f0:29:ea:3d:6c:37:
                    c3:e3:3a:8f:a5:5e:43:18:ef:72:31:98:37:47:cd:
                    1d:eb:75:b7:9b:68:75:2f:bf:e8:6a:fa:c0:c6:fe:
                    c1:a6:36:ab:d8:f2:ff:1d:bf:eb:08:b7:9b:d9:5d:
                    d3:be:4b:11:0d:65:d3:d4:63:e0:4a:75:c2:cf:a2:
                    ec:e9:be:ef:80:6b:08:e4:3c:b1:63:5b:25:30:e1:
                    ad:8c:60:06:28:73:88:d4:42:a9:b2:5f:6e:44:22:
                    e7:89:8d:62:36:bb:64:c8:00:f4:ab:a0:21:89:1e:
                    b7:4b:2d:d5:ff:37:f4:f9:85:9b:be:75:25:6a:cd:
                    66:05:56:d3:7e:06:81:76:3a:9a:de:6e:51:f9:4c:
                    cc:c6:48:cf:a7:8f:ad:8a:ae:d2:58:24:58:eb:56:
                    6c:e3:f7:1a:75:a8:69:3c:e5:b5:4e:ac:cd:e2:1d:
                    44:d7:93:b3:77:a9:6a:66:7c:89:32:73:fe:ad:d7:
                    33:34:c3:45:62:40:fc:05:3a:5a:e5:50:09:fa:cb:
                    10:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:50:C7:9E:5E:CF:5F:0E:54:15:20:17:63:BA:8A:31:B2:77:61:BD
            X509v3 Authority Key Identifier:
                keyid:7E:8B:FE:64:EF:A3:23:DD:B0:C3:05:C5:66:A8:B3:D3:A1:71:4C:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918C6AE/67853A50797111F189F41A6783A30FBC/fov-ZO-jI92wwwXFZqiz06FxTGE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fov-ZO-jI92wwwXFZqiz06FxTGE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C6AE/67853A50797111F189F41A6783A30FBC/fov-ZO-jI92wwwXFZqiz06FxTGE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:4a:f5:b1:bc:79:9a:8b:08:e2:aa:aa:3b:51:a5:3b:c9:4c:
         02:89:6f:0b:9d:b4:20:d1:79:5d:11:b6:02:17:42:81:d6:38:
         24:75:64:fa:6f:5c:aa:2a:dc:bf:32:69:fe:ef:84:88:c1:18:
         85:22:94:a6:c3:f6:80:0f:33:4d:b8:52:42:07:1f:b8:9f:26:
         48:d6:df:d5:aa:75:d8:49:1e:66:9d:95:4c:98:46:63:3d:94:
         b7:2e:26:c6:65:24:0f:0a:99:45:89:e6:12:05:86:5b:e6:f0:
         0a:95:1a:5c:8a:47:e2:e6:de:78:f6:d4:7e:a8:39:1f:b4:f4:
         79:75:07:a6:dc:b6:d1:4c:9a:f0:a9:9d:25:e1:2d:c5:b2:35:
         c7:50:05:33:82:61:69:d9:39:28:33:a4:07:bf:ed:39:36:1e:
         c3:9d:a8:47:f9:fa:dd:ee:8c:b5:b1:d0:6a:99:36:5f:19:82:
         5e:5f:21:77:17:d6:75:69:ab:c4:96:fc:af:30:fb:4e:90:77:
         51:bd:d8:50:3a:8f:80:fa:f5:45:30:3f:ae:64:e5:55:00:90:
         c3:74:a3:3f:89:e9:af:1d:6b:bc:0f:f9:e2:f8:3c:ea:a8:35:
         14:2a:9a:bf:0a:88:42:7c:0c:ad:6a:50:be:f0:53:d6:4d:23:
         e4:69:6e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:26:50 2026 by rpki-client