Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9193267/8966D6FE6EE111EDB45FF360C4F9AE02/FggPXxr0qlYST_cZXRPoW5OllSE.mft
File:                     FggPXxr0qlYST_cZXRPoW5OllSE.mft (raw, json)
Hash identifier:          g/PVHg7b3zbXB/cHnrK/cWtFtJBT1pk+3UJ87aIoPRo=
Subject key identifier:   3D:9D:BA:8C:DB:F8:1A:48:77:96:EC:6E:EC:22:94:5E:CA:F8:FE:29
Authority key identifier: 16:08:0F:5F:1A:F4:AA:56:12:4F:F7:19:5D:13:E8:5B:93:A5:95:21
Certificate issuer:       /CN=A9193267/serialNumber=16080F5F1AF4AA56124FF7195D13E85B93A59521
Certificate serial:       02D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FggPXxr0qlYST_cZXRPoW5OllSE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193267/8966D6FE6EE111EDB45FF360C4F9AE02/FggPXxr0qlYST_cZXRPoW5OllSE.mft
Manifest number:          02CC
Signing time:             Wed 23 Sep 2026 01:03:52 +0000
Manifest this update:     Wed 23 Sep 2026 01:03:51 +0000
Manifest next update:     Wed 30 Sep 2026 01:03:51 +0000
Files and hashes:         1: FggPXxr0qlYST_cZXRPoW5OllSE.crl (hash: h+3L1fk2f9H5U+7ekrR1bDVTDfz+xQvGDUuEwTpr024=)
                          2: F29D0E026EE311ED94338E61C4F9AE02.roa (hash: 5ttrslPy7LaJO4gSanAc9hK6tw6CcRvwnYxFZwSyMX4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193267/8966D6FE6EE111EDB45FF360C4F9AE02/FggPXxr0qlYST_cZXRPoW5OllSE.crl
                          rsync://rpki.apnic.net/member_repository/A9193267/8966D6FE6EE111EDB45FF360C4F9AE02/FggPXxr0qlYST_cZXRPoW5OllSE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FggPXxr0qlYST_cZXRPoW5OllSE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 01:03:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 722 (0x2d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193267, serialNumber=16080F5F1AF4AA56124FF7195D13E85B93A59521
        Validity
            Not Before: Sep 23 01:03:51 2026 GMT
            Not After : Sep 30 01:03:51 2026 GMT
        Subject: CN=6ab32578-d6ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:47:24:ab:60:84:7d:c7:8e:93:6f:67:f9:29:
                    ad:8a:d6:67:77:f5:59:99:4a:c8:d9:0c:b7:9c:d2:
                    04:78:e8:98:ba:d2:07:0b:e8:f8:06:4a:44:e1:e3:
                    4e:70:d2:77:77:b0:36:b3:57:cd:f3:7b:be:ef:be:
                    27:fd:2e:73:be:9f:01:b6:96:ef:6e:89:85:5b:6d:
                    cf:2e:39:9f:2d:f3:89:7d:dc:ab:2e:83:8d:99:75:
                    3d:bc:2e:d8:a0:a8:94:5d:25:45:20:bc:cb:4b:fa:
                    a4:43:71:f8:8c:18:e3:19:0a:dd:6d:51:f0:db:bf:
                    d9:9b:68:00:69:e7:40:5c:6c:f6:7f:ff:c1:4f:b4:
                    ff:35:c7:0c:a9:5a:de:38:05:26:b4:2e:45:3d:bf:
                    a7:53:69:ca:ac:a2:9f:d1:73:50:37:33:07:ed:e6:
                    4f:7e:ca:7c:df:f8:49:1a:1e:61:2f:4b:e0:62:13:
                    5c:ba:e1:12:90:64:16:2b:f5:a3:12:f0:03:3b:87:
                    95:85:70:fa:c0:3c:d9:66:ac:3c:3f:ba:74:88:97:
                    7f:1f:e4:3f:98:f4:ac:28:98:91:95:11:62:4e:5c:
                    72:59:3d:d2:25:a3:7e:fe:83:af:96:0a:c1:ad:ec:
                    c8:6d:f6:a6:39:60:92:c9:36:e8:24:b8:cf:a4:88:
                    7e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:9D:BA:8C:DB:F8:1A:48:77:96:EC:6E:EC:22:94:5E:CA:F8:FE:29
            X509v3 Authority Key Identifier:
                keyid:16:08:0F:5F:1A:F4:AA:56:12:4F:F7:19:5D:13:E8:5B:93:A5:95:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193267/8966D6FE6EE111EDB45FF360C4F9AE02/FggPXxr0qlYST_cZXRPoW5OllSE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FggPXxr0qlYST_cZXRPoW5OllSE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193267/8966D6FE6EE111EDB45FF360C4F9AE02/FggPXxr0qlYST_cZXRPoW5OllSE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:38:0e:cd:9a:33:e8:c7:02:9a:85:4f:b9:6e:c8:12:4c:23:
         db:a1:94:f8:42:31:ad:17:da:78:68:91:ce:a3:87:ee:89:7c:
         76:de:a8:75:2f:53:35:21:3b:16:56:8d:2a:62:bd:44:f3:7c:
         b4:85:f4:be:80:2e:51:a7:f0:24:b3:ed:44:e5:e1:e4:6c:9e:
         28:32:0a:96:8c:e9:53:48:0b:23:8a:d8:fe:d9:ef:94:43:a5:
         50:3a:d9:f7:1d:be:06:7b:92:b4:c8:61:b9:cf:99:f7:dc:d4:
         09:2f:be:23:81:2e:72:a5:dc:3e:f1:2d:96:8a:d6:a1:7f:7e:
         ce:75:9b:81:74:19:39:b5:18:db:d2:16:96:c9:e4:25:75:88:
         c4:24:28:95:8e:33:a3:69:15:04:8b:2a:80:32:71:7d:3e:4c:
         af:b4:68:24:a8:52:28:7e:66:09:49:3d:92:0e:9c:83:ea:62:
         88:ed:88:d9:cb:14:11:21:41:7b:6f:b5:f6:fe:af:9d:cd:20:
         2c:bc:cd:34:28:5a:e7:e1:52:97:03:88:e3:cc:9c:65:73:96:
         91:9f:c8:79:71:ce:46:92:2f:42:ef:1d:23:19:51:09:11:e6:
         45:39:d8:47:c3:d1:41:88:79:88:7b:c0:77:68:a6:28:b9:9d:
         cb:11:1f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:40:46 2026 by rpki-client