Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.mft
File:                     ftCxNhmz84MH3uG0Dn8neTItvm4.mft (raw, json)
Hash identifier:          uH/fVL/p7JygeKox1oKZkAr/H+p/GRiduvnqRO0dvHw=
Subject key identifier:   7B:21:82:BC:C7:49:32:5C:E6:C5:94:71:B9:CB:B1:11:8A:B5:14:78
Authority key identifier: 7E:D0:B1:36:19:B3:F3:83:07:DE:E1:B4:0E:7F:27:79:32:2D:BE:6E
Certificate issuer:       /CN=A91A7EA5/serialNumber=7ED0B13619B3F38307DEE1B40E7F2779322DBE6E
Certificate serial:       0D7C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ftCxNhmz84MH3uG0Dn8neTItvm4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.mft
Manifest number:          0D61
Signing time:             Tue 22 Sep 2026 17:58:39 +0000
Manifest this update:     Tue 22 Sep 2026 17:58:39 +0000
Manifest next update:     Tue 29 Sep 2026 17:58:39 +0000
Files and hashes:         1: ftCxNhmz84MH3uG0Dn8neTItvm4.crl (hash: AAM3kXdrGgEIw2rkxCOiIS4xVbzrevgD1XfiefXZXIk=)
                          2: 93E73ABE833811ECA0A7120DC4F9AE02.roa (hash: t2CWkBXQYpfXnKjT2eidVo6yQZfsGFOZhOTBTaGrl0k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.crl
                          rsync://rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ftCxNhmz84MH3uG0Dn8neTItvm4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 15:21:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3452 (0xd7c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7EA5, serialNumber=7ED0B13619B3F38307DEE1B40E7F2779322DBE6E
        Validity
            Not Before: Sep 22 17:58:39 2026 GMT
            Not After : Sep 29 17:58:39 2026 GMT
        Subject: CN=6ab2c1cf-5a9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:60:54:fa:20:aa:59:35:4b:a9:8b:54:09:8b:
                    e4:89:27:10:07:e7:ea:f6:e5:51:ab:32:0f:4b:2a:
                    3b:7a:5f:f1:41:3a:3a:ae:72:a9:38:02:1a:17:58:
                    75:59:5c:d1:51:ce:3a:5f:18:9a:d2:86:61:d3:33:
                    6f:3d:d5:6e:57:38:f4:ec:94:85:28:69:b2:de:67:
                    ff:f4:44:f4:78:7e:f1:25:ed:cd:bf:2c:a7:e7:ff:
                    9e:69:65:be:cd:a1:2b:4f:3c:5c:a4:eb:05:b1:e4:
                    b0:cd:58:91:de:20:2b:b4:43:fb:3b:a8:27:7e:0e:
                    cd:ac:a1:30:d0:8a:d1:52:bf:3c:b7:83:33:63:84:
                    c5:c7:e2:10:1a:3f:8d:25:26:b9:07:81:21:5a:b7:
                    d9:bf:3a:55:36:ee:34:73:6a:0e:be:0c:9c:c1:e3:
                    66:a5:ca:b9:2a:62:17:54:de:c7:b4:c6:18:4d:de:
                    e2:da:9e:5d:9a:d3:e0:d7:07:57:8f:bd:f8:65:88:
                    fb:b6:72:e6:32:1b:de:f0:9f:b3:1b:d8:9a:e1:15:
                    ee:89:18:bc:2d:8b:1b:6b:4a:02:49:f6:59:15:12:
                    6e:71:5e:96:39:7f:8b:d1:18:33:79:46:37:86:f9:
                    28:6e:85:dd:27:92:1d:99:36:e9:9b:c9:0b:02:de:
                    45:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:21:82:BC:C7:49:32:5C:E6:C5:94:71:B9:CB:B1:11:8A:B5:14:78
            X509v3 Authority Key Identifier:
                keyid:7E:D0:B1:36:19:B3:F3:83:07:DE:E1:B4:0E:7F:27:79:32:2D:BE:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ftCxNhmz84MH3uG0Dn8neTItvm4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:97:de:bd:97:24:87:f3:a8:5b:13:1f:5e:50:29:06:fc:d8:
         42:81:5b:e7:23:97:95:38:77:11:75:42:ac:b6:93:55:14:42:
         0c:55:f1:79:9c:0a:8c:e6:6b:a0:71:21:f1:63:b5:f9:7e:f8:
         cc:be:44:25:e7:71:86:42:79:90:ae:68:5d:aa:61:30:10:ae:
         27:f7:97:4a:6d:1e:4b:d4:1c:27:9a:80:06:58:4e:a1:8d:bb:
         34:62:ef:65:5a:b9:a4:30:ee:2e:2b:da:2f:89:2f:e1:fe:2c:
         36:19:ce:22:58:64:db:f6:2d:43:80:62:3c:f3:12:00:0f:d3:
         7b:1d:6c:8d:1a:46:f9:1c:a4:0d:5f:56:3a:20:c7:d8:f4:b8:
         d1:92:ec:df:88:3a:c0:b7:b2:86:c3:59:12:2b:b2:8c:ef:a0:
         53:1e:ec:b9:b0:5d:e2:80:36:56:a0:59:9f:5c:cd:a8:91:47:
         5b:1e:16:13:93:dd:6e:54:cf:cd:a6:13:41:e7:fa:7d:8b:69:
         b2:8d:37:d8:60:92:2a:48:8f:2c:53:3e:c4:12:1d:d3:ad:c3:
         d7:05:3c:46:5c:10:77:ed:6a:de:57:8e:0f:ce:0d:22:06:9f:
         c5:bc:bc:7f:ed:bb:9f:34:65:fc:55:9e:6f:d4:0d:a8:e5:8d:
         14:39:67:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:24:26 2026 by rpki-client