Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.mft
File:                     fjrGkZwij5gBrPkHXZCOUS3W2jQ.mft (raw, json)
Hash identifier:          sNtZRWtGL0vZaD7ZCNFX5U+9H8DmudL4JhL75dez+zo=
Subject key identifier:   6A:DE:62:FF:28:BD:76:24:E5:87:30:21:4F:2C:35:0D:D6:8C:A4:2E
Authority key identifier: 7E:3A:C6:91:9C:22:8F:98:01:AC:F9:07:5D:90:8E:51:2D:D6:DA:34
Certificate issuer:       /CN=A91BDC68/serialNumber=7E3AC6919C228F9801ACF9075D908E512DD6DA34
Certificate serial:       FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjrGkZwij5gBrPkHXZCOUS3W2jQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.mft
Manifest number:          F0
Signing time:             Wed 23 Sep 2026 06:12:25 +0000
Manifest this update:     Wed 23 Sep 2026 06:12:25 +0000
Manifest next update:     Wed 30 Sep 2026 06:12:25 +0000
Files and hashes:         1: fjrGkZwij5gBrPkHXZCOUS3W2jQ.crl (hash: K/9olXmjFnoWHo00m/jAB9K10wixVbWmOeqwlS8ENTo=)
                          2: 6C18BEE0519811F08E123360C4F9AE02.roa (hash: 8TFnySzYjqGkLlYHhhpYGf9ApF8MAtmix4sZ0+hIQmI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.crl
                          rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjrGkZwij5gBrPkHXZCOUS3W2jQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 06:12:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 251 (0xfb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDC68, serialNumber=7E3AC6919C228F9801ACF9075D908E512DD6DA34
        Validity
            Not Before: Sep 23 06:12:25 2026 GMT
            Not After : Sep 30 06:12:25 2026 GMT
        Subject: CN=6ab36dc9-c542
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:a4:a5:be:b7:f8:fe:14:02:1f:8f:4e:26:12:
                    95:86:75:dc:40:26:fc:ab:0c:ee:9b:e4:39:ca:ef:
                    52:20:88:6d:cb:28:54:ff:af:4f:93:9c:1e:1b:4e:
                    c5:94:a2:b9:3a:59:ee:7b:ac:27:4a:08:bb:b9:06:
                    94:87:a6:b7:14:48:6a:0c:09:89:80:ba:99:40:c5:
                    b7:4a:9b:4a:04:77:08:bb:0c:74:c2:12:88:71:5b:
                    4e:f2:67:d7:19:65:99:84:4f:f7:3c:80:a2:c6:41:
                    27:62:4a:c5:b4:07:0e:2f:6b:7c:5c:34:75:16:3b:
                    ba:41:e9:3b:44:4d:29:ed:25:4d:9f:73:3a:d8:ce:
                    49:2c:51:e9:25:76:d7:73:5f:2b:8c:b8:1e:98:a8:
                    51:2e:49:cb:cb:f9:2f:9d:84:ef:09:91:ad:20:87:
                    88:d8:3c:d8:a7:51:c8:1a:3f:1a:b7:ff:55:c1:9e:
                    33:1e:df:5d:3d:16:a0:8c:ef:cc:92:1b:e7:4d:96:
                    6b:66:5e:86:61:05:49:5b:cd:5c:38:67:5c:a3:59:
                    e8:f2:83:e8:d1:ff:ec:d3:5c:52:7c:cd:38:09:93:
                    69:e1:61:65:81:ab:06:a0:25:10:d0:a1:5f:3a:c3:
                    58:92:86:b3:5d:96:37:14:fd:7b:b8:04:9c:d0:98:
                    c6:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:DE:62:FF:28:BD:76:24:E5:87:30:21:4F:2C:35:0D:D6:8C:A4:2E
            X509v3 Authority Key Identifier:
                keyid:7E:3A:C6:91:9C:22:8F:98:01:AC:F9:07:5D:90:8E:51:2D:D6:DA:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjrGkZwij5gBrPkHXZCOUS3W2jQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:8b:ac:8d:44:d7:f3:62:8b:79:5e:2f:94:a6:ea:12:04:96:
         89:bf:c4:ec:93:10:6c:92:bb:e4:29:95:b6:73:d2:d5:94:d6:
         8d:3b:5c:ee:57:59:25:c8:b1:9c:4a:3c:6a:eb:8d:22:dd:a6:
         9e:04:4b:67:ec:0a:b6:8c:02:03:cb:d4:3e:b7:71:55:0f:3b:
         6a:b0:7c:ba:5f:42:53:8c:51:fc:f9:fe:02:2c:92:50:18:be:
         65:12:dc:1d:5d:36:27:80:5e:99:c0:d3:b9:00:44:89:73:d0:
         58:b1:9f:68:bd:7e:98:4f:81:7e:22:9f:b1:b4:43:85:d5:85:
         f5:72:75:e4:84:59:2c:1d:7b:b1:04:0a:e6:f1:9e:f7:f9:f8:
         e4:f9:ff:59:3d:bd:be:7e:ac:8a:d8:35:d8:1e:2c:41:5b:cc:
         2c:ad:1b:3d:80:f3:20:fc:95:66:f2:76:ac:ce:ab:1b:2c:62:
         2f:d5:74:be:a2:0d:d1:f8:25:3a:8d:12:e0:2c:26:d8:22:21:
         8e:44:27:08:d2:82:80:85:97:e1:02:0f:bb:f3:3d:d2:75:22:
         f3:2a:d8:67:25:aa:f5:85:7e:be:a9:96:3a:40:c2:29:7a:bc:
         41:59:14:6f:b6:91:40:d3:0f:03:7e:72:8f:a0:ce:5b:47:a6:
         ee:6c:47:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:32:36 2026 by rpki-client