Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C9FA5/331F032416FA11F1A206C9013D3D8C67/rdFsd3-FrDMoNJf5aGa5X3xaeI8.mft
File:                     rdFsd3-FrDMoNJf5aGa5X3xaeI8.mft (raw, json)
Hash identifier:          Aiaq2m95Bo3SyMNOASXhHN5qbgdxaB7rlyFd8DoBXsI=
Subject key identifier:   E5:35:D3:C6:82:50:78:F5:F3:68:A0:08:12:11:77:ED:9B:94:E6:22
Authority key identifier: AD:D1:6C:77:7F:85:AC:33:28:34:97:F9:68:66:B9:5F:7C:5A:78:8F
Certificate issuer:       /CN=A91C9FA5/serialNumber=ADD16C777F85AC33283497F96866B95F7C5A788F
Certificate serial:       71
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdFsd3-FrDMoNJf5aGa5X3xaeI8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9FA5/331F032416FA11F1A206C9013D3D8C67/rdFsd3-FrDMoNJf5aGa5X3xaeI8.mft
Manifest number:          6C
Signing time:             Mon 21 Sep 2026 07:59:04 +0000
Manifest this update:     Mon 21 Sep 2026 07:59:04 +0000
Manifest next update:     Mon 28 Sep 2026 07:59:04 +0000
Files and hashes:         1: rdFsd3-FrDMoNJf5aGa5X3xaeI8.crl (hash: WngzSBrFPNqk4/UEjhRYTi9E4CVJbu4QgcWduCGBLm4=)
                          2: C0E909DA16FE11F18F088F02403D8C67.roa (hash: VjPxAhas5Pw+fqOZlP4hHQhYpUtxADZwSrxgwjbLmBA=)
                          3: C170DB5816FE11F18F088F02403D8C67.roa (hash: yX4W8DdJSN3+Xr/0WS2vJ+YF9+T+T0hVhVlvyeFeK9c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9FA5/331F032416FA11F1A206C9013D3D8C67/rdFsd3-FrDMoNJf5aGa5X3xaeI8.crl
                          rsync://rpki.apnic.net/member_repository/A91C9FA5/331F032416FA11F1A206C9013D3D8C67/rdFsd3-FrDMoNJf5aGa5X3xaeI8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdFsd3-FrDMoNJf5aGa5X3xaeI8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 07:59:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113 (0x71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9FA5, serialNumber=ADD16C777F85AC33283497F96866B95F7C5A788F
        Validity
            Not Before: Sep 21 07:59:04 2026 GMT
            Not After : Sep 28 07:59:04 2026 GMT
        Subject: CN=6ab0e3c8-e6d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:70:33:b0:39:dd:8b:05:98:fd:9e:47:60:e6:
                    4a:c2:53:ae:94:f3:01:8b:8f:54:e5:ac:c6:92:9d:
                    ba:11:42:db:19:77:92:47:20:6c:e7:8f:53:89:78:
                    8c:5c:65:fc:70:8a:5a:c5:34:aa:1b:8f:0c:3c:ba:
                    18:41:04:f6:e1:68:ca:e9:08:ea:c7:10:33:3f:12:
                    aa:a5:39:91:e6:71:73:d9:54:0a:d0:b5:22:2c:da:
                    66:1f:42:d6:de:f3:83:26:32:c7:3e:0c:b1:50:fd:
                    27:97:02:26:f6:b3:49:f9:22:1a:73:37:95:98:0f:
                    c2:55:da:9f:ae:0b:04:d4:26:45:44:03:78:39:fd:
                    67:88:23:d2:ff:d4:84:1c:4a:16:b8:83:bc:cb:e1:
                    f0:84:bd:28:7b:f0:d9:12:8d:78:ff:65:e7:21:fd:
                    87:b0:d5:ac:c0:b6:90:67:db:01:2d:81:95:04:62:
                    a5:47:34:a9:84:e3:8c:41:c5:2e:54:79:27:7b:e7:
                    28:58:d8:b6:30:08:1d:99:75:be:48:dc:bd:00:d4:
                    5e:5b:69:a5:b9:fd:fd:a1:ea:67:a5:20:0c:6e:d8:
                    99:5f:cd:2c:e3:bd:2c:46:95:e2:74:23:2a:90:94:
                    24:38:23:78:83:ed:7d:81:97:6b:c2:17:79:86:1d:
                    58:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:35:D3:C6:82:50:78:F5:F3:68:A0:08:12:11:77:ED:9B:94:E6:22
            X509v3 Authority Key Identifier:
                keyid:AD:D1:6C:77:7F:85:AC:33:28:34:97:F9:68:66:B9:5F:7C:5A:78:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9FA5/331F032416FA11F1A206C9013D3D8C67/rdFsd3-FrDMoNJf5aGa5X3xaeI8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdFsd3-FrDMoNJf5aGa5X3xaeI8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9FA5/331F032416FA11F1A206C9013D3D8C67/rdFsd3-FrDMoNJf5aGa5X3xaeI8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:c6:dc:6f:ec:76:e2:78:43:fa:d2:d9:d5:3a:24:94:9f:4b:
         81:7b:70:69:bc:29:b1:29:fb:88:41:6c:f4:5b:fc:d1:6e:b2:
         ce:a4:17:2b:7f:30:3d:f4:68:db:f7:04:e6:a7:a1:19:af:2f:
         b1:66:bc:2b:af:03:72:f7:1e:d5:7c:bb:20:bf:95:3e:6b:7b:
         37:4d:02:1c:55:9d:8a:1d:01:f5:82:cc:a3:65:f3:54:98:59:
         d6:5d:d1:da:23:e1:80:53:ae:4c:91:7a:ab:11:cf:c9:6f:89:
         d9:73:11:19:85:94:11:67:cf:09:e4:10:17:90:ae:ab:3a:e2:
         b6:0e:ba:77:13:06:b8:f0:3b:55:be:f2:79:7a:09:a6:a1:ba:
         a2:21:34:3d:dd:7c:15:26:29:27:36:41:57:a2:fc:60:c0:00:
         cc:d2:4b:70:c8:1a:45:a3:79:70:85:f3:3e:35:51:1e:34:7f:
         ee:72:0d:80:7d:e1:2d:40:6f:3a:b5:1d:a5:d4:75:58:4a:b0:
         c2:ed:23:ae:9c:04:39:5e:c8:78:fb:57:19:64:14:02:ac:33:
         da:ad:2a:d9:9a:97:a5:00:a1:fe:7d:72:ff:c2:43:83:5c:75:
         1d:6b:37:14:ef:1e:b4:ca:69:67:f1:9a:a4:8c:ca:50:cf:42:
         4a:e6:94:4d
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBcTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD
OUZBNTExMC8GA1UEBRMoQUREMTZDNzc3Rjg1QUMzMzI4MzQ5N0Y5Njg2NkI5NUY3
QzVBNzg4RjAeFw0yNjA5MjEwNzU5MDRaFw0yNjA5MjgwNzU5MDRaMBgxFjAUBgNV
BAMTDTZhYjBlM2M4LWU2ZDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDRcDOwOd2LBZj9nkdg5krCU66U8wGLj1TlrMaSnboRQtsZd5JHIGznj1OJeIxc
ZfxwilrFNKobjww8uhhBBPbhaMrpCOrHEDM/EqqlOZHmcXPZVArQtSIs2mYfQtbe
84MmMsc+DLFQ/SeXAib2s0n5IhpzN5WYD8JV2p+uCwTUJkVEA3g5/WeII9L/1IQc
Sha4g7zL4fCEvSh78NkSjXj/Zech/Yew1azAtpBn2wEtgZUEYqVHNKmE44xBxS5U
eSd75yhY2LYwCB2Zdb5I3L0A1F5baaW5/f2h6melIAxu2JlfzSzjvSxGleJ0IyqQ
lCQ4I3iD7X2Bl2vCF3mGHVhzAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU5TXTxoJQ
ePXzaKAIEhF37ZuU5iIwHwYDVR0jBBgwFoAUrdFsd3+FrDMoNJf5aGa5X3xaeI8w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5RkE1LzMzMUYwMzI0MTZG
QTExRjFBMjA2QzkwMTNEM0Q4QzY3L3JkRnNkMy1GckRNb05KZjVhR2E1WDN4YWVJ
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvcmRGc2QzLUZyRE1vTkpmNWFHYTVYM3hhZUk4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5
RkE1LzMzMUYwMzI0MTZGQTExRjFBMjA2QzkwMTNEM0Q4QzY3L3JkRnNkMy1GckRN
b05KZjVhR2E1WDN4YWVJOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBAxtxv7HbieEP60tnVOiSUn0uBe3BpvCmxKfuIQWz0W/zRbrLOpBcrfzA99Gjb
9wTmp6EZry+xZrwrrwNy9x7VfLsgv5U+a3s3TQIcVZ2KHQH1gsyjZfNUmFnWXdHa
I+GAU65MkXqrEc/Jb4nZcxEZhZQRZ88J5BAXkK6rOuK2Drp3Ewa48DtVvvJ5egmm
obqiITQ93XwVJiknNkFXovxgwADM0ktwyBpFo3lwhfM+NVEeNH/ucg2AfeEtQG86
tR2l1HVYSrDC7SOunAQ5Xsh4+1cZZBQCrDParSrZmpelAKH+fXL/wkODXHUdazcU
7x60ymln8ZqkjMpQz0JK5pRN
-----END CERTIFICATE-----
Generated at Wed Sep 23 09:05:48 2026 by rpki-client