Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9FA5/331F032416FA11F1A206C9013D3D8C67/rdFsd3-FrDMoNJf5aGa5X3xaeI8.mft
File:                     rdFsd3-FrDMoNJf5aGa5X3xaeI8.mft (raw, json)
Hash identifier:          mqFEp5SuWco0WogLnVH3XL2S5SRllLVHqtLi4SBvkjE=
Subject key identifier:   68:53:A8:05:CF:6B:CE:E4:E0:FC:49:07:2D:9A:9C:8E:7E:A9:FD:EA
Authority key identifier: AD:D1:6C:77:7F:85:AC:33:28:34:97:F9:68:66:B9:5F:7C:5A:78:8F
Certificate issuer:       /CN=A91C9FA5/serialNumber=ADD16C777F85AC33283497F96866B95F7C5A788F
Certificate serial:       52
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdFsd3-FrDMoNJf5aGa5X3xaeI8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9FA5/331F032416FA11F1A206C9013D3D8C67/rdFsd3-FrDMoNJf5aGa5X3xaeI8.mft
Manifest number:          4D
Signing time:             Thu 23 Jul 2026 10:21:18 +0000
Manifest this update:     Thu 23 Jul 2026 10:21:17 +0000
Manifest next update:     Thu 30 Jul 2026 10:21:17 +0000
Files and hashes:         1: rdFsd3-FrDMoNJf5aGa5X3xaeI8.crl (hash: W2YjwF6kczGumbdjxqTsLOD/myqerKkbTOYEptmWbR8=)
                          2: C170DB5816FE11F18F088F02403D8C67.roa (hash: yX4W8DdJSN3+Xr/0WS2vJ+YF9+T+T0hVhVlvyeFeK9c=)
                          3: C0E909DA16FE11F18F088F02403D8C67.roa (hash: VjPxAhas5Pw+fqOZlP4hHQhYpUtxADZwSrxgwjbLmBA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9FA5/331F032416FA11F1A206C9013D3D8C67/rdFsd3-FrDMoNJf5aGa5X3xaeI8.crl
                          rsync://rpki.apnic.net/member_repository/A91C9FA5/331F032416FA11F1A206C9013D3D8C67/rdFsd3-FrDMoNJf5aGa5X3xaeI8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdFsd3-FrDMoNJf5aGa5X3xaeI8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 10:21:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 82 (0x52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9FA5, serialNumber=ADD16C777F85AC33283497F96866B95F7C5A788F
        Validity
            Not Before: Jul 23 10:21:17 2026 GMT
            Not After : Jul 30 10:21:17 2026 GMT
        Subject: CN=6a61eb1e-9375
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:3e:bc:c1:b3:de:ac:ca:11:ff:36:68:b6:a7:
                    df:ff:43:8c:6f:b4:b1:ae:0d:c0:0f:b9:30:1a:ad:
                    95:a8:19:a4:4e:a0:77:25:5e:0e:72:50:ca:79:ff:
                    2f:8e:f5:b5:a3:03:5d:53:61:ab:9d:9b:1c:e1:07:
                    c1:dd:d2:21:18:cf:0d:01:a6:f5:a9:db:e1:c6:48:
                    b5:c7:f7:d9:e4:61:39:e7:00:93:e1:59:5e:8c:7b:
                    53:17:35:46:39:89:b9:08:76:de:97:10:63:dc:3a:
                    8e:86:36:cc:74:3e:eb:a5:c3:83:23:91:b5:e0:b1:
                    d3:cc:8d:00:22:d0:bf:de:ce:cf:22:ca:9b:bc:35:
                    a1:eb:f9:3d:0b:0f:e8:9a:18:a7:51:3c:53:f3:a7:
                    dc:16:54:cc:d4:44:ae:17:16:05:93:d2:92:e5:00:
                    c6:ba:5e:96:82:e6:b7:ca:b7:58:08:87:8f:df:88:
                    67:cc:b3:9c:d4:62:1a:82:49:7e:48:16:74:f0:b3:
                    fd:24:de:cc:55:83:7f:ec:8c:6d:9a:cf:03:d7:ba:
                    08:7d:e4:0f:61:c2:9b:cc:ac:19:b8:5f:7b:c0:cd:
                    a7:ab:59:a9:a4:22:36:3e:88:8f:e2:79:e8:57:df:
                    2f:cb:94:44:21:79:1a:ff:03:1f:9b:75:bb:59:4a:
                    47:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:53:A8:05:CF:6B:CE:E4:E0:FC:49:07:2D:9A:9C:8E:7E:A9:FD:EA
            X509v3 Authority Key Identifier:
                keyid:AD:D1:6C:77:7F:85:AC:33:28:34:97:F9:68:66:B9:5F:7C:5A:78:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9FA5/331F032416FA11F1A206C9013D3D8C67/rdFsd3-FrDMoNJf5aGa5X3xaeI8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdFsd3-FrDMoNJf5aGa5X3xaeI8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9FA5/331F032416FA11F1A206C9013D3D8C67/rdFsd3-FrDMoNJf5aGa5X3xaeI8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:44:60:b0:6c:7a:6e:4b:42:06:19:b0:b2:1f:fb:f4:9e:d6:
         a7:cc:1e:33:d8:de:20:77:87:65:5b:4f:94:e3:1e:d6:e9:cb:
         81:cd:ca:ed:2e:c2:e5:36:05:d1:e4:11:f0:a2:13:54:04:c4:
         04:29:53:03:02:f4:39:71:72:77:27:28:a0:60:64:63:32:e2:
         81:ac:95:a5:7f:74:21:42:b4:34:49:9b:41:ae:fd:cd:ae:ca:
         1e:b8:87:55:bf:d5:0d:cb:f7:f4:bc:cd:4b:42:1f:ca:69:a5:
         0d:07:ae:50:16:84:a1:90:43:38:66:15:96:ce:6b:90:07:b7:
         2d:d0:57:5a:15:f7:f4:a1:81:72:94:0f:66:fb:3c:df:3e:99:
         07:39:1f:10:6e:41:8f:fb:1d:17:56:25:09:4c:df:ce:d3:e1:
         62:ea:ec:00:2b:01:cb:2b:40:76:3c:63:0f:e2:dd:26:3f:07:
         9c:37:20:b3:d3:dc:f5:ce:09:8d:38:33:a9:ee:b0:92:d6:ff:
         fd:68:88:9f:33:2e:c8:16:6f:71:50:a1:24:d9:da:ce:21:f8:
         67:20:77:ca:79:bb:b3:da:03:e6:f2:be:72:a6:2a:d2:24:90:
         a2:c6:49:5e:63:26:4e:d6:20:6e:f1:fd:8c:9f:15:c6:e4:74:
         18:82:97:7b
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBUjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD
OUZBNTExMC8GA1UEBRMoQUREMTZDNzc3Rjg1QUMzMzI4MzQ5N0Y5Njg2NkI5NUY3
QzVBNzg4RjAeFw0yNjA3MjMxMDIxMTdaFw0yNjA3MzAxMDIxMTdaMBgxFjAUBgNV
BAMTDTZhNjFlYjFlLTkzNzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDAPrzBs96syhH/Nmi2p9//Q4xvtLGuDcAPuTAarZWoGaROoHclXg5yUMp5/y+O
9bWjA11TYaudmxzhB8Hd0iEYzw0BpvWp2+HGSLXH99nkYTnnAJPhWV6Me1MXNUY5
ibkIdt6XEGPcOo6GNsx0Puulw4MjkbXgsdPMjQAi0L/ezs8iypu8NaHr+T0LD+ia
GKdRPFPzp9wWVMzURK4XFgWT0pLlAMa6XpaC5rfKt1gIh4/fiGfMs5zUYhqCSX5I
FnTws/0k3sxVg3/sjG2azwPXugh95A9hwpvMrBm4X3vAzaerWamkIjY+iI/ieehX
3y/LlEQheRr/Ax+bdbtZSkdHAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUaFOoBc9r
zuTg/EkHLZqcjn6p/eowHwYDVR0jBBgwFoAUrdFsd3+FrDMoNJf5aGa5X3xaeI8w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5RkE1LzMzMUYwMzI0MTZG
QTExRjFBMjA2QzkwMTNEM0Q4QzY3L3JkRnNkMy1GckRNb05KZjVhR2E1WDN4YWVJ
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvcmRGc2QzLUZyRE1vTkpmNWFHYTVYM3hhZUk4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5
RkE1LzMzMUYwMzI0MTZGQTExRjFBMjA2QzkwMTNEM0Q4QzY3L3JkRnNkMy1GckRN
b05KZjVhR2E1WDN4YWVJOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAXRGCwbHpuS0IGGbCyH/v0ntanzB4z2N4gd4dlW0+U4x7W6cuBzcrtLsLlNgXR
5BHwohNUBMQEKVMDAvQ5cXJ3JyigYGRjMuKBrJWlf3QhQrQ0SZtBrv3NrsoeuIdV
v9UNy/f0vM1LQh/KaaUNB65QFoShkEM4ZhWWzmuQB7ct0FdaFff0oYFylA9m+zzf
PpkHOR8QbkGP+x0XViUJTN/O0+Fi6uwAKwHLK0B2PGMP4t0mPwecNyCz09z1zgmN
ODOp7rCS1v/9aIifMy7IFm9xUKEk2drOIfhnIHfKebuz2gPm8r5ypirSJJCixkle
YyZO1iBu8f2MnxXG5HQYgpd7
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:40:45 2026 by rpki-client