Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DD0A4/95D5E392AA7311EAA10ACC84C4F9AE02/ficJop5GIOVCf3NfN8A0c-NrWXo.mft
File:                     ficJop5GIOVCf3NfN8A0c-NrWXo.mft (raw, json)
Hash identifier:          yL7xpqBZ0b3tqMrLQubg63Niu+rbjkRALsSIzBePfSg=
Subject key identifier:   1B:11:36:08:89:5C:DC:1D:AF:D5:95:EE:56:A1:B6:F7:61:18:95:D0
Authority key identifier: 7E:27:09:A2:9E:46:20:E5:42:7F:73:5F:37:C0:34:73:E3:6B:59:7A
Certificate issuer:       /CN=A91DD0A4/serialNumber=7E2709A29E4620E5427F735F37C03473E36B597A
Certificate serial:       0A0B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ficJop5GIOVCf3NfN8A0c-NrWXo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DD0A4/95D5E392AA7311EAA10ACC84C4F9AE02/ficJop5GIOVCf3NfN8A0c-NrWXo.mft
Manifest number:          09FF
Signing time:             Tue 22 Sep 2026 19:38:19 +0000
Manifest this update:     Tue 22 Sep 2026 19:38:18 +0000
Manifest next update:     Tue 29 Sep 2026 19:38:18 +0000
Files and hashes:         1: ficJop5GIOVCf3NfN8A0c-NrWXo.crl (hash: zz/gMC98SjcKpFelI9JmEXUiccFI3VQVOBdWYf7vsUA=)
                          2: C8CCE2CCAA7411EA9DF2E685C4F9AE02.roa (hash: MxcRCOMDVxWYLuz/1DuRHNURRxOV2Q55QL6ZvvYDCSE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DD0A4/95D5E392AA7311EAA10ACC84C4F9AE02/ficJop5GIOVCf3NfN8A0c-NrWXo.crl
                          rsync://rpki.apnic.net/member_repository/A91DD0A4/95D5E392AA7311EAA10ACC84C4F9AE02/ficJop5GIOVCf3NfN8A0c-NrWXo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ficJop5GIOVCf3NfN8A0c-NrWXo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 19:38:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2571 (0xa0b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DD0A4, serialNumber=7E2709A29E4620E5427F735F37C03473E36B597A
        Validity
            Not Before: Sep 22 19:38:18 2026 GMT
            Not After : Sep 29 19:38:18 2026 GMT
        Subject: CN=6ab2d92b-77fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b1:7d:e2:a4:de:58:cb:07:40:11:2d:50:c5:
                    df:eb:d0:03:a5:9d:70:0b:21:10:a0:35:d1:8a:59:
                    0a:5c:78:0d:8f:a2:ff:bd:09:a1:a2:dc:d0:bc:46:
                    d5:dc:78:40:8b:c6:2b:79:22:62:83:79:6a:a2:77:
                    58:58:2a:ba:07:ea:7e:39:29:81:e2:5f:b2:dc:4b:
                    51:ec:b2:86:3e:60:ff:05:86:d0:f2:ba:17:58:f4:
                    72:f5:ce:7f:51:fa:42:72:26:0a:d0:8a:a5:87:6f:
                    3c:d5:cb:b3:b2:b7:3c:75:42:40:aa:05:3f:6c:0d:
                    bd:18:da:34:e8:14:8e:42:15:4d:e6:1d:7b:4e:72:
                    0e:3e:aa:7e:b5:95:fe:34:ab:46:69:47:dc:31:43:
                    3d:a0:25:38:c0:67:d2:ce:69:2a:ff:d1:1d:1c:66:
                    70:9e:82:b0:84:51:44:32:f4:81:72:47:9d:f5:d1:
                    2c:75:f4:bf:3e:09:83:a2:ed:72:3d:c1:14:8a:2f:
                    ef:6e:05:bb:c9:51:65:ca:88:82:93:31:a2:0a:be:
                    ab:6f:8b:0f:21:98:11:86:b7:f8:73:b3:2b:3f:60:
                    d3:2b:1f:d6:16:3a:71:13:b9:7d:1a:39:13:4c:1c:
                    9c:77:66:3f:3a:28:53:05:17:71:b6:30:55:03:4b:
                    d8:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:11:36:08:89:5C:DC:1D:AF:D5:95:EE:56:A1:B6:F7:61:18:95:D0
            X509v3 Authority Key Identifier:
                keyid:7E:27:09:A2:9E:46:20:E5:42:7F:73:5F:37:C0:34:73:E3:6B:59:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DD0A4/95D5E392AA7311EAA10ACC84C4F9AE02/ficJop5GIOVCf3NfN8A0c-NrWXo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ficJop5GIOVCf3NfN8A0c-NrWXo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD0A4/95D5E392AA7311EAA10ACC84C4F9AE02/ficJop5GIOVCf3NfN8A0c-NrWXo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:e7:ce:37:e6:fb:6c:8f:16:0b:78:04:b6:66:2f:c0:17:d8:
         57:07:87:0d:31:d2:e9:71:f9:42:47:75:e0:aa:ea:f0:38:51:
         83:36:53:fa:fa:8d:b6:2b:73:31:6d:3b:e8:ef:93:18:87:82:
         54:2d:d1:8a:bd:2f:39:84:27:3b:3f:61:62:65:4a:3a:64:e8:
         6c:10:b2:3a:d0:33:67:b3:24:38:4b:cb:28:3b:49:af:43:f3:
         e9:a8:a2:4a:3e:06:a4:1f:bb:a7:e8:a0:08:9a:a3:3f:30:69:
         59:48:6b:a3:e5:d6:24:c7:d4:23:b3:f5:86:6c:29:ea:1b:0b:
         d3:c8:27:e2:e9:74:34:66:01:8f:2c:c6:f5:d3:2d:aa:ff:b3:
         9f:37:7f:02:09:a4:40:c9:4c:fd:b9:ae:33:e5:29:b4:44:55:
         a8:62:3e:32:c0:e4:3e:13:86:79:11:de:d5:60:a4:cd:1d:6a:
         ce:5e:c6:a3:f2:eb:b2:67:0e:d0:27:5c:8d:bf:ac:bb:a1:fe:
         1a:da:47:0a:57:43:15:7a:b5:21:da:25:8c:af:4c:eb:6d:f6:
         bb:12:ca:e2:28:ba:e8:33:ff:69:7d:df:ea:7a:82:47:7c:a2:
         31:62:73:f3:5b:37:77:c4:d3:d8:93:72:69:b1:ea:bf:27:57:
         e1:7e:ac:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:56:06 2026 by rpki-client