Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.mft
File:                     FqgerO8cn8MyDElats0MZ2Oqg2M.mft (raw, json)
Hash identifier:          +Zqi9ispG7uzTuHfWQV8fZ1D9I4wxHNEy8HqNaEHgdk=
Subject key identifier:   EA:FF:94:38:7C:EB:10:AD:A4:70:95:16:AB:F5:38:0D:67:51:28:46
Authority key identifier: 16:A8:1E:AC:EF:1C:9F:C3:32:0C:49:5A:B6:CD:0C:67:63:AA:83:63
Certificate issuer:       /CN=A91DFC92/serialNumber=16A81EACEF1C9FC3320C495AB6CD0C6763AA8363
Certificate serial:       0249
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FqgerO8cn8MyDElats0MZ2Oqg2M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.mft
Manifest number:          0244
Signing time:             Wed 23 Sep 2026 02:18:08 +0000
Manifest this update:     Wed 23 Sep 2026 02:18:08 +0000
Manifest next update:     Wed 30 Sep 2026 02:18:08 +0000
Files and hashes:         1: FqgerO8cn8MyDElats0MZ2Oqg2M.crl (hash: 4CJN1g6ilVihia0g3hYM8ZW/k0D2sDBoLX1bYXs8Wu8=)
                          2: 0AE7E0B6421711EE97070469C4F9AE02.roa (hash: ejoWMDUgt82/44WWAbicbO1p8c1RwlyGtdpOrVgBghs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.crl
                          rsync://rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FqgerO8cn8MyDElats0MZ2Oqg2M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 02:18:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 585 (0x249)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DFC92, serialNumber=16A81EACEF1C9FC3320C495AB6CD0C6763AA8363
        Validity
            Not Before: Sep 23 02:18:08 2026 GMT
            Not After : Sep 30 02:18:08 2026 GMT
        Subject: CN=6ab336e0-6dae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:b1:3e:19:9a:c7:2a:51:4f:3a:17:73:a5:f7:
                    73:2e:8b:21:c4:87:9a:cd:e7:3e:95:31:ad:ed:40:
                    00:18:94:c0:d2:a9:f8:de:76:dc:37:8d:24:21:10:
                    a8:64:bf:e2:f5:25:58:41:d1:bb:8e:16:7d:ae:b0:
                    00:74:2d:9e:8a:18:d5:b8:79:90:69:0b:ef:a8:c3:
                    f0:82:58:9c:1d:3f:9f:d0:fe:62:fe:2a:c6:f8:b9:
                    3e:9c:07:cf:47:77:19:7d:1f:e1:50:68:45:5d:2b:
                    cb:d7:ca:76:a3:e8:f3:66:5f:53:36:c4:6d:0d:5f:
                    1a:a5:54:1f:bb:09:9d:d3:72:dc:7c:a2:69:b0:97:
                    96:fa:be:fc:91:be:67:2b:0c:0b:29:6d:36:2b:e0:
                    d3:04:23:76:0f:94:e6:ea:bc:6d:bd:b4:09:fa:55:
                    13:fe:48:72:47:00:89:52:b9:1b:0b:dc:3f:05:91:
                    ff:df:01:9c:d7:93:88:40:50:e2:cd:77:8c:81:76:
                    e8:74:1b:2a:24:b9:d9:0c:ba:0c:37:25:e9:0d:c3:
                    55:d0:d4:95:1e:50:f4:e6:1e:3d:d7:f0:77:9c:e7:
                    ac:63:16:d3:27:69:01:d5:ce:29:ce:a5:25:c3:aa:
                    ac:93:3e:f9:e7:9b:69:4a:58:77:2e:24:11:bc:36:
                    cb:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:FF:94:38:7C:EB:10:AD:A4:70:95:16:AB:F5:38:0D:67:51:28:46
            X509v3 Authority Key Identifier:
                keyid:16:A8:1E:AC:EF:1C:9F:C3:32:0C:49:5A:B6:CD:0C:67:63:AA:83:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FqgerO8cn8MyDElats0MZ2Oqg2M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:2b:1a:c3:ca:e8:0b:cf:98:56:59:67:1b:5b:33:79:2c:36:
         ba:03:70:6e:79:3e:e4:2e:72:dc:64:bf:17:34:a2:0d:a6:3b:
         b1:5c:48:6e:1e:af:59:09:d3:91:08:ac:b1:6e:24:4d:7d:80:
         45:0d:f7:be:54:e7:0c:94:5b:2b:fb:f0:ba:65:5a:82:7b:60:
         cf:db:5f:16:1e:8e:54:b1:a5:1d:bb:ef:8a:1c:d2:e7:50:70:
         94:c3:a0:1d:d7:0a:85:00:96:03:12:65:71:f2:7c:42:5a:51:
         f9:4e:5f:ea:ad:a5:da:61:ef:02:d8:29:c2:d9:fe:09:ba:18:
         94:d2:a1:2c:39:8a:eb:d6:2a:8b:ee:99:54:d2:76:cf:a9:f5:
         dc:e1:4b:42:80:64:c9:88:fa:ef:85:9d:84:81:a9:3c:42:b7:
         da:f2:bc:06:11:05:74:94:f6:ae:99:8a:9c:25:2b:ca:a4:8d:
         e2:cf:29:1c:02:54:84:ea:2d:6e:98:fb:12:b8:21:84:bb:17:
         1d:fc:57:1d:3d:92:32:a3:c5:a2:8f:f9:1e:41:9f:5a:e7:6c:
         5b:03:17:82:23:b5:41:db:9a:a1:49:3c:cd:27:69:3f:14:73:
         6b:b9:82:48:8f:36:0f:bb:83:17:fc:ba:21:46:25:16:a8:83:
         01:59:35:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 07:06:28 2026 by rpki-client