Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft
File:                     8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft (raw, json)
Hash identifier:          2dlOxvRMkT9hE7h+oQelpD+DyGbSyfAISO0jLOmO+rU=
Subject key identifier:   DF:70:28:A1:12:21:D3:D0:6E:2E:AA:6A:BA:17:4D:A4:81:38:75:AE
Authority key identifier: F1:99:8A:47:5E:92:DE:8A:6C:7D:40:94:55:6A:0D:A6:7D:5D:4D:0E
Certificate issuer:       /CN=A9118CA7/serialNumber=F1998A475E92DE8A6C7D4094556A0DA67D5D4D0E
Certificate serial:       0A5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZmKR16S3opsfUCUVWoNpn1dTQ4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft
Manifest number:          0A36
Signing time:             Tue 22 Sep 2026 19:34:11 +0000
Manifest this update:     Tue 22 Sep 2026 19:34:10 +0000
Manifest next update:     Tue 29 Sep 2026 19:34:10 +0000
Files and hashes:         1: 8ZmKR16S3opsfUCUVWoNpn1dTQ4.crl (hash: wS+62NJO9N3i3yRG9xtnAXLlbnJLYVIrvcyBy7ntuoM=)
                          2: FFFE56DEDEF111EF8EE4AE37C4F9AE02.roa (hash: H6zmNj7R5OIy7VYT3Pr6iuA/7Vm6RdyVIJ8LHoqjAPk=)
                          3: E76F99C60FDB11ED9718606AC4F9AE02.roa (hash: eFWl8WdXIj+kNofP4fkC+jZU3YrcYaXWPE7ujHlFJLY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.crl
                          rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZmKR16S3opsfUCUVWoNpn1dTQ4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 19:34:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2652 (0xa5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9118CA7, serialNumber=F1998A475E92DE8A6C7D4094556A0DA67D5D4D0E
        Validity
            Not Before: Sep 22 19:34:10 2026 GMT
            Not After : Sep 29 19:34:10 2026 GMT
        Subject: CN=6ab2d833-0799
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:7e:cd:8b:8b:41:c5:90:be:3e:c8:9d:a1:85:
                    3e:90:b1:ba:dd:c8:28:43:49:27:17:5f:dc:05:62:
                    1d:4c:9c:0d:71:79:d6:21:c3:cd:be:dd:3b:ff:df:
                    83:f3:64:28:5d:21:5c:2b:08:ac:92:6e:9c:f3:37:
                    2a:48:7b:42:0c:fb:0d:ab:c4:4e:c6:b9:c5:b4:f5:
                    45:6e:58:fd:9b:6f:d6:52:ca:99:c4:be:81:df:e4:
                    cd:8a:58:54:0f:40:85:f0:9a:04:41:83:da:22:ba:
                    12:2f:0b:79:a3:0e:58:7f:41:a5:58:c3:3c:ff:82:
                    1f:0b:0f:04:5e:a2:12:41:13:42:44:5a:2f:a0:30:
                    fb:79:72:ee:c8:6b:96:73:fd:06:f7:03:51:d2:22:
                    3e:a2:14:a5:92:f0:ed:77:c8:8a:6e:b5:04:98:e1:
                    69:0d:1d:dc:3c:76:9c:99:1b:77:ba:e7:fc:a7:9a:
                    62:2f:da:75:95:50:94:2c:8f:60:d5:d4:7e:78:39:
                    2c:40:66:4c:f9:08:46:75:d8:ec:d5:db:25:9a:7a:
                    2f:a4:e4:f5:e5:1d:59:2e:8b:29:f4:37:08:13:7b:
                    78:45:62:3d:bc:97:16:15:fc:49:03:56:35:f4:2d:
                    58:33:6c:d6:ec:19:90:89:6d:a5:74:3c:9f:a3:ac:
                    d1:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:70:28:A1:12:21:D3:D0:6E:2E:AA:6A:BA:17:4D:A4:81:38:75:AE
            X509v3 Authority Key Identifier:
                keyid:F1:99:8A:47:5E:92:DE:8A:6C:7D:40:94:55:6A:0D:A6:7D:5D:4D:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZmKR16S3opsfUCUVWoNpn1dTQ4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:e9:f9:e4:91:b8:f7:b2:10:13:cf:24:6f:2a:14:6e:c3:93:
         97:e5:64:63:79:8c:b9:f3:2f:ed:d2:9f:a0:13:78:17:37:a9:
         e9:01:28:24:99:fe:7c:4b:d9:d4:12:38:15:26:9f:21:94:8f:
         4c:5d:7b:35:e8:55:a9:60:ca:2a:de:a6:96:fa:76:2f:67:5d:
         36:ae:8f:c8:f7:08:07:b4:7d:da:e3:94:f7:04:6f:ee:21:9a:
         f5:96:a5:5b:51:96:b5:14:ab:ef:0a:b3:f6:60:0d:43:bf:80:
         c4:ad:b5:7d:8f:7b:7a:32:59:fa:72:41:51:16:e9:1e:1e:85:
         52:8c:a7:a6:3d:43:d3:7d:ba:d6:eb:43:50:9a:b3:37:73:21:
         6b:1d:f4:f5:25:be:73:66:1b:41:34:2e:c5:2d:44:fb:39:62:
         90:53:f6:7f:00:8f:9f:58:ff:60:e3:e9:22:4b:fd:d3:7e:c9:
         33:45:0a:56:1e:6c:17:b3:93:6d:ad:e7:87:db:4d:8b:89:73:
         91:a9:24:79:50:fe:e0:90:ef:1c:f1:93:dc:8f:9a:ac:3e:92:
         c3:40:c5:e1:c0:9e:ed:36:c8:dd:35:b0:b5:37:af:bc:7c:a2:
         c4:8a:4c:24:ab:37:e0:dd:95:af:b0:be:1f:d2:ba:80:90:01:
         72:5a:77:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 11:14:38 2026 by rpki-client