Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91263DF/399EF60C829811EAB152002DC4F9AE02/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.mft
File:                     ZDuV9TnWaVtQZ5y_tXNE1EgenAw.mft (raw, json)
Hash identifier:          12eNLzv1dZaBghXr6t0QNYV75xGRyC90Q793wKkLkfs=
Subject key identifier:   B7:DA:78:14:CB:7F:74:E0:82:47:38:41:A9:AF:03:E2:BF:41:90:16
Authority key identifier: 64:3B:95:F5:39:D6:69:5B:50:67:9C:BF:B5:73:44:D4:48:1E:9C:0C
Certificate issuer:       /CN=A91263DF/serialNumber=643B95F539D6695B50679CBFB57344D4481E9C0C
Certificate serial:       0AC1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91263DF/399EF60C829811EAB152002DC4F9AE02/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.mft
Manifest number:          0AB8
Signing time:             Thu 24 Sep 2026 19:24:03 +0000
Manifest this update:     Thu 24 Sep 2026 19:24:02 +0000
Manifest next update:     Thu 01 Oct 2026 19:24:02 +0000
Files and hashes:         1: ZDuV9TnWaVtQZ5y_tXNE1EgenAw.crl (hash: bFfY+z+fsxjKD54LSI8FXOSaz5B94DLHvBbeZbJpORs=)
                          2: 0D3A9110829911EABD93A72DC4F9AE02.roa (hash: PxOmvDmrB3CEdW6KhDSMOQWoDMH93at+hpnwpbEaqbk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91263DF/399EF60C829811EAB152002DC4F9AE02/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.crl
                          rsync://rpki.apnic.net/member_repository/A91263DF/399EF60C829811EAB152002DC4F9AE02/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 19:24:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2753 (0xac1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91263DF, serialNumber=643B95F539D6695B50679CBFB57344D4481E9C0C
        Validity
            Not Before: Sep 24 19:24:02 2026 GMT
            Not After : Oct  1 19:24:02 2026 GMT
        Subject: CN=6ab578d3-32e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:19:c7:be:5c:55:8e:eb:98:39:19:c5:d8:b5:
                    ea:6b:44:63:cb:a9:58:77:14:23:9d:e9:e1:7f:77:
                    a7:a1:e2:64:8b:47:aa:ea:c2:8d:6a:16:9c:8d:6f:
                    9e:74:8d:f0:af:b1:ef:7a:3d:2b:59:90:80:90:aa:
                    ab:d1:1d:04:a9:4f:bc:6a:33:2d:9c:79:d1:05:c2:
                    f2:77:11:c9:02:b1:c9:d0:f3:95:c8:9a:19:70:e8:
                    19:37:ed:82:1f:66:3f:1f:58:78:cf:3e:e3:cd:8b:
                    20:1b:7f:51:a3:ad:22:89:ce:45:09:a0:4a:e3:86:
                    a7:c1:19:38:5f:6e:46:20:2f:e2:5d:90:c2:d5:d3:
                    d1:20:a6:8d:c7:08:2b:bb:5e:ce:40:c3:be:8b:31:
                    a0:5f:1b:84:cc:19:c8:bc:f2:93:f8:3f:bc:7e:84:
                    16:ea:cb:57:61:1f:c0:7e:54:a1:a4:a1:90:06:a4:
                    f1:01:80:c7:c8:f8:6c:af:8e:9d:bf:67:fd:37:b5:
                    87:97:7f:18:69:67:0f:0b:fa:3a:88:d6:d6:01:b2:
                    7d:ed:7f:db:fb:b9:af:ac:ed:88:6a:af:6f:a4:58:
                    dd:7c:19:e5:58:55:ee:d7:3c:cd:01:5c:b7:10:c1:
                    2a:2f:4a:52:6e:ef:32:de:67:b6:ef:1c:99:14:83:
                    02:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:DA:78:14:CB:7F:74:E0:82:47:38:41:A9:AF:03:E2:BF:41:90:16
            X509v3 Authority Key Identifier:
                keyid:64:3B:95:F5:39:D6:69:5B:50:67:9C:BF:B5:73:44:D4:48:1E:9C:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91263DF/399EF60C829811EAB152002DC4F9AE02/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91263DF/399EF60C829811EAB152002DC4F9AE02/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:08:a8:3a:1d:47:e4:af:0b:82:46:c4:db:63:91:6a:60:59:
         77:43:5f:96:02:8a:f0:be:d2:99:ac:87:31:c2:c6:80:41:dc:
         c6:88:c3:13:59:0f:c0:4f:8e:85:c3:74:8d:8e:9c:ae:c1:73:
         e0:a6:fd:f2:86:c1:cc:fb:2a:3b:fd:89:c7:51:52:41:69:a6:
         3c:37:5d:da:36:2d:f3:de:e1:72:9d:9f:4b:cc:93:8a:31:bf:
         71:aa:c4:1a:22:c6:6f:29:70:42:31:ba:ef:4e:05:57:93:04:
         e1:16:fe:9f:1b:47:16:4a:1c:37:5d:90:cc:c8:28:f9:6e:72:
         5e:7f:5a:3f:6a:bf:aa:c3:c3:42:d5:66:d7:4e:c3:80:f5:b8:
         9d:67:4b:1d:fe:20:59:15:37:8c:9a:b0:7a:7e:18:81:18:6e:
         52:37:a9:f3:05:05:7f:25:51:aa:99:1a:71:a0:70:fa:74:2f:
         d0:a6:2f:23:f2:f8:d1:dc:bd:94:9c:9c:70:3f:a6:05:77:ad:
         68:63:42:47:27:50:d2:6e:8f:60:5e:6b:70:e8:ef:00:e6:ea:
         b1:20:ff:88:3b:b1:93:35:77:06:e5:d9:0d:d0:f3:3d:3c:67:
         77:9f:20:1f:2b:7f:37:5a:fc:75:38:ac:83:5a:58:b3:4e:30:
         e4:1f:1a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 08:50:06 2026 by rpki-client