Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.mft
File:                     r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.mft (raw, json)
Hash identifier:          nZ9MHvpNqdUslZbQHw+0xluIuqHWxbq5TaYDHDfEJ/Y=
Subject key identifier:   60:F3:BF:08:CA:75:AC:23:05:3F:69:A7:DC:AC:09:EB:CE:67:07:B6
Authority key identifier: AF:8C:DC:E6:ED:42:77:EC:FB:0F:DA:88:2A:D4:74:92:DE:85:8F:B6
Certificate issuer:       /CN=A912F1CA/serialNumber=AF8CDCE6ED4277ECFB0FDA882AD47492DE858FB6
Certificate serial:       CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.mft
Manifest number:          BE
Signing time:             Fri 25 Sep 2026 07:07:34 +0000
Manifest this update:     Fri 25 Sep 2026 07:07:34 +0000
Manifest next update:     Fri 02 Oct 2026 07:07:34 +0000
Files and hashes:         1: r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.crl (hash: 9c9+amb02NCTq86okGwmctdlSKpTpLAmE+hGhEEbq9I=)
                          2: 2DC89280AB5E11F087B3A63DC4F9AE02.roa (hash: raMlWqDhjQC1kyKcLB1NtSmvdSNAXI5T6+IpnIwsYFY=)
                          3: 2E4F17E2AB5E11F087B3A63DC4F9AE02.roa (hash: 1OXipBNzxtYp5UB0W5xX43Nvc/1EDv2/MhW+bGOdQcs=)
                          4: 3DA866FACE8E11F0B0195B54C4F9AE02.roa (hash: yPnbO5JoFroPGcO/FNlQHH93ap4ee9CNWxH6ZNSq9ts=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.crl
                          rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 07:07:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 204 (0xcc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912F1CA, serialNumber=AF8CDCE6ED4277ECFB0FDA882AD47492DE858FB6
        Validity
            Not Before: Sep 25 07:07:34 2026 GMT
            Not After : Oct  2 07:07:34 2026 GMT
        Subject: CN=6ab61db6-4407
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:84:3e:1e:3c:14:69:dd:98:04:97:e9:ff:c8:
                    36:75:3d:06:29:4a:fb:4f:69:f1:9a:c7:2b:82:0b:
                    19:3a:05:96:84:e3:07:5a:d7:0e:94:37:cb:6a:00:
                    10:db:c4:71:9f:3d:34:6d:66:d5:27:e2:8b:5c:0d:
                    50:7b:83:a4:15:f9:15:85:c1:74:15:7e:00:c2:d8:
                    24:81:5f:8a:34:bc:20:f3:e5:84:a6:e9:0d:a7:c7:
                    32:75:1e:52:85:06:ab:ae:10:cd:5a:7c:cd:1f:9d:
                    4d:17:4a:13:d4:ec:11:13:4a:1f:07:82:76:65:61:
                    52:06:23:f2:e6:3e:e0:45:f3:e6:ef:bc:3d:9b:fa:
                    32:85:8b:15:7f:e9:c1:31:b2:b9:75:62:5d:22:c1:
                    c9:1c:20:0d:3a:95:e9:70:ae:43:54:82:a9:d5:d6:
                    16:0b:fa:7c:f0:60:59:b9:d6:32:ea:ad:6e:6c:42:
                    6f:af:d9:47:90:9a:4f:a5:39:15:b0:54:b8:20:1c:
                    23:77:f3:67:f0:e5:76:f2:6e:c6:00:42:bc:d0:97:
                    13:7e:21:3e:01:64:75:f1:ea:18:47:55:33:07:0f:
                    a0:7c:88:03:18:5f:b6:7b:8a:8e:e2:eb:7c:d8:72:
                    8e:39:aa:57:da:8f:a6:72:d6:57:5d:19:14:f5:6a:
                    9f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:F3:BF:08:CA:75:AC:23:05:3F:69:A7:DC:AC:09:EB:CE:67:07:B6
            X509v3 Authority Key Identifier:
                keyid:AF:8C:DC:E6:ED:42:77:EC:FB:0F:DA:88:2A:D4:74:92:DE:85:8F:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:f5:a0:e4:5c:fb:94:2e:31:ff:a8:03:07:53:97:85:9b:bf:
         92:3e:1d:1e:a8:20:eb:83:02:bb:78:e5:a7:c7:a7:58:51:21:
         6b:99:82:b6:24:9c:dd:21:e3:50:6d:5c:a0:3a:c3:3e:4f:27:
         47:63:ea:70:d8:fb:45:18:f4:ff:25:ad:66:b8:4e:4d:46:a5:
         92:19:2a:71:a5:23:c6:07:61:9f:c4:21:a9:47:c9:59:76:4c:
         4e:36:d2:92:ff:d2:0b:fd:e2:be:a4:06:a6:95:27:ce:cc:cf:
         f7:c0:5e:39:0c:ee:b9:18:d2:87:7a:57:61:5f:cb:d8:6b:da:
         77:91:64:e1:73:a2:d4:c0:57:79:6f:8d:f6:1a:c4:97:35:2d:
         2a:1d:2e:89:fa:66:40:5e:1a:ec:e9:b8:92:70:47:c7:8e:79:
         f8:11:15:4e:ef:48:67:68:92:2e:12:e4:59:ec:dc:b7:46:e4:
         66:c7:3e:bd:1b:f8:35:69:63:c7:b3:23:01:2d:e0:93:a5:28:
         25:94:b5:4c:b3:02:f6:6e:1e:ae:50:fa:bd:86:0d:4e:a1:1c:
         77:ff:b8:db:d1:a5:a4:5d:bb:d0:3c:e5:ca:fd:ad:b7:2f:c0:
         03:04:ff:81:b5:15:96:25:de:a9:40:ed:89:1d:0a:ac:69:1b:
         29:24:83:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 01:19:02 2026 by rpki-client