Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913CE18/B3752AB2C68211F0B76E1746C4F9AE02/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.mft
File:                     z5o_MWSDoqeUQR1ZFG-fxWQJGZc.mft (raw, json)
Hash identifier:          vHqWNRooxmo80rGStb/i57avGhaoIhk+k6TfQBRJFzo=
Subject key identifier:   93:B2:C9:AD:17:BC:54:67:7E:7B:29:CB:D2:D4:08:6C:F1:C2:7D:E7
Authority key identifier: CF:9A:3F:31:64:83:A2:A7:94:41:1D:59:14:6F:9F:C5:64:09:19:97
Certificate issuer:       /CN=A913CE18/serialNumber=CF9A3F316483A2A794411D59146F9FC564091997
Certificate serial:       A1
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913CE18/B3752AB2C68211F0B76E1746C4F9AE02/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.mft
Manifest number:          9F
Signing time:             Sun 27 Sep 2026 07:48:25 +0000
Manifest this update:     Sun 27 Sep 2026 07:48:24 +0000
Manifest next update:     Sun 04 Oct 2026 07:48:24 +0000
Files and hashes:         1: z5o_MWSDoqeUQR1ZFG-fxWQJGZc.crl (hash: Ujfto+Y469XhOc5iRlO3O5IPQYkrpPWOFlM1344gnzg=)
                          2: 66FA3E10C68311F0A13F9748C4F9AE02.roa (hash: qhmDYrXSka0BnnAzbzb+vh6r8WiWcCMdpJjXHDEOqUE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913CE18/B3752AB2C68211F0B76E1746C4F9AE02/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.crl
                          rsync://rpki.apnic.net/member_repository/A913CE18/B3752AB2C68211F0B76E1746C4F9AE02/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 161 (0xa1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913CE18, serialNumber=CF9A3F316483A2A794411D59146F9FC564091997
        Validity
            Not Before: Sep 27 07:48:24 2026 GMT
            Not After : Oct  4 07:48:24 2026 GMT
        Subject: CN=6ab8ca49-4d37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:49:ab:e9:e7:6e:e9:f6:5d:5b:47:55:dc:66:
                    5d:7c:53:c6:24:c5:aa:68:68:a1:66:04:54:02:43:
                    68:d9:f0:fb:3b:e7:e3:d4:49:ff:c0:00:cf:e0:8b:
                    9f:a5:55:fc:e4:dd:ee:4b:18:9f:b1:51:e8:5e:44:
                    43:77:89:e2:6b:25:21:7e:23:da:9f:9c:59:cb:c7:
                    ae:33:fe:50:b3:d9:92:de:b9:5b:f3:28:0d:da:99:
                    7f:59:04:cd:c9:67:5d:e6:3c:e6:30:3c:0f:f6:31:
                    87:ad:7c:4a:43:e8:79:8a:4f:df:4a:31:61:56:76:
                    5e:dd:73:9b:15:72:7e:79:2a:41:64:64:76:22:58:
                    c5:16:29:01:44:b9:de:9d:de:48:34:0d:79:24:0e:
                    e9:87:5a:50:6c:27:39:47:ab:e0:95:38:7c:e7:d0:
                    9d:c9:97:f1:5f:d0:fe:59:8e:5c:1f:ee:d5:84:50:
                    f7:9d:ad:91:be:fe:ad:62:da:ab:f7:1c:52:16:72:
                    bd:43:99:b2:46:d1:40:5e:50:9f:d5:2f:55:e2:6d:
                    31:36:4c:83:8a:3f:11:76:23:d6:53:d6:8e:0e:ba:
                    82:55:ae:42:bf:d6:14:20:41:f4:8c:47:fd:05:aa:
                    65:dd:49:70:b9:16:7f:8b:61:ed:e9:c6:d3:7a:6a:
                    c8:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:B2:C9:AD:17:BC:54:67:7E:7B:29:CB:D2:D4:08:6C:F1:C2:7D:E7
            X509v3 Authority Key Identifier:
                keyid:CF:9A:3F:31:64:83:A2:A7:94:41:1D:59:14:6F:9F:C5:64:09:19:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913CE18/B3752AB2C68211F0B76E1746C4F9AE02/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CE18/B3752AB2C68211F0B76E1746C4F9AE02/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:9c:fc:3f:9d:a6:5f:99:43:a1:5a:cd:c5:a7:7f:d4:d9:50:
         4d:52:ac:56:22:03:30:9e:64:cf:22:29:3d:74:7b:47:ae:c3:
         11:98:b2:12:30:f9:f6:2b:35:57:5f:80:7c:27:e1:e9:68:0f:
         ac:e4:03:0b:01:4e:57:bf:d0:68:4b:45:94:48:ae:5d:b7:f0:
         bf:37:3a:09:e3:4b:af:86:5a:93:1d:4c:e1:16:d1:c9:b4:96:
         fd:d8:12:2c:71:6e:8c:69:a5:4b:22:05:f6:74:ce:15:b6:6a:
         60:1c:11:e2:b4:04:c5:c5:40:5e:48:70:88:a0:74:ab:58:c2:
         98:15:bf:70:cc:8e:2a:54:16:3e:9b:ee:2b:88:00:95:75:3b:
         b6:0a:dc:c0:94:16:17:c8:68:20:b4:83:66:0f:1e:f1:11:93:
         b3:8f:2b:a4:ec:fa:57:9c:a3:84:2f:70:fb:07:4e:61:5f:0d:
         b7:c3:30:13:dd:ab:74:a8:71:81:eb:81:85:f5:f7:49:61:aa:
         30:e2:50:50:71:02:6e:6b:20:c4:02:64:94:2e:a6:f8:ed:fa:
         ee:d3:98:13:d4:7f:5a:1c:c4:d0:34:17:78:9a:2e:6e:aa:83:
         15:21:1a:55:cd:63:e9:6f:f6:0c:7e:c8:30:35:a0:77:53:d0:
         9f:99:86:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 13:08:59 2026 by rpki-client