Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.mft
File:                     ZDqJ6ggKrIb4potVEI53sQahQco.mft (raw, json)
Hash identifier:          7I3idB9dQFAjCYdLSZoVpNt9vimZwD8nkixA6O0G06Y=
Subject key identifier:   32:2C:6C:5D:B8:6F:AC:52:C1:FB:79:FC:6B:57:A2:C8:31:84:8E:51
Authority key identifier: 64:3A:89:EA:08:0A:AC:86:F8:A6:8B:55:10:8E:77:B1:06:A1:41:CA
Certificate issuer:       /CN=A914237B/serialNumber=643A89EA080AAC86F8A68B55108E77B106A141CA
Certificate serial:       0274
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDqJ6ggKrIb4potVEI53sQahQco.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.mft
Manifest number:          0266
Signing time:             Tue 29 Sep 2026 02:44:50 +0000
Manifest this update:     Tue 29 Sep 2026 02:44:49 +0000
Manifest next update:     Tue 06 Oct 2026 02:44:49 +0000
Files and hashes:         1: ZDqJ6ggKrIb4potVEI53sQahQco.crl (hash: u1NvhINvqXdjbpTx0ZHybW7O89vrsmEy0FCHP+5IKMI=)
                          2: 133A934C693111F0A51E5767C4F9AE02.roa (hash: nSQXNi2ZjVcTfBYdL/JBUUsl+LZUNi12cbTDHTeZACg=)
                          3: 47620F428FBB11EF8DDB8746C4F9AE02.roa (hash: ttjS00c2KG8TfhOWjt/eFcp3eeq+USxoD6ESfymiud8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.crl
                          rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDqJ6ggKrIb4potVEI53sQahQco.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 06 Oct 2026 01:45:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 628 (0x274)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914237B, serialNumber=643A89EA080AAC86F8A68B55108E77B106A141CA
        Validity
            Not Before: Sep 29 02:44:49 2026 GMT
            Not After : Oct  6 02:44:49 2026 GMT
        Subject: CN=6abb2621-e132
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:25:6a:aa:99:0e:33:8c:74:ee:75:48:a5:34:
                    d2:8a:82:86:69:83:ce:7e:7f:09:4f:4e:ad:38:62:
                    e0:91:35:2d:88:8e:3c:ed:f2:ab:07:fd:f0:4d:05:
                    bc:c7:7d:ed:fc:36:be:e0:6d:c9:51:e0:e6:37:1a:
                    dc:af:81:72:a2:34:e8:cc:74:d6:9a:6e:a4:8e:d0:
                    f7:fd:0d:8d:39:3e:b1:8e:09:d7:7b:59:9d:9a:ba:
                    8f:0f:18:e0:53:96:06:6f:f4:74:b0:92:87:87:bd:
                    e4:0d:7e:23:89:42:72:32:0f:10:f9:0e:d0:47:75:
                    4e:c6:93:c3:3b:f5:60:bd:7b:81:cf:53:d9:f1:d2:
                    22:96:44:65:39:d4:8a:04:44:c5:f2:a3:41:5b:c1:
                    98:80:48:d4:d2:79:c6:16:04:39:b2:d2:a6:20:51:
                    76:a4:a6:82:16:a5:e4:f1:dd:a3:52:5c:1f:57:b0:
                    9f:b1:28:3a:91:3a:bf:49:1e:ef:67:f8:7f:20:c6:
                    c2:16:0c:26:f3:cd:9a:d5:ee:37:6e:04:09:e0:bd:
                    94:ff:84:a6:b5:6b:d7:1e:79:a1:e0:bc:19:40:14:
                    91:ba:78:e4:f9:cb:65:98:13:ec:97:1e:7c:c0:93:
                    27:05:82:ca:11:7b:e5:df:9c:fd:9b:31:46:cc:6b:
                    80:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:2C:6C:5D:B8:6F:AC:52:C1:FB:79:FC:6B:57:A2:C8:31:84:8E:51
            X509v3 Authority Key Identifier:
                keyid:64:3A:89:EA:08:0A:AC:86:F8:A6:8B:55:10:8E:77:B1:06:A1:41:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDqJ6ggKrIb4potVEI53sQahQco.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:c6:30:96:b9:fb:9d:68:96:08:0a:d3:3b:bb:62:46:0e:f8:
         28:07:b0:58:fb:65:9e:3b:fb:b5:56:7d:7b:7d:4a:0c:b4:26:
         1e:1b:75:19:71:88:dc:a7:29:a4:41:8e:6d:38:e1:b6:e6:c1:
         92:82:47:61:14:f0:9c:e8:14:16:88:70:50:16:47:2e:ea:5b:
         04:57:57:00:44:72:64:08:ab:35:49:6d:6d:8c:27:41:c5:5c:
         16:39:cc:06:d0:df:cb:27:ab:5d:7a:e0:dd:dc:d0:96:40:76:
         28:57:4b:c7:15:ec:65:cd:29:2f:0c:e8:60:68:50:3a:2c:a2:
         f4:f6:ae:21:41:9f:b1:ab:0f:e2:e9:5e:4f:02:39:a7:66:78:
         41:d4:15:63:67:75:12:f9:97:99:5d:83:d9:79:95:f0:a0:fd:
         f0:d4:d1:dc:3b:da:57:23:2d:07:82:7b:87:0e:63:1c:4e:b2:
         d2:b1:8f:1a:52:5b:7c:07:9d:4b:8e:db:ad:e3:55:bc:50:ad:
         6a:22:93:a1:10:50:f4:b8:92:5f:c4:da:95:58:56:86:25:75:
         7a:a5:7a:d9:06:5e:ce:08:97:fd:88:a2:1c:5f:11:96:10:eb:
         3a:73:93:f2:2f:c2:04:18:f5:3e:84:ca:17:6e:2d:1d:60:d8:
         f6:0b:c3:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 05:06:54 2026 by rpki-client