Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9149907/F714BDCACC2E11EC823BEE35C4F9AE02/ZmkYZX5BYz4X6shsJrGE26PoHi4.mft
File:                     ZmkYZX5BYz4X6shsJrGE26PoHi4.mft (raw, json)
Hash identifier:          EuOJs/xawz8gtlemQvbjxlE1dG0xbBChLUZdKHZs/0s=
Subject key identifier:   97:65:36:D9:52:F0:41:09:E1:70:A9:B6:27:A9:58:07:FE:57:6B:4B
Authority key identifier: 66:69:18:65:7E:41:63:3E:17:EA:C8:6C:26:B1:84:DB:A3:E8:1E:2E
Certificate issuer:       /CN=A9149907/serialNumber=666918657E41633E17EAC86C26B184DBA3E81E2E
Certificate serial:       0426
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZmkYZX5BYz4X6shsJrGE26PoHi4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149907/F714BDCACC2E11EC823BEE35C4F9AE02/ZmkYZX5BYz4X6shsJrGE26PoHi4.mft
Manifest number:          041A
Signing time:             Tue 22 Sep 2026 23:57:24 +0000
Manifest this update:     Tue 22 Sep 2026 23:57:23 +0000
Manifest next update:     Tue 29 Sep 2026 23:57:23 +0000
Files and hashes:         1: ZmkYZX5BYz4X6shsJrGE26PoHi4.crl (hash: MdnFXXvscnEqqyjiCNRFgXE5MhH3LqW1sXHgYa5xNzs=)
                          2: 6EE5FAE4544F11EFA572D230C4F9AE02.roa (hash: 06iHCsokSQ39HgOy2KJzWubeFrH/1VczqWMzLvyLOHM=)
                          3: 6E4711FE544F11EFA572D230C4F9AE02.roa (hash: PZXeG2z5Up6Bnr/fbTuUWxL/M8azNuvO/Wv2mvuOFVk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149907/F714BDCACC2E11EC823BEE35C4F9AE02/ZmkYZX5BYz4X6shsJrGE26PoHi4.crl
                          rsync://rpki.apnic.net/member_repository/A9149907/F714BDCACC2E11EC823BEE35C4F9AE02/ZmkYZX5BYz4X6shsJrGE26PoHi4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZmkYZX5BYz4X6shsJrGE26PoHi4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 23:57:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1062 (0x426)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149907, serialNumber=666918657E41633E17EAC86C26B184DBA3E81E2E
        Validity
            Not Before: Sep 22 23:57:23 2026 GMT
            Not After : Sep 29 23:57:23 2026 GMT
        Subject: CN=6ab315e4-56f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ab:99:58:ae:9d:13:e1:b7:38:04:04:62:d5:
                    69:3e:0e:46:fa:b9:fd:c7:e9:d5:68:af:31:11:48:
                    3e:ec:31:6f:7d:d7:8b:b7:47:be:35:b3:f1:a4:9f:
                    4a:eb:9b:cb:85:63:1b:c9:da:86:77:41:29:4e:a4:
                    b3:f9:90:a5:fe:77:d0:36:e1:30:50:2c:cd:78:52:
                    a3:ed:3b:67:d1:9a:d4:53:28:17:98:21:ae:31:af:
                    ec:9e:1e:41:90:7e:22:57:b3:3e:fe:be:a3:b1:46:
                    9e:f2:dd:24:d0:cd:ac:43:9f:09:a1:8a:ac:12:e3:
                    c1:d4:af:9d:48:32:6d:6d:21:57:e2:be:eb:31:5a:
                    58:77:80:27:6b:15:39:04:57:16:9b:de:b7:87:68:
                    0b:d7:b3:57:eb:b9:ba:99:d9:16:55:9d:a8:4c:c1:
                    4d:a4:de:71:0e:7e:bf:b5:9d:ab:bd:f6:d6:7a:23:
                    05:1a:e9:80:ff:0f:90:ec:fa:25:cb:02:fd:d5:02:
                    d1:60:48:cb:ca:46:b8:18:3a:a3:88:56:18:e1:de:
                    1f:66:92:89:2c:68:c1:de:d3:80:e9:80:5f:8f:d2:
                    12:49:c9:2f:cc:c6:85:b8:4e:29:14:35:aa:87:ee:
                    12:0d:c4:19:ea:19:e0:77:1c:4e:3c:e4:04:bd:ce:
                    63:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:65:36:D9:52:F0:41:09:E1:70:A9:B6:27:A9:58:07:FE:57:6B:4B
            X509v3 Authority Key Identifier:
                keyid:66:69:18:65:7E:41:63:3E:17:EA:C8:6C:26:B1:84:DB:A3:E8:1E:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149907/F714BDCACC2E11EC823BEE35C4F9AE02/ZmkYZX5BYz4X6shsJrGE26PoHi4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZmkYZX5BYz4X6shsJrGE26PoHi4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149907/F714BDCACC2E11EC823BEE35C4F9AE02/ZmkYZX5BYz4X6shsJrGE26PoHi4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:e5:bb:48:c7:79:9b:00:c4:dc:8d:89:1a:3f:66:92:89:20:
         cb:f9:9c:f5:a6:81:82:53:91:3e:9b:5a:31:8e:aa:86:01:82:
         ee:b8:84:f3:68:41:79:cd:49:eb:fa:97:1d:9f:24:1b:d2:06:
         8f:26:8b:0c:0b:d3:db:89:d5:6e:91:9e:60:de:4a:b7:2f:64:
         f9:dc:76:5f:b1:35:42:bf:62:df:64:ad:b1:4c:8e:a3:db:d1:
         8f:a4:ca:1a:db:b4:f2:96:b7:39:4f:87:5c:0f:10:48:b2:d9:
         8b:0b:57:50:4d:42:f3:c8:b2:98:7d:2f:ba:b9:57:d6:f2:c5:
         7e:07:75:40:46:7b:92:9f:39:e4:46:7b:d0:52:67:ed:b1:58:
         d9:4a:85:14:a0:93:d7:bb:ae:15:8c:7a:3d:aa:0f:dd:e7:a9:
         74:9f:aa:a4:e5:ac:5b:3c:59:6a:55:88:15:f1:95:d9:12:7e:
         eb:75:c6:60:d1:e8:af:93:bb:82:7d:59:87:63:69:fe:5d:03:
         ea:86:25:27:18:2b:fc:d6:5a:23:78:20:24:21:41:be:02:1b:
         98:93:d6:ba:dc:a2:5a:55:86:2a:df:da:99:5c:81:e5:13:d7:
         3b:8a:a9:88:72:50:a3:4d:48:ac:5c:24:2e:e1:74:82:69:cc:
         30:bc:a2:c6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBCYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDk5MDcxMTAvBgNVBAUTKDY2NjkxODY1N0U0MTYzM0UxN0VBQzg2QzI2QjE4NERC
QTNFODFFMkUwHhcNMjYwOTIyMjM1NzIzWhcNMjYwOTI5MjM1NzIzWjAYMRYwFAYD
VQQDEw02YWIzMTVlNC01NmY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyauZWK6dE+G3OAQEYtVpPg5G+rn9x+nVaK8xEUg+7DFvfdeLt0e+NbPxpJ9K
65vLhWMbydqGd0EpTqSz+ZCl/nfQNuEwUCzNeFKj7Ttn0ZrUUygXmCGuMa/snh5B
kH4iV7M+/r6jsUae8t0k0M2sQ58JoYqsEuPB1K+dSDJtbSFX4r7rMVpYd4AnaxU5
BFcWm963h2gL17NX67m6mdkWVZ2oTMFNpN5xDn6/tZ2rvfbWeiMFGumA/w+Q7Pol
ywL91QLRYEjLyka4GDqjiFYY4d4fZpKJLGjB3tOA6YBfj9ISSckvzMaFuE4pFDWq
h+4SDcQZ6hngdxxOPOQEvc5j2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJdlNtlS
8EEJ4XCptiepWAf+V2tLMB8GA1UdIwQYMBaAFGZpGGV+QWM+F+rIbCaxhNuj6B4u
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTkwNy9GNzE0QkRDQUND
MkUxMUVDODIzQkVFMzVDNEY5QUUwMi9abWtZWlg1Qll6NFg2c2hzSnJHRTI2UG9I
aTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pta1laWDVCWXo0WDZzaHNKckdFMjZQb0hpNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
OTkwNy9GNzE0QkRDQUNDMkUxMUVDODIzQkVFMzVDNEY5QUUwMi9abWtZWlg1Qll6
NFg2c2hzSnJHRTI2UG9IaTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAF+W7SMd5mwDE3I2JGj9mkokgy/mc9aaBglORPptaMY6qhgGC7riE82hBec1J
6/qXHZ8kG9IGjyaLDAvT24nVbpGeYN5Kty9k+dx2X7E1Qr9i32StsUyOo9vRj6TK
Gtu08pa3OU+HXA8QSLLZiwtXUE1C88iymH0vurlX1vLFfgd1QEZ7kp855EZ70FJn
7bFY2UqFFKCT17uuFYx6PaoP3eepdJ+qpOWsWzxZalWIFfGV2RJ+63XGYNHor5O7
gn1Zh2Np/l0D6oYlJxgr/NZaI3ggJCFBvgIbmJPWutyiWlWGKt/amVyB5RPXO4qp
iHJQo01IrFwkLuF0gmnMMLyixg==
-----END CERTIFICATE-----
Generated at Thu Sep 24 02:22:28 2026 by rpki-client