Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/zQysDn6E4-geSHYXTiwhQIUJQmk.mft
File:                     zQysDn6E4-geSHYXTiwhQIUJQmk.mft (raw, json)
Hash identifier:          oIs9zq9fTtlThxnU1WFGKY3hhYaiCSK/6IgsAyXcGGo=
Subject key identifier:   BC:71:21:1B:18:BF:D8:60:48:9B:5B:B6:0D:11:2B:C1:A4:BF:B3:84
Authority key identifier: CD:0C:AC:0E:7E:84:E3:E8:1E:48:76:17:4E:2C:21:40:85:09:42:69
Certificate issuer:       /CN=A914D249/serialNumber=CD0CAC0E7E84E3E81E4876174E2C214085094269
Certificate serial:       0408
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zQysDn6E4-geSHYXTiwhQIUJQmk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/zQysDn6E4-geSHYXTiwhQIUJQmk.mft
Manifest number:          03FD
Signing time:             Sat 03 Oct 2026 00:46:24 +0000
Manifest this update:     Sat 03 Oct 2026 00:46:23 +0000
Manifest next update:     Sat 10 Oct 2026 00:46:23 +0000
Files and hashes:         1: zQysDn6E4-geSHYXTiwhQIUJQmk.crl (hash: EsnpSio2EXb6acIhlXMa6OEeExX93iCIk2FGKsCRZhU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/zQysDn6E4-geSHYXTiwhQIUJQmk.crl
                          rsync://rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/zQysDn6E4-geSHYXTiwhQIUJQmk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zQysDn6E4-geSHYXTiwhQIUJQmk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 00:46:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1032 (0x408)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914D249, serialNumber=CD0CAC0E7E84E3E81E4876174E2C214085094269
        Validity
            Not Before: Oct  3 00:46:23 2026 GMT
            Not After : Oct 10 00:46:23 2026 GMT
        Subject: CN=6ac05060-db4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:61:3b:4c:ac:46:e9:8c:ec:bf:8a:35:44:54:
                    b0:db:2f:d4:3c:95:10:0f:0c:41:e5:2b:e3:fa:cc:
                    fb:59:c2:2f:08:45:36:6b:c4:91:ea:68:af:92:09:
                    05:9d:87:70:5a:13:f3:00:90:38:0a:38:ab:a3:47:
                    ee:47:5a:06:98:8a:09:8d:af:94:4c:6a:3a:77:1c:
                    de:4f:35:cc:0f:cd:ed:6c:96:b0:18:74:3b:f6:58:
                    17:9c:e8:de:e9:28:16:8d:37:c4:fb:2a:ea:f4:f3:
                    1f:97:db:b6:a4:db:1a:7e:2f:3d:9e:a4:86:8c:e5:
                    b7:61:fd:5e:16:12:b1:5e:07:c5:2b:36:d1:b4:ef:
                    40:97:5b:e0:72:01:17:10:80:29:5e:57:67:b9:9d:
                    10:dd:0e:66:73:f3:2f:c5:e3:32:76:ec:ec:0a:da:
                    82:e2:10:5e:b1:01:3d:7f:85:39:13:6a:10:e3:39:
                    12:68:80:38:f4:18:48:15:2e:a0:aa:a7:d8:bf:bf:
                    26:7b:8d:8c:d1:2e:54:4c:00:f2:ea:94:82:15:bd:
                    f9:ee:8d:13:1a:87:ec:a8:b8:8e:fe:95:d4:b6:52:
                    79:32:1d:dc:73:a9:3b:5b:06:6f:31:cf:9d:39:95:
                    c4:d1:4d:a8:6a:4e:e4:42:83:11:37:5e:56:f6:a9:
                    14:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:71:21:1B:18:BF:D8:60:48:9B:5B:B6:0D:11:2B:C1:A4:BF:B3:84
            X509v3 Authority Key Identifier:
                keyid:CD:0C:AC:0E:7E:84:E3:E8:1E:48:76:17:4E:2C:21:40:85:09:42:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/zQysDn6E4-geSHYXTiwhQIUJQmk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zQysDn6E4-geSHYXTiwhQIUJQmk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/zQysDn6E4-geSHYXTiwhQIUJQmk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:dd:6c:c3:49:75:cf:fc:07:02:0d:00:5f:df:91:4d:79:15:
         32:42:32:04:54:12:cb:d2:85:e4:f2:05:2f:f0:d9:cf:e1:07:
         02:ef:4f:29:04:72:6b:7e:06:de:fd:a5:1d:7c:3a:95:5a:e9:
         55:4c:27:d3:d8:be:c6:1f:d5:4e:14:0f:8b:57:38:28:e7:d2:
         eb:26:65:73:e3:87:9c:70:4e:de:99:af:2c:b2:0b:e2:85:eb:
         8b:bd:b7:33:63:8d:51:79:f3:03:d4:51:a0:d6:b1:f0:f6:3f:
         09:b0:86:0d:00:a9:59:9b:b7:02:14:21:a7:1c:4a:a9:1c:69:
         1e:22:4c:eb:95:0d:20:58:fa:8b:2e:3c:7a:ca:25:ec:2a:c5:
         62:e8:c7:1d:e3:6a:f3:03:48:6e:71:0e:be:f1:5d:bd:9c:b8:
         a9:a2:60:4e:a0:72:4a:81:06:1d:f2:1a:f4:aa:b4:f6:c4:54:
         a6:b3:fa:31:d9:75:c2:2b:e7:ab:61:ed:95:12:52:51:8d:77:
         22:25:14:29:eb:9d:88:ce:3b:d5:03:ad:ea:1a:01:b7:9d:d1:
         b7:f3:73:ed:6a:c7:0c:88:7a:90:2b:a9:52:3e:05:16:50:d8:
         86:3e:e1:28:9d:9c:d0:54:2a:39:30:02:cd:d3:ee:51:56:5b:
         4e:64:f7:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 00:54:53 2026 by rpki-client