Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.mft
File:                     ZbetlnWzgJ7OBK8wHC63A3_wK7s.mft (raw, json)
Hash identifier:          tYZj2GbaUehXtyJsMKFubelG701N/6Fcbg0GxQemqX0=
Subject key identifier:   1E:73:4E:38:FE:BB:4A:71:97:91:21:84:48:84:8C:9E:FC:65:50:0E
Authority key identifier: 65:B7:AD:96:75:B3:80:9E:CE:04:AF:30:1C:2E:B7:03:7F:F0:2B:BB
Certificate issuer:       /CN=A9157A68/serialNumber=65B7AD9675B3809ECE04AF301C2EB7037FF02BBB
Certificate serial:       0925
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZbetlnWzgJ7OBK8wHC63A3_wK7s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.mft
Manifest number:          0911
Signing time:             Sun 04 Oct 2026 20:19:08 +0000
Manifest this update:     Sun 04 Oct 2026 20:19:08 +0000
Manifest next update:     Sun 11 Oct 2026 20:19:08 +0000
Files and hashes:         1: ZbetlnWzgJ7OBK8wHC63A3_wK7s.crl (hash: qYG5djfGNNHOjBDN56XyMS4IPLJsxXzeU6TnRWp381Y=)
                          2: CCB2690EED0B11F0949792B43C6F56BC.roa (hash: ZB/ULJRoBGb/gcATfxowXu3Mcvz58isc65+AiNaWIZA=)
                          3: 294CEBA68FDD11EDBC45E84DC4F9AE02.roa (hash: hJLpP/cI9jDZ/8DhHypoNSXnMVx/3+PYyqeD/Uo9Ujw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.crl
                          rsync://rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZbetlnWzgJ7OBK8wHC63A3_wK7s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 20:19:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2341 (0x925)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9157A68, serialNumber=65B7AD9675B3809ECE04AF301C2EB7037FF02BBB
        Validity
            Not Before: Oct  4 20:19:08 2026 GMT
            Not After : Oct 11 20:19:08 2026 GMT
        Subject: CN=6ac2b4bc-9d7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c2:b8:f9:ac:d3:22:53:4b:3c:3a:11:88:42:
                    34:70:b5:b1:d0:90:f6:ab:4d:77:97:92:d9:6e:d5:
                    6c:0e:e5:cb:35:55:41:ad:89:ba:e7:5f:a8:09:ef:
                    e9:de:6d:78:c0:3f:9f:9b:b6:92:f1:40:9d:ea:09:
                    12:fa:af:a6:74:05:c6:80:48:9f:71:ef:c3:32:24:
                    66:5a:14:71:96:ed:44:78:68:ce:32:a8:3f:9a:01:
                    6c:66:ee:1f:77:c5:04:a9:e4:c0:a2:4d:69:d8:7c:
                    b3:90:0d:4d:f6:dd:c6:e3:81:4c:c9:96:f4:a1:23:
                    f5:57:93:21:99:45:f7:e6:55:93:67:34:d6:16:18:
                    89:19:79:92:3b:16:fe:36:ac:fc:d5:8f:52:74:63:
                    82:bc:1b:91:d8:0d:bd:1e:9b:47:ba:4f:77:04:8b:
                    1a:f4:51:47:44:f5:8b:d0:79:31:a7:84:b7:f1:f3:
                    7a:4c:f8:47:81:7c:22:11:0f:56:7c:09:b4:b2:f3:
                    04:2f:99:91:70:93:31:62:8b:e1:36:1f:bb:26:23:
                    c0:17:74:5a:36:7e:fb:28:07:81:ff:d1:7d:3e:9d:
                    38:11:6f:52:f6:dc:5e:2a:0f:8f:e5:b0:24:0b:6c:
                    f4:8c:ac:0a:fb:7b:ca:eb:ba:dc:9e:d1:2e:28:eb:
                    9b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:73:4E:38:FE:BB:4A:71:97:91:21:84:48:84:8C:9E:FC:65:50:0E
            X509v3 Authority Key Identifier:
                keyid:65:B7:AD:96:75:B3:80:9E:CE:04:AF:30:1C:2E:B7:03:7F:F0:2B:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZbetlnWzgJ7OBK8wHC63A3_wK7s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:fe:ef:e2:0e:39:b3:2f:de:c8:2b:fb:55:22:6b:f8:99:ee:
         dd:9a:04:c2:41:ac:c0:ef:25:c2:c7:33:96:05:3f:12:e7:27:
         73:d8:db:32:1b:29:46:b2:f3:ba:e6:06:d4:f2:12:50:bf:62:
         8e:73:87:f9:59:0d:84:38:01:c6:f0:ac:31:c2:ae:f9:72:2d:
         38:87:8b:2e:11:9f:64:e3:51:63:b1:5b:5f:c0:1d:19:df:02:
         d1:ed:87:2a:28:75:c6:02:36:f3:3f:7d:3f:fa:4f:eb:88:b4:
         88:6d:eb:17:b4:9e:8d:28:5f:cb:d0:d8:35:26:58:f3:ba:73:
         02:c1:d8:b8:95:97:37:b7:7f:02:9f:09:59:56:59:11:ee:9c:
         c7:8b:a7:5f:ed:bf:9f:a2:55:17:29:89:e5:12:b5:8e:f7:44:
         6a:57:d2:de:bf:4f:e0:53:b1:84:c9:35:24:54:6d:b6:ee:55:
         6d:bf:02:01:94:07:26:e0:4e:41:f2:1c:fb:b9:e6:4e:c9:7f:
         97:24:04:0a:70:de:a9:bd:6a:71:e1:9f:bb:b4:bc:79:1f:03:
         36:33:aa:20:8b:c8:f0:53:4a:03:92:bf:d2:1e:f0:28:ac:04:
         05:b1:8a:20:75:da:77:11:78:e2:52:3e:78:2c:24:4a:d0:47:
         34:77:81:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 01:32:28 2026 by rpki-client