Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.mft
File:                     ztCtuZ-AP0QfUNzLg87nIHbcMog.mft (raw, json)
Hash identifier:          A90c92sUWJLI81HkefKwnhnZqpFt7wq1Fcnlvl6wKLo=
Subject key identifier:   52:3B:87:23:15:85:AF:3B:73:32:AE:3F:0E:25:0A:8E:C7:A2:21:A0
Authority key identifier: CE:D0:AD:B9:9F:80:3F:44:1F:50:DC:CB:83:CE:E7:20:76:DC:32:88
Certificate issuer:       /CN=A9158D5B/serialNumber=CED0ADB99F803F441F50DCCB83CEE72076DC3288
Certificate serial:       01A4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ztCtuZ-AP0QfUNzLg87nIHbcMog.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.mft
Manifest number:          019E
Signing time:             Wed 23 Sep 2026 04:09:23 +0000
Manifest this update:     Wed 23 Sep 2026 04:09:22 +0000
Manifest next update:     Wed 30 Sep 2026 04:09:22 +0000
Files and hashes:         1: ztCtuZ-AP0QfUNzLg87nIHbcMog.crl (hash: l3xuCUMrkU3W53m8T3x3pq6qRhprrHYqWVubU9G8UYs=)
                          2: 1B2031C645B911EFB15BD970C4F9AE02.roa (hash: dXWvzmI36/WnRSGkqNG90+TZgLmjYERv4giBlG6EeOs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.crl
                          rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ztCtuZ-AP0QfUNzLg87nIHbcMog.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 420 (0x1a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9158D5B, serialNumber=CED0ADB99F803F441F50DCCB83CEE72076DC3288
        Validity
            Not Before: Sep 23 04:09:22 2026 GMT
            Not After : Sep 30 04:09:22 2026 GMT
        Subject: CN=6ab350f3-e101
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:aa:17:60:1c:4e:7b:52:b6:fe:aa:e5:be:4b:
                    f1:a5:fe:06:f1:00:66:2f:10:da:89:88:12:5c:49:
                    9a:dc:80:ad:8c:aa:3a:a3:d8:65:78:d5:1f:24:ce:
                    a2:b9:12:d4:42:f8:f8:19:14:22:ca:71:ff:4c:48:
                    07:27:83:e1:22:87:20:7d:bf:4b:35:9d:9a:6c:db:
                    72:e2:8b:e6:5d:55:33:9e:fd:5b:1d:b8:8a:a1:7c:
                    c7:97:8a:55:e1:52:59:62:1e:ce:8e:7e:68:cb:d8:
                    12:03:94:ea:22:eb:79:e2:f7:57:41:7a:18:fc:1a:
                    d7:87:80:76:55:c5:1a:aa:d8:48:f0:9c:dc:ab:7d:
                    45:93:83:a3:9a:41:1a:01:aa:de:f1:a7:2d:53:3a:
                    f6:08:fe:41:8a:17:89:98:c7:90:44:9f:6d:1a:ee:
                    e1:f3:ba:68:46:ca:9e:f6:78:fc:ad:c1:a2:6e:7d:
                    8f:c4:e3:6b:55:17:6a:93:fa:54:45:96:f6:7a:31:
                    e8:bc:36:4a:a8:ae:9c:67:8f:3d:1a:5c:f2:20:ec:
                    f8:34:aa:fd:63:cb:f0:c0:72:d8:bb:7a:71:57:ab:
                    dd:8d:dc:cd:65:57:24:8f:32:d3:09:7c:02:4b:1a:
                    b5:9b:09:8f:19:e5:06:6c:1b:37:0c:92:7e:d0:15:
                    42:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:3B:87:23:15:85:AF:3B:73:32:AE:3F:0E:25:0A:8E:C7:A2:21:A0
            X509v3 Authority Key Identifier:
                keyid:CE:D0:AD:B9:9F:80:3F:44:1F:50:DC:CB:83:CE:E7:20:76:DC:32:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ztCtuZ-AP0QfUNzLg87nIHbcMog.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:8f:2d:87:a4:2d:e5:73:02:19:0c:00:f3:80:2e:57:38:c6:
         e2:ee:fc:be:d3:58:8e:77:13:a7:be:65:de:cc:2f:9e:f0:d7:
         90:e8:e9:26:c7:95:94:2f:64:05:66:dd:e6:c1:1d:ec:c1:cf:
         0d:8f:12:1c:d3:bd:53:16:70:d1:37:af:52:c0:d9:c7:d4:d0:
         2c:6e:cb:d4:3a:1e:c1:47:07:0f:35:37:2a:f2:a1:5f:7f:57:
         9d:cb:9f:80:5b:19:1a:c6:37:d4:c8:ae:c9:24:0a:c6:4b:b5:
         6d:6e:b8:38:94:f9:95:88:d7:08:56:ae:7a:8d:87:8b:82:51:
         18:55:e1:34:dd:19:ef:40:76:24:b1:12:6b:32:47:12:6e:eb:
         64:1f:0b:36:83:9e:7c:bc:63:ff:82:b2:da:de:df:14:68:ee:
         a8:9b:fe:fb:99:de:75:d2:44:3d:ca:af:2a:f9:c8:6f:bc:4e:
         74:8f:e8:d0:91:db:63:7d:94:27:3f:e7:17:05:a2:f2:af:c2:
         90:23:da:b6:1c:59:76:6b:69:a7:bd:77:2c:c4:cb:c4:b3:45:
         b8:c1:14:8d:f5:a0:f4:9a:de:9b:8a:78:1e:38:73:05:ea:ff:
         3e:b4:8e:a3:4c:4f:05:ad:25:ef:2a:77:5b:0f:84:24:ce:ce:
         3c:7d:56:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:16:29 2026 by rpki-client