Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/zmNwmX29E9IOXsYWW1qe46KCprA.mft
File:                     zmNwmX29E9IOXsYWW1qe46KCprA.mft (raw, json)
Hash identifier:          VTF5dsf3NmEz8UX4l/EgiL+jybFuj4ymFR5Pl7v54VA=
Subject key identifier:   17:F5:75:7E:43:2C:EF:CE:23:62:96:97:E8:E9:3A:C3:3B:81:04:30
Authority key identifier: CE:63:70:99:7D:BD:13:D2:0E:5E:C6:16:5B:5A:9E:E3:A2:82:A6:B0
Certificate issuer:       /CN=A917ACA8/serialNumber=CE6370997DBD13D20E5EC6165B5A9EE3A282A6B0
Certificate serial:       0220
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zmNwmX29E9IOXsYWW1qe46KCprA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/zmNwmX29E9IOXsYWW1qe46KCprA.mft
Manifest number:          0210
Signing time:             Fri 25 Sep 2026 03:12:44 +0000
Manifest this update:     Fri 25 Sep 2026 03:12:43 +0000
Manifest next update:     Fri 02 Oct 2026 03:12:43 +0000
Files and hashes:         1: zmNwmX29E9IOXsYWW1qe46KCprA.crl (hash: ay+FkC5MN3LwM/XqH8hruDMJyroVeX4mIlHO8oEEAII=)
                          2: CC389424E71D11F0959F3B7B706F56BC.roa (hash: ViUTH93Gp8AyO1ZPVD0Xv7OzlXm6aJc97Z4QEzfdTJ0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/zmNwmX29E9IOXsYWW1qe46KCprA.crl
                          rsync://rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/zmNwmX29E9IOXsYWW1qe46KCprA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zmNwmX29E9IOXsYWW1qe46KCprA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 03:12:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 544 (0x220)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ACA8, serialNumber=CE6370997DBD13D20E5EC6165B5A9EE3A282A6B0
        Validity
            Not Before: Sep 25 03:12:43 2026 GMT
            Not After : Oct  2 03:12:43 2026 GMT
        Subject: CN=6ab5e6ac-dfb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e8:d4:85:13:05:ce:8d:e4:fe:28:b6:a3:f1:
                    99:16:87:84:20:a7:00:e7:e4:fd:f1:45:c0:d5:59:
                    27:7d:ef:dc:5f:2d:00:ee:70:69:e7:a1:a2:e6:b9:
                    8e:bd:f4:67:f8:d8:38:a9:c0:4a:25:6a:21:91:15:
                    09:61:e6:e5:07:ae:76:92:01:62:42:6f:3e:79:2f:
                    b1:34:ba:63:97:d7:b0:f7:b3:4d:c3:fc:a5:df:84:
                    33:8d:35:a0:eb:c1:f9:2a:3c:25:10:47:57:4c:3a:
                    66:b1:d1:a0:65:ae:2e:8b:e6:74:82:a0:fd:58:81:
                    68:5c:b9:b4:72:16:51:26:18:a0:79:be:a9:ea:7c:
                    0e:44:c4:44:e3:6c:00:87:92:fd:75:47:1d:c7:d1:
                    ae:58:fb:30:eb:33:90:ef:6a:11:6f:b4:b2:f9:aa:
                    5d:4f:de:3c:97:4c:8b:35:39:8d:b0:a4:a6:5c:3f:
                    fa:0e:29:10:9d:cf:cb:f1:5c:95:f2:25:1e:a9:3d:
                    4f:c1:59:b5:85:78:7e:83:be:3f:da:56:f3:d6:41:
                    9c:28:ce:bc:c9:3b:ec:7a:15:f3:7f:1f:cd:29:87:
                    7c:a4:7f:98:5a:fe:c3:dc:f8:7b:a3:bc:f5:cd:a6:
                    05:e2:b6:36:6e:76:3f:34:45:06:5e:ca:30:cd:66:
                    b9:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:F5:75:7E:43:2C:EF:CE:23:62:96:97:E8:E9:3A:C3:3B:81:04:30
            X509v3 Authority Key Identifier:
                keyid:CE:63:70:99:7D:BD:13:D2:0E:5E:C6:16:5B:5A:9E:E3:A2:82:A6:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/zmNwmX29E9IOXsYWW1qe46KCprA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zmNwmX29E9IOXsYWW1qe46KCprA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/zmNwmX29E9IOXsYWW1qe46KCprA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:94:a2:a2:e1:6c:b4:ae:27:c0:c2:bd:a6:9d:f6:46:28:2e:
         75:76:e8:bc:e4:c9:98:79:ab:bb:4b:e6:11:7c:d5:8b:c7:77:
         04:bf:c4:c8:6f:3d:5e:c3:e6:80:30:5b:36:08:3c:64:ac:7d:
         8a:18:04:66:85:0f:14:c9:cf:c9:a1:ad:04:2a:a8:63:98:f0:
         04:92:a5:fb:3c:10:2f:3a:27:35:7c:59:a3:40:37:4c:65:5e:
         4e:b7:f9:fa:a3:9f:f4:37:5f:e8:40:8e:d2:4d:ad:42:dc:23:
         5d:54:b5:50:fc:21:23:7d:95:d5:21:58:17:27:64:fb:48:ff:
         2e:90:6f:64:73:04:d0:14:54:17:74:e9:d6:27:f1:bb:dc:cb:
         26:c9:0e:08:2c:4b:bf:ed:3b:ea:40:c4:80:b7:69:33:96:0f:
         2d:e4:f3:e6:94:b3:e7:f6:f2:55:38:01:50:3e:a6:39:bd:eb:
         2e:a2:65:4c:c0:6f:17:b5:75:00:14:c3:85:35:ff:9b:b3:72:
         9e:72:7d:ee:bd:af:0e:e1:6c:5b:34:94:a9:da:06:25:c3:7c:
         51:d9:68:9d:e8:9d:e8:0f:a9:3b:1b:95:29:24:49:86:c3:75:
         b9:e5:33:9c:da:29:92:29:2d:65:2a:a1:eb:25:70:1e:2e:8d:
         57:d9:59:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:44:22 2026 by rpki-client