Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917CB63/E1B054FC1DA711E2B688EBA108B02CD2/ZuoPg73TYyv_GUALOhum_t_8VYc.mft
File:                     ZuoPg73TYyv_GUALOhum_t_8VYc.mft (raw, json)
Hash identifier:          GC6cppgYcreHMSfs4HmzpUwY7rI2YwfeDBlNZTwu4TM=
Subject key identifier:   E9:34:DC:E6:81:FA:58:C4:E7:35:58:FB:70:D8:1F:B2:4A:47:CB:59
Authority key identifier: 66:EA:0F:83:BD:D3:63:2B:FF:19:40:0B:3A:1B:A6:FE:DF:FC:55:87
Certificate issuer:       /CN=A917CB63/serialNumber=66EA0F83BDD3632BFF19400B3A1BA6FEDFFC5587
Certificate serial:       359F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZuoPg73TYyv_GUALOhum_t_8VYc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917CB63/E1B054FC1DA711E2B688EBA108B02CD2/ZuoPg73TYyv_GUALOhum_t_8VYc.mft
Manifest number:          358F
Signing time:             Tue 22 Sep 2026 15:10:21 +0000
Manifest this update:     Tue 22 Sep 2026 15:10:20 +0000
Manifest next update:     Tue 29 Sep 2026 15:10:20 +0000
Files and hashes:         1: ZuoPg73TYyv_GUALOhum_t_8VYc.crl (hash: K8g/Z1ohdbcS59cafpH4U60HzA8VgH+UXt+WWIJE0As=)
                          2: A620A0408F5311F18D036A0A4711F970.roa (hash: iJ0etVrTYzzUpqfi2mzMV2oUD1FSaPDsBJ4DbU7ttf0=)
                          3: c5DC99Q5nXQ-wa9pZ3b2yCHHwQs.asa (hash: uc1it6L4GXH/et0F43S0KFaVEPSAqsiJCfwfTJNTOnA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917CB63/E1B054FC1DA711E2B688EBA108B02CD2/ZuoPg73TYyv_GUALOhum_t_8VYc.crl
                          rsync://rpki.apnic.net/member_repository/A917CB63/E1B054FC1DA711E2B688EBA108B02CD2/ZuoPg73TYyv_GUALOhum_t_8VYc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZuoPg73TYyv_GUALOhum_t_8VYc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 15:10:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13727 (0x359f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917CB63, serialNumber=66EA0F83BDD3632BFF19400B3A1BA6FEDFFC5587
        Validity
            Not Before: Sep 22 15:10:20 2026 GMT
            Not After : Sep 29 15:10:20 2026 GMT
        Subject: CN=6ab29a5d-1695
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:67:1b:86:0b:39:f9:96:63:c3:88:5f:d7:cf:
                    c8:b6:26:c9:2c:38:33:24:3a:c4:6d:fb:81:56:6b:
                    65:b5:7a:ee:07:5e:f7:b1:72:60:fe:5d:1f:09:a2:
                    82:4c:79:95:3c:66:d9:c6:06:43:6a:c6:99:0d:2e:
                    ab:79:f8:8c:39:fb:a2:bb:b3:1e:4e:d0:54:ed:78:
                    e5:a2:8c:18:ef:dd:80:b0:46:7a:02:ff:49:a7:ef:
                    43:fc:5a:90:c2:9a:3d:56:ed:76:dd:21:5c:4b:a8:
                    08:7c:7d:05:ea:05:38:8a:3d:40:72:8d:51:02:1c:
                    0a:4d:33:58:94:f7:26:1c:5a:1f:f2:01:f9:67:3e:
                    83:d4:77:ff:ce:60:5b:d0:46:e0:73:4e:dc:d7:45:
                    0b:4a:81:11:23:68:ff:b1:d2:e3:6b:54:ee:42:a6:
                    2e:01:91:8c:4a:70:22:e4:67:7b:f3:b2:75:fa:8f:
                    b3:70:07:27:f6:08:ae:39:c1:9a:dc:ad:29:9a:4c:
                    40:f8:c9:92:4f:b1:3f:68:fe:42:33:ed:cd:21:71:
                    ce:18:80:d8:9e:df:4f:93:92:2e:f6:11:68:11:e8:
                    d2:55:8a:7b:cd:9c:48:29:ae:5f:2b:fb:3b:dd:ed:
                    e6:b0:79:95:ad:b8:11:00:97:d7:a6:f0:85:9e:6e:
                    ad:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:34:DC:E6:81:FA:58:C4:E7:35:58:FB:70:D8:1F:B2:4A:47:CB:59
            X509v3 Authority Key Identifier:
                keyid:66:EA:0F:83:BD:D3:63:2B:FF:19:40:0B:3A:1B:A6:FE:DF:FC:55:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917CB63/E1B054FC1DA711E2B688EBA108B02CD2/ZuoPg73TYyv_GUALOhum_t_8VYc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZuoPg73TYyv_GUALOhum_t_8VYc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CB63/E1B054FC1DA711E2B688EBA108B02CD2/ZuoPg73TYyv_GUALOhum_t_8VYc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:3a:16:7d:38:79:52:7d:71:54:75:fa:c0:25:4e:08:1f:3b:
         5d:5e:a4:8c:71:cd:8b:ea:13:5c:50:73:61:05:54:ec:fb:33:
         ad:bb:be:8f:8a:8e:8a:26:8d:5f:1c:c6:eb:49:e1:bc:e7:9a:
         b3:87:ed:11:51:fc:d2:b5:a1:6e:24:57:ea:65:a6:dd:e8:1e:
         d8:27:49:1f:2b:3e:30:d1:97:ef:04:2d:15:29:8c:a6:89:6a:
         36:9a:ad:ab:52:14:f9:01:7b:0c:6b:e2:9c:25:bc:38:5e:7a:
         ac:a2:a8:bc:80:69:73:b2:22:4e:55:da:e2:50:43:22:86:91:
         cf:5e:df:25:1c:cb:7d:68:40:4b:d5:f4:88:15:c1:52:9b:d1:
         8d:74:9e:3f:b9:78:b0:20:01:be:50:d4:a1:39:b9:3e:bb:62:
         46:61:b6:a7:5a:c3:cc:81:c7:52:8f:23:9e:76:ab:f1:6e:7d:
         06:28:01:cb:c7:15:c5:66:94:08:31:e2:2a:3a:87:84:fe:42:
         1c:d5:1b:4f:aa:1a:1f:6f:52:86:ea:62:9f:46:ab:a8:fc:2c:
         d7:46:12:40:8c:cf:95:bb:ea:1f:51:1b:d4:d1:3a:09:6e:3e:
         35:87:24:96:6c:b4:bd:85:60:4a:4f:f4:8c:56:48:32:2f:f2:
         0b:f1:ea:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:10:01 2026 by rpki-client