Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917DCDA/192E71F61D9011E2B295ABEF08B02CD2/ZwbZhOcxaBICGI0pntNfAFsBdYA.mft
File:                     ZwbZhOcxaBICGI0pntNfAFsBdYA.mft (raw, json)
Hash identifier:          GstQKMA7bbnwyTeQHMq1Z+ln/rOb5eWBJX/7VyIsETY=
Subject key identifier:   0D:63:F6:A2:E5:00:5B:4B:7F:77:9F:1F:ED:AD:DA:78:1B:C8:2A:68
Authority key identifier: 67:06:D9:84:E7:31:68:12:02:18:8D:29:9E:D3:5F:00:5B:01:75:80
Certificate issuer:       /CN=A917DCDA/serialNumber=6706D984E731681202188D299ED35F005B017580
Certificate serial:       357E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZwbZhOcxaBICGI0pntNfAFsBdYA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917DCDA/192E71F61D9011E2B295ABEF08B02CD2/ZwbZhOcxaBICGI0pntNfAFsBdYA.mft
Manifest number:          357E
Signing time:             Tue 22 Sep 2026 14:40:39 +0000
Manifest this update:     Tue 22 Sep 2026 14:40:38 +0000
Manifest next update:     Tue 29 Sep 2026 14:40:38 +0000
Files and hashes:         1: ZwbZhOcxaBICGI0pntNfAFsBdYA.crl (hash: rW1KN9Eww1QtxUk/pEZ7U7Py0mtuMK7frgOgsDNYhCI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917DCDA/192E71F61D9011E2B295ABEF08B02CD2/ZwbZhOcxaBICGI0pntNfAFsBdYA.crl
                          rsync://rpki.apnic.net/member_repository/A917DCDA/192E71F61D9011E2B295ABEF08B02CD2/ZwbZhOcxaBICGI0pntNfAFsBdYA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZwbZhOcxaBICGI0pntNfAFsBdYA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 14:40:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13694 (0x357e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917DCDA, serialNumber=6706D984E731681202188D299ED35F005B017580
        Validity
            Not Before: Sep 22 14:40:38 2026 GMT
            Not After : Sep 29 14:40:38 2026 GMT
        Subject: CN=6ab29367-9b32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e7:01:a3:d6:f1:af:4f:1b:72:79:50:8f:f2:
                    5c:3a:4f:5a:ca:88:7b:7c:55:b8:e4:2e:5d:bf:1a:
                    85:bc:40:08:76:ee:3f:4a:ca:b4:34:88:c8:be:bc:
                    57:fe:d4:5c:ae:59:57:7d:e9:02:82:e6:bf:23:30:
                    ac:33:ec:30:13:04:08:96:db:08:9a:7d:2e:92:d9:
                    d0:42:16:59:5c:84:a5:e4:fd:51:e9:63:61:e0:0f:
                    7e:b0:31:31:fa:c7:b5:82:bc:3c:24:3c:aa:ba:f9:
                    f2:65:1d:ed:40:99:30:03:27:bf:90:25:3a:45:bf:
                    9f:61:ee:46:41:66:1e:16:4f:f3:cf:4b:0e:96:31:
                    94:5a:15:93:0e:56:38:e7:05:31:09:66:b3:72:8c:
                    93:a8:1d:e5:43:f2:91:1f:6a:28:71:0b:ec:09:91:
                    6b:98:b6:c8:4b:28:7e:3a:ab:6d:f6:b8:5e:7f:25:
                    78:3b:70:1f:61:03:fb:0c:db:11:67:af:31:a3:5c:
                    d2:2f:0e:07:19:98:63:a9:ec:3b:33:1d:1c:8e:df:
                    63:c2:8b:92:b3:26:49:c0:b2:3b:da:c5:9e:92:b7:
                    f3:5e:64:bd:3f:66:e5:6e:4d:cb:3a:9a:2d:8f:65:
                    10:b8:db:95:63:7b:3e:49:2b:16:7e:75:54:fb:35:
                    87:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:63:F6:A2:E5:00:5B:4B:7F:77:9F:1F:ED:AD:DA:78:1B:C8:2A:68
            X509v3 Authority Key Identifier:
                keyid:67:06:D9:84:E7:31:68:12:02:18:8D:29:9E:D3:5F:00:5B:01:75:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917DCDA/192E71F61D9011E2B295ABEF08B02CD2/ZwbZhOcxaBICGI0pntNfAFsBdYA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZwbZhOcxaBICGI0pntNfAFsBdYA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DCDA/192E71F61D9011E2B295ABEF08B02CD2/ZwbZhOcxaBICGI0pntNfAFsBdYA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:2e:b4:45:41:97:73:7e:43:2c:41:be:f2:2f:1f:8e:35:4d:
         f1:9a:96:8c:f1:27:5f:00:d9:88:0c:f7:05:c1:d5:53:0f:6b:
         08:7d:20:35:7c:5a:9c:95:0b:0e:c0:16:26:e1:4a:2d:2c:6c:
         0a:77:0c:52:7a:e5:8c:e6:69:ea:d1:45:de:47:33:00:78:22:
         fa:3b:66:77:60:f2:3c:28:63:14:30:b2:2d:8a:42:8b:78:f9:
         38:b8:28:f5:11:c6:09:97:4f:e7:f6:0f:fe:d9:8c:46:c1:60:
         2e:a2:6a:be:ce:75:1c:d1:df:44:f2:19:2e:d1:4e:fb:7b:eb:
         3b:7e:52:1e:b1:2f:cc:0a:a5:a8:2c:67:22:ed:13:cd:4d:b0:
         00:62:a4:02:6d:e9:cc:80:4f:a0:75:c2:33:54:e9:a1:a2:d0:
         f8:8e:d7:fe:7c:bd:f3:e4:1f:75:e0:62:95:72:99:3d:85:5b:
         13:b7:0c:08:c5:6d:6e:07:4b:e7:01:43:19:5a:1a:5a:39:1c:
         ef:c5:be:35:e5:77:fd:17:49:fc:13:7c:7d:cb:df:a0:42:c6:
         61:38:54:4d:36:33:fb:b9:b4:2b:01:47:13:26:df:8d:fb:37:
         98:30:8b:2e:85:19:d6:b1:4d:2c:ca:42:70:5b:c6:16:74:c2:
         68:c5:a2:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:27:51 2026 by rpki-client