Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.mft
File:                     ZEfjYbGkSWugEo32lWV0SOleK5U.mft (raw, json)
Hash identifier:          TazMAmFLFUbeaMvCVdBFwi6mvNvmrLaImwECzqFCTH8=
Subject key identifier:   B6:4B:77:22:5A:52:B8:F9:27:98:5B:B9:F1:0A:AF:82:0D:BC:69:31
Authority key identifier: 64:47:E3:61:B1:A4:49:6B:A0:12:8D:F6:95:65:74:48:E9:5E:2B:95
Certificate issuer:       /CN=A917F879/serialNumber=6447E361B1A4496BA0128DF695657448E95E2B95
Certificate serial:       0AC4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEfjYbGkSWugEo32lWV0SOleK5U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.mft
Manifest number:          0AB4
Signing time:             Thu 24 Sep 2026 19:25:11 +0000
Manifest this update:     Thu 24 Sep 2026 19:25:11 +0000
Manifest next update:     Thu 01 Oct 2026 19:25:11 +0000
Files and hashes:         1: ZEfjYbGkSWugEo32lWV0SOleK5U.crl (hash: NQsqTR5ThYqBoDXSE22hNc7d3Hk/5v4916rC6m2mmL8=)
                          2: 8A6AA178556111EDB7E45424C4F9AE02.roa (hash: EASpkdXObrJ8H1sWrr81zx66bGecEu9OLYPesUTFCoA=)
                          3: 894FFF40556111EDB7E45424C4F9AE02.roa (hash: bQj5mxklQD19F906ONQY4Ae0sdx03lDa6OD6mt+hkGU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.crl
                          rsync://rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEfjYbGkSWugEo32lWV0SOleK5U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 19:25:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2756 (0xac4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917F879, serialNumber=6447E361B1A4496BA0128DF695657448E95E2B95
        Validity
            Not Before: Sep 24 19:25:11 2026 GMT
            Not After : Oct  1 19:25:11 2026 GMT
        Subject: CN=6ab57917-8d0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:da:ee:ed:b9:b9:c7:b8:18:83:ec:79:c1:d7:
                    12:fb:a5:27:ed:3c:79:87:c1:d3:bf:2f:c6:4a:e7:
                    8e:29:16:f6:58:38:8e:4b:9b:85:77:78:0f:46:18:
                    b0:47:64:a9:01:79:4d:6d:37:99:84:ef:9f:59:06:
                    30:a1:2c:42:ef:fe:24:d2:12:9d:96:40:1d:9f:d7:
                    61:7d:15:06:34:9f:3d:54:ef:90:b5:b8:f3:4e:42:
                    c3:52:c6:a8:80:d2:9e:88:7b:04:ac:be:1d:c9:ec:
                    51:0f:00:47:9d:bd:e9:a8:45:b7:46:ab:78:bc:b5:
                    85:79:af:1d:8b:7d:33:8f:e0:68:e4:a6:18:5f:a1:
                    2b:67:54:2d:11:68:53:87:34:6f:30:1e:1b:24:f1:
                    d8:1e:6e:40:1e:6c:d0:ed:86:8c:0f:de:b9:f8:b6:
                    6c:73:c1:29:a2:29:15:10:33:5d:99:4e:71:c3:d7:
                    bb:7c:55:65:48:a6:c0:3a:95:68:c0:90:99:0d:53:
                    3d:e8:18:2e:70:c0:5e:6e:09:6a:4b:10:6e:fc:b4:
                    ef:19:88:0e:a4:ac:7f:fb:0e:db:f7:b8:a1:cf:56:
                    0c:23:da:7a:db:c2:f2:52:69:50:cd:f2:9c:65:03:
                    de:ff:75:1a:fa:b8:ca:a8:45:1a:b8:e1:44:40:67:
                    ba:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:4B:77:22:5A:52:B8:F9:27:98:5B:B9:F1:0A:AF:82:0D:BC:69:31
            X509v3 Authority Key Identifier:
                keyid:64:47:E3:61:B1:A4:49:6B:A0:12:8D:F6:95:65:74:48:E9:5E:2B:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEfjYbGkSWugEo32lWV0SOleK5U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:e0:1b:6c:ac:ae:29:38:1b:cd:66:73:20:a0:e3:b3:91:b7:
         6e:06:54:bc:d5:85:3d:11:d9:9c:23:9e:4f:1e:9f:69:34:47:
         b0:d4:05:20:1b:33:e5:c9:5b:4b:42:9a:7d:a5:ac:29:63:94:
         b4:5d:e8:f3:63:08:a9:66:d1:fa:e4:49:47:18:c3:7a:b5:d9:
         39:04:9d:50:aa:08:8e:d6:0d:a2:27:20:a8:48:55:0c:90:5e:
         b1:e9:a8:a4:2d:a6:e8:e8:55:7a:d5:ba:38:8b:21:8f:96:59:
         bb:84:33:33:57:65:13:cd:26:d9:44:a3:49:6b:ce:f1:12:20:
         7a:8c:84:6f:79:ec:f9:c6:82:7b:ae:93:af:05:a6:f9:ce:04:
         98:28:fd:3f:f9:d6:b0:df:4a:62:7c:b7:53:9a:92:66:f6:e3:
         26:88:54:b3:a2:27:4e:ed:ff:5d:9c:6f:45:bb:e4:1a:ce:ad:
         65:f1:af:a4:f8:c3:f0:e4:c3:a0:6f:db:b3:46:51:4e:55:32:
         5f:22:08:b9:2d:b6:dd:00:93:2d:3e:75:78:19:41:b0:18:8e:
         1e:85:4a:6f:12:28:06:99:b9:1d:79:0e:fa:9f:c6:bd:9e:ca:
         75:94:1e:79:12:d6:7d:62:f6:a8:0c:e1:15:42:df:c5:da:88:
         07:80:66:a8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCsQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0Y4NzkxMTAvBgNVBAUTKDY0NDdFMzYxQjFBNDQ5NkJBMDEyOERGNjk1NjU3NDQ4
RTk1RTJCOTUwHhcNMjYwOTI0MTkyNTExWhcNMjYxMDAxMTkyNTExWjAYMRYwFAYD
VQQDEw02YWI1NzkxNy04ZDBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAntru7bm5x7gYg+x5wdcS+6Un7Tx5h8HTvy/GSueOKRb2WDiOS5uFd3gPRhiw
R2SpAXlNbTeZhO+fWQYwoSxC7/4k0hKdlkAdn9dhfRUGNJ89VO+QtbjzTkLDUsao
gNKeiHsErL4dyexRDwBHnb3pqEW3Rqt4vLWFea8di30zj+Bo5KYYX6ErZ1QtEWhT
hzRvMB4bJPHYHm5AHmzQ7YaMD965+LZsc8EpoikVEDNdmU5xw9e7fFVlSKbAOpVo
wJCZDVM96BgucMBebglqSxBu/LTvGYgOpKx/+w7b97ihz1YMI9p628LyUmlQzfKc
ZQPe/3Ua+rjKqEUauOFEQGe63QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLZLdyJa
Urj5J5hbufEKr4INvGkxMB8GA1UdIwQYMBaAFGRH42GxpElroBKN9pVldEjpXiuV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Rjg3OS9BQUZDRUYwQTgz
NDkxMUVBODlERTY5N0JDNEY5QUUwMi9aRWZqWWJHa1NXdWdFbzMybFdWMFNPbGVL
NVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pFZmpZYkdrU1d1Z0VvMzJsV1YwU09sZUs1VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
Rjg3OS9BQUZDRUYwQTgzNDkxMUVBODlERTY5N0JDNEY5QUUwMi9aRWZqWWJHa1NX
dWdFbzMybFdWMFNPbGVLNVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAU+AbbKyuKTgbzWZzIKDjs5G3bgZUvNWFPRHZnCOeTx6faTRHsNQFIBsz5clb
S0KafaWsKWOUtF3o82MIqWbR+uRJRxjDerXZOQSdUKoIjtYNoicgqEhVDJBesemo
pC2m6OhVetW6OIshj5ZZu4QzM1dlE80m2USjSWvO8RIgeoyEb3ns+caCe66TrwWm
+c4EmCj9P/nWsN9KYny3U5qSZvbjJohUs6InTu3/XZxvRbvkGs6tZfGvpPjD8OTD
oG/bs0ZRTlUyXyIIuS223QCTLT51eBlBsBiOHoVKbxIoBpm5HXkO+p/GvZ7KdZQe
eRLWfWL2qAzhFULfxdqIB4BmqA==
-----END CERTIFICATE-----
Generated at Fri Sep 25 06:27:46 2026 by rpki-client