Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91899BB/88C2F15E885811EB96CE6817C4F9AE02/ZfYWHHNtGpxBkf38x6T4JM4RIy0.mft
File:                     ZfYWHHNtGpxBkf38x6T4JM4RIy0.mft (raw, json)
Hash identifier:          Lzw+i5f1ZJm8uLKVLY29fTbuvToTHvalbE5wiBYYaGk=
Subject key identifier:   5B:A0:57:78:9E:9D:C7:39:A5:EA:BC:44:C7:B1:05:A6:20:15:49:6C
Authority key identifier: 65:F6:16:1C:73:6D:1A:9C:41:91:FD:FC:C7:A4:F8:24:CE:11:23:2D
Certificate issuer:       /CN=A91899BB/serialNumber=65F6161C736D1A9C4191FDFCC7A4F824CE11232D
Certificate serial:       074F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZfYWHHNtGpxBkf38x6T4JM4RIy0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91899BB/88C2F15E885811EB96CE6817C4F9AE02/ZfYWHHNtGpxBkf38x6T4JM4RIy0.mft
Manifest number:          074A
Signing time:             Mon 28 Sep 2026 21:59:31 +0000
Manifest this update:     Mon 28 Sep 2026 21:59:30 +0000
Manifest next update:     Mon 05 Oct 2026 21:59:30 +0000
Files and hashes:         1: ZfYWHHNtGpxBkf38x6T4JM4RIy0.crl (hash: XIpWT9ObXRgYidLGQQWWmaaRc5EhoETugFbbcRTNQWQ=)
                          2: 54CB555C57A311F09664E82DC4F9AE02.roa (hash: 8zSq/rqaKjpysVvvXWgHeKeayL3TVMK2Emf1uVmygFI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91899BB/88C2F15E885811EB96CE6817C4F9AE02/ZfYWHHNtGpxBkf38x6T4JM4RIy0.crl
                          rsync://rpki.apnic.net/member_repository/A91899BB/88C2F15E885811EB96CE6817C4F9AE02/ZfYWHHNtGpxBkf38x6T4JM4RIy0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZfYWHHNtGpxBkf38x6T4JM4RIy0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Oct 2026 21:59:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1871 (0x74f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91899BB, serialNumber=65F6161C736D1A9C4191FDFCC7A4F824CE11232D
        Validity
            Not Before: Sep 28 21:59:30 2026 GMT
            Not After : Oct  5 21:59:30 2026 GMT
        Subject: CN=6abae342-7a87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:d4:89:fe:f9:28:98:c0:22:29:12:36:e5:d7:
                    a0:30:1a:0a:1f:ec:4a:3e:1e:6a:21:98:9d:38:15:
                    a3:89:e5:62:4e:11:a6:da:42:0d:34:69:20:38:3e:
                    61:86:f4:c7:ec:a5:07:01:a1:30:7f:5d:50:e1:da:
                    bc:9d:ab:25:39:34:cd:a0:8a:9a:52:46:4a:28:b0:
                    dc:1a:ed:dd:94:6e:ee:30:3e:6b:4b:60:2a:e3:2c:
                    ac:be:56:36:49:9d:e8:6c:ae:a8:2f:eb:b4:5d:e5:
                    33:2b:b5:af:d2:81:89:fd:5a:97:49:9f:80:76:43:
                    2d:c2:f2:b6:f8:c6:54:df:f8:c4:bf:a7:79:1c:a6:
                    e2:39:8e:05:d0:bc:f8:98:c4:8c:f2:60:fc:43:67:
                    4b:d0:02:ea:86:d5:4d:64:66:0b:34:24:95:39:94:
                    f8:61:c2:5d:4e:f0:d0:eb:97:88:24:6d:41:ac:d4:
                    e3:3c:e9:6b:3b:e8:7d:3d:2a:d3:cf:b6:16:b9:60:
                    c7:c1:98:a9:68:e3:ae:96:80:da:dc:b4:3c:f8:ec:
                    96:a5:0f:02:b8:d0:e3:a6:24:11:44:c5:19:a1:e3:
                    57:ff:eb:7b:37:45:dc:69:06:32:c5:69:52:88:9b:
                    ab:a7:78:b1:07:77:bc:af:8e:fc:5e:98:c3:7e:cc:
                    42:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:A0:57:78:9E:9D:C7:39:A5:EA:BC:44:C7:B1:05:A6:20:15:49:6C
            X509v3 Authority Key Identifier:
                keyid:65:F6:16:1C:73:6D:1A:9C:41:91:FD:FC:C7:A4:F8:24:CE:11:23:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91899BB/88C2F15E885811EB96CE6817C4F9AE02/ZfYWHHNtGpxBkf38x6T4JM4RIy0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZfYWHHNtGpxBkf38x6T4JM4RIy0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91899BB/88C2F15E885811EB96CE6817C4F9AE02/ZfYWHHNtGpxBkf38x6T4JM4RIy0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:3c:bf:b2:5a:47:cb:03:bc:19:60:03:90:99:e0:00:18:48:
         bf:f8:19:d8:b6:a3:55:d9:0e:70:2e:94:c3:39:9c:dd:0f:1b:
         e0:2e:52:7a:43:c1:19:2d:f2:6d:04:84:5f:47:64:6a:13:86:
         5e:2b:d3:38:12:1e:76:67:60:51:3e:66:f7:09:d6:2f:68:5e:
         6f:42:10:cb:6e:e4:24:0e:35:ba:00:c6:aa:73:92:74:a5:98:
         39:4a:37:1f:8b:b1:2a:b6:b2:dd:04:a8:e0:d0:f0:de:4a:5a:
         8a:cf:fc:a6:de:fa:94:5a:71:89:b8:b8:bb:1d:15:b9:37:e3:
         97:1d:53:43:b0:25:49:64:67:21:cc:65:3c:8c:2a:69:e2:86:
         5d:94:b4:6f:8c:aa:5f:15:cd:13:03:dc:73:b3:4a:07:de:c6:
         0f:cd:8d:df:52:7c:2a:e0:ef:27:49:77:85:26:4f:94:0a:5b:
         de:e2:c9:74:82:a4:48:9c:a7:0e:fb:2d:88:20:84:41:7f:58:
         2b:00:28:df:09:21:53:d3:db:ca:8d:c5:8c:d5:11:76:b0:64:
         23:0c:5e:77:4f:2f:fb:02:c0:1e:a2:05:02:ff:14:d9:af:b1:
         89:2b:e3:40:16:6b:d8:8c:3f:af:a4:1a:20:39:43:b6:cc:5c:
         e2:d4:b9:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 10:59:38 2026 by rpki-client