Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919BF94/8353E3F0652911F18C86F8A79AEE528E/MZfydASVOdoqReLMBqpcyHTmJ28.mft
File:                     MZfydASVOdoqReLMBqpcyHTmJ28.mft (raw, json)
Hash identifier:          sUeGv6ESpE7Ut2/aXnuQTNC5seFOXjtUp030Y2Ps3dc=
Subject key identifier:   2D:9B:0E:27:D3:B2:98:35:96:A5:64:70:31:56:9C:13:16:46:5E:BE
Authority key identifier: 31:97:F2:74:04:95:39:DA:2A:45:E2:CC:06:AA:5C:C8:74:E6:27:6F
Certificate issuer:       /CN=A919BF94/serialNumber=3197F274049539DA2A45E2CC06AA5CC874E6276F
Certificate serial:       36
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/MZfydASVOdoqReLMBqpcyHTmJ28.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919BF94/8353E3F0652911F18C86F8A79AEE528E/MZfydASVOdoqReLMBqpcyHTmJ28.mft
Manifest number:          36
Signing time:             Wed 23 Sep 2026 08:20:15 +0000
Manifest this update:     Wed 23 Sep 2026 08:20:15 +0000
Manifest next update:     Wed 30 Sep 2026 08:20:15 +0000
Files and hashes:         1: MZfydASVOdoqReLMBqpcyHTmJ28.crl (hash: 7yIbI9MyEudQnFa4xvM7DQgbu5wYXF9Kv0LntPf0oVE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919BF94/8353E3F0652911F18C86F8A79AEE528E/MZfydASVOdoqReLMBqpcyHTmJ28.crl
                          rsync://rpki.apnic.net/member_repository/A919BF94/8353E3F0652911F18C86F8A79AEE528E/MZfydASVOdoqReLMBqpcyHTmJ28.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/MZfydASVOdoqReLMBqpcyHTmJ28.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 08:20:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54 (0x36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919BF94, serialNumber=3197F274049539DA2A45E2CC06AA5CC874E6276F
        Validity
            Not Before: Sep 23 08:20:15 2026 GMT
            Not After : Sep 30 08:20:15 2026 GMT
        Subject: CN=6ab38bbf-2095
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:46:82:2a:33:06:b6:ce:dd:22:0c:57:1c:6b:
                    0f:f6:8e:ba:ae:c4:f8:ce:ee:53:58:3c:ec:35:ed:
                    ba:3b:a1:b1:6f:22:97:76:e2:ec:88:69:19:ab:86:
                    4c:88:94:d8:d9:4c:a5:64:93:d1:03:1f:b0:85:9d:
                    14:c3:da:2f:fc:b8:5a:8e:2e:41:9d:ce:13:ce:56:
                    37:6f:98:46:32:66:27:24:78:d6:dd:dd:b7:13:e7:
                    9c:39:b7:a8:23:6d:d7:c9:f1:24:6f:0d:52:d0:9f:
                    8c:af:63:4a:d2:74:af:6a:0c:ac:8b:70:0f:1e:07:
                    43:7c:38:a0:67:73:90:98:0c:a3:3c:06:fa:29:89:
                    d9:02:b3:60:1f:75:88:40:25:b7:b2:4b:eb:08:05:
                    9e:d3:4e:d2:2c:65:f2:23:ac:36:2b:03:a8:ec:88:
                    41:29:21:4c:ff:4f:bc:e6:c6:1f:61:02:da:de:6d:
                    a6:15:d4:33:3b:19:d3:94:54:50:73:06:bb:3d:b2:
                    97:8e:82:c0:ef:41:a6:74:ea:c1:4a:ff:8a:ab:4b:
                    28:92:df:ac:e0:e7:05:40:62:a4:6d:1f:26:fa:e7:
                    9f:9d:32:de:18:8d:1d:4d:0e:93:d7:d4:d4:91:d8:
                    96:12:57:a6:10:fe:ce:17:a9:7b:d4:17:ee:f6:69:
                    9e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:9B:0E:27:D3:B2:98:35:96:A5:64:70:31:56:9C:13:16:46:5E:BE
            X509v3 Authority Key Identifier:
                keyid:31:97:F2:74:04:95:39:DA:2A:45:E2:CC:06:AA:5C:C8:74:E6:27:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919BF94/8353E3F0652911F18C86F8A79AEE528E/MZfydASVOdoqReLMBqpcyHTmJ28.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/MZfydASVOdoqReLMBqpcyHTmJ28.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BF94/8353E3F0652911F18C86F8A79AEE528E/MZfydASVOdoqReLMBqpcyHTmJ28.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:7f:94:10:93:f8:95:7e:8e:ee:70:1c:ff:c2:33:b4:d1:0c:
         a5:0f:5c:9b:49:45:df:dd:3d:53:9d:a0:60:b4:6f:96:34:dc:
         ed:ba:fa:5d:f5:de:5a:e8:10:45:03:f0:76:dc:b1:1a:96:49:
         cc:71:3a:c9:ff:c6:b9:c3:04:dd:16:72:e8:2c:4f:8a:26:21:
         4a:a4:3b:10:03:cc:c7:fc:84:a0:a7:67:99:5a:b4:24:01:22:
         11:e8:09:61:df:fb:f6:ad:b8:81:51:a8:43:23:b4:31:8c:83:
         7e:db:9c:b7:12:1f:2c:24:4b:e0:af:3a:7b:b9:ee:dd:2f:dc:
         95:49:17:4b:36:14:8f:06:67:b2:ac:b3:76:48:33:91:29:10:
         98:f8:69:1e:b6:e3:3d:f3:c0:18:bb:98:fa:59:59:ca:b1:e9:
         58:ca:0c:44:b7:28:ad:2f:8b:93:84:b6:e8:9e:10:a1:f0:7d:
         74:9c:8d:e9:b0:a5:de:21:b7:f1:1f:6d:7e:7a:15:83:26:7e:
         5a:a9:df:90:74:2a:16:03:2c:aa:2a:17:ef:f9:05:14:67:e8:
         62:81:85:9f:29:e7:29:09:80:e0:07:5b:0d:61:88:07:ef:cb:
         a5:9c:4c:95:70:31:ac:dc:51:58:70:50:4b:36:95:cf:b8:dd:
         6c:dd:32:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:57:27 2026 by rpki-client