Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919F893/37C9BC545AC711ED831BBA44C4F9AE02/zOSbmUXwSWKmmgra2q5KQumgMSc.mft
File:                     zOSbmUXwSWKmmgra2q5KQumgMSc.mft (raw, json)
Hash identifier:          GuIUYqUfdBweHtQqtMNMVKmrryY7sOjUrL1xLQeAUOg=
Subject key identifier:   7D:9E:A1:DA:9C:27:85:3B:99:0A:53:AF:2B:B1:7E:D4:3C:5A:B9:21
Authority key identifier: CC:E4:9B:99:45:F0:49:62:A6:9A:0A:DA:DA:AE:4A:42:E9:A0:31:27
Certificate issuer:       /CN=A919F893/serialNumber=CCE49B9945F04962A69A0ADADAAE4A42E9A03127
Certificate serial:       02E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zOSbmUXwSWKmmgra2q5KQumgMSc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F893/37C9BC545AC711ED831BBA44C4F9AE02/zOSbmUXwSWKmmgra2q5KQumgMSc.mft
Manifest number:          02DB
Signing time:             Wed 23 Sep 2026 00:54:57 +0000
Manifest this update:     Wed 23 Sep 2026 00:54:56 +0000
Manifest next update:     Wed 30 Sep 2026 00:54:56 +0000
Files and hashes:         1: zOSbmUXwSWKmmgra2q5KQumgMSc.crl (hash: lkWmHTULUJC9dLzu8e7GDd47gvgvUOc5g95cxX3ud3E=)
                          2: cFoKUf-OO1L3vErxalG36BKQ_yk.asa (hash: 2RnFp4E1jY7peJxVlhY6oTzUK8l34sdFomXOSS5auc0=)
                          3: 7126DC005AC911ED8E764545C4F9AE02.roa (hash: 3aiLyzUUZX+G9arlbKmPRJwslFy0TWYcLe4pJnBYkCc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F893/37C9BC545AC711ED831BBA44C4F9AE02/zOSbmUXwSWKmmgra2q5KQumgMSc.crl
                          rsync://rpki.apnic.net/member_repository/A919F893/37C9BC545AC711ED831BBA44C4F9AE02/zOSbmUXwSWKmmgra2q5KQumgMSc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zOSbmUXwSWKmmgra2q5KQumgMSc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 00:54:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 739 (0x2e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F893, serialNumber=CCE49B9945F04962A69A0ADADAAE4A42E9A03127
        Validity
            Not Before: Sep 23 00:54:56 2026 GMT
            Not After : Sep 30 00:54:56 2026 GMT
        Subject: CN=6ab32361-32e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:5c:1e:4e:96:3d:68:3a:13:18:b7:5d:47:fd:
                    47:eb:b2:3d:29:a0:2b:68:00:83:7e:a3:d9:40:01:
                    1c:c3:6b:bf:7f:71:2b:51:e2:7a:68:6b:e6:5a:5c:
                    63:c8:18:37:78:42:ea:b9:40:89:95:c4:b8:57:91:
                    69:4e:41:92:31:2c:82:84:74:21:8f:1e:88:e6:f8:
                    ef:f7:6e:5a:1a:92:43:f3:c1:5a:db:59:5f:12:f4:
                    40:97:28:55:a1:20:ff:b8:21:5c:f1:35:12:29:90:
                    00:05:8e:e7:0e:8a:a1:c0:07:e1:92:8c:eb:6e:01:
                    f7:b0:09:86:c2:6a:74:cd:8e:94:e8:96:44:f1:f2:
                    94:4a:6a:ab:60:9b:c7:b6:ae:fa:cd:07:92:9c:e3:
                    31:56:f4:e1:67:8c:fb:3c:1e:97:1c:e6:5b:3e:4a:
                    65:cc:3a:3f:2d:00:80:08:2a:ac:ea:42:5f:7b:46:
                    f5:51:8a:81:35:43:53:5f:cc:55:7e:cc:06:1d:f5:
                    51:45:2d:23:60:98:2c:3a:0f:d5:2c:78:df:b1:f7:
                    56:4d:cc:db:20:6d:63:24:bc:91:d5:62:16:35:c0:
                    e1:91:88:43:60:0e:47:9e:f1:d1:c0:13:07:9b:ad:
                    88:63:08:fd:44:f6:61:e1:0c:7a:e8:ce:11:27:c5:
                    98:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:9E:A1:DA:9C:27:85:3B:99:0A:53:AF:2B:B1:7E:D4:3C:5A:B9:21
            X509v3 Authority Key Identifier:
                keyid:CC:E4:9B:99:45:F0:49:62:A6:9A:0A:DA:DA:AE:4A:42:E9:A0:31:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F893/37C9BC545AC711ED831BBA44C4F9AE02/zOSbmUXwSWKmmgra2q5KQumgMSc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zOSbmUXwSWKmmgra2q5KQumgMSc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F893/37C9BC545AC711ED831BBA44C4F9AE02/zOSbmUXwSWKmmgra2q5KQumgMSc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:a5:57:35:64:62:74:f1:0e:98:55:9f:c9:c8:5e:be:5b:41:
         b9:90:6a:d0:ce:d9:d4:9d:fa:0a:41:ea:69:57:7f:d5:e7:19:
         e9:f9:b3:e5:a6:9b:72:67:50:0d:70:41:4f:00:b9:e5:69:b5:
         ec:b9:35:74:4e:02:24:c5:5e:75:cd:38:78:b1:b8:d5:36:4b:
         ee:41:85:22:23:82:bb:ca:c5:bf:e2:2e:22:59:a2:2e:f7:95:
         e7:41:b2:57:93:d6:6d:38:76:8c:16:d9:52:05:d1:f7:db:62:
         b4:b7:ed:3b:a4:3a:d6:da:ba:b0:ff:be:55:9c:c7:6c:28:86:
         8f:8c:16:85:30:f4:f6:87:5b:9f:fd:8f:78:69:c5:2b:a0:c2:
         f3:13:cb:fd:46:c2:b9:3c:59:a3:be:e9:5b:60:2c:aa:d5:a1:
         e5:f3:e3:05:9d:ef:38:31:98:5d:b7:b0:fd:07:74:1c:71:cf:
         92:0b:25:a2:b9:f5:46:52:c0:51:47:89:bf:5f:9e:12:54:e5:
         54:b5:e5:96:0e:0f:aa:06:61:be:72:d6:72:1f:29:76:d0:12:
         f8:89:2d:bf:71:74:80:9d:68:36:4a:6d:6d:f1:53:c4:db:4e:
         d6:06:e5:36:07:63:5f:a6:da:d5:51:a8:28:f3:0b:86:b1:7c:
         73:a8:40:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:36:19 2026 by rpki-client