Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.mft
File:                     zhFGgP9vTZvD8YgNYQ1q7urr8NQ.mft (raw, json)
Hash identifier:          z9fXXpFq/qkBkt4RgNwyUZyp2w/plFg5L+/pWh63N9E=
Subject key identifier:   C3:7C:82:91:30:5E:52:A8:38:E9:7E:D7:69:B9:FA:05:87:12:64:C6
Authority key identifier: CE:11:46:80:FF:6F:4D:9B:C3:F1:88:0D:61:0D:6A:EE:EA:EB:F0:D4
Certificate issuer:       /CN=A91A4B1A/serialNumber=CE114680FF6F4D9BC3F1880D610D6AEEEAEBF0D4
Certificate serial:       1F39
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.mft
Manifest number:          1F05
Signing time:             Mon 28 Sep 2026 16:03:42 +0000
Manifest this update:     Mon 28 Sep 2026 16:03:42 +0000
Manifest next update:     Mon 05 Oct 2026 16:03:42 +0000
Files and hashes:         1: zhFGgP9vTZvD8YgNYQ1q7urr8NQ.crl (hash: odmP0OqyMW5Ahj1zrso7XTDnGVspnV3BxHC4tP6cJl4=)
                          2: 4A6679EC14DF11EEAB46A86DC4F9AE02.roa (hash: ZF+S9Eq6dimNzHWGXtdSSL8R6tb42i721A8ipARJHDg=)
                          3: 4CE75372B9DE11EEBC5B0D21C4F9AE02.roa (hash: fuTljzKvBea7sJt2VNckungbhAnkDIYji3I6D462WJ8=)
                          4: 1DBC9D405DB411EEA017251AC4F9AE02.roa (hash: MORsfRo625k6Z6J+RgEowsAvarYUIEu/pPax0H0xX08=)
                          5: 4999305414DF11EEAB46A86DC4F9AE02.roa (hash: SP9KLqagmi8apHAQ/A1PSM4jrXC2JUZTS6enHcX0VwU=)
                          6: 4B52A44814DF11EEAB46A86DC4F9AE02.roa (hash: TptByVGgUQdWR0MavGH9OYmCsbH/nXydqU06KChwsXI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.crl
                          rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Oct 2026 16:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7993 (0x1f39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4B1A, serialNumber=CE114680FF6F4D9BC3F1880D610D6AEEEAEBF0D4
        Validity
            Not Before: Sep 28 16:03:42 2026 GMT
            Not After : Oct  5 16:03:42 2026 GMT
        Subject: CN=6aba8fde-0c67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c6:26:ae:3b:6d:b1:f4:1c:2e:86:ff:2f:b1:
                    6b:57:9f:d5:19:46:61:6e:a4:2f:ba:6a:30:ec:cc:
                    a5:30:49:a5:0f:8a:af:24:cd:fb:fb:1b:97:0b:0d:
                    45:20:a4:46:6b:f1:46:24:3d:44:d7:fa:ed:67:17:
                    91:b1:c3:f1:3a:f4:4c:0c:f4:5f:86:fa:97:86:37:
                    1a:62:11:ec:9c:ed:4d:ef:87:da:4a:2f:f5:c2:23:
                    cf:4f:e6:af:f0:ed:d4:61:c9:cb:84:6d:43:80:dd:
                    ac:ee:83:ce:a3:3f:fd:89:2a:5d:3a:62:e9:50:db:
                    4b:20:56:35:41:e5:15:3a:2f:d9:e2:41:1c:29:11:
                    b7:26:06:e5:57:0c:00:63:d3:5d:cc:9b:f0:ed:d4:
                    fd:0b:93:99:f0:bb:16:6a:59:77:27:7f:19:77:1c:
                    10:da:a9:c0:18:06:7f:5c:7a:1e:e1:09:db:7e:f7:
                    1a:16:db:2a:61:33:9e:af:de:a5:c8:67:56:95:96:
                    62:b7:b4:6c:68:60:b1:27:cd:43:b3:7f:5a:11:5c:
                    ec:a8:c9:28:73:fc:2c:20:4c:49:e0:1f:2e:3b:ba:
                    9e:e8:32:92:85:54:c7:d9:dd:59:67:ec:f7:f6:e1:
                    e6:a6:8a:81:8c:2a:8e:ca:b7:21:b6:ff:79:0f:2e:
                    5e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:7C:82:91:30:5E:52:A8:38:E9:7E:D7:69:B9:FA:05:87:12:64:C6
            X509v3 Authority Key Identifier:
                keyid:CE:11:46:80:FF:6F:4D:9B:C3:F1:88:0D:61:0D:6A:EE:EA:EB:F0:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:d6:b7:25:4f:0b:04:66:c0:77:fd:84:c7:4d:5f:bd:83:57:
         17:6a:ad:8a:84:96:31:f7:29:24:53:7e:fe:cf:71:dd:54:e4:
         8e:ad:f7:95:96:35:1c:a3:5f:09:5c:2a:a0:5c:5c:4d:8f:68:
         73:7f:42:b8:37:69:7c:88:b7:c2:7a:f8:24:3c:aa:bb:e3:45:
         07:a2:25:69:c2:64:4c:46:db:fe:7b:50:8c:ea:0c:d2:11:0a:
         15:d1:9a:4d:97:55:ed:5f:ba:f0:06:62:21:1d:68:69:2d:36:
         a9:9f:3f:e7:db:02:ac:21:43:14:26:30:8d:39:2d:3c:75:dd:
         58:61:3c:0d:28:a8:e3:7c:f9:14:9b:7b:d4:55:00:56:ea:8c:
         1e:c3:7e:2e:31:45:08:9f:69:f5:92:2e:dd:eb:76:2f:35:4e:
         f7:2d:9b:3d:97:91:fc:24:86:39:e4:5f:5a:e0:4b:fe:05:7c:
         55:4d:eb:92:49:a5:cf:d9:eb:c8:3d:b7:6b:90:b2:59:cb:cb:
         6c:ad:8d:44:fc:7b:cf:5a:ec:8f:36:75:86:f0:55:df:16:d8:
         b2:1e:a6:8b:a0:b7:35:b6:ea:a7:5f:43:ae:54:ed:74:49:58:
         b2:c3:2d:72:44:d6:32:fe:bb:23:ed:3d:de:07:3c:90:8c:ec:
         a7:de:4e:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 20:59:30 2026 by rpki-client