Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AB9A1/57337ACA8D7911EB8D8BD60BC4F9AE02/zl8rQ5utW-vicqch6qzDj6rdSbQ.mft
File:                     zl8rQ5utW-vicqch6qzDj6rdSbQ.mft (raw, json)
Hash identifier:          skY87R3Q8XPW/+3l727+iW91lflEucCSPrVi1m1SyQI=
Subject key identifier:   B9:41:A7:39:47:B9:6C:99:02:A4:C6:C5:01:B8:62:9A:90:55:F4:B5
Authority key identifier: CE:5F:2B:43:9B:AD:5B:EB:E2:72:A7:21:EA:AC:C3:8F:AA:DD:49:B4
Certificate issuer:       /CN=A91AB9A1/serialNumber=CE5F2B439BAD5BEBE272A721EAACC38FAADD49B4
Certificate serial:       0751
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zl8rQ5utW-vicqch6qzDj6rdSbQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB9A1/57337ACA8D7911EB8D8BD60BC4F9AE02/zl8rQ5utW-vicqch6qzDj6rdSbQ.mft
Manifest number:          0751
Signing time:             Sat 10 Oct 2026 14:39:53 +0000
Manifest this update:     Sat 10 Oct 2026 14:39:52 +0000
Manifest next update:     Sat 17 Oct 2026 14:39:52 +0000
Files and hashes:         1: zl8rQ5utW-vicqch6qzDj6rdSbQ.crl (hash: P/A9pD1wu2mHtRxa0M3+xUae5Qz17FnUpkCs3+JIwcc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB9A1/57337ACA8D7911EB8D8BD60BC4F9AE02/zl8rQ5utW-vicqch6qzDj6rdSbQ.crl
                          rsync://rpki.apnic.net/member_repository/A91AB9A1/57337ACA8D7911EB8D8BD60BC4F9AE02/zl8rQ5utW-vicqch6qzDj6rdSbQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zl8rQ5utW-vicqch6qzDj6rdSbQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Oct 2026 14:39:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1873 (0x751)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB9A1, serialNumber=CE5F2B439BAD5BEBE272A721EAACC38FAADD49B4
        Validity
            Not Before: Oct 10 14:39:52 2026 GMT
            Not After : Oct 17 14:39:52 2026 GMT
        Subject: CN=6aca4e38-5c78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:43:e9:bd:98:0d:cc:55:6e:9d:21:f5:b1:44:
                    4f:cf:58:a9:81:f9:c6:8e:ae:77:fd:7b:12:ac:24:
                    a0:1a:22:db:25:ab:42:6a:3d:e7:e1:ac:69:19:c1:
                    99:e4:07:da:2d:11:60:37:59:cb:06:79:f9:57:c1:
                    80:94:5a:ff:21:1f:55:cc:86:b7:3f:48:5e:61:1a:
                    76:65:6d:b7:09:c7:e9:86:bb:e3:ca:8e:36:57:54:
                    d1:36:67:e3:a4:88:e4:f7:77:23:9b:b3:6e:b3:ea:
                    23:40:8b:88:67:d6:03:da:c1:9e:21:f8:54:b0:b1:
                    ae:59:85:81:dc:0b:6c:13:26:79:37:9a:f8:35:57:
                    b2:83:1e:e5:64:94:b8:46:a5:d0:9e:8d:8e:b1:a1:
                    82:5f:8f:df:5d:9d:5a:e8:de:1d:73:1d:1d:2b:4d:
                    53:6d:6e:3c:64:a0:2a:ed:9f:05:3c:45:72:05:df:
                    dc:f3:67:0d:2b:b9:56:8d:4e:c0:87:21:0e:c3:32:
                    e4:67:24:3c:45:2c:be:31:51:8f:63:34:07:65:20:
                    3a:4d:08:1b:33:52:ee:ec:be:ac:51:d5:a7:72:0c:
                    04:62:d8:2f:b7:f4:4c:b1:50:b0:b1:87:e9:7c:b8:
                    d0:6e:66:e8:2e:00:3a:5a:90:f1:9c:72:a4:10:17:
                    75:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:41:A7:39:47:B9:6C:99:02:A4:C6:C5:01:B8:62:9A:90:55:F4:B5
            X509v3 Authority Key Identifier:
                keyid:CE:5F:2B:43:9B:AD:5B:EB:E2:72:A7:21:EA:AC:C3:8F:AA:DD:49:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB9A1/57337ACA8D7911EB8D8BD60BC4F9AE02/zl8rQ5utW-vicqch6qzDj6rdSbQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zl8rQ5utW-vicqch6qzDj6rdSbQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB9A1/57337ACA8D7911EB8D8BD60BC4F9AE02/zl8rQ5utW-vicqch6qzDj6rdSbQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:9c:ea:49:af:1a:49:ee:75:4e:a2:ce:4d:0d:d3:a1:4f:9d:
         cf:01:4c:56:3c:50:3b:3d:06:ce:d1:53:70:ac:af:93:90:90:
         e6:71:3a:29:6b:21:90:fe:3c:fb:c1:e1:e7:37:55:8d:6e:ac:
         6a:78:47:d1:f7:d2:b0:72:6f:d1:48:f2:fe:cd:62:d2:30:31:
         6f:4a:55:10:62:d7:81:2e:d1:97:da:1a:dd:ed:ad:b0:46:8e:
         51:a8:ce:29:5e:2a:66:b1:e1:9d:a3:e0:cc:ee:6d:bd:35:36:
         89:11:0a:68:e9:a3:84:b3:a3:68:05:b3:8e:98:e7:ab:d4:ac:
         a5:84:b7:33:94:5e:af:14:95:cd:25:9b:1d:fb:09:9a:60:1e:
         87:e6:03:f0:2a:30:5b:53:0c:96:49:a4:59:74:c0:24:44:0d:
         76:7a:a9:a4:1a:4d:e0:d6:19:e3:23:21:7c:f0:58:8a:27:64:
         91:30:bc:d1:be:14:09:2b:bb:11:b9:a4:f9:56:28:d2:21:e9:
         74:5a:51:0c:25:24:27:6b:f7:ef:6c:4b:42:4e:21:e9:e9:b1:
         c8:f0:c4:9c:2a:8d:91:87:f0:5f:91:b3:e5:55:36:c3:96:1f:
         0e:56:9e:af:64:be:78:6f:4c:8f:52:72:69:ce:1e:4d:28:eb:
         19:05:88:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 07:07:59 2026 by rpki-client