Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B8C12/3ED0852691A611EDB72C5956C4F9AE02/zI7F8Y4keEmlxwbphTthhkju8qY.mft
File:                     zI7F8Y4keEmlxwbphTthhkju8qY.mft (raw, json)
Hash identifier:          w43DUfc5sfqYBC3X/WpesAcwVDRKLdHjmpmwuZvIKv4=
Subject key identifier:   C8:86:B2:DB:56:B6:7C:5B:47:E9:91:AA:11:86:1F:BB:61:10:5C:FF
Authority key identifier: CC:8E:C5:F1:8E:24:78:49:A5:C7:06:E9:85:3B:61:86:48:EE:F2:A6
Certificate issuer:       /CN=A91B8C12/serialNumber=CC8EC5F18E247849A5C706E9853B618648EEF2A6
Certificate serial:       02BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zI7F8Y4keEmlxwbphTthhkju8qY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B8C12/3ED0852691A611EDB72C5956C4F9AE02/zI7F8Y4keEmlxwbphTthhkju8qY.mft
Manifest number:          02B4
Signing time:             Wed 23 Sep 2026 01:18:16 +0000
Manifest this update:     Wed 23 Sep 2026 01:18:15 +0000
Manifest next update:     Wed 30 Sep 2026 01:18:15 +0000
Files and hashes:         1: zI7F8Y4keEmlxwbphTthhkju8qY.crl (hash: rY9C13a4rkioWzkwkG9SYLbemZ8mFI4B/+bnu0QLUqw=)
                          2: F9141F4891AA11EDBEE1242EC4F9AE02.roa (hash: LRMRyi0qfmTYKdZdAepsqYbHljuHFX08sxSWDEzvATE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B8C12/3ED0852691A611EDB72C5956C4F9AE02/zI7F8Y4keEmlxwbphTthhkju8qY.crl
                          rsync://rpki.apnic.net/member_repository/A91B8C12/3ED0852691A611EDB72C5956C4F9AE02/zI7F8Y4keEmlxwbphTthhkju8qY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zI7F8Y4keEmlxwbphTthhkju8qY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 01:18:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 698 (0x2ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B8C12, serialNumber=CC8EC5F18E247849A5C706E9853B618648EEF2A6
        Validity
            Not Before: Sep 23 01:18:15 2026 GMT
            Not After : Sep 30 01:18:15 2026 GMT
        Subject: CN=6ab328d8-e292
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c5:93:3e:45:c5:33:a3:90:ea:4a:cf:64:3b:
                    f9:37:a0:9a:b1:0e:ff:18:60:dd:1e:f2:57:e1:7a:
                    cd:c9:2c:b7:7e:13:36:18:be:bf:44:1f:67:d1:a3:
                    40:81:fb:ea:55:2b:d6:e1:cd:ee:98:8b:7d:80:4d:
                    0a:a2:21:da:43:04:96:f6:f7:1d:59:f0:9b:60:f3:
                    9f:a6:96:a1:5d:35:d9:24:84:fc:bc:55:5f:f0:64:
                    3f:74:a7:52:2c:56:56:dc:96:58:9f:d3:91:b1:13:
                    9d:36:e4:85:48:1e:e5:53:fe:a0:35:f7:d3:5f:a8:
                    00:f8:cc:3a:8c:16:a6:1a:77:b5:53:73:ea:61:e4:
                    cd:ea:85:20:a7:cf:c0:e8:5d:3a:cc:e5:89:67:0f:
                    94:da:9f:f2:25:98:75:64:c4:8d:3b:eb:82:3c:cc:
                    4a:cf:e5:81:f9:04:8f:e4:df:42:1b:36:45:45:d6:
                    f6:fa:71:30:a1:5d:95:0b:88:57:fa:6f:fb:81:f1:
                    fa:34:e9:5c:c9:17:50:1d:62:ad:cf:07:c9:a6:fc:
                    53:48:a7:43:a1:87:a1:2e:67:db:62:f3:2a:2d:1b:
                    6e:f7:ca:81:6f:24:3a:df:cd:13:a0:08:38:af:2b:
                    39:21:0c:b7:10:4e:2d:fb:35:1f:dd:54:88:a4:0a:
                    a0:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:86:B2:DB:56:B6:7C:5B:47:E9:91:AA:11:86:1F:BB:61:10:5C:FF
            X509v3 Authority Key Identifier:
                keyid:CC:8E:C5:F1:8E:24:78:49:A5:C7:06:E9:85:3B:61:86:48:EE:F2:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B8C12/3ED0852691A611EDB72C5956C4F9AE02/zI7F8Y4keEmlxwbphTthhkju8qY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zI7F8Y4keEmlxwbphTthhkju8qY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8C12/3ED0852691A611EDB72C5956C4F9AE02/zI7F8Y4keEmlxwbphTthhkju8qY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:02:9b:0a:fa:1f:10:af:8e:d9:f7:29:1e:4d:dd:08:15:0f:
         c2:0f:6c:09:13:17:fd:f1:17:06:d9:b3:0b:5b:c9:2b:84:9d:
         8f:85:41:14:24:48:54:91:14:dc:27:f6:59:fa:57:84:54:9e:
         10:5a:eb:b5:7d:3a:6a:fb:c0:04:0b:40:f6:4f:7d:ca:1e:cb:
         47:5a:5d:78:fe:32:75:ec:f9:e8:28:81:d1:33:d6:8e:06:1e:
         bd:35:f2:a9:bc:ed:f0:e7:94:6f:70:82:ec:7e:dc:bf:7b:89:
         84:18:b2:12:04:4a:e2:3e:58:77:bb:46:ad:16:ee:e4:cf:d4:
         79:b3:f4:88:6e:e3:7e:60:36:ac:b8:a2:7f:e8:95:f0:23:b6:
         44:aa:ae:b1:f3:84:64:b6:82:8c:0d:7c:f4:79:8b:ca:ac:6e:
         09:17:53:00:c8:15:f4:9e:3b:a4:52:e2:e8:85:1f:35:a2:aa:
         42:bd:64:46:67:82:61:6a:1b:60:8e:b2:91:b3:c7:b8:c9:1c:
         4b:13:8a:53:e5:b2:2d:5c:33:69:a6:cb:88:61:7c:d3:4a:d5:
         9c:41:29:db:31:59:ed:c3:f2:fe:31:ab:c4:81:b2:9e:85:86:
         e2:4d:ff:f6:c6:d6:26:03:71:f1:6d:05:72:71:9a:3e:b8:a8:
         95:0d:bb:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:40:41 2026 by rpki-client