Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.mft
File:                     ZnYczRtMiDhOakBAKM2an4Cd4nY.mft (raw, json)
Hash identifier:          LCJZienpaqKALhPRKyW/ka74LsxEwN/Q4ewnLz7rrKA=
Subject key identifier:   40:C9:FD:16:62:DB:85:7F:3D:45:A6:98:74:C3:07:D9:26:DB:16:17
Authority key identifier: 66:76:1C:CD:1B:4C:88:38:4E:6A:40:40:28:CD:9A:9F:80:9D:E2:76
Certificate issuer:       /CN=A91C09C5/serialNumber=66761CCD1B4C88384E6A404028CD9A9F809DE276
Certificate serial:       0250
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZnYczRtMiDhOakBAKM2an4Cd4nY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.mft
Manifest number:          0230
Signing time:             Sun 27 Sep 2026 03:24:50 +0000
Manifest this update:     Sun 27 Sep 2026 03:24:50 +0000
Manifest next update:     Sun 04 Oct 2026 03:24:50 +0000
Files and hashes:         1: ZnYczRtMiDhOakBAKM2an4Cd4nY.crl (hash: TimLyde4zda/y2ipmKUXFDvDD9sdSDjm9/x1A0LVwXE=)
                          2: DA005346B44811F1BDFAF9214B11F970.roa (hash: Lut7JweVcMwFQnTAU9m2ttsawFzJYVRxrtD577Tvi5Q=)
                          3: 6AB0A70CB44811F1930E78154B11F970.roa (hash: iFUbSnCyWN7gfGMLlr0ahi3c3dkVQXvYVAnYds30OlE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.crl
                          rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZnYczRtMiDhOakBAKM2an4Cd4nY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 03:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 592 (0x250)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C09C5, serialNumber=66761CCD1B4C88384E6A404028CD9A9F809DE276
        Validity
            Not Before: Sep 27 03:24:50 2026 GMT
            Not After : Oct  4 03:24:50 2026 GMT
        Subject: CN=6ab88c82-138d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:aa:f0:05:10:6c:60:e0:51:65:c9:b0:d2:80:
                    e8:70:1f:e2:3b:e7:4d:ec:94:34:a8:35:9f:aa:e2:
                    b5:18:96:56:11:6a:2e:d9:6d:a1:f7:e4:82:c1:85:
                    2b:a7:59:84:79:73:40:22:06:75:7f:0c:31:ea:8d:
                    4a:a7:11:a8:99:63:fc:98:53:2a:ee:22:eb:a2:7e:
                    c8:9c:8c:3a:18:b7:be:8d:40:70:76:83:28:61:0d:
                    46:4f:79:4c:3e:a8:ec:69:db:db:0b:3b:a6:ff:70:
                    90:d5:78:3d:96:6f:17:86:1a:45:54:8c:1b:16:f4:
                    fd:bc:95:bb:07:5e:b0:ac:27:3c:4b:6f:15:af:bb:
                    eb:0b:73:72:bf:e8:6a:b1:8c:39:1c:fb:b6:ee:99:
                    40:ab:3a:27:3b:da:bd:9d:8a:05:9e:89:ed:0f:5a:
                    59:05:2a:6c:48:7a:22:11:7e:b8:bd:b7:b9:b7:2c:
                    16:19:d8:f2:b5:c2:12:3c:7e:a0:8c:74:00:5a:db:
                    da:2f:ad:43:a0:5b:cb:fe:ac:2b:88:c6:5e:bc:fc:
                    08:5e:02:af:84:9c:74:79:18:bd:c8:7e:e0:08:a0:
                    9d:12:bb:21:42:74:6c:0a:06:cd:f4:75:51:25:08:
                    06:7e:9f:d3:7e:d5:9f:bd:20:12:cc:98:3b:52:b4:
                    d5:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:C9:FD:16:62:DB:85:7F:3D:45:A6:98:74:C3:07:D9:26:DB:16:17
            X509v3 Authority Key Identifier:
                keyid:66:76:1C:CD:1B:4C:88:38:4E:6A:40:40:28:CD:9A:9F:80:9D:E2:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZnYczRtMiDhOakBAKM2an4Cd4nY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:aa:08:cd:9c:65:60:63:99:35:b5:cf:2e:8d:cd:61:03:e0:
         02:c6:9a:ac:9c:85:60:8e:87:d4:d3:d3:84:f4:a0:9c:3b:7c:
         7f:a8:ab:70:ea:1e:44:43:e1:4e:29:64:98:3a:82:93:26:b9:
         08:2a:da:7a:da:3a:05:51:2a:59:43:96:06:a6:01:2c:58:09:
         a0:60:f0:e1:d8:40:5c:f7:ba:ec:88:5b:bc:53:c3:88:86:6e:
         a8:ef:18:25:b4:bb:4e:e9:1f:84:01:53:1d:5e:2d:df:ec:45:
         64:43:e6:99:68:07:7d:72:ca:c6:d1:f9:ee:fb:5b:56:b1:01:
         10:e9:f9:1b:f9:f9:c3:2d:f8:5a:d3:43:31:1c:37:1a:b4:68:
         a4:bc:b5:a7:82:6f:2f:fa:7f:2a:b3:16:a9:6c:c3:92:19:0d:
         32:e1:fe:a7:30:9f:81:68:12:35:00:80:b6:28:ef:79:e6:1d:
         10:22:4c:b0:95:10:47:f2:b9:71:01:96:f0:28:66:29:b8:36:
         f0:fe:2e:f4:e3:e4:f1:80:62:9b:a6:da:76:ab:51:6c:29:75:
         23:13:27:5e:f2:9f:8a:a1:3e:39:aa:ff:c3:a2:dc:98:46:bf:
         90:8f:34:1e:d9:70:1c:a9:02:0c:25:17:d5:e3:09:d4:0b:1c:
         d4:c7:db:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:37:18 2026 by rpki-client