Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C430B/8236E260A7CE11F097894528C4F9AE02/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.mft
File:                     0Zu2jjzNxLeM42-H-U5_cQUSOiQ.mft (raw, json)
Hash identifier:          zHAH4vEY3JI+o5XBB0DWxBdyZPFLxhbkQ279rjwnDnU=
Subject key identifier:   24:39:51:A0:16:B6:21:A9:88:4C:77:8D:CE:87:AF:A5:38:75:CC:05
Authority key identifier: D1:9B:B6:8E:3C:CD:C4:B7:8C:E3:6F:87:F9:4E:7F:71:05:12:3A:24
Certificate issuer:       /CN=A91C430B/serialNumber=D19BB68E3CCDC4B78CE36F87F94E7F7105123A24
Certificate serial:       CC
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C430B/8236E260A7CE11F097894528C4F9AE02/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.mft
Manifest number:          C3
Signing time:             Fri 09 Oct 2026 07:35:35 +0000
Manifest this update:     Fri 09 Oct 2026 07:35:35 +0000
Manifest next update:     Fri 16 Oct 2026 07:35:35 +0000
Files and hashes:         1: 0Zu2jjzNxLeM42-H-U5_cQUSOiQ.crl (hash: x7NyCrPs3d4MD12Y+n3id7JRNzXLEEm7gjpOwrP+nG8=)
                          2: 8988B2165DB111F1AB23B9ACA3833773.roa (hash: ad65XTYzHUp3cWmiBJTHs+rg9KKlQlfXiUUJuwHLk8k=)
                          3: 9484A13A622E11F1A36ED3DF7447A888.roa (hash: Kqin5t6HoE32APIOaQFq882jyRgeaOI3EzjEp6mHGyQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C430B/8236E260A7CE11F097894528C4F9AE02/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.crl
                          rsync://rpki.apnic.net/member_repository/A91C430B/8236E260A7CE11F097894528C4F9AE02/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 07:35:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 204 (0xcc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C430B, serialNumber=D19BB68E3CCDC4B78CE36F87F94E7F7105123A24
        Validity
            Not Before: Oct  9 07:35:35 2026 GMT
            Not After : Oct 16 07:35:35 2026 GMT
        Subject: CN=6ac89947-1fa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d4:41:4e:de:7f:24:e5:05:49:09:a9:88:36:
                    b1:99:e2:78:29:18:72:9e:68:70:67:b1:34:7b:de:
                    6e:48:80:9e:7e:1b:3e:5c:33:94:02:00:6f:a5:88:
                    e4:75:28:07:ad:31:8d:ce:99:31:be:1b:05:df:79:
                    01:74:8b:66:63:59:ce:1f:80:a7:f6:45:99:d1:74:
                    68:26:ba:9a:33:28:a5:75:f0:6d:3d:54:5c:63:f9:
                    9b:a6:a7:01:0c:25:36:b7:ac:95:48:f0:93:77:8d:
                    cf:76:c4:0e:7f:cb:fb:9e:3a:da:59:fe:fa:5b:81:
                    4e:19:de:4f:c8:bc:2e:f5:29:33:67:d9:73:a4:c6:
                    b0:ae:ae:36:1a:75:b0:29:eb:69:10:5d:33:63:29:
                    28:29:8b:68:53:e5:0a:88:3d:0a:82:2a:97:33:dd:
                    eb:95:4a:df:83:e9:f8:f9:37:f9:a2:e4:95:4f:0f:
                    c1:21:ea:b6:fa:73:68:60:b8:46:bd:21:6f:dd:cb:
                    cd:5a:0f:15:a1:0f:ad:3b:46:2e:60:24:58:3a:41:
                    06:55:ce:83:5d:57:45:fb:97:72:1d:5e:e3:dd:e3:
                    c1:07:35:ee:48:63:3b:33:0b:1d:98:f3:2e:e2:c6:
                    f1:1f:c3:85:fa:c3:da:01:3c:60:0e:c7:ba:0e:9f:
                    7d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:39:51:A0:16:B6:21:A9:88:4C:77:8D:CE:87:AF:A5:38:75:CC:05
            X509v3 Authority Key Identifier:
                keyid:D1:9B:B6:8E:3C:CD:C4:B7:8C:E3:6F:87:F9:4E:7F:71:05:12:3A:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C430B/8236E260A7CE11F097894528C4F9AE02/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C430B/8236E260A7CE11F097894528C4F9AE02/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:6d:84:18:d2:2d:07:bb:7f:7c:14:3f:2b:7d:e9:8f:b0:57:
         a0:b6:2f:c2:3a:60:2c:8a:1b:8b:b6:37:a6:5f:40:b9:b5:0f:
         8a:5f:1f:3d:54:1a:4b:aa:16:06:20:c3:5c:31:8c:c4:dd:6c:
         17:87:60:24:42:cb:f5:f1:b3:f6:58:30:a8:6d:17:c0:b7:46:
         27:a7:a9:92:9a:c5:06:5d:af:65:4b:5e:e7:70:e5:47:73:75:
         1b:b8:f7:1a:3b:f3:41:43:bb:53:d8:5f:1f:88:03:2d:db:90:
         13:81:1e:81:24:33:dd:03:ff:c3:1a:54:90:40:31:f8:f3:74:
         e7:9f:5e:96:9d:77:47:a1:13:70:a6:6e:74:49:fa:ad:75:55:
         76:3e:ed:7c:79:be:c5:96:36:b9:fa:7d:f1:21:3a:8d:5c:b6:
         dc:e1:b2:d1:24:52:4c:22:a1:94:93:11:4f:fc:86:4b:32:f0:
         16:5b:c9:1a:ba:b5:10:30:df:1b:34:b4:93:5a:c7:10:51:87:
         63:ab:35:87:f6:49:b4:b0:46:41:50:46:7e:af:f1:31:3c:d1:
         75:0c:d8:00:af:bb:10:02:20:d0:26:3c:1a:af:dc:19:4b:05:
         16:06:71:ea:19:f3:3d:06:f7:b6:2b:fc:2b:d8:b0:ce:a7:6e:
         54:88:a0:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 11:29:02 2026 by rpki-client