Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.mft
File:                     _Z_UV0WCGIOHdsDcCO-2FVIB42g.mft (raw, json)
Hash identifier:          RQpqdyQck5F38GKvd8R4deCkHu4mNozma0EfYDmvpy0=
Subject key identifier:   73:BB:23:AF:AD:84:63:B9:42:81:76:B1:F3:24:B2:2B:81:B2:DA:C3
Authority key identifier: FD:9F:D4:57:45:82:18:83:87:76:C0:DC:08:EF:B6:15:52:01:E3:68
Certificate issuer:       /CN=A91C6DD8/serialNumber=FD9FD457458218838776C0DC08EFB6155201E368
Certificate serial:       35E9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.mft
Manifest number:          35B7
Signing time:             Thu 24 Sep 2026 14:27:53 +0000
Manifest this update:     Thu 24 Sep 2026 14:27:52 +0000
Manifest next update:     Thu 01 Oct 2026 14:27:52 +0000
Files and hashes:         1: _Z_UV0WCGIOHdsDcCO-2FVIB42g.crl (hash: 07WA6T9/Zvnh0TrgcG7n0RaCZM/rJEEUnVNLOukpKBo=)
                          2: 2DED29046A8E11EF948C2811C4F9AE02.roa (hash: XBUaXxbl5beMfJKKd1d1AjiKQNSMzNu7XbP3LC5jZ1k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.crl
                          rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 14:27:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13801 (0x35e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6DD8, serialNumber=FD9FD457458218838776C0DC08EFB6155201E368
        Validity
            Not Before: Sep 24 14:27:52 2026 GMT
            Not After : Oct  1 14:27:52 2026 GMT
        Subject: CN=6ab53369-c8f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ef:75:0c:37:64:c5:36:e8:78:25:fd:ca:e8:
                    99:68:e4:76:7d:84:31:db:8e:2c:24:33:fd:97:56:
                    1c:ce:89:a4:44:cb:99:3a:ad:5b:12:5f:37:8d:5e:
                    c5:5d:fb:0f:e5:41:ec:68:1f:55:40:48:c3:db:77:
                    20:19:7b:ab:e0:e3:c1:04:34:29:07:b0:25:2c:8e:
                    a5:94:da:73:b0:e1:55:ed:d7:b8:c9:30:64:b5:cc:
                    9c:0c:50:d6:24:75:c4:66:54:9d:4e:92:19:9c:e1:
                    b8:52:58:64:ae:37:ff:3a:8b:7e:54:5b:6b:8e:39:
                    42:89:d9:76:5f:30:e6:bc:eb:58:98:15:23:0a:45:
                    69:9d:17:48:a7:8c:7c:67:ed:6d:f0:07:bf:02:fb:
                    4c:a4:49:07:d0:fe:69:67:20:c0:ad:34:a2:56:58:
                    dc:5e:61:85:be:50:91:eb:30:23:2e:75:39:6f:7a:
                    89:44:5c:d8:1e:94:c9:49:26:8a:dc:fa:d7:22:ec:
                    19:15:d4:4d:f4:6b:86:b1:cc:7f:88:b9:69:03:e5:
                    7a:05:20:df:63:dd:7c:16:55:77:08:24:92:43:fb:
                    bc:cc:9f:d2:0f:c7:22:73:41:26:f9:c1:66:5f:0f:
                    64:1a:dc:f5:eb:77:db:b8:d1:fd:61:fc:af:2e:41:
                    12:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:BB:23:AF:AD:84:63:B9:42:81:76:B1:F3:24:B2:2B:81:B2:DA:C3
            X509v3 Authority Key Identifier:
                keyid:FD:9F:D4:57:45:82:18:83:87:76:C0:DC:08:EF:B6:15:52:01:E3:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:4d:71:94:91:3b:f5:69:11:79:78:ef:13:f2:89:dc:59:b5:
         82:17:b6:bc:c0:7a:46:20:32:a7:1b:87:c1:e9:8b:1e:71:bd:
         4e:ea:9a:d6:05:29:f7:17:16:00:06:b1:70:b9:04:50:e5:c0:
         0e:de:e0:3f:57:3e:e7:e3:1a:33:66:35:3d:ba:6a:89:b6:13:
         56:fa:93:86:d1:18:b3:10:fe:c3:47:19:d8:29:b9:3a:ba:83:
         5d:93:d5:78:13:0e:09:d3:41:35:c8:14:cc:05:d3:33:ba:4b:
         7f:af:38:0f:1b:d8:90:52:68:d0:5d:a6:b4:bf:e1:95:23:4f:
         24:5a:1f:09:d9:17:bf:bc:45:c8:7a:be:11:62:42:f7:58:d8:
         e9:eb:0d:55:3b:6c:f8:2d:4c:ba:99:b3:f0:8a:63:d3:2f:3b:
         52:d0:b2:59:f9:3f:c5:b0:a5:0a:52:f7:ec:3a:59:02:83:e1:
         0a:82:55:2f:12:0a:7c:49:2c:51:db:b0:90:07:a8:32:ed:ba:
         45:d5:ca:44:fa:eb:cf:8e:74:30:64:a5:c1:46:d3:13:e6:cc:
         87:3b:4a:2f:cc:11:ff:30:32:bc:1d:ef:53:7b:d1:2f:d7:30:
         a9:87:7a:ac:b0:83:05:99:6d:6d:c2:0c:16:a7:38:62:76:9b:
         59:6b:e2:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 19:45:54 2026 by rpki-client