Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CB435/F5E627245ECE11EF8854CA5EC4F9AE02/ZtnYF_hsgts986HE2XDyqoXKrX4.mft
File:                     ZtnYF_hsgts986HE2XDyqoXKrX4.mft (raw, json)
Hash identifier:          /UYDPa+XGft+P20cathcuIEYo7KK6vZGp7SF+HbFeoM=
Subject key identifier:   11:39:F7:8A:ED:38:4A:02:17:5A:5B:3C:56:ED:8F:24:C9:D7:AE:3B
Authority key identifier: 66:D9:D8:17:F8:6C:82:DB:3D:F3:A1:C4:D9:70:F2:AA:85:CA:AD:7E
Certificate issuer:       /CN=A91CB435/serialNumber=66D9D817F86C82DB3DF3A1C4D970F2AA85CAAD7E
Certificate serial:       0193
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZtnYF_hsgts986HE2XDyqoXKrX4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CB435/F5E627245ECE11EF8854CA5EC4F9AE02/ZtnYF_hsgts986HE2XDyqoXKrX4.mft
Manifest number:          018F
Signing time:             Thu 24 Sep 2026 21:20:00 +0000
Manifest this update:     Thu 24 Sep 2026 21:20:00 +0000
Manifest next update:     Thu 01 Oct 2026 21:20:00 +0000
Files and hashes:         1: ZtnYF_hsgts986HE2XDyqoXKrX4.crl (hash: YZw/dxgA0zFhG1EGUawGzlmW4BOmhbsO/xoZ3toezNI=)
                          2: ACF3D2085ED011EFA4FAB861C4F9AE02.roa (hash: 4De+ftW6AlydF3aj182yhRL0S4HDbta7pD0izCS8LQo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CB435/F5E627245ECE11EF8854CA5EC4F9AE02/ZtnYF_hsgts986HE2XDyqoXKrX4.crl
                          rsync://rpki.apnic.net/member_repository/A91CB435/F5E627245ECE11EF8854CA5EC4F9AE02/ZtnYF_hsgts986HE2XDyqoXKrX4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZtnYF_hsgts986HE2XDyqoXKrX4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 21:19:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 403 (0x193)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CB435, serialNumber=66D9D817F86C82DB3DF3A1C4D970F2AA85CAAD7E
        Validity
            Not Before: Sep 24 21:20:00 2026 GMT
            Not After : Oct  1 21:20:00 2026 GMT
        Subject: CN=6ab59400-f0b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:be:8e:cc:35:63:88:35:30:06:d1:bd:9d:aa:
                    fe:40:9b:95:d3:2f:ed:3f:b3:f8:ca:0f:3a:cf:e6:
                    4f:87:e8:1c:55:a8:7d:b1:1b:0e:51:6f:f5:cf:9c:
                    a0:5c:bc:52:9a:63:fd:5d:1d:56:8b:8c:19:67:43:
                    ad:4d:8c:5c:41:f0:04:7d:88:88:0a:b1:5d:6e:da:
                    c1:28:3c:bd:25:72:24:f6:d8:6b:8b:cf:2b:06:00:
                    38:ed:b5:12:b8:dc:02:15:08:c1:26:cc:38:84:79:
                    3e:30:cc:58:13:0d:2e:a9:e2:a4:92:1b:f4:3a:1b:
                    65:80:48:a4:eb:32:fe:07:20:ef:b0:ed:08:0f:1a:
                    82:7a:0b:3c:1e:ac:46:96:f8:9a:e4:6c:7f:cb:26:
                    2d:14:88:6b:fb:81:d6:a3:c3:9b:85:ff:ff:65:ff:
                    21:a0:6f:08:d9:a3:f5:d2:7f:a9:ec:70:21:32:6e:
                    7f:b3:91:82:92:47:46:9d:68:d0:05:0d:d0:c4:b6:
                    b5:8e:8d:c6:92:67:2e:6a:b1:85:b1:c0:d3:92:4e:
                    6e:eb:4e:b0:b0:6c:7a:f8:cc:be:fe:61:51:82:b5:
                    4c:ea:55:aa:5f:1e:bd:05:f7:c5:78:ba:8c:7b:92:
                    2b:2f:41:1f:9d:25:c4:85:c0:42:6d:31:37:39:23:
                    38:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:39:F7:8A:ED:38:4A:02:17:5A:5B:3C:56:ED:8F:24:C9:D7:AE:3B
            X509v3 Authority Key Identifier:
                keyid:66:D9:D8:17:F8:6C:82:DB:3D:F3:A1:C4:D9:70:F2:AA:85:CA:AD:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CB435/F5E627245ECE11EF8854CA5EC4F9AE02/ZtnYF_hsgts986HE2XDyqoXKrX4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZtnYF_hsgts986HE2XDyqoXKrX4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB435/F5E627245ECE11EF8854CA5EC4F9AE02/ZtnYF_hsgts986HE2XDyqoXKrX4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:f5:9a:d5:54:73:81:a5:eb:55:41:30:29:a7:54:2d:0d:e2:
         da:2d:32:88:2a:f1:b8:b2:95:1b:79:f4:6a:9b:3b:d7:b3:c3:
         42:96:7e:9e:d9:f8:77:a1:a5:79:4a:89:15:83:19:1d:1d:c4:
         67:f0:08:44:c9:5f:93:92:a7:c6:97:e3:48:6a:64:b6:ab:70:
         f8:1e:3e:58:82:3b:c1:eb:d0:3c:f0:98:35:c8:a4:40:89:55:
         5c:1b:90:a3:9d:50:00:e0:59:af:66:b9:50:5c:39:ac:4a:ef:
         c8:a0:18:8e:73:a8:87:bd:e2:5a:2f:f1:cb:37:b6:7c:d7:a7:
         a4:48:e6:0c:c9:f0:a7:ca:85:e8:c9:bd:c5:e7:2a:38:fb:4b:
         f4:c3:35:03:5e:13:86:41:33:c3:a7:9d:2c:85:78:12:00:4b:
         9c:55:26:3a:f9:21:1e:d8:de:4b:45:28:3c:8c:3d:f2:32:d5:
         9f:95:cf:0b:f6:e5:4c:02:19:9e:5a:14:1c:5b:8d:8b:15:df:
         4c:1b:c3:c3:3a:5a:f9:99:db:8c:e0:fb:92:64:4a:30:42:80:
         9b:dd:2e:01:d5:70:3f:fe:47:09:ba:ac:f6:f3:f0:35:fc:dc:
         b9:33:5f:3e:6d:70:12:9a:4b:2e:ef:03:a7:36:08:03:70:82:
         0b:30:b9:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:16:38 2026 by rpki-client