Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CDA42/CCAFCAFEB1BA11F1A69E71483911F970/RPZMRz46Y41Z4YoK-iONzYeYx1Q.mft
File:                     RPZMRz46Y41Z4YoK-iONzYeYx1Q.mft (raw, json)
Hash identifier:          RqvxLyb8wsl3JfO70Mm1remlUnyWb6G7NVYUy/hQHlA=
Subject key identifier:   27:A9:86:05:BA:98:F3:3C:ED:0F:DB:22:2A:36:BA:A9:2B:E2:E8:6D
Authority key identifier: 44:F6:4C:47:3E:3A:63:8D:59:E1:8A:0A:FA:23:8D:CD:87:98:C7:54
Certificate issuer:       /CN=A91CDA42/serialNumber=44F64C473E3A638D59E18A0AFA238DCD8798C754
Certificate serial:       07
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RPZMRz46Y41Z4YoK-iONzYeYx1Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CDA42/CCAFCAFEB1BA11F1A69E71483911F970/RPZMRz46Y41Z4YoK-iONzYeYx1Q.mft
Manifest number:          06
Signing time:             Wed 23 Sep 2026 09:01:05 +0000
Manifest this update:     Wed 23 Sep 2026 09:01:04 +0000
Manifest next update:     Wed 30 Sep 2026 09:01:04 +0000
Files and hashes:         1: RPZMRz46Y41Z4YoK-iONzYeYx1Q.crl (hash: 2hezan7OHL0wSQ+4v9zw3Bivg12nBAEnvDU6mdA4PuI=)
                          2: DZr8Whm9G0q2UTY6ATAt2PQNZKU.asa (hash: EQuIyZqz36tlNEX2RXbyf/oGDe/1+hdr6fH5I/bv7Ms=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CDA42/CCAFCAFEB1BA11F1A69E71483911F970/RPZMRz46Y41Z4YoK-iONzYeYx1Q.crl
                          rsync://rpki.apnic.net/member_repository/A91CDA42/CCAFCAFEB1BA11F1A69E71483911F970/RPZMRz46Y41Z4YoK-iONzYeYx1Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RPZMRz46Y41Z4YoK-iONzYeYx1Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 09:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CDA42, serialNumber=44F64C473E3A638D59E18A0AFA238DCD8798C754
        Validity
            Not Before: Sep 23 09:01:04 2026 GMT
            Not After : Sep 30 09:01:04 2026 GMT
        Subject: CN=6ab39550-c66e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:61:f3:13:53:b5:91:8b:3e:b0:61:8a:55:bb:
                    09:f4:da:e0:ec:c9:bf:a3:57:9c:f7:88:d8:41:44:
                    8c:8e:6d:7d:d2:9e:2a:bf:8c:04:d2:85:c3:9e:2f:
                    a2:76:0a:a6:b4:99:d3:ad:50:5d:fc:19:a1:2e:5a:
                    9b:d8:07:ca:d4:a2:48:c1:8a:cc:18:fd:97:9f:b9:
                    69:61:43:e4:f9:f4:b0:cf:d5:4a:d0:a8:c5:97:80:
                    86:22:bc:54:73:85:b4:25:94:3d:bb:5a:d1:43:2a:
                    cc:74:e0:4e:5b:59:6d:ed:4d:64:6a:33:33:b3:e7:
                    7d:49:7c:4d:6f:3f:93:00:4b:d3:6c:f9:20:f8:7c:
                    68:73:99:ac:b1:cf:34:14:42:da:b7:28:64:25:62:
                    ab:64:85:d8:23:a3:a6:b9:84:b5:0f:dc:93:4d:c2:
                    ed:f4:1c:e0:92:2b:4b:cf:49:45:c5:1c:87:29:ef:
                    f7:0e:da:8e:cf:41:2a:3b:ae:aa:38:bb:ea:69:3e:
                    88:cc:32:32:b7:bd:2d:4e:1d:72:6f:37:b9:46:d0:
                    39:33:2e:09:dc:d0:25:90:b1:02:4a:79:a8:7f:67:
                    bc:fa:8b:2a:6b:44:fe:b7:b9:9c:a8:58:97:44:31:
                    23:28:f3:c3:db:20:c2:c4:64:61:ed:c2:0e:5c:4a:
                    1b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:A9:86:05:BA:98:F3:3C:ED:0F:DB:22:2A:36:BA:A9:2B:E2:E8:6D
            X509v3 Authority Key Identifier:
                keyid:44:F6:4C:47:3E:3A:63:8D:59:E1:8A:0A:FA:23:8D:CD:87:98:C7:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CDA42/CCAFCAFEB1BA11F1A69E71483911F970/RPZMRz46Y41Z4YoK-iONzYeYx1Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RPZMRz46Y41Z4YoK-iONzYeYx1Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDA42/CCAFCAFEB1BA11F1A69E71483911F970/RPZMRz46Y41Z4YoK-iONzYeYx1Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:83:71:93:0b:4c:06:75:ee:61:9e:0f:3a:c1:fc:55:bc:b3:
         af:de:2c:c9:89:03:ce:dd:5e:3c:52:01:b6:9d:11:c7:04:c1:
         37:41:d7:2a:c9:80:ae:c6:90:a8:5d:da:44:a8:b8:52:62:6d:
         bd:ec:b5:23:8b:b4:32:37:93:ea:d6:4f:68:51:f0:37:f7:44:
         64:14:f1:76:32:b7:53:1f:15:16:e1:e6:80:96:f8:12:86:7d:
         28:fc:b7:ef:15:52:ca:88:91:26:da:f4:71:3f:13:82:91:36:
         bc:22:2a:33:61:df:00:24:8e:7c:9e:ff:49:77:72:cf:a9:4b:
         82:f8:60:04:90:66:c3:49:bf:55:d0:cd:9b:a0:5f:d6:2b:ba:
         68:c9:d3:18:48:47:bd:e1:12:dc:4e:a7:30:e2:46:3d:d3:50:
         14:e6:de:f0:b6:2d:0a:8c:3b:73:27:39:e1:19:a0:78:96:00:
         a0:9e:78:d2:a8:70:71:33:b9:f2:60:51:93:95:94:c0:87:c1:
         2a:af:50:b3:bc:3b:6a:21:dd:d6:24:6d:42:d7:b3:10:a6:1e:
         31:02:bb:91:9b:c2:ab:92:56:b8:92:64:b0:e1:d9:a0:6d:9d:
         85:09:f7:f3:5f:71:0f:98:f9:dc:d7:0e:b4:0b:e2:cd:e8:b0:
         bf:7e:0f:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:47:55 2026 by rpki-client