Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F2F18/09504348FB6511EFB45A8966C4F9AE02/zupmODV1Y6xVdo8A2E0nezpjxEk.mft
File:                     zupmODV1Y6xVdo8A2E0nezpjxEk.mft (raw, json)
Hash identifier:          xxHCiYm/b/xSFdf6j7k1SopOAbfUMO18QQcC50H8E1I=
Subject key identifier:   EA:FA:1D:21:E0:A7:46:C9:AC:D4:2C:12:38:FB:DF:9C:D7:6E:A8:91
Authority key identifier: CE:EA:66:38:35:75:63:AC:55:76:8F:00:D8:4D:27:7B:3A:63:C4:49
Certificate issuer:       /CN=A91F2F18/serialNumber=CEEA6638357563AC55768F00D84D277B3A63C449
Certificate serial:       0134
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zupmODV1Y6xVdo8A2E0nezpjxEk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F2F18/09504348FB6511EFB45A8966C4F9AE02/zupmODV1Y6xVdo8A2E0nezpjxEk.mft
Manifest number:          012C
Signing time:             Fri 09 Oct 2026 06:22:17 +0000
Manifest this update:     Fri 09 Oct 2026 06:22:16 +0000
Manifest next update:     Fri 16 Oct 2026 06:22:16 +0000
Files and hashes:         1: zupmODV1Y6xVdo8A2E0nezpjxEk.crl (hash: mFKLf9K+7foWZLlWZhPxObGTejyhB4hsj7SvYSlcMso=)
                          2: 65FCC030FB6511EF88F1AD24C4F9AE02.roa (hash: R0DPi+gCEM4E0p+D/Qj5W33hKErsLZCVNvWPk/SawTo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F2F18/09504348FB6511EFB45A8966C4F9AE02/zupmODV1Y6xVdo8A2E0nezpjxEk.crl
                          rsync://rpki.apnic.net/member_repository/A91F2F18/09504348FB6511EFB45A8966C4F9AE02/zupmODV1Y6xVdo8A2E0nezpjxEk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zupmODV1Y6xVdo8A2E0nezpjxEk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 06:22:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 308 (0x134)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F2F18, serialNumber=CEEA6638357563AC55768F00D84D277B3A63C449
        Validity
            Not Before: Oct  9 06:22:16 2026 GMT
            Not After : Oct 16 06:22:16 2026 GMT
        Subject: CN=6ac88819-1efc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:4d:41:4d:0b:ae:4b:c9:5a:e6:da:6e:83:3d:
                    e4:fa:b2:3a:6e:31:86:4d:0b:fc:de:1d:43:5a:df:
                    52:d6:2c:8e:16:1e:27:70:1d:ea:76:fe:29:5a:b5:
                    2f:24:5e:88:94:75:7e:40:c6:e2:bd:f5:03:4a:bc:
                    e9:34:d8:e0:8a:92:a2:b7:d2:a1:02:a3:f1:80:44:
                    fa:04:f9:2d:8b:7b:8f:2b:2d:82:ea:4e:f0:21:2b:
                    dd:cd:6b:a4:6f:95:8c:49:14:e7:52:d5:17:3e:76:
                    ab:47:5c:2d:a8:07:2a:45:5f:90:07:57:6f:44:32:
                    4b:d6:86:fb:7f:4b:06:5e:6e:10:cc:28:89:b6:9e:
                    cd:13:ed:eb:2b:73:d7:93:81:72:8c:dc:bb:39:30:
                    2e:b7:b0:68:33:6a:e8:56:2a:a8:ed:5f:46:8b:bc:
                    3f:d7:fc:93:fb:33:59:77:96:d1:bf:4c:f1:02:8f:
                    35:0f:8d:f1:14:bb:6a:9a:73:95:cd:f5:81:f0:5b:
                    5e:60:d7:00:76:c1:19:12:99:15:5a:08:51:c2:3e:
                    bf:d6:fa:42:c1:0b:5b:7f:45:f9:ae:b9:a5:1b:2d:
                    8f:46:ff:1e:b1:c6:0d:1f:05:6c:6b:4b:2b:5d:26:
                    e0:74:6e:43:e7:1b:15:de:8e:30:1f:33:98:78:95:
                    02:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:FA:1D:21:E0:A7:46:C9:AC:D4:2C:12:38:FB:DF:9C:D7:6E:A8:91
            X509v3 Authority Key Identifier:
                keyid:CE:EA:66:38:35:75:63:AC:55:76:8F:00:D8:4D:27:7B:3A:63:C4:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F2F18/09504348FB6511EFB45A8966C4F9AE02/zupmODV1Y6xVdo8A2E0nezpjxEk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zupmODV1Y6xVdo8A2E0nezpjxEk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2F18/09504348FB6511EFB45A8966C4F9AE02/zupmODV1Y6xVdo8A2E0nezpjxEk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:94:b7:07:13:b0:7e:49:96:d7:c9:9b:e0:91:d7:d1:a4:43:
         08:49:05:36:32:06:ab:97:95:d4:f1:2c:ca:aa:fa:e8:46:57:
         67:a8:02:0d:e6:8a:e3:85:16:f4:a4:3b:e8:bb:4c:c3:dd:4f:
         29:1f:88:50:5c:32:47:bf:8e:17:05:27:dd:aa:43:d6:b7:26:
         28:4a:61:fa:0b:d5:d1:e8:7f:12:0f:34:e1:f8:cf:e8:87:44:
         c2:98:f0:3e:de:cc:b0:75:a8:a7:85:72:e2:e6:e9:d0:a2:c8:
         ef:83:d5:d9:01:f9:17:26:57:6c:47:10:06:e0:46:5c:a3:dd:
         df:e4:66:fd:5b:8b:a0:9f:2d:a6:b8:8c:2a:2e:86:47:c4:ab:
         5f:70:77:0a:cd:0b:4f:b3:c1:7c:17:44:eb:3a:03:40:93:27:
         13:4f:c7:5b:16:4e:bc:c4:e0:8a:fd:6f:d7:b4:1d:c7:47:97:
         a6:82:5c:c3:7f:98:76:cb:08:d7:aa:46:ce:7e:b7:b3:d2:45:
         79:fa:a9:1b:9c:6b:39:73:17:66:ff:6a:df:2b:82:fe:88:d1:
         a3:14:b3:af:d1:13:93:51:91:7c:5d:46:a2:72:9d:93:c5:ab:
         f1:62:08:f2:b5:9f:c5:0c:f6:e4:cd:f3:25:d4:5e:c1:24:99:
         0d:fa:60:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 22:45:49 2026 by rpki-client