Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911A557/92683E3AE86C11EFB232056EC4F9AE02/Z849nCahS83_mzOU0zVXZoIYoVY.mft
File:                     Z849nCahS83_mzOU0zVXZoIYoVY.mft (raw, json)
Hash identifier:          NFmVHECF6Jo27WTVBux6ImfEwRLPU2miDjNDNHI+NuE=
Subject key identifier:   CA:5E:A9:2C:50:B2:4F:65:8B:7C:62:1D:AE:C0:2E:D0:2A:23:04:A0
Authority key identifier: 67:CE:3D:9C:26:A1:4B:CD:FF:9B:33:94:D3:35:57:66:82:18:A1:56
Certificate issuer:       /CN=A911A557/serialNumber=67CE3D9C26A14BCDFF9B3394D33557668218A156
Certificate serial:       0147
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z849nCahS83_mzOU0zVXZoIYoVY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911A557/92683E3AE86C11EFB232056EC4F9AE02/Z849nCahS83_mzOU0zVXZoIYoVY.mft
Manifest number:          013D
Signing time:             Sun 11 Oct 2026 06:07:35 +0000
Manifest this update:     Sun 11 Oct 2026 06:07:35 +0000
Manifest next update:     Sun 18 Oct 2026 06:07:35 +0000
Files and hashes:         1: Z849nCahS83_mzOU0zVXZoIYoVY.crl (hash: 0i8J9BAXyKM5+/1h7XN5REyTuh6FB6A53LLgig0Q99E=)
                          2: C1D2BAAAE87711EFBE7C537EC4F9AE02.roa (hash: mBhPexFJCjhETjgQ1BBwLO6vkuwTxq2sdBYZtB3P694=)
                          3: 4550C0B2E86D11EF9AF14D6FC4F9AE02.roa (hash: rWwijXJAVvwDQWA01RBFKoOEEpLL7p1+vQhY5pyzCLI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911A557/92683E3AE86C11EFB232056EC4F9AE02/Z849nCahS83_mzOU0zVXZoIYoVY.crl
                          rsync://rpki.apnic.net/member_repository/A911A557/92683E3AE86C11EFB232056EC4F9AE02/Z849nCahS83_mzOU0zVXZoIYoVY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z849nCahS83_mzOU0zVXZoIYoVY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Oct 2026 06:07:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 327 (0x147)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911A557, serialNumber=67CE3D9C26A14BCDFF9B3394D33557668218A156
        Validity
            Not Before: Oct 11 06:07:35 2026 GMT
            Not After : Oct 18 06:07:35 2026 GMT
        Subject: CN=6acb27a7-af63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:47:01:fc:ec:f0:b1:f4:f8:23:db:6e:1c:da:
                    16:04:88:15:6b:8e:71:30:1f:fd:64:d6:fd:56:66:
                    30:69:49:bc:b0:4f:75:21:ab:8c:86:df:bd:8e:13:
                    db:3b:32:9c:44:d0:88:02:00:c3:15:ff:28:27:7f:
                    87:6e:f9:f1:76:bd:b3:fa:9b:96:4c:bc:85:43:05:
                    ec:75:a3:ce:1e:b7:37:42:a9:97:4c:19:42:51:b5:
                    83:26:9c:5f:1e:63:75:29:6c:4b:ca:15:31:e4:31:
                    74:48:b6:fb:75:ad:f7:9f:3b:65:02:22:d8:80:2f:
                    b5:a4:f1:9d:45:d1:9c:a6:21:b1:b0:bb:5d:7c:9a:
                    d0:e5:c8:db:2c:c7:8c:74:f2:3d:40:7c:39:d4:5d:
                    2d:83:9f:66:a5:d2:a0:cb:72:44:6e:90:d2:f8:40:
                    85:21:36:06:5e:18:8e:f8:75:88:70:2a:d3:d3:01:
                    a1:e7:85:5b:4a:a9:4b:66:db:f1:8b:4c:fb:05:73:
                    6a:63:0d:79:d7:af:5f:ba:ec:18:db:44:f7:9e:3e:
                    10:f8:d5:a4:e1:ae:16:74:4b:17:bf:87:88:fd:04:
                    01:9b:0b:eb:91:05:17:30:d3:71:b0:7c:3d:e5:43:
                    1d:7f:13:ae:52:51:7b:79:89:50:56:34:29:57:d5:
                    c7:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:5E:A9:2C:50:B2:4F:65:8B:7C:62:1D:AE:C0:2E:D0:2A:23:04:A0
            X509v3 Authority Key Identifier:
                keyid:67:CE:3D:9C:26:A1:4B:CD:FF:9B:33:94:D3:35:57:66:82:18:A1:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911A557/92683E3AE86C11EFB232056EC4F9AE02/Z849nCahS83_mzOU0zVXZoIYoVY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z849nCahS83_mzOU0zVXZoIYoVY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A557/92683E3AE86C11EFB232056EC4F9AE02/Z849nCahS83_mzOU0zVXZoIYoVY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:bd:0a:2e:d2:b2:6c:7e:eb:7e:89:98:9e:a4:7e:bc:46:6d:
         30:c7:c7:29:1c:d0:80:fb:75:a8:72:d7:ca:8a:a2:c2:e2:fe:
         cb:e2:c8:6e:f1:8a:67:e2:4d:e9:96:a0:f2:12:33:e4:62:18:
         7f:ba:54:ba:10:d7:27:84:18:21:75:c9:1b:2f:20:9c:28:d0:
         9c:90:e8:34:6f:9e:85:86:4d:2f:64:b9:73:90:dd:64:6c:1a:
         a6:0d:16:e9:8e:7e:d8:65:d0:0c:8b:02:c4:13:dc:ff:56:89:
         65:67:89:6c:ad:88:91:0e:78:d2:89:6c:8b:b4:44:a3:62:f7:
         96:48:69:cd:61:40:13:0d:81:44:b8:2f:e7:50:14:7a:38:c2:
         0e:6d:01:f1:18:8f:9d:59:fd:fb:7b:ce:9f:a6:54:e4:95:74:
         6b:8e:19:29:13:18:0f:47:66:36:e5:a6:fb:00:d8:58:14:64:
         4a:dc:4d:85:ad:64:99:4f:1f:50:9c:9e:1c:4f:c2:e6:a7:df:
         d9:93:02:e5:a6:0c:a2:69:9e:f7:a8:bf:69:9a:d8:62:30:a5:
         d4:35:54:30:5e:1f:87:61:dc:8b:ae:3b:fc:4f:c3:41:4d:5b:
         1c:f8:de:14:66:4a:11:34:39:b2:74:67:e1:d2:d9:ab:5c:7d:
         41:b5:f2:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 04:39:46 2026 by rpki-client