Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911B5AC/BC1F7DB6B92111F0BF4D3940C4F9AE02/ZFFVPgncJN3bxUBz5mJbGhbnUhM.mft
File:                     ZFFVPgncJN3bxUBz5mJbGhbnUhM.mft (raw, json)
Hash identifier:          uLyB3i0rDEbSMiXGHRJVCEHIoPlt/tCnRUjaB8ZfTHA=
Subject key identifier:   E3:4F:DF:91:5B:62:F0:36:FB:FB:CA:18:9F:69:B2:9E:3E:1B:DB:4E
Authority key identifier: 64:51:55:3E:09:DC:24:DD:DB:C5:40:73:E6:62:5B:1A:16:E7:52:13
Certificate issuer:       /CN=A911B5AC/serialNumber=6451553E09DC24DDDBC54073E6625B1A16E75213
Certificate serial:       AB
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZFFVPgncJN3bxUBz5mJbGhbnUhM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911B5AC/BC1F7DB6B92111F0BF4D3940C4F9AE02/ZFFVPgncJN3bxUBz5mJbGhbnUhM.mft
Manifest number:          AA
Signing time:             Wed 23 Sep 2026 01:08:10 +0000
Manifest this update:     Wed 23 Sep 2026 01:08:10 +0000
Manifest next update:     Wed 30 Sep 2026 01:08:10 +0000
Files and hashes:         1: ZFFVPgncJN3bxUBz5mJbGhbnUhM.crl (hash: YjZn4yyOKLYc3DD+7XSquCH2tF6+YLMaPV4MzHwd1mo=)
                          2: 94734132744F11F187348A036EA30FBC.roa (hash: j2i6IW/kxZ1OsDTycHA9hM2N9ZMvryaZuqMT34VfdNg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911B5AC/BC1F7DB6B92111F0BF4D3940C4F9AE02/ZFFVPgncJN3bxUBz5mJbGhbnUhM.crl
                          rsync://rpki.apnic.net/member_repository/A911B5AC/BC1F7DB6B92111F0BF4D3940C4F9AE02/ZFFVPgncJN3bxUBz5mJbGhbnUhM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZFFVPgncJN3bxUBz5mJbGhbnUhM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 01:08:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 171 (0xab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911B5AC, serialNumber=6451553E09DC24DDDBC54073E6625B1A16E75213
        Validity
            Not Before: Sep 23 01:08:10 2026 GMT
            Not After : Sep 30 01:08:10 2026 GMT
        Subject: CN=6ab3267a-7f3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:ea:c2:65:f5:24:0a:f1:a9:5d:af:70:a6:d7:
                    5f:f4:ab:c8:7a:5b:9d:8b:2e:60:38:b6:78:2c:aa:
                    cc:85:8a:1f:a6:7d:b9:ea:75:45:41:e2:03:16:7e:
                    db:81:aa:c4:49:a2:9f:9e:93:d1:7c:89:01:88:e7:
                    61:da:f7:29:92:da:79:e1:37:b2:45:b2:e5:58:ea:
                    20:6a:49:2e:3b:a6:4e:3a:b3:df:22:84:4f:3c:cc:
                    05:b6:d4:71:90:bb:88:3f:e5:80:a2:ee:7d:84:58:
                    2e:b2:88:53:e6:bb:4c:1f:e3:1c:74:db:a2:76:c9:
                    81:70:e0:c0:68:15:18:c2:fe:09:85:72:5e:80:94:
                    3f:6e:7a:31:d9:3a:ea:a8:a1:d4:7e:42:22:3f:20:
                    1d:b8:8f:fe:0c:7a:1c:d5:f5:de:16:f9:21:17:ac:
                    73:92:62:81:87:dd:5a:17:dc:b5:dc:76:7d:c4:51:
                    2a:18:a2:b9:e7:79:1b:8b:fe:a4:d5:73:c7:de:59:
                    bd:5f:d9:70:5e:af:50:e2:c4:18:6f:d6:05:bb:91:
                    fb:9d:69:2a:9f:12:0f:2c:31:30:b6:30:f4:11:aa:
                    ed:c4:65:2f:8d:1a:b1:e8:44:49:b0:f1:6e:bf:bc:
                    e4:68:b5:f4:cd:a7:34:7d:cd:ff:7e:52:07:4c:3b:
                    06:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:4F:DF:91:5B:62:F0:36:FB:FB:CA:18:9F:69:B2:9E:3E:1B:DB:4E
            X509v3 Authority Key Identifier:
                keyid:64:51:55:3E:09:DC:24:DD:DB:C5:40:73:E6:62:5B:1A:16:E7:52:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911B5AC/BC1F7DB6B92111F0BF4D3940C4F9AE02/ZFFVPgncJN3bxUBz5mJbGhbnUhM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZFFVPgncJN3bxUBz5mJbGhbnUhM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B5AC/BC1F7DB6B92111F0BF4D3940C4F9AE02/ZFFVPgncJN3bxUBz5mJbGhbnUhM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d5:a8:72:74:67:c3:16:66:ae:21:d2:b8:99:bf:e8:4a:03:11:
         2b:e8:e1:ea:e2:01:2e:fd:8e:6e:b1:b7:99:5c:c2:35:84:ac:
         d7:8a:c1:b3:ce:aa:41:8a:86:fa:99:12:c3:25:07:77:e4:10:
         4d:c7:e4:10:41:e3:8f:32:24:69:a1:fe:d4:e5:42:f1:c2:d6:
         18:13:fb:14:e3:ae:ef:6d:a9:2a:33:13:5a:00:ce:bf:9f:50:
         75:32:57:cb:ff:69:17:45:4b:52:e3:4f:b3:63:d3:56:11:22:
         53:9f:c6:90:d5:f8:1d:f2:a1:69:f1:fe:bc:84:0c:8e:ae:6f:
         23:5a:ba:6b:47:e2:e5:7c:96:d7:94:a3:68:08:d5:ad:35:8b:
         65:1e:9e:93:b6:f0:01:50:4a:b0:e6:3d:7d:6e:51:1e:a1:7c:
         1e:25:f5:73:d6:cb:7e:cb:8a:0f:6b:9b:5f:e4:4f:1e:21:d0:
         3b:cb:65:be:2e:76:b6:59:92:98:f2:2a:cb:74:68:58:d2:d4:
         d7:92:5a:cb:f5:de:80:2c:0d:8d:3a:50:69:82:52:df:96:e7:
         f7:ee:8c:3a:80:36:e3:c0:94:d1:fe:d5:a4:c4:8a:98:cd:3a:
         34:06:35:01:b6:9d:58:a0:00:41:9b:7c:8e:e3:c2:ce:a0:5e:
         6b:08:36:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 05:58:23 2026 by rpki-client