Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/_fz0IvXEZi3h5GQ6JxwEax4hxK0.mft
File:                     _fz0IvXEZi3h5GQ6JxwEax4hxK0.mft (raw, json)
Hash identifier:          j4E18z6ARtD/9OZUTEvujm6f2PBEe7LP6Hd5At2oDng=
Subject key identifier:   DA:07:46:72:34:7A:68:29:BB:4E:D3:A5:C0:31:91:8C:6D:8A:8E:04
Authority key identifier: FD:FC:F4:22:F5:C4:66:2D:E1:E4:64:3A:27:1C:04:6B:1E:21:C4:AD
Certificate issuer:       /CN=A9125A95/serialNumber=FDFCF422F5C4662DE1E4643A271C046B1E21C4AD
Certificate serial:       0534
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_fz0IvXEZi3h5GQ6JxwEax4hxK0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/_fz0IvXEZi3h5GQ6JxwEax4hxK0.mft
Manifest number:          052D
Signing time:             Fri 02 Oct 2026 23:51:33 +0000
Manifest this update:     Fri 02 Oct 2026 23:51:33 +0000
Manifest next update:     Fri 09 Oct 2026 23:51:33 +0000
Files and hashes:         1: _fz0IvXEZi3h5GQ6JxwEax4hxK0.crl (hash: UHp0u5mlGqtcxmHO/X6b7pfUPT5PJ0rBBBYt5C8uLRI=)
                          2: AF506F14630811EC97879243C4F9AE02.roa (hash: 957JN3cduwRqZhBkt9zySk9smfI+Ua9et4xDRT3DRKs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/_fz0IvXEZi3h5GQ6JxwEax4hxK0.crl
                          rsync://rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/_fz0IvXEZi3h5GQ6JxwEax4hxK0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_fz0IvXEZi3h5GQ6JxwEax4hxK0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 23:51:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1332 (0x534)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9125A95, serialNumber=FDFCF422F5C4662DE1E4643A271C046B1E21C4AD
        Validity
            Not Before: Oct  2 23:51:33 2026 GMT
            Not After : Oct  9 23:51:33 2026 GMT
        Subject: CN=6ac04385-2571
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:b8:86:ea:1a:55:4f:e9:17:34:80:2b:f5:93:
                    34:9b:ee:13:f8:f9:43:da:c6:97:48:bc:8d:14:8b:
                    18:e2:c1:22:42:08:b6:94:22:d7:3e:05:d2:db:d4:
                    b9:40:8f:42:36:90:7f:d1:7f:8b:6e:64:c6:cb:e1:
                    57:4e:df:b4:21:3c:2d:57:de:44:23:de:45:25:a5:
                    4a:34:45:63:90:31:fe:18:ec:e6:85:7b:da:20:3c:
                    55:91:cc:80:c3:13:3b:50:85:f0:b6:e8:32:71:a4:
                    40:03:f2:ee:b2:a4:30:3a:c3:81:79:a1:c8:9a:73:
                    e9:59:81:54:cd:83:ce:b6:b8:da:32:d7:7a:2e:e6:
                    31:9a:b0:43:e6:23:7d:23:74:83:6f:b9:f0:5a:82:
                    77:83:88:97:5e:04:fa:a1:ae:6e:be:e1:4e:70:68:
                    7a:c9:01:82:fa:a8:68:37:b5:8b:1c:cd:75:28:8e:
                    45:9e:30:22:7a:bc:62:d0:93:82:72:25:7c:f2:ac:
                    2d:90:6b:cf:a1:eb:ec:35:99:a5:7c:4b:1d:03:d3:
                    63:9c:f7:a3:97:09:e7:e9:53:92:fd:99:ae:d6:f5:
                    44:38:26:e6:0e:67:e2:f7:79:2e:55:2c:dc:6c:d2:
                    32:df:19:60:bf:35:be:cc:08:9b:10:28:89:80:a5:
                    85:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:07:46:72:34:7A:68:29:BB:4E:D3:A5:C0:31:91:8C:6D:8A:8E:04
            X509v3 Authority Key Identifier:
                keyid:FD:FC:F4:22:F5:C4:66:2D:E1:E4:64:3A:27:1C:04:6B:1E:21:C4:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/_fz0IvXEZi3h5GQ6JxwEax4hxK0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_fz0IvXEZi3h5GQ6JxwEax4hxK0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/_fz0IvXEZi3h5GQ6JxwEax4hxK0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:8d:17:13:eb:35:7d:8c:c4:26:24:31:70:fc:24:d7:58:e5:
         92:fb:e7:ae:61:1b:66:6a:8b:b0:1d:3f:48:ca:63:a3:89:ea:
         45:be:20:8c:5e:3f:a0:89:ca:d1:d4:86:f3:9a:97:46:6d:3e:
         08:88:61:e2:fc:7a:af:1e:54:c7:72:46:4e:d3:af:28:71:26:
         2a:71:93:e9:21:de:1c:e2:d4:89:3c:92:aa:29:61:9d:23:ed:
         e2:dc:db:a7:4d:e6:79:cf:b3:5a:25:2c:03:e9:77:c2:d0:12:
         7a:f6:0d:af:c1:81:b0:48:5d:1e:6e:ef:91:8a:c2:47:60:be:
         b6:5d:b1:18:cb:29:42:91:f4:fe:50:40:86:d0:bf:03:30:eb:
         f2:60:9d:c0:6e:8e:fb:92:6a:39:a2:3f:b2:48:d7:39:3a:ed:
         08:0a:39:7b:b8:a3:9e:e1:db:4e:71:6f:d9:40:65:53:b2:85:
         3a:8c:63:8a:5b:16:03:22:98:c0:ea:ab:1f:0a:9a:4b:15:1a:
         29:a8:b1:48:fe:9f:78:9d:02:02:2a:92:2b:14:6f:30:88:f3:
         d0:6c:f3:ed:39:f4:95:4e:57:d2:8a:de:73:2c:6d:14:2b:40:
         99:8e:4f:7e:1a:3e:40:39:a9:f8:9b:b5:9d:2a:31:ff:ae:da:
         fc:53:a3:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 14:21:21 2026 by rpki-client