Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.mft
File:                     Z1BzJ_BU9TvgbB13zfB6FXYosz8.mft (raw, json)
Hash identifier:          WUC4J6biBRpmKKQRZJHjlqwL46M6jgqmIHE3YC0kREc=
Subject key identifier:   C7:68:8C:A6:B9:B8:B1:54:74:86:A2:41:D6:91:9F:86:93:E3:2B:6A
Authority key identifier: 67:50:73:27:F0:54:F5:3B:E0:6C:1D:77:CD:F0:7A:15:76:28:B3:3F
Certificate issuer:       /CN=A9126091/serialNumber=67507327F054F53BE06C1D77CDF07A157628B33F
Certificate serial:       041A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1BzJ_BU9TvgbB13zfB6FXYosz8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.mft
Manifest number:          0412
Signing time:             Sat 03 Oct 2026 00:39:27 +0000
Manifest this update:     Sat 03 Oct 2026 00:39:26 +0000
Manifest next update:     Sat 10 Oct 2026 00:39:26 +0000
Files and hashes:         1: Z1BzJ_BU9TvgbB13zfB6FXYosz8.crl (hash: O5ssEkCe9lPGS/DnCuNmV6zmdtDJb3CVYHjmz4NhUrQ=)
                          2: 9EAF6A2EFD0011EC9DFDBB39C4F9AE02.roa (hash: fpRcMlKlCDYWLBuuGFtAiAF3XNUyl+/W9RNW0drMAfM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.crl
                          rsync://rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1BzJ_BU9TvgbB13zfB6FXYosz8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 00:39:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1050 (0x41a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9126091, serialNumber=67507327F054F53BE06C1D77CDF07A157628B33F
        Validity
            Not Before: Oct  3 00:39:26 2026 GMT
            Not After : Oct 10 00:39:26 2026 GMT
        Subject: CN=6ac04ebf-3d43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:9f:bd:70:92:17:9e:79:3c:f9:ed:45:c4:72:
                    d8:52:72:aa:fe:40:d0:ed:ec:18:99:5c:90:4f:80:
                    48:8e:75:a7:fb:75:4c:8e:df:ae:f2:10:dd:09:f7:
                    ca:72:45:42:a4:07:85:22:c2:ea:a1:e9:de:26:65:
                    1d:16:c4:9a:52:4a:f5:df:b4:6c:c8:b0:32:5c:61:
                    85:bb:47:9f:25:59:cd:c3:42:d6:c0:09:1b:ce:ea:
                    ce:e3:d9:ab:29:37:4a:03:39:8e:51:56:31:b3:d2:
                    96:a3:bb:e2:03:6a:d2:c3:7d:b4:61:1a:da:4a:f0:
                    83:af:a0:a6:3b:31:50:56:55:b4:6c:34:4c:81:4b:
                    7d:ba:cd:e5:ce:c0:25:b5:8f:e3:36:60:26:db:71:
                    c4:6b:a7:fe:70:0e:7d:47:07:c6:fd:ea:30:89:4a:
                    a3:72:b3:2c:38:bb:13:02:f9:38:53:83:43:c6:04:
                    25:9b:b5:6e:46:f2:b6:36:6c:04:87:27:59:bc:53:
                    d9:0a:ff:f2:92:7a:2f:88:12:54:69:29:d3:3e:8d:
                    57:70:fb:33:de:e8:4e:21:6c:49:95:62:e9:64:a0:
                    bf:cf:d9:4e:fb:7c:0a:6a:13:fe:f0:9e:ce:14:dd:
                    28:55:6e:7a:c7:08:30:3a:8b:af:96:de:61:78:1b:
                    a5:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:68:8C:A6:B9:B8:B1:54:74:86:A2:41:D6:91:9F:86:93:E3:2B:6A
            X509v3 Authority Key Identifier:
                keyid:67:50:73:27:F0:54:F5:3B:E0:6C:1D:77:CD:F0:7A:15:76:28:B3:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1BzJ_BU9TvgbB13zfB6FXYosz8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:49:c2:a8:18:56:c0:f8:ba:b3:6e:48:ac:71:94:5a:43:91:
         a0:cf:a1:6e:8b:de:3c:25:61:58:ef:eb:3f:70:af:a9:04:3a:
         b3:f3:62:4b:01:48:4c:5c:f5:ea:02:98:71:7d:64:da:33:fb:
         0a:da:d4:0e:73:ca:d7:96:ca:fb:c3:4f:0c:5a:75:5f:ba:3a:
         78:54:93:d3:8b:a2:8f:61:07:22:7d:69:0e:1c:4f:ac:1d:b9:
         bb:89:80:7d:2d:70:bc:c5:2c:6e:47:b7:23:22:a6:a3:e2:5e:
         53:6a:ba:c2:38:50:24:63:4f:90:e0:e9:4b:bb:ed:1f:0d:85:
         5b:5b:aa:87:f4:7a:05:2b:ac:a0:8b:43:ec:08:a7:d2:44:0f:
         6d:96:12:3b:29:d0:3a:f3:51:66:4b:ba:6b:c0:4c:86:84:ab:
         b7:d6:43:ef:c3:63:9a:2d:02:1e:d6:79:a8:d3:1a:3b:8f:9c:
         50:18:06:15:7a:08:2e:6e:e5:be:db:c6:03:17:5a:41:20:1a:
         d8:d2:75:4d:dc:78:a7:40:12:e7:2f:12:73:3c:09:e5:7a:eb:
         eb:43:a9:df:a1:2b:06:66:57:e4:fb:c9:4b:91:a6:1d:17:0a:
         91:fa:ee:06:56:56:c9:e3:50:b1:fc:a8:88:d1:65:e9:18:5e:
         67:53:8e:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 14:21:16 2026 by rpki-client