Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/pTZ74UJBVZweuH0NXqPuxZPtz-w.mft
File:                     pTZ74UJBVZweuH0NXqPuxZPtz-w.mft (raw, json)
Hash identifier:          MZBOxHXYIoUctraclj9EECp0JPN1ehTN+vzhQsNx9CM=
Subject key identifier:   B5:62:1B:04:CB:36:21:E2:1E:BF:E1:AD:A9:3B:C0:C6:27:0A:F2:73
Authority key identifier: A5:36:7B:E1:42:41:55:9C:1E:B8:7D:0D:5E:A3:EE:C5:93:ED:CF:EC
Certificate issuer:       /CN=A912BAA5/serialNumber=A5367BE14241559C1EB87D0D5EA3EEC593EDCFEC
Certificate serial:       3597
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTZ74UJBVZweuH0NXqPuxZPtz-w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/pTZ74UJBVZweuH0NXqPuxZPtz-w.mft
Manifest number:          358C
Signing time:             Thu 24 Sep 2026 14:40:21 +0000
Manifest this update:     Thu 24 Sep 2026 14:40:21 +0000
Manifest next update:     Thu 01 Oct 2026 14:40:21 +0000
Files and hashes:         1: pTZ74UJBVZweuH0NXqPuxZPtz-w.crl (hash: nB0bMD1epUCeruZpnRAw/Zc2T/w2YVvFQgyoXhefPHM=)
                          2: apiP3IaTlla9pO0ZlnjeAJly3qg.asa (hash: RKk860CiBzRAIvVVTtpUHabg1EPk6C/BjP9N4cmxXWc=)
                          3: 214B85D87C0311EBB2F8C86CC4F9AE02.roa (hash: XRI5mHaTfsQ5P4tZOTRljrYvxsKQSjEVMe5uuC/lXuc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/pTZ74UJBVZweuH0NXqPuxZPtz-w.crl
                          rsync://rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/pTZ74UJBVZweuH0NXqPuxZPtz-w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTZ74UJBVZweuH0NXqPuxZPtz-w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 14:40:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13719 (0x3597)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912BAA5, serialNumber=A5367BE14241559C1EB87D0D5EA3EEC593EDCFEC
        Validity
            Not Before: Sep 24 14:40:21 2026 GMT
            Not After : Oct  1 14:40:21 2026 GMT
        Subject: CN=6ab53655-cbf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:5e:a7:56:8a:c2:08:d1:87:74:89:53:5a:eb:
                    a1:a1:1d:d5:42:2f:28:c0:c2:94:40:c8:d2:bb:58:
                    5a:17:2d:8f:26:75:32:04:fa:14:df:d5:bb:8a:22:
                    2a:58:93:1a:3b:d7:2b:ec:21:c3:16:bd:a1:a8:b4:
                    03:a1:11:92:4d:f1:f8:37:4c:2d:33:d9:20:ac:98:
                    e5:33:39:9d:79:e3:be:4b:63:43:ff:f4:25:90:22:
                    27:69:5e:e7:4d:ea:d9:cf:66:fa:e5:ba:58:f5:99:
                    b9:a9:4b:3c:68:65:f6:cf:9a:ae:52:bd:11:f1:37:
                    81:50:74:01:d6:a4:dd:f8:86:44:0a:fe:7d:ae:57:
                    00:be:9a:64:58:1f:7a:5c:53:c7:bb:05:1a:30:3e:
                    c1:20:02:53:7b:6f:34:43:6d:ee:93:4c:e8:8e:0a:
                    6c:4b:e4:7d:9e:de:85:7a:73:5d:11:b7:ec:ba:05:
                    78:38:d9:bf:64:c3:3b:cf:ee:07:5d:a4:0e:3d:60:
                    2b:be:21:ca:74:92:0a:af:9c:92:3c:af:83:48:47:
                    a8:5c:b8:0c:3d:9f:8d:9f:65:6c:f7:d4:69:52:04:
                    82:46:2c:a8:78:14:65:3e:26:a7:a3:3d:9b:47:e8:
                    66:83:5c:ec:c9:4d:01:5a:10:41:a6:41:46:2c:30:
                    26:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:62:1B:04:CB:36:21:E2:1E:BF:E1:AD:A9:3B:C0:C6:27:0A:F2:73
            X509v3 Authority Key Identifier:
                keyid:A5:36:7B:E1:42:41:55:9C:1E:B8:7D:0D:5E:A3:EE:C5:93:ED:CF:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/pTZ74UJBVZweuH0NXqPuxZPtz-w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTZ74UJBVZweuH0NXqPuxZPtz-w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/pTZ74UJBVZweuH0NXqPuxZPtz-w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:1a:f8:3e:80:33:b0:20:f4:c3:ce:fc:7e:6b:ee:f4:69:cf:
         0a:3f:64:63:77:64:e6:fd:8d:ec:1e:ca:06:f6:40:cf:e0:10:
         b5:d9:58:10:c1:47:26:5d:4f:17:59:c1:81:3e:e3:77:c0:05:
         23:9a:b7:5d:48:25:3d:64:ea:96:ec:4f:0a:6d:54:fb:6c:48:
         aa:f4:cc:72:88:82:e9:54:a2:b3:6f:85:d2:94:75:36:1d:87:
         6f:66:eb:ec:a8:8c:92:b2:ef:db:5e:8e:57:a9:bf:7a:21:a4:
         70:13:d0:3e:4e:fa:a1:b3:2c:81:c4:55:74:c6:9b:f7:ad:76:
         3a:7b:f2:e7:15:c9:ca:12:b8:b9:90:61:50:e2:a5:bd:97:54:
         73:ad:ec:9a:36:bf:98:60:c2:de:ad:43:89:3d:45:6f:c9:0e:
         27:1c:cb:36:95:77:e9:ad:9f:52:67:6d:7f:ff:6b:27:f3:e3:
         38:fb:f8:59:c6:bd:a1:be:2f:4e:70:ed:d5:ab:14:08:a6:55:
         c2:43:31:15:8b:ea:19:2c:00:f1:7f:12:a9:4d:db:df:42:a0:
         ff:24:5e:eb:a6:fe:27:28:fd:90:05:1f:bf:5c:af:8a:0f:25:
         9d:dd:66:b4:13:65:7f:48:d3:a5:3d:79:95:72:b0:fa:bb:53:
         51:09:03:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 11:42:53 2026 by rpki-client