Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912C770/3104367610DE11F181719257083D8C67/-z8Zsyb_nMe75aygUzQYb14xAQs.mft
File:                     -z8Zsyb_nMe75aygUzQYb14xAQs.mft (raw, json)
Hash identifier:          n0CHx34kfM5bbPU5CAHx8vyMMZ+xi9ZdiAPcGex1KFo=
Subject key identifier:   15:2D:D2:53:B8:77:5A:9E:22:1D:49:9A:9A:84:3B:2A:E3:DF:AA:CF
Authority key identifier: FB:3F:19:B3:26:FF:9C:C7:BB:E5:AC:A0:53:34:18:6F:5E:31:01:0B
Certificate issuer:       /CN=A912C770/serialNumber=FB3F19B326FF9CC7BBE5ACA05334186F5E31010B
Certificate serial:       7C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-z8Zsyb_nMe75aygUzQYb14xAQs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912C770/3104367610DE11F181719257083D8C67/-z8Zsyb_nMe75aygUzQYb14xAQs.mft
Manifest number:          7C
Signing time:             Sat 17 Oct 2026 08:30:25 +0000
Manifest this update:     Sat 17 Oct 2026 08:30:25 +0000
Manifest next update:     Sat 24 Oct 2026 08:30:25 +0000
Files and hashes:         1: -z8Zsyb_nMe75aygUzQYb14xAQs.crl (hash: J75c0L/sTHxJq529omMcGDTIXe9vxgq0eR+qATvPdiQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912C770/3104367610DE11F181719257083D8C67/-z8Zsyb_nMe75aygUzQYb14xAQs.crl
                          rsync://rpki.apnic.net/member_repository/A912C770/3104367610DE11F181719257083D8C67/-z8Zsyb_nMe75aygUzQYb14xAQs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-z8Zsyb_nMe75aygUzQYb14xAQs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Oct 2026 08:30:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124 (0x7c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C770, serialNumber=FB3F19B326FF9CC7BBE5ACA05334186F5E31010B
        Validity
            Not Before: Oct 17 08:30:25 2026 GMT
            Not After : Oct 24 08:30:25 2026 GMT
        Subject: CN=6ad33221-a85a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:82:f5:0c:37:5a:32:75:dd:a8:ab:b0:a5:84:
                    29:2d:8d:87:13:e5:f7:42:14:38:90:f9:f6:ba:e2:
                    ae:6c:72:db:9d:09:22:47:a6:23:33:4d:67:92:f0:
                    eb:2b:30:56:09:70:a7:4b:60:0b:e9:64:9c:7f:65:
                    9f:a6:f4:e5:89:17:e9:d1:19:8a:63:94:5b:86:e2:
                    4c:7c:9e:2e:bb:da:f2:93:88:69:e2:19:79:f4:4d:
                    1d:b4:93:f2:10:ad:c2:77:68:32:be:d3:1e:b1:49:
                    0e:d4:81:2e:e2:88:77:a2:c5:3c:88:09:43:71:f9:
                    75:2c:94:19:69:d9:19:02:a2:ae:66:97:c9:41:51:
                    c8:cb:ad:0d:4c:b6:81:7b:84:15:c9:b0:a8:be:e2:
                    25:ca:34:2f:1b:af:d8:8b:10:06:29:93:3e:4c:bc:
                    fc:8b:3d:44:1d:b1:98:7e:ee:59:2a:4c:8b:8f:93:
                    fd:37:ff:39:7c:f3:06:f6:73:f5:d9:bf:c4:73:09:
                    af:40:de:28:f4:aa:39:01:ae:f9:46:63:53:a0:d7:
                    c2:d6:a3:fe:ed:d0:4f:8b:1d:7e:67:70:0f:9d:4d:
                    fd:3b:42:62:35:3f:2d:f2:51:82:07:73:46:c4:86:
                    d4:a4:78:eb:ab:38:7d:6a:57:39:ed:64:ca:9e:79:
                    59:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:2D:D2:53:B8:77:5A:9E:22:1D:49:9A:9A:84:3B:2A:E3:DF:AA:CF
            X509v3 Authority Key Identifier:
                keyid:FB:3F:19:B3:26:FF:9C:C7:BB:E5:AC:A0:53:34:18:6F:5E:31:01:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912C770/3104367610DE11F181719257083D8C67/-z8Zsyb_nMe75aygUzQYb14xAQs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-z8Zsyb_nMe75aygUzQYb14xAQs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C770/3104367610DE11F181719257083D8C67/-z8Zsyb_nMe75aygUzQYb14xAQs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:e7:39:3f:cd:d1:b5:4b:4f:09:74:60:e3:e2:4e:70:47:29:
         3c:6e:42:a3:fc:d7:17:bf:aa:55:51:f6:60:81:d1:60:8b:74:
         40:25:39:dd:14:39:70:49:ce:7b:ee:3a:c9:91:1f:2d:64:58:
         47:46:e0:2d:39:80:4c:0a:50:28:93:93:e9:34:53:de:61:d2:
         d0:05:0f:34:91:88:bf:ab:3a:92:90:d0:29:91:b6:55:59:bd:
         f7:07:07:2a:a0:a4:e7:8e:22:41:41:9e:6c:b8:4c:ff:71:92:
         23:df:28:20:54:f6:1e:f5:e9:36:05:a6:67:b0:9e:2d:53:20:
         0e:92:49:11:8b:43:38:29:15:f5:ea:9f:f7:12:9d:86:95:98:
         9d:9a:30:57:ab:a0:a9:99:09:49:d9:27:fd:82:1f:1d:28:24:
         a0:7e:4f:6b:16:d7:24:70:8d:a5:f3:87:27:1f:03:0c:20:9f:
         94:21:1f:ef:99:4d:86:ef:82:a6:f2:0f:4f:42:99:6a:55:02:
         64:bb:18:cf:11:c1:63:61:a5:ab:ee:c6:6d:bb:9f:df:ea:0f:
         4e:b4:a7:95:46:03:c8:99:ae:14:06:e8:38:2f:2f:3a:c2:03:
         6b:66:df:83:28:bb:38:b7:af:74:61:c2:91:a1:3a:be:8c:dd:
         c0:8e:f3:d2
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBfDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy
Qzc3MDExMC8GA1UEBRMoRkIzRjE5QjMyNkZGOUNDN0JCRTVBQ0EwNTMzNDE4NkY1
RTMxMDEwQjAeFw0yNjEwMTcwODMwMjVaFw0yNjEwMjQwODMwMjVaMBgxFjAUBgNV
BAMTDTZhZDMzMjIxLWE4NWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCLgvUMN1oydd2oq7ClhCktjYcT5fdCFDiQ+fa64q5sctudCSJHpiMzTWeS8Osr
MFYJcKdLYAvpZJx/ZZ+m9OWJF+nRGYpjlFuG4kx8ni672vKTiGniGXn0TR20k/IQ
rcJ3aDK+0x6xSQ7UgS7iiHeixTyICUNx+XUslBlp2RkCoq5ml8lBUcjLrQ1MtoF7
hBXJsKi+4iXKNC8br9iLEAYpkz5MvPyLPUQdsZh+7lkqTIuPk/03/zl88wb2c/XZ
v8RzCa9A3ij0qjkBrvlGY1Og18LWo/7t0E+LHX5ncA+dTf07QmI1Py3yUYIHc0bE
htSkeOurOH1qVzntZMqeeVklAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUFS3SU7h3
Wp4iHUmamoQ7KuPfqs8wHwYDVR0jBBgwFoAU+z8Zsyb/nMe75aygUzQYb14xAQsw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJDNzcwLzMxMDQzNjc2MTBE
RTExRjE4MTcxOTI1NzA4M0Q4QzY3Ly16OFpzeWJfbk1lNzVheWdVelFZYjE0eEFR
cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvLXo4WnN5Yl9uTWU3NWF5Z1V6UVliMTR4QVFzLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJD
NzcwLzMxMDQzNjc2MTBERTExRjE4MTcxOTI1NzA4M0Q4QzY3Ly16OFpzeWJfbk1l
NzVheWdVelFZYjE0eEFRcy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCE5zk/zdG1S08JdGDj4k5wRyk8bkKj/NcXv6pVUfZggdFgi3RAJTndFDlwSc57
7jrJkR8tZFhHRuAtOYBMClAok5PpNFPeYdLQBQ80kYi/qzqSkNApkbZVWb33Bwcq
oKTnjiJBQZ5suEz/cZIj3yggVPYe9ek2BaZnsJ4tUyAOkkkRi0M4KRX16p/3Ep2G
lZidmjBXq6CpmQlJ2Sf9gh8dKCSgfk9rFtckcI2l84cnHwMMIJ+UIR/vmU2G74Km
8g9PQplqVQJkuxjPEcFjYaWr7sZtu5/f6g9OtKeVRgPIma4UBug4Ly86wgNrZt+D
KLs4t690YcKRoTq+jN3AjvPS
-----END CERTIFICATE-----
Generated at Sun Oct 18 06:54:05 2026 by rpki-client