Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.mft
File:                     Z0EvDHMNn0VGelJsOCXsOP5wC2M.mft (raw, json)
Hash identifier:          1GILT4+FCF0srGtGR7GkY0Sm+gGlUWxxZAubEqDSMos=
Subject key identifier:   34:6D:32:31:CE:CE:76:5D:49:A5:B0:4A:EA:D7:D8:9C:26:F0:BB:EC
Authority key identifier: 67:41:2F:0C:73:0D:9F:45:46:7A:52:6C:38:25:EC:38:FE:70:0B:63
Certificate issuer:       /CN=A9135F86/serialNumber=67412F0C730D9F45467A526C3825EC38FE700B63
Certificate serial:       0149
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0EvDHMNn0VGelJsOCXsOP5wC2M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.mft
Manifest number:          0145
Signing time:             Mon 09 Nov 2026 05:33:16 +0000
Manifest this update:     Mon 09 Nov 2026 05:33:15 +0000
Manifest next update:     Mon 16 Nov 2026 05:33:15 +0000
Files and hashes:         1: Z0EvDHMNn0VGelJsOCXsOP5wC2M.crl (hash: W0FoUV8Hi/DVAKgcHCcAcuZKiPS6RUs+a72MinyjyVw=)
                          2: 4A41D220EF2D11EF8502717CC4F9AE02.roa (hash: C0UeRmdUC5XES5gqgoPUp5FT+eSznO9ZwMgEuNb9JBA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.crl
                          rsync://rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0EvDHMNn0VGelJsOCXsOP5wC2M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 16 Nov 2026 05:33:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 329 (0x149)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9135F86, serialNumber=67412F0C730D9F45467A526C3825EC38FE700B63
        Validity
            Not Before: Nov  9 05:33:15 2026 GMT
            Not After : Nov 16 05:33:15 2026 GMT
        Subject: CN=6af15b1c-50cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1f:d8:4a:29:03:39:ed:5b:8d:8b:49:2b:34:
                    35:21:58:17:08:8d:9c:da:63:82:40:98:14:be:5e:
                    c2:0c:5c:06:19:1a:0f:77:93:d7:78:2c:36:84:32:
                    a2:a0:60:13:2d:cc:3d:27:e1:62:c6:82:2b:eb:c2:
                    9d:57:6e:3b:dd:db:17:34:82:bd:ea:e9:ea:85:c7:
                    c1:1b:0a:40:04:33:cb:29:95:3c:c9:63:18:47:77:
                    f2:fb:da:2c:57:36:90:da:b9:10:0b:3e:36:47:be:
                    c6:94:fc:e0:e1:b4:34:15:b4:ad:0a:7f:b9:1c:dd:
                    65:38:fb:a3:42:88:fd:b3:14:c5:ec:de:b0:6e:32:
                    fe:35:33:57:2e:d0:de:c1:ea:0f:d3:89:2d:a5:69:
                    52:26:ff:3f:9c:de:da:aa:d4:92:c9:0b:44:40:3e:
                    2f:10:43:4f:06:8a:92:d1:65:e7:ba:f8:19:a6:a5:
                    ca:3e:fe:02:d8:84:5b:06:3d:e8:04:31:c2:67:68:
                    46:93:95:06:23:59:00:91:90:bb:90:1b:40:34:b6:
                    eb:b5:31:36:11:7e:ea:ac:b9:8f:db:a1:d2:b3:93:
                    86:33:d8:c1:aa:36:04:3f:c8:a0:f5:6f:3d:81:d3:
                    e9:dc:3e:ec:bb:68:4f:95:2d:49:e1:ea:31:36:27:
                    29:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:6D:32:31:CE:CE:76:5D:49:A5:B0:4A:EA:D7:D8:9C:26:F0:BB:EC
            X509v3 Authority Key Identifier:
                keyid:67:41:2F:0C:73:0D:9F:45:46:7A:52:6C:38:25:EC:38:FE:70:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0EvDHMNn0VGelJsOCXsOP5wC2M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:b7:6b:7a:7f:41:10:f0:3b:18:cc:cd:d2:76:d7:e7:98:07:
         ab:16:b4:74:c8:71:86:29:33:88:b9:1d:b5:28:29:e0:fa:aa:
         8f:68:a1:a3:2c:26:09:f9:a6:c0:0d:ee:29:f8:4c:aa:0a:ce:
         4b:90:67:c0:0c:6d:f7:2d:55:d0:9f:46:5c:80:4c:e1:ab:55:
         3e:9d:24:f4:e3:0c:8a:67:c7:e4:26:6f:36:a5:03:d3:9e:2d:
         54:47:35:ab:0f:a4:f7:46:fb:0b:9a:fc:01:89:d5:c1:35:c1:
         d0:92:f8:2b:37:48:43:11:a6:8a:cc:c4:93:d4:6a:fa:86:63:
         a7:1b:3b:ec:10:bc:bc:0e:b3:35:aa:dd:63:67:63:f1:60:d5:
         75:91:91:d2:a8:f0:77:cb:24:43:8b:ff:69:68:d5:f4:15:fa:
         03:ab:23:d8:1d:cf:d5:6c:50:6a:ee:93:45:c7:b2:94:8e:69:
         a9:ee:47:48:50:c0:eb:06:ec:fe:bd:f3:b2:00:04:f4:ac:d9:
         21:66:a8:e9:51:40:cf:f5:88:8f:fa:57:82:cf:be:a4:e0:fc:
         71:00:f6:8d:ca:3f:24:a9:52:c5:cf:08:8a:28:13:20:fb:08:
         ce:50:f9:1e:ee:1f:ea:a7:07:ae:e2:45:1d:52:7c:f3:cc:ca:
         e7:70:ea:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 11:05:12 2026 by rpki-client