Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.mft
File:                     ZDqJ6ggKrIb4potVEI53sQahQco.mft (raw, json)
Hash identifier:          q/LAVWKdKvtdoDoXprPYZdaS+iZzOob9R9UENKoUO60=
Subject key identifier:   1B:4B:1C:61:F0:93:C3:59:99:BE:3E:BC:14:B3:33:F1:E2:DC:6D:FE
Authority key identifier: 64:3A:89:EA:08:0A:AC:86:F8:A6:8B:55:10:8E:77:B1:06:A1:41:CA
Certificate issuer:       /CN=A914237B/serialNumber=643A89EA080AAC86F8A68B55108E77B106A141CA
Certificate serial:       027A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDqJ6ggKrIb4potVEI53sQahQco.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.mft
Manifest number:          026C
Signing time:             Sun 11 Oct 2026 02:44:17 +0000
Manifest this update:     Sun 11 Oct 2026 02:44:17 +0000
Manifest next update:     Sun 18 Oct 2026 02:44:17 +0000
Files and hashes:         1: ZDqJ6ggKrIb4potVEI53sQahQco.crl (hash: AubTzhQkhHzQYlCSG5ZOcuQeZPaNrfnnbrgcEo6J2SA=)
                          2: 133A934C693111F0A51E5767C4F9AE02.roa (hash: nSQXNi2ZjVcTfBYdL/JBUUsl+LZUNi12cbTDHTeZACg=)
                          3: 47620F428FBB11EF8DDB8746C4F9AE02.roa (hash: ttjS00c2KG8TfhOWjt/eFcp3eeq+USxoD6ESfymiud8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.crl
                          rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDqJ6ggKrIb4potVEI53sQahQco.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Oct 2026 02:44:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 634 (0x27a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914237B, serialNumber=643A89EA080AAC86F8A68B55108E77B106A141CA
        Validity
            Not Before: Oct 11 02:44:17 2026 GMT
            Not After : Oct 18 02:44:17 2026 GMT
        Subject: CN=6acaf801-b0ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:6f:aa:54:94:d4:69:52:fd:07:c3:d9:78:7e:
                    82:46:72:e5:56:53:0e:1e:55:91:9f:84:0f:16:a4:
                    52:0c:67:96:c9:3d:4c:0a:62:d7:ac:5a:84:81:9a:
                    83:aa:81:9a:d4:44:aa:de:6c:6d:e5:3b:05:49:0d:
                    2e:eb:7a:0f:06:ff:4c:77:83:4a:32:cf:19:72:9a:
                    b2:ac:57:86:c7:75:eb:64:05:85:71:b3:74:c4:68:
                    4c:e3:8b:3c:08:34:13:dd:32:f7:50:15:38:1a:30:
                    65:43:7c:48:33:da:94:b3:00:ab:7a:6f:ed:36:50:
                    00:95:9f:92:f8:47:27:b6:a9:35:55:48:24:42:24:
                    a6:ba:40:9b:a8:6b:f2:32:12:04:58:ad:db:33:57:
                    ff:97:89:66:ab:ee:56:90:ca:f4:4e:77:69:84:cc:
                    4c:63:a1:e8:e6:73:0b:56:0a:b1:c4:a3:ad:d8:79:
                    9a:6a:e5:6c:8c:bf:13:ba:e3:59:89:6d:8f:f5:26:
                    0f:6c:cf:a8:c9:c0:fd:6b:9c:4f:c3:91:a9:df:69:
                    be:51:01:75:2f:a5:8b:d6:66:93:fd:0e:da:93:b5:
                    7c:46:0b:20:53:40:5d:73:94:ca:48:fa:bb:23:28:
                    20:21:a1:78:cb:9e:8c:58:24:05:99:2a:e0:eb:f3:
                    e5:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:4B:1C:61:F0:93:C3:59:99:BE:3E:BC:14:B3:33:F1:E2:DC:6D:FE
            X509v3 Authority Key Identifier:
                keyid:64:3A:89:EA:08:0A:AC:86:F8:A6:8B:55:10:8E:77:B1:06:A1:41:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDqJ6ggKrIb4potVEI53sQahQco.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:5e:c8:a2:bd:39:7b:a2:b2:9c:f2:79:de:ab:56:e2:6e:c8:
         03:e5:f2:af:6c:cc:1e:90:14:73:57:2e:20:b3:52:68:8c:da:
         a8:03:a4:8c:4a:5c:8a:a4:54:38:53:21:86:d9:64:b9:9f:42:
         af:3e:99:db:0b:c0:d3:6f:81:a1:d4:5d:49:9b:46:3c:8c:ab:
         20:4d:28:f4:eb:64:9d:16:26:92:09:c3:00:8f:99:ae:16:27:
         14:78:bf:9d:0f:c1:54:f9:fd:ca:fe:1f:df:85:20:f5:20:09:
         39:97:9b:e3:d2:1b:cf:2a:be:b9:d2:52:7e:e5:32:82:61:02:
         ca:4e:ca:1c:3a:82:7f:ac:ed:2a:28:1a:a1:18:9e:41:0c:b9:
         0d:9e:b5:e6:7a:be:b8:40:fb:e8:86:59:32:74:36:56:d0:f6:
         c5:98:41:46:45:bd:6e:ee:f7:ea:b6:c8:06:54:2d:50:de:3a:
         53:57:3e:bf:cf:cd:8d:71:11:3b:6e:6d:4b:86:32:ed:a3:07:
         22:aa:50:c1:a6:e2:45:00:f0:a3:bb:08:86:6f:6c:8e:89:44:
         27:eb:1a:db:d2:90:9d:4d:ff:a1:80:ae:3b:a3:9a:72:f0:52:
         09:77:80:15:0c:bf:be:0a:ee:6b:ca:7e:bc:5f:60:4d:71:df:
         07:7b:ef:9b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAnowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDIzN0IxMTAvBgNVBAUTKDY0M0E4OUVBMDgwQUFDODZGOEE2OEI1NTEwOEU3N0Ix
MDZBMTQxQ0EwHhcNMjYxMDExMDI0NDE3WhcNMjYxMDE4MDI0NDE3WjAYMRYwFAYD
VQQDEw02YWNhZjgwMS1iMGFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2G+qVJTUaVL9B8PZeH6CRnLlVlMOHlWRn4QPFqRSDGeWyT1MCmLXrFqEgZqD
qoGa1ESq3mxt5TsFSQ0u63oPBv9Md4NKMs8ZcpqyrFeGx3XrZAWFcbN0xGhM44s8
CDQT3TL3UBU4GjBlQ3xIM9qUswCrem/tNlAAlZ+S+Ecntqk1VUgkQiSmukCbqGvy
MhIEWK3bM1f/l4lmq+5WkMr0TndphMxMY6Ho5nMLVgqxxKOt2HmaauVsjL8TuuNZ
iW2P9SYPbM+oycD9a5xPw5Gp32m+UQF1L6WL1maT/Q7ak7V8RgsgU0Bdc5TKSPq7
IyggIaF4y56MWCQFmSrg6/PlDwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBtLHGHw
k8NZmb4+vBSzM/Hi3G3+MB8GA1UdIwQYMBaAFGQ6ieoICqyG+KaLVRCOd7EGoUHK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjM3Qi9BQTg2QjExRTMx
QjAxMUVFOUE1MEQ3NjFDNEY5QUUwMi9aRHFKNmdnS3JJYjRwb3RWRUk1M3NRYWhR
Y28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pEcUo2Z2dLckliNHBvdFZFSTUzc1FhaFFjby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MjM3Qi9BQTg2QjExRTMxQjAxMUVFOUE1MEQ3NjFDNEY5QUUwMi9aRHFKNmdnS3JJ
YjRwb3RWRUk1M3NRYWhRY28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGF7Ior05e6KynPJ53qtW4m7IA+Xyr2zMHpAUc1cuILNSaIzaqAOkjEpciqRU
OFMhhtlkuZ9Crz6Z2wvA02+BodRdSZtGPIyrIE0o9OtknRYmkgnDAI+ZrhYnFHi/
nQ/BVPn9yv4f34Ug9SAJOZeb49Ibzyq+udJSfuUygmECyk7KHDqCf6ztKigaoRie
QQy5DZ615nq+uED76IZZMnQ2VtD2xZhBRkW9bu736rbIBlQtUN46U1c+v8/NjXER
O25tS4Yy7aMHIqpQwabiRQDwo7sIhm9sjolEJ+sa29KQnU3/oYCuO6OacvBSCXeA
FQy/vgrua8p+vF9gTXHfB3vvmw==
-----END CERTIFICATE-----
Generated at Mon Oct 12 19:39:49 2026 by rpki-client