Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.mft
File:                     zmxG-AKxW4z0raNFqCiK1uf6U14.mft (raw, json)
Hash identifier:          /b4Y8+sp2ZlI4VfFfIeTuZhZLV69ZcdowSXe1KjHqb0=
Subject key identifier:   CA:51:6C:74:86:FF:1B:1C:A9:1A:F0:3A:23:A8:A9:7B:F8:44:46:51
Authority key identifier: CE:6C:46:F8:02:B1:5B:8C:F4:AD:A3:45:A8:28:8A:D6:E7:FA:53:5E
Certificate issuer:       /CN=A914400E/serialNumber=CE6C46F802B15B8CF4ADA345A8288AD6E7FA535E
Certificate serial:       01E7
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zmxG-AKxW4z0raNFqCiK1uf6U14.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.mft
Manifest number:          01E0
Signing time:             Mon 21 Sep 2026 03:32:56 +0000
Manifest this update:     Mon 21 Sep 2026 03:32:56 +0000
Manifest next update:     Mon 28 Sep 2026 03:32:56 +0000
Files and hashes:         1: zmxG-AKxW4z0raNFqCiK1uf6U14.crl (hash: PlZ3u4c1MQZb+lPY1Qm62RZNMhgBZp7BjMYqebuo7nM=)
                          2: 4687D3AAD94911EEB080041BC4F9AE02.roa (hash: mDopMfVTaRsFnm6rlLIEGyxqISgf4DxErZsfORfZaA0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.crl
                          rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zmxG-AKxW4z0raNFqCiK1uf6U14.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 03:32:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 487 (0x1e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914400E, serialNumber=CE6C46F802B15B8CF4ADA345A8288AD6E7FA535E
        Validity
            Not Before: Sep 21 03:32:56 2026 GMT
            Not After : Sep 28 03:32:56 2026 GMT
        Subject: CN=6ab0a568-2c98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d7:81:79:af:ef:aa:14:93:a2:06:b9:b8:64:
                    24:11:ea:bc:d0:fa:cd:5b:3f:6a:10:c3:c8:18:b5:
                    88:67:c8:f8:44:a2:a5:6d:79:86:32:ae:af:33:b1:
                    0c:2e:56:06:42:3b:6d:34:63:be:23:3c:18:17:ee:
                    09:3f:2e:05:3c:85:e7:87:ea:3c:b4:6b:2a:d7:5a:
                    ca:95:15:0a:a7:e0:a8:ca:98:c2:5f:fa:69:6f:04:
                    1a:8e:f5:d5:5a:6e:b9:5b:02:cf:d4:93:34:49:b6:
                    d5:55:bf:31:1a:91:0d:b5:f8:34:cc:d4:a1:6a:04:
                    49:dd:fa:34:53:2d:0c:ec:ca:dd:67:15:b6:eb:44:
                    1d:0e:22:c0:30:6a:f8:3f:55:25:be:95:36:f9:3c:
                    a3:e6:b0:0a:c8:18:69:70:37:fe:20:77:ba:4d:cd:
                    a5:3c:dd:c9:6b:24:2f:12:f0:52:af:1f:3b:47:b2:
                    d8:05:57:71:51:21:83:63:18:00:8b:da:6e:18:6b:
                    4d:4b:45:b4:7e:43:8c:aa:68:f9:80:97:fc:b3:a2:
                    c1:68:ca:81:5d:35:0e:74:f1:bc:61:72:b1:44:b4:
                    dd:01:0b:a2:33:23:2b:a7:50:2d:02:ed:79:b8:1e:
                    77:04:cb:8d:b3:a9:a1:13:26:b6:4d:98:b7:d4:57:
                    8d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:51:6C:74:86:FF:1B:1C:A9:1A:F0:3A:23:A8:A9:7B:F8:44:46:51
            X509v3 Authority Key Identifier:
                keyid:CE:6C:46:F8:02:B1:5B:8C:F4:AD:A3:45:A8:28:8A:D6:E7:FA:53:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zmxG-AKxW4z0raNFqCiK1uf6U14.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:65:24:c5:47:85:3e:16:a8:3b:e9:4d:bb:1e:c9:12:3b:c5:
         a7:ae:41:f5:03:70:ee:f2:ad:b8:30:02:50:bf:85:4e:1f:e2:
         2a:da:1d:6d:3a:54:a2:63:44:e8:22:2e:37:76:fc:cc:61:a2:
         bd:58:ee:15:d9:7b:02:88:5b:b6:20:c1:a1:5a:d6:77:d6:fc:
         dd:c7:98:9b:da:f3:4e:21:f8:d4:11:bb:7d:be:e0:a8:9f:b0:
         35:18:48:0b:ef:a8:4a:ef:b6:01:f4:55:9f:69:b9:5c:e4:66:
         27:2b:67:28:9e:0f:23:39:dd:9b:3a:bb:50:96:1f:42:a1:4f:
         54:e3:cf:36:e3:a7:54:38:97:83:09:5b:fc:b0:f2:99:2a:a7:
         06:6f:c3:1b:cc:b7:54:f8:ef:b4:39:0a:79:e7:23:d5:41:41:
         a9:7c:4b:04:62:12:ea:45:2d:da:c8:7a:b4:25:45:aa:49:e0:
         bb:64:cd:2f:32:8a:aa:2f:90:1e:34:4b:37:ea:b1:2a:22:60:
         14:80:c4:eb:17:94:f9:08:50:28:da:cc:c7:46:93:70:c0:1b:
         56:e2:7f:07:83:2c:20:6d:7c:71:74:4c:b8:b8:19:e5:73:ca:
         00:11:d4:5c:df:ff:b6:b0:4f:5d:48:cb:c4:ff:a6:39:6c:26:
         0f:6b:9d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:20:00 2026 by rpki-client