Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9149907/F714BDCACC2E11EC823BEE35C4F9AE02/ZmkYZX5BYz4X6shsJrGE26PoHi4.mft
File:                     ZmkYZX5BYz4X6shsJrGE26PoHi4.mft (raw, json)
Hash identifier:          6rHDeY7ka8J7CYoTYv2pghOHv1xlAOHoeQc0NaP7Ogc=
Subject key identifier:   15:1D:53:17:5D:96:74:D0:5A:94:CA:07:BC:D1:BB:74:BF:A8:D9:5A
Authority key identifier: 66:69:18:65:7E:41:63:3E:17:EA:C8:6C:26:B1:84:DB:A3:E8:1E:2E
Certificate issuer:       /CN=A9149907/serialNumber=666918657E41633E17EAC86C26B184DBA3E81E2E
Certificate serial:       0425
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZmkYZX5BYz4X6shsJrGE26PoHi4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149907/F714BDCACC2E11EC823BEE35C4F9AE02/ZmkYZX5BYz4X6shsJrGE26PoHi4.mft
Manifest number:          0419
Signing time:             Mon 21 Sep 2026 00:08:50 +0000
Manifest this update:     Mon 21 Sep 2026 00:08:50 +0000
Manifest next update:     Mon 28 Sep 2026 00:08:50 +0000
Files and hashes:         1: ZmkYZX5BYz4X6shsJrGE26PoHi4.crl (hash: TAXiiSuBVGIqmoJfxn1TGHRHk+q4gJxTbPSiLrws0l8=)
                          2: 6EE5FAE4544F11EFA572D230C4F9AE02.roa (hash: 06iHCsokSQ39HgOy2KJzWubeFrH/1VczqWMzLvyLOHM=)
                          3: 6E4711FE544F11EFA572D230C4F9AE02.roa (hash: PZXeG2z5Up6Bnr/fbTuUWxL/M8azNuvO/Wv2mvuOFVk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149907/F714BDCACC2E11EC823BEE35C4F9AE02/ZmkYZX5BYz4X6shsJrGE26PoHi4.crl
                          rsync://rpki.apnic.net/member_repository/A9149907/F714BDCACC2E11EC823BEE35C4F9AE02/ZmkYZX5BYz4X6shsJrGE26PoHi4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZmkYZX5BYz4X6shsJrGE26PoHi4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 00:08:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1061 (0x425)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149907, serialNumber=666918657E41633E17EAC86C26B184DBA3E81E2E
        Validity
            Not Before: Sep 21 00:08:50 2026 GMT
            Not After : Sep 28 00:08:50 2026 GMT
        Subject: CN=6ab07592-e471
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:55:e4:e1:8e:3d:cc:e5:f7:c9:d1:58:54:04:
                    87:30:96:c2:9c:e4:47:de:5c:be:c4:65:08:21:82:
                    29:0f:76:9a:1d:06:47:9b:ba:d4:52:c3:46:7f:ae:
                    9a:74:ae:7c:89:c4:91:f9:fd:7e:c2:07:b6:8e:a9:
                    57:fe:49:a3:9f:58:5c:48:71:9f:8d:03:a4:2e:e5:
                    ee:4f:1d:50:66:f4:71:4e:75:fd:61:6e:51:18:17:
                    83:a2:d5:87:5c:96:88:de:cb:be:ff:e2:2a:90:a0:
                    82:06:7a:40:e0:63:2d:fb:d2:1a:93:ae:e8:1c:d5:
                    49:34:b5:ca:2d:74:58:94:6b:9c:00:cc:8f:ff:96:
                    d4:00:28:2e:c9:55:87:6d:59:a4:a4:0c:19:b6:10:
                    0f:8a:58:ba:1a:45:b4:2e:f6:22:a7:2b:b4:e3:c3:
                    bf:2c:80:e7:83:1b:b2:af:8b:68:2a:17:8e:4e:1a:
                    c6:5d:fb:13:96:4d:1d:84:d3:5f:d5:ea:1a:36:ca:
                    60:d7:e6:f9:f0:ae:dd:76:c4:fc:6d:fb:3d:f0:e0:
                    0b:25:3c:e8:6d:e4:c9:08:67:5c:ef:24:ad:87:77:
                    2a:13:8a:2d:b2:55:2c:ec:30:ba:54:08:03:c8:fb:
                    e5:a1:a7:25:5f:f2:2b:f5:fb:23:fd:01:8d:c5:05:
                    c5:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:1D:53:17:5D:96:74:D0:5A:94:CA:07:BC:D1:BB:74:BF:A8:D9:5A
            X509v3 Authority Key Identifier:
                keyid:66:69:18:65:7E:41:63:3E:17:EA:C8:6C:26:B1:84:DB:A3:E8:1E:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149907/F714BDCACC2E11EC823BEE35C4F9AE02/ZmkYZX5BYz4X6shsJrGE26PoHi4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZmkYZX5BYz4X6shsJrGE26PoHi4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149907/F714BDCACC2E11EC823BEE35C4F9AE02/ZmkYZX5BYz4X6shsJrGE26PoHi4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:cd:d5:29:06:66:73:80:57:d5:cb:27:eb:0e:0d:20:f2:af:
         85:97:1c:30:1a:1a:32:e3:10:90:8a:16:2e:80:9d:c6:c0:eb:
         02:55:f1:7e:a2:e3:38:cc:91:a2:4b:d3:c7:23:7f:6c:ee:1d:
         a9:ac:d5:7d:7c:8e:3e:cc:b0:a8:45:27:46:f0:4c:32:5e:cf:
         64:44:53:02:46:2d:15:7a:90:40:46:c0:f4:3b:33:90:89:1c:
         35:cd:4a:b1:94:30:ea:dd:0a:69:34:e0:26:86:95:b0:93:a5:
         73:0f:a7:9c:8a:39:92:3a:ef:28:20:ff:17:83:b1:e6:0b:d7:
         0d:38:c4:94:9f:ed:59:b0:92:b1:3e:9f:41:4a:86:34:ee:87:
         89:ae:de:e9:d5:97:56:2a:fe:8f:e0:96:bd:92:05:23:d7:20:
         04:c1:55:ad:a3:1d:07:53:99:ac:da:1f:c9:88:0f:e0:d2:74:
         6f:6b:77:8c:8f:4a:f1:f7:db:6a:b0:89:4e:ac:66:88:e7:c9:
         e0:75:85:22:09:f6:ba:30:cf:be:a8:50:f7:3d:3a:68:78:9e:
         38:1e:5f:a6:34:d9:50:4c:36:88:5c:cf:94:e4:c1:ed:f6:df:
         41:9b:91:20:cd:be:d1:19:6c:3b:3f:46:14:d8:db:61:eb:2c:
         bc:4a:a2:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:05:29 2026 by rpki-client