Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft
File:                     ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft (raw, json)
Hash identifier:          CneWUGdvLAToHe4EFcPSmTkyCGY2jV/WCRA2OHJ3NqQ=
Subject key identifier:   23:C4:B7:EA:6D:CC:C2:CD:C6:CD:28:6A:D5:88:58:A5:2F:E8:9B:30
Authority key identifier: 64:F6:F7:86:B8:EC:86:9C:76:68:6A:F3:C9:9B:C4:7B:99:FD:D4:44
Certificate issuer:       /CN=A914E3F8/serialNumber=64F6F786B8EC869C76686AF3C99BC47B99FDD444
Certificate serial:       09FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPb3hrjshpx2aGrzyZvEe5n91EQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft
Manifest number:          09FA
Signing time:             Thu 24 Sep 2026 19:44:02 +0000
Manifest this update:     Thu 24 Sep 2026 19:44:02 +0000
Manifest next update:     Thu 01 Oct 2026 19:44:02 +0000
Files and hashes:         1: ZPb3hrjshpx2aGrzyZvEe5n91EQ.crl (hash: 2YLBXaHUJ4FNHL3xD6nlEJNaCsbEcE7dO+jNStZBXR0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.crl
                          rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPb3hrjshpx2aGrzyZvEe5n91EQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 19:44:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2555 (0x9fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E3F8, serialNumber=64F6F786B8EC869C76686AF3C99BC47B99FDD444
        Validity
            Not Before: Sep 24 19:44:02 2026 GMT
            Not After : Oct  1 19:44:02 2026 GMT
        Subject: CN=6ab57d82-9fec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:bd:a5:33:0b:a6:ed:ac:c1:f5:d3:d3:33:8f:
                    e0:9f:72:f5:96:f0:f5:e3:3d:44:07:2e:f4:24:0e:
                    b7:bf:8c:11:25:69:d2:37:2b:4b:d4:b4:26:5d:9a:
                    4e:88:2f:63:b8:68:50:40:1c:c1:48:ce:be:22:d9:
                    5f:c1:be:5a:1d:b7:af:57:b4:17:27:28:68:c4:f0:
                    a1:4e:9c:40:eb:d7:78:d9:44:8e:84:0b:da:db:ef:
                    61:6d:9b:d2:76:27:4f:09:8c:4a:95:56:29:90:53:
                    cd:55:f8:db:f8:e1:43:32:11:72:97:c6:66:7a:04:
                    1e:d7:40:c0:e6:6c:7b:9a:4b:6e:84:cb:2a:68:8e:
                    25:04:03:4b:f4:33:77:23:51:47:e2:8c:10:1d:bf:
                    a6:8c:88:89:f1:17:38:18:a8:e2:29:21:d8:53:85:
                    4b:4b:d1:9c:4a:c2:04:ad:7f:2b:c6:d3:47:53:47:
                    84:9b:3f:cb:88:19:5a:d1:ee:5d:88:1d:04:74:2b:
                    f4:c3:84:50:34:94:ce:f2:d9:2f:4a:37:57:66:1b:
                    7e:f5:18:65:33:12:ee:45:b0:4c:fa:89:ac:bf:e0:
                    5d:35:63:15:09:ec:85:dc:69:d5:d9:4e:14:63:ad:
                    35:5c:fc:07:68:51:65:7d:9c:6b:44:0a:40:b5:54:
                    6d:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:C4:B7:EA:6D:CC:C2:CD:C6:CD:28:6A:D5:88:58:A5:2F:E8:9B:30
            X509v3 Authority Key Identifier:
                keyid:64:F6:F7:86:B8:EC:86:9C:76:68:6A:F3:C9:9B:C4:7B:99:FD:D4:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPb3hrjshpx2aGrzyZvEe5n91EQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         df:c5:b4:ee:13:7e:5b:14:36:cc:b4:c4:1d:44:44:79:da:20:
         1f:0f:2e:58:56:46:c7:9c:18:5b:d0:eb:a9:31:76:40:be:ab:
         56:9d:b3:88:8b:dd:b5:42:ad:68:67:87:0c:c1:41:31:45:01:
         50:82:ab:fd:03:80:b0:90:28:23:8f:6b:15:2d:aa:12:f8:48:
         34:6c:7b:df:1b:cb:65:24:57:fc:f0:32:ec:07:6d:7e:09:1e:
         29:19:78:59:72:53:1c:39:41:cf:12:03:47:74:06:4d:16:d0:
         e1:2b:1a:bd:01:c9:0b:1a:dc:19:84:9c:78:fd:0b:d3:33:05:
         01:6d:b3:6a:38:4a:66:1a:1b:5e:c7:62:a3:79:9c:be:c5:48:
         dd:4d:2a:b3:3d:46:80:89:bf:63:79:ed:4c:37:b5:f0:4b:1d:
         a1:8f:e4:4e:16:55:6d:36:17:69:ea:6c:fd:20:8a:f7:87:80:
         88:97:80:0e:a7:20:94:b6:31:25:c7:bc:76:8f:68:13:c6:c4:
         d4:ed:a1:ba:6e:9d:f5:42:07:37:40:9d:fa:a3:1d:7e:a3:71:
         9d:e0:45:2a:0a:34:ea:92:2e:00:84:cc:76:15:2c:34:71:7d:
         2a:ca:78:08:4f:58:f6:f1:df:cb:ee:fd:ae:8d:d7:8a:54:4e:
         92:18:8c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:01:41 2026 by rpki-client