Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.mft
File:                     zPKlJcCQFETKePBbk5LABFeVZ2E.mft (raw, json)
Hash identifier:          I7DxaKWUnu6H6vVAT3BbnGMdLh7Ocfv531hvWa6WUc8=
Subject key identifier:   5F:F9:12:54:AA:B1:0D:D6:7F:92:1B:C5:F3:FD:1D:6F:05:CC:68:09
Authority key identifier: CC:F2:A5:25:C0:90:14:44:CA:78:F0:5B:93:92:C0:04:57:95:67:61
Certificate issuer:       /CN=A916A071/serialNumber=CCF2A525C0901444CA78F05B9392C00457956761
Certificate serial:       0AC6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPKlJcCQFETKePBbk5LABFeVZ2E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.mft
Manifest number:          0ABC
Signing time:             Mon 12 Oct 2026 19:36:21 +0000
Manifest this update:     Mon 12 Oct 2026 19:36:21 +0000
Manifest next update:     Mon 19 Oct 2026 19:36:21 +0000
Files and hashes:         1: zPKlJcCQFETKePBbk5LABFeVZ2E.crl (hash: 7QGJdhdBpFXLI7BoBsdrNpMhvW2/Lq2feJcQvVc/gso=)
                          2: 9BAC68CC83C211EABCB66612C4F9AE02.roa (hash: cZrqWOQatMkIn2VzGfcaWDnVlXfxEpjr06H/3z6i31k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.crl
                          rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPKlJcCQFETKePBbk5LABFeVZ2E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 Oct 2026 19:36:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2758 (0xac6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A071, serialNumber=CCF2A525C0901444CA78F05B9392C00457956761
        Validity
            Not Before: Oct 12 19:36:21 2026 GMT
            Not After : Oct 19 19:36:21 2026 GMT
        Subject: CN=6acd36b5-4e12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c1:63:a1:b0:8e:ad:bd:fe:47:2c:41:53:1c:
                    d9:c1:bd:f4:2e:93:d1:31:e9:54:e2:34:3c:40:d7:
                    d2:df:bf:04:6d:fa:7c:f5:24:bc:a0:c8:66:f5:01:
                    2e:93:a6:d0:d7:6d:30:a1:70:ad:ba:bb:45:10:91:
                    0b:80:dc:37:d4:ee:09:ef:1b:43:31:10:3d:ea:78:
                    43:9e:bb:2d:f6:1f:b5:c9:b4:78:cd:b9:53:75:10:
                    6d:7b:48:1e:c2:db:5d:06:be:6d:90:78:ae:99:50:
                    86:27:a4:1d:d5:57:56:39:e1:29:5e:fe:93:88:73:
                    c4:1f:02:0f:d8:c1:e0:6a:de:9b:b4:b4:8f:05:d8:
                    48:00:1b:7e:fc:e8:b2:a4:61:b7:11:18:24:6b:35:
                    4e:68:2f:d4:63:e8:3a:f5:c2:8f:ff:d3:0e:8b:ef:
                    38:5d:ab:e6:18:03:af:3d:2f:4d:d0:3a:7b:3a:94:
                    df:03:1b:ce:ae:0d:07:84:58:57:9e:58:96:91:37:
                    e5:e2:cd:e8:11:87:ce:bc:a4:dc:d1:f1:80:3c:d1:
                    27:75:45:66:62:94:41:df:62:e9:fb:ce:fa:51:5a:
                    e9:de:ba:95:88:ed:79:27:da:b0:df:c5:45:3f:54:
                    e0:74:a4:c3:13:eb:4e:54:7a:6d:8e:1d:58:88:a6:
                    fc:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:F9:12:54:AA:B1:0D:D6:7F:92:1B:C5:F3:FD:1D:6F:05:CC:68:09
            X509v3 Authority Key Identifier:
                keyid:CC:F2:A5:25:C0:90:14:44:CA:78:F0:5B:93:92:C0:04:57:95:67:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPKlJcCQFETKePBbk5LABFeVZ2E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:63:2a:c4:ff:49:15:27:0d:e5:bd:4f:39:15:85:0b:75:be:
         67:06:79:ed:b6:db:b2:10:87:72:5c:2c:bc:c4:62:95:0d:0f:
         32:2b:cf:3c:77:9b:5a:17:62:88:3b:d9:6a:7a:b1:8c:18:56:
         16:ee:fc:89:d6:e6:ea:16:6e:3b:da:3b:02:8a:0c:dc:6b:bb:
         f7:2b:f7:bd:7d:fc:06:6a:98:e9:01:46:88:a2:34:34:39:32:
         26:32:f1:3c:c0:2b:be:e5:64:c8:d6:20:50:83:78:b0:9d:00:
         c9:bd:1e:cf:ef:99:33:35:c2:48:dd:6c:70:e6:70:f4:9b:56:
         06:c5:d2:af:60:25:50:62:c9:42:6e:1b:25:c5:1d:59:09:78:
         f8:1c:f4:f0:7c:e4:3b:f8:0b:d2:f8:22:51:61:b8:cb:3c:a7:
         5a:d7:db:fe:f0:95:68:da:cd:d8:5d:aa:12:da:4e:7e:89:c1:
         e5:52:e6:de:db:0a:61:f5:51:7c:f0:d0:a6:a1:e6:56:0e:1a:
         00:bf:d4:75:51:34:38:b4:e7:2c:24:20:c9:0b:92:46:39:68:
         f1:67:57:12:0e:41:8d:c7:80:9e:1b:e2:07:81:b4:29:fc:ac:
         5b:da:e3:95:2e:5a:68:db:4f:1e:bc:3b:7a:5e:06:7b:ea:1e:
         43:df:3e:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 23:15:23 2026 by rpki-client