Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9173591/2768FBA61D6F11EA9B56E726C4F9AE02/A0ZyQIbx848yyqFygmhZGcfIu28.mft
File:                     A0ZyQIbx848yyqFygmhZGcfIu28.mft (raw, json)
Hash identifier:          8MProHB5T2zOhDJgtvxlqUgU03dKVOGXjyYEcxp1qy4=
Subject key identifier:   13:53:E2:CC:84:43:0E:B4:09:4C:CE:1A:15:EE:9E:7E:AD:21:91:B0
Authority key identifier: 03:46:72:40:86:F1:F3:8F:32:CA:A1:72:82:68:59:19:C7:C8:BB:6F
Certificate issuer:       /CN=A9173591/serialNumber=0346724086F1F38F32CAA17282685919C7C8BB6F
Certificate serial:       0CBE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0ZyQIbx848yyqFygmhZGcfIu28.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173591/2768FBA61D6F11EA9B56E726C4F9AE02/A0ZyQIbx848yyqFygmhZGcfIu28.mft
Manifest number:          0CBC
Signing time:             Mon 28 Sep 2026 18:38:14 +0000
Manifest this update:     Mon 28 Sep 2026 18:38:14 +0000
Manifest next update:     Mon 05 Oct 2026 18:38:14 +0000
Files and hashes:         1: A0ZyQIbx848yyqFygmhZGcfIu28.crl (hash: lWjs1FXoNE7t0wAYxQoVIpoecoLwbBFysYB6Awku5mc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173591/2768FBA61D6F11EA9B56E726C4F9AE02/A0ZyQIbx848yyqFygmhZGcfIu28.crl
                          rsync://rpki.apnic.net/member_repository/A9173591/2768FBA61D6F11EA9B56E726C4F9AE02/A0ZyQIbx848yyqFygmhZGcfIu28.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0ZyQIbx848yyqFygmhZGcfIu28.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Oct 2026 18:38:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3262 (0xcbe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173591, serialNumber=0346724086F1F38F32CAA17282685919C7C8BB6F
        Validity
            Not Before: Sep 28 18:38:14 2026 GMT
            Not After : Oct  5 18:38:14 2026 GMT
        Subject: CN=6abab416-a9cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:34:22:0a:d7:16:20:d5:b2:c0:d0:8b:84:00:
                    5f:9f:c2:31:66:8d:55:9d:3f:23:35:e5:e9:6c:1d:
                    a4:04:2f:e7:35:82:03:3f:54:d3:da:d1:94:f1:59:
                    4b:24:5d:15:2c:75:02:78:2c:9c:1a:4c:42:ea:62:
                    46:c9:c2:01:ef:20:6e:15:4e:3d:fa:95:a7:03:82:
                    43:5f:86:96:85:4f:35:31:a6:b1:95:01:cd:6c:75:
                    03:a8:4a:c3:22:db:08:90:0c:51:cd:39:af:25:5b:
                    1b:ff:24:3b:79:9d:e4:53:e2:82:30:5b:9a:7c:cd:
                    16:95:d2:bc:9a:e9:b8:b3:ea:be:86:3d:f8:e7:66:
                    a6:24:02:ec:b5:58:01:1a:e4:d2:a6:0a:ef:d1:b9:
                    31:49:58:b1:b9:fa:c6:47:a4:c6:92:ab:5e:37:d6:
                    f4:28:29:53:28:16:78:1a:c0:18:5f:c3:2e:a8:d3:
                    39:a5:b6:e4:87:ae:45:f3:58:d3:2a:d4:91:63:a1:
                    9c:89:0c:a8:aa:52:d7:89:b9:eb:38:cb:cf:06:7b:
                    c1:c4:e6:be:cd:22:20:d2:81:30:0f:b0:f2:6c:35:
                    c8:9b:73:e3:c3:ec:bd:95:73:0f:eb:56:ac:11:f3:
                    c0:c4:92:28:aa:09:79:f3:90:e2:19:62:97:24:80:
                    0c:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:53:E2:CC:84:43:0E:B4:09:4C:CE:1A:15:EE:9E:7E:AD:21:91:B0
            X509v3 Authority Key Identifier:
                keyid:03:46:72:40:86:F1:F3:8F:32:CA:A1:72:82:68:59:19:C7:C8:BB:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173591/2768FBA61D6F11EA9B56E726C4F9AE02/A0ZyQIbx848yyqFygmhZGcfIu28.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0ZyQIbx848yyqFygmhZGcfIu28.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173591/2768FBA61D6F11EA9B56E726C4F9AE02/A0ZyQIbx848yyqFygmhZGcfIu28.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:fc:0b:1d:24:13:80:2c:75:67:ed:9d:f8:60:09:00:57:51:
         8c:14:cd:fd:31:b7:20:60:be:83:16:89:8a:fb:8c:b5:1c:0b:
         2e:df:a1:f7:24:77:51:2c:e0:ad:48:91:04:44:ba:05:76:57:
         20:34:dd:ac:d7:12:43:25:e3:a6:96:84:66:d0:81:7f:c0:0c:
         37:3f:02:8b:5b:71:b4:ea:01:08:32:50:66:eb:09:01:10:53:
         77:51:e9:d3:ed:f7:4b:fe:6c:58:93:1d:50:21:60:06:3a:0a:
         9f:cf:07:a9:38:85:78:66:f9:14:e6:e9:ec:20:3b:ee:65:70:
         39:9e:93:2c:6a:56:c8:c7:c4:e0:e3:3d:d5:74:44:e4:11:13:
         9f:54:ec:69:59:b8:47:fa:b9:ac:7a:11:e8:a8:ed:94:78:9c:
         e5:69:9b:ee:c1:07:94:69:c1:16:0a:79:ea:ff:b7:03:5a:29:
         e8:9c:5c:21:83:19:b9:89:72:ad:30:cd:51:46:23:f2:dc:08:
         b0:eb:f1:58:1c:d3:f2:a9:da:aa:f9:40:15:d4:4a:8d:66:58:
         28:1e:45:de:44:19:9c:4e:cc:b7:a8:48:14:19:f9:cd:a2:cf:
         4c:fa:88:cb:c4:37:4b:d5:ec:95:ae:bb:b2:b9:7f:39:81:ee:
         ed:82:a0:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 02:57:58 2026 by rpki-client