Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917C81C/D19AEE3EFF1011EB9BD13D6CC4F9AE02/PzsvWzuuUqa1aSyvkqJVSwbahj0.mft
File:                     PzsvWzuuUqa1aSyvkqJVSwbahj0.mft (raw, json)
Hash identifier:          1aFzmCfwf3E6WX2ZoUbZ9IZz2v+5wPz9FZK3yw8ijiY=
Subject key identifier:   8D:40:E3:37:D5:A5:60:90:2A:72:7A:D9:92:4D:68:0A:6C:94:F3:B9
Authority key identifier: 3F:3B:2F:5B:3B:AE:52:A6:B5:69:2C:AF:92:A2:55:4B:06:DA:86:3D
Certificate issuer:       /CN=A917C81C/serialNumber=3F3B2F5B3BAE52A6B5692CAF92A2554B06DA863D
Certificate serial:       0631
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PzsvWzuuUqa1aSyvkqJVSwbahj0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C81C/D19AEE3EFF1011EB9BD13D6CC4F9AE02/PzsvWzuuUqa1aSyvkqJVSwbahj0.mft
Manifest number:          0628
Signing time:             Fri 02 Oct 2026 23:05:30 +0000
Manifest this update:     Fri 02 Oct 2026 23:05:30 +0000
Manifest next update:     Fri 09 Oct 2026 23:05:30 +0000
Files and hashes:         1: PzsvWzuuUqa1aSyvkqJVSwbahj0.crl (hash: /j97qzO+W/qo1T3MtxkK5QJlKLJJZqIRh4YOuUsxsS4=)
                          2: EC7B7E82DFD811F08F00FF64536F56BC.roa (hash: GBcRPAk26rh6dyuaJcennk1M9baT+ZU2RXBW85It44s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C81C/D19AEE3EFF1011EB9BD13D6CC4F9AE02/PzsvWzuuUqa1aSyvkqJVSwbahj0.crl
                          rsync://rpki.apnic.net/member_repository/A917C81C/D19AEE3EFF1011EB9BD13D6CC4F9AE02/PzsvWzuuUqa1aSyvkqJVSwbahj0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PzsvWzuuUqa1aSyvkqJVSwbahj0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 23:05:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1585 (0x631)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C81C, serialNumber=3F3B2F5B3BAE52A6B5692CAF92A2554B06DA863D
        Validity
            Not Before: Oct  2 23:05:30 2026 GMT
            Not After : Oct  9 23:05:30 2026 GMT
        Subject: CN=6ac038ba-87ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ab:f3:36:f1:b0:96:38:5c:f4:18:60:7d:a3:
                    c1:82:18:24:66:78:93:07:2e:68:2d:2c:29:b6:63:
                    41:6e:15:aa:12:aa:59:1e:f7:35:5b:ea:62:17:a5:
                    79:ec:63:ca:cc:cd:2e:b5:fd:e8:92:6b:a4:e1:a6:
                    78:13:47:47:69:a2:91:bd:6f:e9:5f:ae:50:d7:32:
                    ba:ee:1e:66:4f:f5:af:df:3d:28:79:6e:88:cf:31:
                    b9:5e:16:57:0d:9d:f2:c1:64:13:55:51:a2:8f:dd:
                    89:7a:60:45:9c:27:19:45:53:cd:a7:53:dd:85:01:
                    83:6d:c1:bb:69:90:af:84:59:17:a0:d4:02:74:e1:
                    1d:0e:ee:51:37:cc:0d:5d:ca:f8:cd:9c:ba:5c:91:
                    43:9a:21:bd:13:75:19:57:0f:84:c1:a1:1c:75:ab:
                    2d:67:8e:da:b5:0d:b0:52:26:e3:11:98:1a:26:7c:
                    9e:f6:6d:67:ef:12:7c:fa:40:07:2d:db:fb:56:ca:
                    c2:4a:58:94:cf:13:13:ba:ef:b4:9f:d4:10:8a:cf:
                    a0:7d:6b:a8:af:83:a1:82:4d:28:2b:19:1c:c9:5f:
                    7c:50:c5:db:66:73:65:be:27:f9:6a:e6:14:6e:a8:
                    55:58:94:18:a4:bb:67:04:02:4c:4e:5f:6f:03:a1:
                    f4:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:40:E3:37:D5:A5:60:90:2A:72:7A:D9:92:4D:68:0A:6C:94:F3:B9
            X509v3 Authority Key Identifier:
                keyid:3F:3B:2F:5B:3B:AE:52:A6:B5:69:2C:AF:92:A2:55:4B:06:DA:86:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C81C/D19AEE3EFF1011EB9BD13D6CC4F9AE02/PzsvWzuuUqa1aSyvkqJVSwbahj0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PzsvWzuuUqa1aSyvkqJVSwbahj0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C81C/D19AEE3EFF1011EB9BD13D6CC4F9AE02/PzsvWzuuUqa1aSyvkqJVSwbahj0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:20:98:fb:97:2b:e6:50:27:c2:e6:0b:63:5a:45:56:36:0a:
         01:4b:94:70:e7:09:b0:60:df:f9:b1:52:80:af:cc:50:8e:14:
         2a:0c:2a:1b:e6:69:94:c4:23:99:bd:4d:e5:87:ff:ef:f3:2e:
         ce:46:3b:53:07:23:6e:e7:2b:a9:b2:7e:9a:03:db:7b:77:d0:
         ad:b2:64:c6:1f:6f:b8:13:5f:93:c9:8e:1a:56:a6:ec:c1:ae:
         7b:f8:29:75:e8:17:ed:92:c1:97:4c:63:82:ff:38:10:d0:e2:
         6f:2a:45:55:91:64:f4:02:b3:4e:91:cf:04:2f:12:77:0e:b2:
         a9:5d:77:d1:01:9b:b2:04:bd:4a:a8:a8:59:56:34:0b:bd:4f:
         98:0e:ed:a0:f3:ff:6c:c2:1b:27:3c:1d:d5:d0:4a:73:31:7e:
         3a:19:13:88:ac:90:30:e1:5b:71:42:c0:2f:99:b3:52:6d:8a:
         db:ad:11:ff:bb:8c:a0:e4:60:b4:f2:6c:3a:c2:2a:ba:11:8d:
         46:74:ce:6c:62:e1:92:8c:e3:d2:a7:2c:dc:ff:2e:5e:a2:bc:
         62:f6:a5:db:5d:b7:14:37:66:e6:44:5c:31:1d:b1:3f:90:04:
         a5:02:42:99:9e:fe:49:95:23:e8:d9:07:10:1f:38:17:60:66:
         29:d8:ab:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 03:52:33 2026 by rpki-client