Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.mft
File:                     p0zn2tX7UE2xa75wwvnfCqnwBgk.mft (raw, json)
Hash identifier:          5GKU8qywJXy71cI8kgYzaoAPfy4kEIA0y3P5lc8tVdA=
Subject key identifier:   9A:E9:8F:65:58:4E:E0:41:06:CC:52:FC:DA:06:41:91:CF:A7:65:40
Authority key identifier: A7:4C:E7:DA:D5:FB:50:4D:B1:6B:BE:70:C2:F9:DF:0A:A9:F0:06:09
Certificate issuer:       /CN=A918D699/serialNumber=A74CE7DAD5FB504DB16BBE70C2F9DF0AA9F00609
Certificate serial:       01D6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0zn2tX7UE2xa75wwvnfCqnwBgk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.mft
Manifest number:          01C9
Signing time:             Sun 11 Oct 2026 04:24:08 +0000
Manifest this update:     Sun 11 Oct 2026 04:24:07 +0000
Manifest next update:     Sun 18 Oct 2026 04:24:07 +0000
Files and hashes:         1: p0zn2tX7UE2xa75wwvnfCqnwBgk.crl (hash: BiWiqiXC34r4pi+kmzdGbEKbiaXFmbsxzeuNCqtxHdQ=)
                          2: C564E80017E911EF9D471E18C4F9AE02.roa (hash: qze2BxN1ZqkUR8sLJAr7IWqQzGJrYs19cA2fz8g+u+Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.crl
                          rsync://rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0zn2tX7UE2xa75wwvnfCqnwBgk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Oct 2026 04:24:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 470 (0x1d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D699, serialNumber=A74CE7DAD5FB504DB16BBE70C2F9DF0AA9F00609
        Validity
            Not Before: Oct 11 04:24:07 2026 GMT
            Not After : Oct 18 04:24:07 2026 GMT
        Subject: CN=6acb0f68-f125
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:dc:6d:5c:0a:4c:11:0f:e5:50:f9:5c:02:ad:
                    4c:e9:1e:02:0a:56:f0:b4:7c:b4:f4:bf:be:01:8d:
                    58:d3:e8:50:ce:7d:9f:31:43:c0:40:71:1b:c6:db:
                    6b:3c:de:00:14:40:61:a0:ae:a7:da:26:35:7f:d1:
                    34:2e:9b:3f:12:48:bf:32:e6:ca:7a:9f:7e:cd:57:
                    89:f7:4b:54:49:f5:41:0c:29:e5:70:a1:12:70:db:
                    61:db:9a:64:8e:9d:6c:05:80:d1:04:85:76:1e:d0:
                    b0:b0:e3:36:08:6c:27:e9:32:f9:b1:42:58:bf:91:
                    4f:f2:9a:16:74:7d:bd:7b:bf:01:9d:db:ef:2a:7a:
                    88:c4:11:d5:2d:81:df:74:a7:64:f0:8f:44:e0:d8:
                    b1:82:9d:c0:79:24:d5:97:ef:91:ff:bc:03:c0:87:
                    8d:dc:e7:f1:a0:8b:12:c6:cb:68:76:b8:9b:39:dd:
                    64:bc:76:69:59:89:e3:76:c6:19:8f:ac:1e:1e:d0:
                    15:9c:aa:0d:64:43:ec:27:71:e0:14:74:68:2f:3c:
                    f6:07:7e:d0:05:f8:47:75:a7:2b:d4:f8:ad:48:f4:
                    81:45:2c:4d:b8:fc:ca:94:d2:b6:b8:c5:9f:78:90:
                    03:27:f2:13:e2:11:3d:64:7d:c4:1f:f8:f1:5d:0a:
                    98:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:E9:8F:65:58:4E:E0:41:06:CC:52:FC:DA:06:41:91:CF:A7:65:40
            X509v3 Authority Key Identifier:
                keyid:A7:4C:E7:DA:D5:FB:50:4D:B1:6B:BE:70:C2:F9:DF:0A:A9:F0:06:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0zn2tX7UE2xa75wwvnfCqnwBgk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:2e:67:23:d8:b0:0d:df:43:7f:a9:29:49:07:1a:74:a4:ff:
         0a:d5:2c:0b:d2:90:48:71:c6:12:bd:51:a1:34:dc:84:32:2f:
         2b:ec:19:16:18:38:d3:36:c9:73:db:bd:fc:86:f1:93:09:8b:
         d0:44:9d:12:86:6a:5e:01:22:9a:cf:45:3c:8e:79:63:12:dc:
         d9:08:4e:d1:2b:06:ce:c5:f6:ac:65:1e:a6:1d:85:ea:c9:ef:
         5a:36:fb:9c:64:a5:c1:07:f7:99:17:30:81:88:c0:07:f4:f9:
         1d:30:c4:95:d0:fa:c1:24:42:2d:5b:9d:d1:1e:c7:ca:34:b7:
         f3:c4:fe:6f:d8:eb:bc:49:02:9d:27:10:f5:96:d3:f4:eb:88:
         47:6d:4f:a1:d1:9e:95:17:df:c3:07:36:e3:60:cb:88:f5:d2:
         73:b2:27:0d:fd:54:28:5a:87:3b:59:37:20:31:51:d6:d2:2c:
         80:74:aa:7b:a5:d3:79:2e:e2:5f:43:8d:77:cf:54:be:22:d7:
         01:88:00:87:23:3f:28:6d:57:74:9a:55:b8:6f:76:26:7b:68:
         3e:dd:e4:da:1d:3a:38:f9:5e:46:d6:ea:27:b2:6b:92:02:98:
         f5:22:8d:85:7d:6e:e0:1f:98:ec:a5:45:a1:4b:24:b7:1f:9e:
         6b:80:24:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 06:30:14 2026 by rpki-client