Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B01FF/B8C1E7D4412111ECAC525483C4F9AE02/Z15jpMF4xvVmAmQCRHJGTrmOG10.mft
File:                     Z15jpMF4xvVmAmQCRHJGTrmOG10.mft (raw, json)
Hash identifier:          dqAOc6g9iWgmZRKXrfepY70dYeSbXgwhNRwzywty0Z4=
Subject key identifier:   39:D6:76:AD:5F:B7:26:40:18:BA:0B:07:99:C7:C8:74:13:87:66:BA
Authority key identifier: 67:5E:63:A4:C1:78:C6:F5:66:02:64:02:44:72:46:4E:B9:8E:1B:5D
Certificate issuer:       /CN=A91B01FF/serialNumber=675E63A4C178C6F5660264024472464EB98E1B5D
Certificate serial:       0584
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z15jpMF4xvVmAmQCRHJGTrmOG10.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B01FF/B8C1E7D4412111ECAC525483C4F9AE02/Z15jpMF4xvVmAmQCRHJGTrmOG10.mft
Manifest number:          057A
Signing time:             Sun 20 Sep 2026 23:08:21 +0000
Manifest this update:     Sun 20 Sep 2026 23:08:20 +0000
Manifest next update:     Sun 27 Sep 2026 23:08:20 +0000
Files and hashes:         1: Z15jpMF4xvVmAmQCRHJGTrmOG10.crl (hash: 9h3w44HZJd4F3GsffbNTY5Ev5l9YfseY6WRyNXeQBVg=)
                          2: CBCD0962B91511EE865E5E34C4F9AE02.roa (hash: JzatEWbC4tIiSpzvsBIlMqcvgyExYuzcfEYOIYUShIY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B01FF/B8C1E7D4412111ECAC525483C4F9AE02/Z15jpMF4xvVmAmQCRHJGTrmOG10.crl
                          rsync://rpki.apnic.net/member_repository/A91B01FF/B8C1E7D4412111ECAC525483C4F9AE02/Z15jpMF4xvVmAmQCRHJGTrmOG10.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z15jpMF4xvVmAmQCRHJGTrmOG10.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 23:08:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1412 (0x584)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B01FF, serialNumber=675E63A4C178C6F5660264024472464EB98E1B5D
        Validity
            Not Before: Sep 20 23:08:20 2026 GMT
            Not After : Sep 27 23:08:20 2026 GMT
        Subject: CN=6ab06765-20cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4a:1d:bc:69:2b:4d:37:f9:1d:48:e3:7c:45:
                    7f:df:cd:05:15:fe:67:01:1d:2f:56:83:82:d4:ec:
                    63:0b:21:af:b7:81:2a:8f:e5:5a:77:37:04:98:e5:
                    6e:b8:f3:73:7f:90:a0:cb:73:f1:20:a1:23:67:18:
                    62:f1:a4:ce:03:15:4d:50:02:5e:d4:85:d8:62:96:
                    2e:41:85:9b:86:34:39:d9:e2:fa:8d:13:c9:4f:c9:
                    b5:6e:be:20:ea:65:73:70:98:df:e1:9a:c5:0c:4d:
                    bd:3d:de:e5:18:a9:58:7e:11:54:f1:19:df:9e:85:
                    f2:33:35:55:fb:fe:91:be:76:c6:f5:a3:64:2b:de:
                    d8:59:72:84:c2:7a:be:b2:32:60:54:57:85:76:3a:
                    6a:1f:62:c4:e9:1e:06:b8:b9:76:d2:b0:0a:89:01:
                    82:69:34:9c:19:41:45:d4:1e:14:49:e8:59:8f:87:
                    5f:01:b6:2a:10:0b:ed:9f:39:09:24:e0:95:52:da:
                    43:d6:4a:05:ca:c2:ba:67:af:62:64:88:9b:4a:09:
                    2d:f7:0c:2f:94:2d:52:34:fc:79:36:58:e9:8c:58:
                    49:06:39:9d:49:d0:04:f9:11:53:c8:f7:02:c7:c0:
                    1b:a3:25:11:c3:95:f6:c9:18:5a:fb:4a:b4:e5:b9:
                    eb:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:D6:76:AD:5F:B7:26:40:18:BA:0B:07:99:C7:C8:74:13:87:66:BA
            X509v3 Authority Key Identifier:
                keyid:67:5E:63:A4:C1:78:C6:F5:66:02:64:02:44:72:46:4E:B9:8E:1B:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B01FF/B8C1E7D4412111ECAC525483C4F9AE02/Z15jpMF4xvVmAmQCRHJGTrmOG10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z15jpMF4xvVmAmQCRHJGTrmOG10.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B01FF/B8C1E7D4412111ECAC525483C4F9AE02/Z15jpMF4xvVmAmQCRHJGTrmOG10.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:b2:e5:3e:8f:77:9d:19:c8:28:12:01:55:bd:a5:b5:6c:d5:
         48:09:a2:ad:cb:84:bd:b0:67:bf:be:ad:26:5d:b9:4c:9f:2f:
         15:0d:93:a7:21:96:e2:b9:12:74:dd:b8:d0:f8:f2:5e:37:92:
         13:98:20:3a:13:b1:57:58:9d:e0:52:55:75:04:4f:a3:54:51:
         2e:9d:23:74:8d:c0:9c:d2:d5:62:bd:0b:51:26:14:ec:03:04:
         97:1d:0a:e5:7c:41:49:58:2b:54:ba:87:56:70:d4:82:92:35:
         4d:ec:0c:0b:43:08:52:f9:88:1a:55:90:79:e1:4b:28:e2:7b:
         31:f5:a2:f0:5d:24:b4:b4:d5:88:16:91:f1:8c:b2:ef:79:97:
         79:1d:89:37:91:cd:dd:84:73:f3:27:6d:cb:7f:4c:88:94:bf:
         ed:82:d6:20:f8:d1:4f:3b:9c:30:81:f4:0a:56:5c:ad:53:1e:
         c8:c5:5b:86:16:c2:b4:9b:7b:10:1b:df:bd:a4:06:db:e1:2a:
         d1:ec:17:db:40:d6:3b:b1:d4:bd:e5:45:ff:0a:5d:a6:88:14:
         76:34:d0:0d:5b:19:88:9a:4d:8f:43:08:dc:be:02:49:a1:ec:
         f1:a9:fc:2b:ae:9e:dd:d4:94:eb:ea:5e:05:f2:ac:b1:08:7d:
         16:61:e7:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:52:16 2026 by rpki-client