Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B8D56/1BC8E1B6630A11ECAAA1414EC4F9AE02/zxWtEC7t37zKaFhab1w4F_6KGNU.mft
File:                     zxWtEC7t37zKaFhab1w4F_6KGNU.mft (raw, json)
Hash identifier:          WT05HPpnc2UULoR7LPHap2vv0q0FIeb79Y0WcxN8Aqw=
Subject key identifier:   0B:97:E8:3C:F5:81:14:02:18:16:98:8E:E0:46:C2:70:01:69:2A:F9
Authority key identifier: CF:15:AD:10:2E:ED:DF:BC:CA:68:58:5A:6F:5C:38:17:FE:8A:18:D5
Certificate issuer:       /CN=A91B8D56/serialNumber=CF15AD102EEDDFBCCA68585A6F5C3817FE8A18D5
Certificate serial:       053D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zxWtEC7t37zKaFhab1w4F_6KGNU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B8D56/1BC8E1B6630A11ECAAA1414EC4F9AE02/zxWtEC7t37zKaFhab1w4F_6KGNU.mft
Manifest number:          0532
Signing time:             Thu 08 Oct 2026 23:44:20 +0000
Manifest this update:     Thu 08 Oct 2026 23:44:19 +0000
Manifest next update:     Thu 15 Oct 2026 23:44:19 +0000
Files and hashes:         1: zxWtEC7t37zKaFhab1w4F_6KGNU.crl (hash: twVa0TfR99qXQ1dUeLKcQioLehmjzWY5x6WeFKJ5/gg=)
                          2: 70638510630E11ECB30DB557C4F9AE02.roa (hash: nDKlIV5XCKKFEVpkwUv/eg1d2ekpQE5TiySuHisuD2Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B8D56/1BC8E1B6630A11ECAAA1414EC4F9AE02/zxWtEC7t37zKaFhab1w4F_6KGNU.crl
                          rsync://rpki.apnic.net/member_repository/A91B8D56/1BC8E1B6630A11ECAAA1414EC4F9AE02/zxWtEC7t37zKaFhab1w4F_6KGNU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zxWtEC7t37zKaFhab1w4F_6KGNU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Oct 2026 23:41:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1341 (0x53d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B8D56, serialNumber=CF15AD102EEDDFBCCA68585A6F5C3817FE8A18D5
        Validity
            Not Before: Oct  8 23:44:19 2026 GMT
            Not After : Oct 15 23:44:19 2026 GMT
        Subject: CN=6ac82ad4-dbbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ba:83:13:0d:c4:4f:c3:ef:03:18:4c:4e:c5:
                    a9:8c:64:8e:1b:64:25:0a:5f:ff:0a:92:40:09:ce:
                    f2:8f:62:2a:ab:2b:d3:7b:a8:5b:9d:f9:c4:51:71:
                    13:ec:34:c9:30:92:e3:5c:b7:c0:15:e0:b7:fc:f8:
                    27:74:e5:31:f0:91:a1:36:e4:ad:1a:77:33:42:9a:
                    b2:15:6d:e9:b5:95:d2:72:d0:4f:16:d8:2f:32:f6:
                    ee:63:e6:73:48:8d:51:94:7f:79:b7:2c:c8:c3:17:
                    e3:3f:91:4d:c2:53:e7:52:bd:31:4f:d4:0c:8f:2f:
                    66:cb:c8:82:de:92:d4:39:28:63:64:e4:f8:a8:f4:
                    18:f0:07:71:e8:27:71:e8:8f:45:43:31:b5:df:33:
                    3c:d8:7c:02:f5:67:d1:04:e4:c4:9c:35:b1:68:81:
                    23:ae:7a:3a:e1:20:9d:9c:43:e9:11:f7:4e:6e:af:
                    21:93:ac:ca:e9:5c:9c:f8:d9:dd:8f:a3:bb:98:85:
                    80:45:d1:65:83:72:dc:e9:e4:74:91:ab:8b:dc:cb:
                    5e:22:c4:f8:95:73:c9:87:7c:84:b7:9c:d4:7c:49:
                    22:a8:df:73:5a:1a:ea:98:00:2f:5a:45:d5:1b:09:
                    c0:41:7b:b6:fb:5e:6c:00:00:89:3c:81:61:f2:01:
                    eb:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:97:E8:3C:F5:81:14:02:18:16:98:8E:E0:46:C2:70:01:69:2A:F9
            X509v3 Authority Key Identifier:
                keyid:CF:15:AD:10:2E:ED:DF:BC:CA:68:58:5A:6F:5C:38:17:FE:8A:18:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B8D56/1BC8E1B6630A11ECAAA1414EC4F9AE02/zxWtEC7t37zKaFhab1w4F_6KGNU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zxWtEC7t37zKaFhab1w4F_6KGNU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8D56/1BC8E1B6630A11ECAAA1414EC4F9AE02/zxWtEC7t37zKaFhab1w4F_6KGNU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:09:12:66:ac:ae:ca:ac:a7:a8:d4:45:b9:9d:dc:bd:f6:a3:
         cf:87:c4:59:e7:06:8b:27:fc:62:69:14:b0:03:6e:ce:ee:8d:
         5c:c2:82:f1:d1:98:24:47:64:a7:dd:1e:05:94:01:8b:87:e2:
         8b:6a:e5:43:c4:ad:a9:36:46:3c:b8:c2:a8:ca:10:4b:bf:10:
         16:00:b6:7f:39:71:bf:9f:f5:63:50:98:69:29:33:8c:f1:e5:
         c9:73:36:6d:14:a0:b8:ff:8f:50:35:ed:fb:75:d0:8b:57:5b:
         5c:3c:d5:d8:e6:44:43:88:4e:d0:ba:5c:50:7f:d9:36:e3:23:
         60:eb:28:f7:2f:6f:eb:22:4b:01:f8:29:33:0b:a8:f7:db:a8:
         c0:45:0c:38:ab:05:6c:94:c2:91:3e:4f:4e:1a:b9:28:c1:c0:
         97:68:65:87:bc:15:63:c3:a1:09:5a:81:e0:ef:b2:b0:92:30:
         26:2d:c0:c3:bf:6f:c8:be:0f:c4:b3:6a:b3:9d:1f:15:0a:d4:
         f2:04:93:a9:a7:2b:5c:ba:34:f4:1e:d0:de:6a:44:99:ff:69:
         26:a7:42:21:b6:63:e7:56:ae:0b:7f:33:1f:42:67:28:79:df:
         f6:24:06:22:a2:43:73:fb:bc:2b:2d:69:66:b7:42:4e:cc:7e:
         ae:d9:1f:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 02:57:39 2026 by rpki-client