Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C430B/8236E260A7CE11F097894528C4F9AE02/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.mft
File:                     0Zu2jjzNxLeM42-H-U5_cQUSOiQ.mft (raw, json)
Hash identifier:          gLhSiVnnxCLrc0n9YAwAJf7y2PcVrLtqR1osHFYWNyo=
Subject key identifier:   CA:04:0B:37:1A:CA:FA:7F:8F:EA:04:D6:0E:C8:96:CD:39:D4:AF:54
Authority key identifier: D1:9B:B6:8E:3C:CD:C4:B7:8C:E3:6F:87:F9:4E:7F:71:05:12:3A:24
Certificate issuer:       /CN=A91C430B/serialNumber=D19BB68E3CCDC4B78CE36F87F94E7F7105123A24
Certificate serial:       CE
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C430B/8236E260A7CE11F097894528C4F9AE02/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.mft
Manifest number:          C5
Signing time:             Tue 13 Oct 2026 07:35:09 +0000
Manifest this update:     Tue 13 Oct 2026 07:35:08 +0000
Manifest next update:     Tue 20 Oct 2026 07:35:08 +0000
Files and hashes:         1: 0Zu2jjzNxLeM42-H-U5_cQUSOiQ.crl (hash: Dd58T6jHEFbDkW+K1UzGzp8QvmfW1rKcYbadc6yFm1o=)
                          2: 9484A13A622E11F1A36ED3DF7447A888.roa (hash: Kqin5t6HoE32APIOaQFq882jyRgeaOI3EzjEp6mHGyQ=)
                          3: 8988B2165DB111F1AB23B9ACA3833773.roa (hash: ad65XTYzHUp3cWmiBJTHs+rg9KKlQlfXiUUJuwHLk8k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C430B/8236E260A7CE11F097894528C4F9AE02/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.crl
                          rsync://rpki.apnic.net/member_repository/A91C430B/8236E260A7CE11F097894528C4F9AE02/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 Oct 2026 07:35:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 206 (0xce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C430B, serialNumber=D19BB68E3CCDC4B78CE36F87F94E7F7105123A24
        Validity
            Not Before: Oct 13 07:35:08 2026 GMT
            Not After : Oct 20 07:35:08 2026 GMT
        Subject: CN=6acddf2d-32a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:24:45:46:fd:6a:46:05:34:6f:56:34:01:cd:
                    e3:2f:08:92:91:60:e8:60:d8:1d:f2:4e:a1:85:f5:
                    09:d9:81:af:ed:85:cf:90:01:b3:54:d3:47:76:12:
                    7c:ed:7e:a1:b0:d9:b2:2a:a6:f8:8b:61:c0:ae:f3:
                    7e:80:70:db:bf:3e:45:41:df:c5:6e:f3:27:0f:42:
                    61:a0:19:07:4a:13:e6:41:4b:48:69:eb:8b:e6:f4:
                    45:07:55:65:22:13:d0:9a:91:20:bc:76:cc:00:b9:
                    4a:50:b3:ed:1d:8f:83:eb:52:36:41:a0:f8:42:53:
                    13:55:fe:09:d9:92:c7:a3:5f:31:0b:4c:82:79:42:
                    55:c5:82:a8:ae:8c:d4:53:5b:b8:12:a6:92:69:f6:
                    d4:73:e2:de:a2:58:8d:7c:d4:48:9d:1d:48:b0:3c:
                    7c:31:b0:ce:7d:c4:1a:83:06:63:51:95:eb:8d:47:
                    a7:74:ef:61:a2:69:84:bc:e3:a9:cd:13:63:8f:c5:
                    03:d4:30:00:1e:f8:f7:8d:70:c7:2d:68:a6:da:44:
                    a1:9f:62:c4:a0:ad:a8:7b:04:e2:d4:e1:c4:a6:aa:
                    d0:75:78:43:2a:da:fe:7f:92:f9:e6:d5:df:82:b9:
                    f3:89:64:be:5d:a9:3d:9b:33:a3:e6:14:80:4e:38:
                    48:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:04:0B:37:1A:CA:FA:7F:8F:EA:04:D6:0E:C8:96:CD:39:D4:AF:54
            X509v3 Authority Key Identifier:
                keyid:D1:9B:B6:8E:3C:CD:C4:B7:8C:E3:6F:87:F9:4E:7F:71:05:12:3A:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C430B/8236E260A7CE11F097894528C4F9AE02/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C430B/8236E260A7CE11F097894528C4F9AE02/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:c6:af:b2:d6:d9:79:61:b5:bc:20:97:55:1a:62:b1:69:7c:
         29:0a:33:c1:b7:b5:08:c6:d7:73:5c:19:73:19:b0:45:ef:c9:
         0b:93:d4:71:aa:4c:38:5b:86:e9:76:43:66:d7:a2:d5:eb:4d:
         05:79:d7:2e:99:90:08:b7:13:38:9b:3b:78:d6:53:8d:bc:8f:
         f6:17:6c:67:1f:0f:11:12:52:c4:a6:cf:35:2c:ac:f4:a8:e8:
         3a:30:8d:ab:bf:07:fc:9d:41:79:50:25:8e:28:93:17:bd:4b:
         56:ab:b9:6c:96:42:b8:33:23:fe:84:24:72:ca:3e:62:31:c8:
         76:b6:a0:d9:01:99:ab:1d:1a:98:f2:07:35:27:13:69:03:72:
         9e:be:b6:5f:8b:99:be:f6:ff:7d:48:9d:f3:bc:ae:c4:ba:96:
         52:36:3f:0a:af:b2:0e:e1:31:e4:58:36:0e:7e:be:a7:49:da:
         c6:e2:56:b6:fc:41:46:3e:37:27:41:57:be:36:16:f3:70:96:
         a8:9f:24:99:27:5e:d7:b5:3a:d0:a1:60:f0:c7:b8:da:88:de:
         e7:d3:e6:f3:78:74:d9:78:b5:bc:02:3f:72:42:58:b8:63:10:
         8f:9f:7a:08:1f:f4:c4:b5:ec:7e:d0:d0:72:3d:b0:e6:90:fe:
         35:48:2f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 19:20:58 2026 by rpki-client