Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C51D7/BBEE62F4B10911F1AAB82B2D4011F970/zcNLlJKQexpZ7moAuHtPwhkmqy8.mft
File:                     zcNLlJKQexpZ7moAuHtPwhkmqy8.mft (raw, json)
Hash identifier:          1ld61iz9Ht0mTyhK4sB2yvr2AmDIPK2AK8iUEs9JueY=
Subject key identifier:   8C:66:89:0B:7C:66:6B:B4:B2:EB:1C:87:E5:5F:19:48:66:E4:E9:67
Authority key identifier: CD:C3:4B:94:92:90:7B:1A:59:EE:6A:00:B8:7B:4F:C2:19:26:AB:2F
Certificate issuer:       /CN=A91C51D7/serialNumber=CDC34B9492907B1A59EE6A00B87B4FC21926AB2F
Certificate serial:       0C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zcNLlJKQexpZ7moAuHtPwhkmqy8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C51D7/BBEE62F4B10911F1AAB82B2D4011F970/zcNLlJKQexpZ7moAuHtPwhkmqy8.mft
Manifest number:          0A
Signing time:             Sun 27 Sep 2026 09:49:07 +0000
Manifest this update:     Sun 27 Sep 2026 09:49:06 +0000
Manifest next update:     Sun 04 Oct 2026 09:49:06 +0000
Files and hashes:         1: zcNLlJKQexpZ7moAuHtPwhkmqy8.crl (hash: MUQcZi7sg5dKyfrLdo2NPgMjVGK4Z3jzJ0B/ZKwkVcU=)
                          2: 9D9BBE06B11711F1804AF5374511F970.roa (hash: /QR8B/WV3tnFJ5ZLzdG6QBvzbzr2LZpMKJKxqq3gaHs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C51D7/BBEE62F4B10911F1AAB82B2D4011F970/zcNLlJKQexpZ7moAuHtPwhkmqy8.crl
                          rsync://rpki.apnic.net/member_repository/A91C51D7/BBEE62F4B10911F1AAB82B2D4011F970/zcNLlJKQexpZ7moAuHtPwhkmqy8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zcNLlJKQexpZ7moAuHtPwhkmqy8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 09:49:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12 (0xc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C51D7, serialNumber=CDC34B9492907B1A59EE6A00B87B4FC21926AB2F
        Validity
            Not Before: Sep 27 09:49:06 2026 GMT
            Not After : Oct  4 09:49:06 2026 GMT
        Subject: CN=6ab8e693-7efb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ff:1b:9b:9a:5d:24:02:72:4a:0e:7c:00:18:
                    db:ce:b3:f0:8a:e7:c4:e3:5f:a7:de:07:52:27:f9:
                    44:92:42:9f:b9:57:e3:69:5a:1b:2b:5f:49:13:21:
                    c9:7c:43:d0:af:0f:01:f0:f8:b0:05:04:d6:f6:2c:
                    b3:15:59:92:6d:d3:a7:30:65:16:ed:c0:03:ad:af:
                    9c:ae:d7:9f:c6:0a:ea:a7:6c:2a:e5:bb:31:22:6d:
                    b0:e0:62:ea:ea:fd:f1:02:45:4a:92:21:1d:ee:8b:
                    01:99:93:f0:30:99:fe:65:c1:ee:59:3a:4b:55:e3:
                    17:5a:c2:08:e7:63:7e:63:02:84:a8:11:ec:c5:62:
                    c6:86:19:96:ef:ba:f2:6f:29:5a:c9:65:a7:1e:8f:
                    49:6a:a2:e0:4d:06:a0:cc:ff:72:57:31:e1:b2:44:
                    62:81:0b:cb:5c:d6:3b:d3:2f:64:9b:e6:0a:6b:ed:
                    b0:4c:13:6d:94:00:80:37:ed:56:01:50:9c:7f:3e:
                    60:b5:62:84:9a:f6:7c:61:94:da:49:eb:12:39:91:
                    00:38:70:dc:67:6d:3c:1d:fb:bd:c5:8f:64:b7:0f:
                    b2:b3:40:68:a0:4e:f4:d8:5d:48:98:d4:57:3a:a3:
                    e4:2f:ed:91:ac:7a:72:93:64:a1:24:19:28:ab:dd:
                    43:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:66:89:0B:7C:66:6B:B4:B2:EB:1C:87:E5:5F:19:48:66:E4:E9:67
            X509v3 Authority Key Identifier:
                keyid:CD:C3:4B:94:92:90:7B:1A:59:EE:6A:00:B8:7B:4F:C2:19:26:AB:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C51D7/BBEE62F4B10911F1AAB82B2D4011F970/zcNLlJKQexpZ7moAuHtPwhkmqy8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zcNLlJKQexpZ7moAuHtPwhkmqy8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C51D7/BBEE62F4B10911F1AAB82B2D4011F970/zcNLlJKQexpZ7moAuHtPwhkmqy8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:49:cf:53:1c:2f:27:48:89:14:44:44:22:97:d7:da:63:e8:
         35:64:b4:0d:95:2b:fb:fe:e6:05:17:0f:60:dc:5b:32:6b:f4:
         97:fa:40:59:cd:79:6e:58:04:c3:5e:aa:03:86:66:84:4d:c8:
         28:87:5c:e6:22:84:fd:69:77:e7:f2:df:21:ab:76:8c:38:50:
         68:b6:9a:6a:07:59:ad:c7:2f:69:cd:20:ff:37:51:65:6a:fc:
         1a:f1:34:65:b8:a9:8a:9e:11:54:ec:db:59:96:ba:db:69:cf:
         ce:bc:f3:4f:af:09:75:77:02:97:1f:53:5f:18:cf:8f:e9:c1:
         84:ff:8e:36:bf:ae:3f:39:f2:6b:25:8c:38:7a:22:09:63:23:
         78:06:36:39:ad:92:0d:3d:da:73:eb:8a:68:4c:cd:6b:db:65:
         9e:41:35:04:99:7d:ae:1b:5b:9f:f2:6f:13:90:76:3c:ac:aa:
         30:f2:ab:e5:77:e1:fd:b1:4f:05:0f:7f:6a:43:d0:69:9f:1e:
         cc:fc:7b:ae:29:4f:de:40:56:f0:24:c6:56:00:71:78:2f:29:
         02:d8:b5:3f:b6:da:4b:2c:ea:64:1b:be:90:84:8a:f4:92:c0:
         84:2a:ce:68:35:2e:48:00:bf:4f:e1:39:9b:6f:4c:26:d1:a2:
         af:00:b7:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 10:30:30 2026 by rpki-client