Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.mft
File:                     Z1qGdu030Wq7yi_vjqofI_JXsp8.mft (raw, json)
Hash identifier:          dN5UQ6ZUIZXVpeEcLjQSvHtocIAhB0TOGcZzBIRCCKM=
Subject key identifier:   AB:F2:17:A1:82:E8:11:AB:16:8A:FB:C1:79:0C:D5:F8:CF:A7:8B:CA
Authority key identifier: 67:5A:86:76:ED:37:D1:6A:BB:CA:2F:EF:8E:AA:1F:23:F2:57:B2:9F
Certificate issuer:       /CN=A91D56CA/serialNumber=675A8676ED37D16ABBCA2FEF8EAA1F23F257B29F
Certificate serial:       18F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1qGdu030Wq7yi_vjqofI_JXsp8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.mft
Manifest number:          18DB
Signing time:             Sat 10 Oct 2026 16:28:33 +0000
Manifest this update:     Sat 10 Oct 2026 16:28:32 +0000
Manifest next update:     Sat 17 Oct 2026 16:28:32 +0000
Files and hashes:         1: Z1qGdu030Wq7yi_vjqofI_JXsp8.crl (hash: xRiaFwmqUgCDmrYkd2OCEitxw6CyCuB6r4hNHwcFFYA=)
                          2: A6DF4CF8C34B11ECAFB25A68C4F9AE02.roa (hash: rdOZCJ3dicwt2ZQgE2QnLuQhDeAJoxWmp9bzW22pmwI=)
                          3: 0EE83FA4C34611EC9290F072C4F9AE02.roa (hash: ZFGFBfx4/7JIn5J81VyjxgzCJGuEFQLjcxwfK1UOBRQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.crl
                          rsync://rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1qGdu030Wq7yi_vjqofI_JXsp8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Oct 2026 16:28:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6388 (0x18f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D56CA, serialNumber=675A8676ED37D16ABBCA2FEF8EAA1F23F257B29F
        Validity
            Not Before: Oct 10 16:28:32 2026 GMT
            Not After : Oct 17 16:28:32 2026 GMT
        Subject: CN=6aca67b1-0451
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f6:6e:96:25:34:6b:34:3a:97:bd:37:16:2c:
                    dd:9c:14:d1:f9:93:e9:7d:18:62:29:56:76:f0:fb:
                    d1:5e:b5:1e:6b:3e:95:92:8e:80:75:08:d7:c6:1e:
                    44:34:07:5a:85:ff:12:6f:23:76:13:81:19:1d:88:
                    d6:f1:5e:13:8e:32:ca:33:1b:35:6e:41:05:8d:67:
                    3c:e6:f6:61:3b:90:95:c3:8e:41:c0:d3:d3:4c:1c:
                    82:ce:9c:0e:4c:a6:07:c9:fb:52:b2:89:26:43:07:
                    0e:3b:ed:1b:8f:25:6a:02:2b:3b:d1:1f:67:35:a0:
                    02:04:22:5e:3c:98:79:93:30:ce:af:03:7c:41:70:
                    a0:2c:c1:f0:94:e0:84:20:32:c6:90:87:82:cd:f3:
                    4a:19:2b:36:b7:5b:85:11:0b:11:a2:f0:50:e5:5d:
                    98:9a:f3:dc:d3:06:70:c3:9e:3c:1d:17:98:12:83:
                    96:65:0c:b4:0a:6c:1a:10:a7:cb:d7:17:aa:6e:4e:
                    b6:93:1d:3e:1d:19:e1:05:53:9c:da:ae:d2:97:05:
                    c2:af:e5:fe:2d:6b:45:1e:11:9e:14:2c:f1:7a:50:
                    6d:af:22:5c:55:39:c5:9d:3b:41:82:a6:2c:35:27:
                    e5:da:5d:6f:06:6a:13:9f:2c:b2:d2:b6:dd:0e:03:
                    55:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:F2:17:A1:82:E8:11:AB:16:8A:FB:C1:79:0C:D5:F8:CF:A7:8B:CA
            X509v3 Authority Key Identifier:
                keyid:67:5A:86:76:ED:37:D1:6A:BB:CA:2F:EF:8E:AA:1F:23:F2:57:B2:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1qGdu030Wq7yi_vjqofI_JXsp8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:be:43:77:ea:63:15:83:91:26:2f:a8:72:1c:1e:be:71:e9:
         42:cd:d5:1e:93:c0:c9:b6:74:d8:87:72:1e:f6:da:08:af:8d:
         ab:3a:50:33:e5:1b:3e:2d:1e:46:8d:6b:2e:f2:10:9f:23:84:
         25:17:ad:b2:85:2d:d6:34:de:f7:7d:7a:13:72:1e:74:89:ec:
         f4:02:a1:6e:b2:63:01:b8:fe:63:96:7f:a9:c6:12:97:10:1a:
         b7:a9:ef:2d:5c:6b:a4:6c:8c:02:6f:10:22:35:4a:85:9e:95:
         da:11:a8:a9:8b:f3:86:73:a0:9b:7f:ce:4b:06:43:7c:39:ea:
         f9:50:07:0e:64:94:fa:14:73:4a:b2:82:ef:20:db:ec:37:31:
         a3:db:e0:c3:f8:96:a1:1c:a4:53:c4:ce:fb:c9:19:12:0a:35:
         1e:0d:2f:64:a6:0d:46:c4:33:53:8d:24:6a:c7:34:b2:dc:b7:
         65:32:52:77:bb:91:67:15:68:20:f2:15:e0:a6:0e:f6:e3:8d:
         0c:c7:d2:d7:57:bd:8f:c5:7d:2d:53:94:f5:c1:82:68:f7:cc:
         e2:dc:00:53:8c:67:55:d2:63:81:18:1e:df:44:be:82:ad:54:
         dc:db:57:80:96:e0:01:21:8f:93:34:e3:49:f9:55:d2:10:14:
         25:7b:fc:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 09:34:52 2026 by rpki-client