Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.mft
File:                     CZyBX8poKm4oYE_pYv0QcVgn6V0.mft (raw, json)
Hash identifier:          qITj6+5NEXNyC6V9jWEBZGv12SldnXaq88Ie5/iNcJ8=
Subject key identifier:   61:CA:3E:AA:A9:46:72:0D:0C:CF:98:28:8D:14:1F:04:54:AC:9C:70
Authority key identifier: 09:9C:81:5F:CA:68:2A:6E:28:60:4F:E9:62:FD:10:71:58:27:E9:5D
Certificate issuer:       /CN=A91DEB2E/serialNumber=099C815FCA682A6E28604FE962FD10715827E95D
Certificate serial:       02D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZyBX8poKm4oYE_pYv0QcVgn6V0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.mft
Manifest number:          02C9
Signing time:             Sun 11 Oct 2026 01:42:16 +0000
Manifest this update:     Sun 11 Oct 2026 01:42:15 +0000
Manifest next update:     Sun 18 Oct 2026 01:42:15 +0000
Files and hashes:         1: CZyBX8poKm4oYE_pYv0QcVgn6V0.crl (hash: GzB4ShjSdzJUNni0KFFzFbb/6msF/heRhu6GZKSCGH0=)
                          2: 3CB103648C2511EDB64DB410C4F9AE02.roa (hash: iZ4HCtJL7rID/wZnZvAzs70hw+YNw3/gczs7CGb7Bb8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.crl
                          rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZyBX8poKm4oYE_pYv0QcVgn6V0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Oct 2026 01:42:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 725 (0x2d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DEB2E, serialNumber=099C815FCA682A6E28604FE962FD10715827E95D
        Validity
            Not Before: Oct 11 01:42:15 2026 GMT
            Not After : Oct 18 01:42:15 2026 GMT
        Subject: CN=6acae978-e961
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:52:64:d8:cf:36:4d:e5:98:94:20:12:b1:cc:
                    2a:6e:41:e9:9e:fb:95:8c:01:31:44:f3:a0:ca:e5:
                    9e:34:3f:e0:d6:23:e4:c2:fa:db:cb:c3:b5:d2:27:
                    d8:be:c3:bb:d0:ac:a5:66:87:cd:ae:d0:e5:cf:fd:
                    7a:cb:f6:1e:f0:50:b3:9d:d7:5e:21:31:45:0e:a8:
                    72:46:f5:0c:34:4c:2b:e0:6c:0b:7f:0a:6d:c0:d7:
                    da:de:02:cb:bf:ec:58:2e:0c:ae:71:99:22:b1:59:
                    63:8a:84:97:86:e1:da:2a:5a:4d:db:2e:8b:19:9f:
                    45:d0:e9:c4:ff:0b:ac:11:0b:53:8d:02:21:fb:f3:
                    6f:f9:f3:66:9d:62:c1:f1:45:b0:65:3c:c3:28:a3:
                    0d:7d:5f:e6:98:2b:29:9c:49:9d:8e:df:87:d6:37:
                    80:4c:f0:85:7f:d6:e0:c2:b4:d5:48:d9:a0:5a:8e:
                    98:e2:5d:27:c8:60:30:86:3c:8f:95:c2:7a:3c:d8:
                    bf:a9:99:d3:43:0a:c8:ea:2d:6f:50:cb:bc:7c:51:
                    2d:0e:fe:96:a1:03:d3:c4:3f:aa:f8:9e:33:42:36:
                    8c:78:99:04:c1:a0:5b:c1:22:60:58:2f:9c:f9:22:
                    56:e7:99:ae:6f:75:4f:6c:42:50:a2:6b:7c:33:8f:
                    8d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:CA:3E:AA:A9:46:72:0D:0C:CF:98:28:8D:14:1F:04:54:AC:9C:70
            X509v3 Authority Key Identifier:
                keyid:09:9C:81:5F:CA:68:2A:6E:28:60:4F:E9:62:FD:10:71:58:27:E9:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZyBX8poKm4oYE_pYv0QcVgn6V0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:99:e1:73:36:32:a7:45:8a:22:95:ef:3d:73:50:a7:7e:86:
         01:43:f4:c6:21:f2:50:c9:a2:e5:df:57:88:c3:e9:32:39:6f:
         af:0d:54:16:8d:df:ae:99:4d:cc:90:62:74:ad:ce:8d:42:03:
         83:d3:60:3b:8b:9b:87:a9:18:e4:c7:db:d0:a8:98:4e:19:20:
         71:d8:cb:af:c5:f8:3d:81:58:99:26:03:0c:46:e2:1a:19:9b:
         1b:4f:15:5a:db:24:89:8c:9c:7b:76:24:08:ee:b4:82:bf:f0:
         36:1f:ef:f9:85:ff:05:84:f9:49:d0:50:0c:30:c5:b3:1c:93:
         19:ce:4b:65:dc:e9:29:49:c3:6c:53:17:b6:2d:44:9c:30:2a:
         cb:7a:f5:a2:97:24:af:34:53:27:3c:e5:82:6f:5e:e4:04:6f:
         fd:73:cf:9e:47:fb:10:bb:07:8f:6b:11:1d:aa:14:71:e7:7e:
         a2:f1:72:af:00:3d:a6:4c:80:38:4f:0b:07:65:86:b7:a1:1a:
         36:f1:54:e6:97:31:cd:b8:98:45:26:f6:07:5c:43:e1:90:6f:
         2e:d1:a8:72:5d:5e:d9:9a:3c:42:70:f1:92:bd:b5:55:42:dc:
         66:eb:dd:d5:f9:95:5c:ff:d8:ae:87:b4:de:04:76:08:fc:26:
         6e:bd:20:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:02:30 2026 by rpki-client