Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F09FE/3803AA1C9B1211EFA87BB43BC4F9AE02/ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.mft
File:                     ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.mft (raw, json)
Hash identifier:          WgH1AJMw1pL4R27H37Vj0QRe9Vrm1vgby++MGz3FbHI=
Subject key identifier:   B2:68:7D:82:C9:21:F3:FE:A4:26:D0:71:D9:66:09:D3:73:31:86:16
Authority key identifier: 64:CC:C1:66:C5:8C:38:FE:8C:C1:97:6F:5C:F0:7C:1D:D0:6F:68:14
Certificate issuer:       /CN=A91F09FE/serialNumber=64CCC166C58C38FE8CC1976F5CF07C1DD06F6814
Certificate serial:       0165
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F09FE/3803AA1C9B1211EFA87BB43BC4F9AE02/ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.mft
Manifest number:          0161
Signing time:             Mon 21 Sep 2026 05:01:45 +0000
Manifest this update:     Mon 21 Sep 2026 05:01:45 +0000
Manifest next update:     Mon 28 Sep 2026 05:01:45 +0000
Files and hashes:         1: ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.crl (hash: gmABrnH17K7de7xQekIYIrDiM6fSir9K47fIsbbiTrk=)
                          2: 841585749B1211EFBFBF913CC4F9AE02.roa (hash: c0roN8cPiQejDa+804Uoxjig98zoRoNUAxeOFr9K58Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F09FE/3803AA1C9B1211EFA87BB43BC4F9AE02/ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.crl
                          rsync://rpki.apnic.net/member_repository/A91F09FE/3803AA1C9B1211EFA87BB43BC4F9AE02/ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 05:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 357 (0x165)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F09FE, serialNumber=64CCC166C58C38FE8CC1976F5CF07C1DD06F6814
        Validity
            Not Before: Sep 21 05:01:45 2026 GMT
            Not After : Sep 28 05:01:45 2026 GMT
        Subject: CN=6ab0ba39-9dc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:cf:78:80:91:00:f1:6e:29:e8:bf:9a:e4:a3:
                    00:67:33:d4:c8:e6:31:fa:9c:bf:04:9b:07:23:fc:
                    c6:9f:69:a1:8a:7b:91:e3:eb:07:5b:54:f5:2a:6b:
                    10:c3:f6:20:f7:ff:25:b0:69:9a:29:f6:43:cd:f4:
                    c4:1d:af:84:9a:f3:2b:3d:57:63:6f:95:3f:66:85:
                    b8:0a:98:b2:2c:7b:80:15:80:60:d2:26:29:9d:d5:
                    ef:4a:21:74:b5:62:95:39:18:05:12:2b:66:22:f3:
                    92:a8:7f:b9:f9:85:83:5b:dd:0a:ec:73:a3:3e:f1:
                    94:59:a0:04:fc:c8:67:00:3c:9d:bd:04:c0:a8:81:
                    e1:f8:23:cd:90:cf:b0:af:f5:b8:4c:91:9d:9a:59:
                    1b:90:01:a6:a8:98:c4:a5:ec:3b:53:36:91:89:d4:
                    ed:f7:14:df:6b:01:de:1c:4a:f3:ca:6b:d6:88:ee:
                    3a:12:ab:3c:2a:57:be:6a:69:ed:cb:8f:7d:32:17:
                    56:1d:65:15:6e:99:c1:b0:ae:fc:0e:3f:1c:77:71:
                    30:57:18:dc:5d:4b:88:27:be:dd:3f:49:ef:6f:f1:
                    b2:06:af:f6:c1:06:03:fd:ce:e9:fd:e8:1f:6a:d3:
                    37:53:4c:4c:82:83:44:2f:45:85:2c:c9:04:67:c9:
                    8d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:68:7D:82:C9:21:F3:FE:A4:26:D0:71:D9:66:09:D3:73:31:86:16
            X509v3 Authority Key Identifier:
                keyid:64:CC:C1:66:C5:8C:38:FE:8C:C1:97:6F:5C:F0:7C:1D:D0:6F:68:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F09FE/3803AA1C9B1211EFA87BB43BC4F9AE02/ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F09FE/3803AA1C9B1211EFA87BB43BC4F9AE02/ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:a5:d5:a6:c1:cb:15:5c:bf:5f:64:a5:e0:da:1f:0a:a5:3c:
         9f:38:ba:1c:26:5e:57:82:30:77:ba:53:92:a6:55:75:ad:4a:
         00:58:e2:04:22:0d:e4:04:02:55:10:3b:98:f0:7e:58:06:71:
         d2:5b:d6:56:82:df:58:8c:0a:42:dd:ca:8b:23:3b:65:1b:b5:
         22:d4:e9:a5:74:9b:19:91:bf:46:b3:7a:fa:c2:15:d9:d0:56:
         32:e3:b2:e4:8a:11:59:de:5d:cf:21:6a:65:99:af:37:97:43:
         53:86:1d:1d:c7:b3:0f:44:8d:3a:48:78:15:44:ae:bc:d0:4b:
         6a:31:a7:db:b6:f7:41:84:ed:e4:fe:57:1d:d5:2a:65:8b:5a:
         ef:6a:27:ba:89:66:2b:c7:37:9c:01:80:1f:d1:49:ed:37:b2:
         1e:25:dc:7d:26:29:11:b4:8d:92:b6:19:be:93:be:b6:3e:e7:
         9e:49:59:d2:0b:e4:67:69:ea:91:d5:28:b8:49:39:ba:32:35:
         48:1d:fd:78:cb:0e:fc:e4:be:c6:ef:a5:7f:5c:d6:98:f2:08:
         4c:bb:46:1f:31:ff:ec:88:15:95:18:3e:01:e6:53:5a:d0:7d:
         b2:ad:c4:90:d3:46:65:20:f3:86:1b:e7:5a:b0:df:f7:9d:c2:
         b8:ac:60:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:17:30 2026 by rpki-client