Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft
File:                     zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft (raw, json)
Hash identifier:          iDfQvPWCO8QsYaf7BNF2mXcGDLpJZBACsydUnQ56oFQ=
Subject key identifier:   44:63:94:1D:26:6C:80:44:8E:0A:6A:C6:FF:79:7A:23:40:E8:26:67
Authority key identifier: CD:92:78:DE:D9:18:B2:37:50:86:B2:CF:8E:4E:06:91:7D:02:11:B5
Certificate issuer:       /CN=A91FD39E/serialNumber=CD9278DED918B2375086B2CF8E4E06917D0211B5
Certificate serial:       0155
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zZJ43tkYsjdQhrLPjk4GkX0CEbU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft
Manifest number:          0151
Signing time:             Mon 21 Sep 2026 05:15:35 +0000
Manifest this update:     Mon 21 Sep 2026 05:15:35 +0000
Manifest next update:     Mon 28 Sep 2026 05:15:35 +0000
Files and hashes:         1: zZJ43tkYsjdQhrLPjk4GkX0CEbU.crl (hash: 8VszyPczmzCnoLVlQxFNPZD0Kx1Xcn9GbLQSP/w6j1I=)
                          2: F6935C8EB35911EF96C43242C4F9AE02.roa (hash: S9t/+J52VQt2ne9SbBBHigAP25wl7hoUywJOVYVw1Ik=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.crl
                          rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zZJ43tkYsjdQhrLPjk4GkX0CEbU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 05:15:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 341 (0x155)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FD39E, serialNumber=CD9278DED918B2375086B2CF8E4E06917D0211B5
        Validity
            Not Before: Sep 21 05:15:35 2026 GMT
            Not After : Sep 28 05:15:35 2026 GMT
        Subject: CN=6ab0bd77-2292
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:02:45:f8:9d:59:f6:9f:20:64:63:14:99:f7:
                    4a:3d:ab:51:0f:18:64:64:47:86:8b:e2:3a:2a:91:
                    41:bc:13:22:74:0a:37:f9:da:b0:4e:d6:70:04:da:
                    5e:91:51:85:e8:78:12:3e:9a:16:97:af:9a:c0:e5:
                    f1:9e:6d:88:59:88:21:78:13:36:5c:4a:ad:a7:df:
                    3e:d7:5e:a9:78:78:d9:f9:96:aa:c7:ee:0e:70:33:
                    4c:87:71:7a:3e:64:fe:c4:77:88:eb:37:cc:36:d4:
                    80:e6:b5:93:c4:8c:c8:c8:17:a7:52:10:d9:16:ab:
                    55:7f:b3:a0:c9:37:c2:bc:0a:d9:c7:39:6c:99:13:
                    ac:d3:3a:7b:fa:12:26:93:eb:79:c9:a6:a9:14:f5:
                    52:f8:1f:60:59:4d:8e:c7:fe:54:4a:7a:bf:d8:70:
                    e5:a5:ca:35:3b:a3:82:12:56:01:7e:78:c3:ff:60:
                    0a:9d:4f:b8:ef:aa:e4:d5:9b:f2:51:7a:94:d6:70:
                    6c:5b:90:b6:f5:27:d8:d4:77:d7:23:a1:17:07:e0:
                    29:bc:11:f8:48:cc:2e:25:b0:3c:28:8e:a8:d2:f6:
                    8c:7a:e2:59:f6:7b:dd:0e:01:ad:29:c4:f8:1c:6f:
                    66:06:13:49:43:ec:64:4f:d2:70:41:ba:d1:e3:5c:
                    39:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:63:94:1D:26:6C:80:44:8E:0A:6A:C6:FF:79:7A:23:40:E8:26:67
            X509v3 Authority Key Identifier:
                keyid:CD:92:78:DE:D9:18:B2:37:50:86:B2:CF:8E:4E:06:91:7D:02:11:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zZJ43tkYsjdQhrLPjk4GkX0CEbU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         e8:93:e2:9a:d7:9f:09:4a:49:8e:12:e1:3f:1e:fe:36:12:b9:
         1e:ad:88:31:fb:99:d0:52:93:dc:dc:60:af:6d:88:f3:03:f2:
         82:51:bc:c2:c3:b1:70:41:ec:ea:51:40:f9:7c:67:c7:ec:f0:
         7c:05:95:9e:83:ca:da:64:8c:5c:03:6e:15:c3:00:e8:fb:93:
         ac:4e:b6:3b:a5:60:e6:ac:9c:3b:ed:06:29:7d:7b:51:dc:f9:
         89:b1:d7:c9:8e:83:e8:64:ff:4e:58:de:5f:a0:c6:c0:2f:a0:
         97:90:d4:8c:24:09:79:0d:99:1f:14:02:7d:8b:17:f4:60:c3:
         81:9e:14:99:ab:46:27:c6:30:3f:a5:28:a1:27:78:aa:3c:91:
         02:8f:5d:5c:a3:89:29:e7:44:66:ae:87:30:03:04:1f:75:4f:
         a7:01:6d:47:dd:ea:e2:3d:05:3e:32:6a:63:3c:c7:0c:54:48:
         2e:a9:7a:61:25:0f:3a:da:53:33:dc:1a:cc:0e:32:01:11:82:
         a7:48:e1:11:92:83:54:1d:29:c0:0c:b4:4f:1b:d7:7f:42:71:
         c2:25:81:45:cb:3c:ee:22:cf:f7:2b:55:19:5c:68:3e:4d:ed:
         8c:0c:09:60:15:0e:79:3d:88:44:ec:0c:68:19:7e:72:ba:b0:
         da:9d:65:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:22:46 2026 by rpki-client