Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911C812/6ABC5B32B3D111EC91BF3C22C4F9AE02/Zp-zqMoqIOo7gaY6f227FZ-71XQ.mft
File:                     Zp-zqMoqIOo7gaY6f227FZ-71XQ.mft (raw, json)
Hash identifier:          HXle2koKSyMB/uI1gn0WiqGSkap7c0ZVS1L1r65CoOg=
Subject key identifier:   19:52:EC:88:A0:05:0A:03:A6:F6:16:81:BA:89:B0:C9:F5:25:A6:29
Authority key identifier: 66:9F:B3:A8:CA:2A:20:EA:3B:81:A6:3A:7F:6D:BB:15:9F:BB:D5:74
Certificate issuer:       /CN=A911C812/serialNumber=669FB3A8CA2A20EA3B81A63A7F6DBB159FBBD574
Certificate serial:       0464
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Zp-zqMoqIOo7gaY6f227FZ-71XQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C812/6ABC5B32B3D111EC91BF3C22C4F9AE02/Zp-zqMoqIOo7gaY6f227FZ-71XQ.mft
Manifest number:          0464
Signing time:             Tue 20 Oct 2026 20:27:48 +0000
Manifest this update:     Tue 20 Oct 2026 20:27:47 +0000
Manifest next update:     Tue 27 Oct 2026 20:27:47 +0000
Files and hashes:         1: Zp-zqMoqIOo7gaY6f227FZ-71XQ.crl (hash: 5aROb4dg+O/UK8+3eXzHU/bEBTAsYg4RcNTu0eQ/laI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C812/6ABC5B32B3D111EC91BF3C22C4F9AE02/Zp-zqMoqIOo7gaY6f227FZ-71XQ.crl
                          rsync://rpki.apnic.net/member_repository/A911C812/6ABC5B32B3D111EC91BF3C22C4F9AE02/Zp-zqMoqIOo7gaY6f227FZ-71XQ.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Zp-zqMoqIOo7gaY6f227FZ-71XQ.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Oct 2026 20:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1124 (0x464)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C812, serialNumber=669FB3A8CA2A20EA3B81A63A7F6DBB159FBBD574
        Validity
            Not Before: Oct 20 20:27:47 2026 GMT
            Not After : Oct 27 20:27:47 2026 GMT
        Subject: CN=6ad7cec4-696b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4b:24:0b:2b:7e:29:76:2b:56:ed:bb:52:6e:
                    c3:06:39:1f:4a:af:07:37:c9:92:35:a4:73:7e:b5:
                    75:52:4c:b9:8c:2b:d8:22:d9:0a:2b:63:04:77:c7:
                    c2:17:64:a8:52:38:25:21:b0:0a:aa:01:e1:0c:a9:
                    0a:98:57:a6:56:d8:96:38:5b:39:dd:e3:80:58:9a:
                    1f:b2:4b:ba:aa:c5:4c:e4:85:2e:be:91:ab:04:07:
                    64:69:a0:86:95:2b:68:37:d7:7a:0a:00:b7:49:96:
                    5c:77:46:a8:44:88:60:d7:64:70:97:bb:7e:58:fc:
                    df:31:dc:3e:9b:26:b5:87:44:27:8c:56:22:a8:31:
                    2b:b7:a8:33:30:1e:b1:d6:a1:c5:5c:46:1e:07:93:
                    f3:84:d8:11:44:73:f2:e9:85:26:ce:68:47:c9:28:
                    b3:9a:2c:a2:37:71:8c:93:f6:2d:6d:a5:0a:1b:8f:
                    70:23:3b:fa:10:dc:26:eb:f9:c9:9b:5c:7f:71:7f:
                    96:d4:0a:55:ba:41:4f:a9:68:5b:1d:69:60:48:25:
                    e7:e8:42:a3:a8:f5:0c:cb:5b:92:2d:20:86:6a:d9:
                    93:b7:87:45:f9:54:72:b4:f8:e5:34:95:b1:fb:da:
                    aa:d2:f7:e1:88:19:7e:39:45:fa:ab:d3:1d:b3:03:
                    be:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:52:EC:88:A0:05:0A:03:A6:F6:16:81:BA:89:B0:C9:F5:25:A6:29
            X509v3 Authority Key Identifier:
                keyid:66:9F:B3:A8:CA:2A:20:EA:3B:81:A6:3A:7F:6D:BB:15:9F:BB:D5:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C812/6ABC5B32B3D111EC91BF3C22C4F9AE02/Zp-zqMoqIOo7gaY6f227FZ-71XQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Zp-zqMoqIOo7gaY6f227FZ-71XQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C812/6ABC5B32B3D111EC91BF3C22C4F9AE02/Zp-zqMoqIOo7gaY6f227FZ-71XQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:98:74:b7:0a:9b:d4:05:21:10:02:52:7a:28:d2:48:a3:ae:
         02:d8:42:17:c8:91:58:28:dd:c8:d2:ee:d8:09:ff:66:50:97:
         b0:95:56:6e:12:a3:5c:e6:67:99:28:8b:34:98:e0:e3:7b:a3:
         a3:0f:76:ac:12:b9:cb:c8:43:c8:1c:85:40:19:ea:43:d6:c6:
         5a:6a:59:46:a5:bd:45:bb:11:a7:8f:7a:a5:00:a5:49:3c:e7:
         60:e5:c1:ad:ae:97:c9:31:c4:65:66:62:ff:f8:fb:a7:f3:24:
         cc:ab:12:1b:45:46:50:8f:d5:3c:29:0f:73:26:87:b4:0c:6a:
         50:1e:73:cd:97:c3:55:27:d2:82:b3:f9:81:c7:d5:8b:1c:02:
         3b:e2:84:0b:32:74:f9:db:1b:53:f7:14:f2:e5:a3:c7:fc:6e:
         3b:e2:89:1b:9c:f5:cb:d0:a6:38:e5:f6:a3:87:e4:4d:fa:fd:
         db:11:04:e7:4c:fa:b0:82:96:aa:3f:58:9a:16:1e:1d:a0:bb:
         85:67:15:2a:c0:b6:8f:b6:f5:fa:78:d2:2c:0f:5c:8f:ce:87:
         0e:d5:11:78:ea:96:b2:a3:fd:68:86:e6:fb:69:df:bd:1c:a5:
         53:50:c7:04:a4:7b:de:6b:f4:58:20:2e:64:ff:77:75:20:88:
         33:45:26:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 05:41:05 2026 by rpki-client