Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft
File:                     ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft (raw, json)
Hash identifier:          aXdA+lIBv8xubwZmseldb04xfjgIWCsg1zIh69wcxdM=
Subject key identifier:   D8:B5:D3:D8:37:53:B5:BB:74:F7:46:41:57:55:3E:E1:F3:B3:04:14
Authority key identifier: 66:27:CC:AB:6D:C2:E9:58:6E:2C:C1:1B:27:95:73:5A:31:FD:9B:8A
Certificate issuer:       /CN=A91269B8/serialNumber=6627CCAB6DC2E9586E2CC11B2795735A31FD9B8A
Certificate serial:       244D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZifMq23C6VhuLMEbJ5VzWjH9m4o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft
Manifest number:          243A
Signing time:             Fri 04 Sep 2026 15:45:36 +0000
Manifest this update:     Fri 04 Sep 2026 15:45:35 +0000
Manifest next update:     Fri 11 Sep 2026 15:45:35 +0000
Files and hashes:         1: ZifMq23C6VhuLMEbJ5VzWjH9m4o.crl (hash: Ze30vlIszTmlCMXv0ijSM5mrRJvKa5V/jqb5nvRmz4Y=)
                          2: 844E61B635B811EE96EDCC53C4F9AE02.roa (hash: FMM9PWbU/oYp9w4GxmMR0Bnc2OElJZUE63nkK8Lt4YE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.crl
                          rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZifMq23C6VhuLMEbJ5VzWjH9m4o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 15:45:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9293 (0x244d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91269B8, serialNumber=6627CCAB6DC2E9586E2CC11B2795735A31FD9B8A
        Validity
            Not Before: Sep  4 15:45:35 2026 GMT
            Not After : Sep 11 15:45:35 2026 GMT
        Subject: CN=6a9ae7a0-ce91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:0d:2d:ec:6e:80:a7:cd:4b:6b:f4:e1:c5:c4:
                    39:2e:fc:55:c4:29:43:0c:a7:ed:3d:03:e4:90:8b:
                    53:a8:d1:c5:23:0f:59:30:71:b2:b9:4b:43:7a:fe:
                    7f:e5:68:5a:7b:fc:28:4c:54:fc:c3:d5:10:aa:8d:
                    06:80:7e:ff:7d:6c:c4:74:0a:eb:6b:1b:83:7a:66:
                    f2:6d:02:22:62:57:4d:04:fe:dc:79:82:9b:69:28:
                    55:df:35:5f:6b:f2:6c:ae:25:1f:64:c8:fd:44:bf:
                    bf:2d:01:c2:73:9e:99:d0:b1:bc:89:5a:21:50:64:
                    7e:5f:73:a2:c4:62:83:9a:97:13:5a:a8:e5:9f:7b:
                    5e:f8:3c:b7:58:cc:f0:f7:66:a8:45:1f:51:bc:a2:
                    d8:e6:c2:9c:d8:f8:d4:a6:55:7d:b6:f8:94:bb:66:
                    8f:1e:f5:f9:5a:62:25:4e:a5:57:e1:54:25:b8:06:
                    79:5e:b7:38:1a:b6:ed:4e:e2:2b:96:5b:3f:49:21:
                    dc:87:82:b4:c7:6b:07:00:e3:bb:89:d0:34:87:96:
                    da:fb:79:1d:78:20:e2:45:03:45:62:4c:2a:09:52:
                    4c:42:7f:d6:8b:08:02:1a:90:cc:9c:ed:c0:9e:33:
                    6c:0d:22:fc:fc:47:ec:4d:94:44:40:db:9b:5b:94:
                    3a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:B5:D3:D8:37:53:B5:BB:74:F7:46:41:57:55:3E:E1:F3:B3:04:14
            X509v3 Authority Key Identifier:
                keyid:66:27:CC:AB:6D:C2:E9:58:6E:2C:C1:1B:27:95:73:5A:31:FD:9B:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZifMq23C6VhuLMEbJ5VzWjH9m4o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:20:54:bb:b3:51:db:9d:51:8b:0b:17:11:f4:92:70:fc:7a:
         9e:36:92:31:92:90:cf:d9:00:80:0e:70:93:e4:81:58:9c:ba:
         50:0a:f0:09:5a:73:c7:68:8c:d7:9c:95:af:fe:60:e9:88:f7:
         3a:c1:6c:e9:b7:78:d6:0a:f6:f3:83:c6:bf:4d:39:02:4d:63:
         2a:52:ae:55:55:f1:73:82:ea:8f:ce:ba:16:96:24:5d:e0:f5:
         a7:38:03:e8:e7:c5:f0:b5:9b:ec:40:99:5e:d1:bb:cf:52:c8:
         f2:90:b7:18:21:32:fc:ea:01:af:89:89:a1:8f:c7:83:4b:ca:
         12:cd:84:7d:e6:61:ee:84:f2:b0:43:17:87:6e:db:ee:95:7f:
         30:ad:2a:35:0f:b5:87:c9:ae:99:35:a2:56:b6:9b:51:49:87:
         aa:95:6e:1d:07:e3:04:f2:77:ed:bf:83:bc:c9:cf:df:28:75:
         61:91:8e:8d:cd:19:b3:1f:01:b2:a0:01:02:dd:c7:67:19:97:
         a3:e6:7c:2b:bd:4b:ce:e5:bb:2d:6e:55:34:a1:bd:a8:ec:f4:
         c7:bb:da:4e:d1:80:f7:a0:32:34:98:d1:96:e6:4d:56:de:fe:
         65:36:d3:34:cb:5e:0e:24:16:cd:40:e8:9f:e5:88:66:43:34:
         ea:98:e3:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:55:19 2026 by rpki-client