Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9112407/900DFF5E905911EB8F1EEE10C4F9AE02/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.mft
File:                     zyFSbZJsuDI3TI6b1c4dW7zWYIQ.mft (raw, json)
Hash identifier:          SODTJTCW2hJ+Sb7ovdloYSY0h1fhaV7FMP1nzdbbX+g=
Subject key identifier:   EA:AA:14:4E:92:4C:3C:1B:4B:67:3B:3F:A8:13:93:AE:9A:8B:D2:92
Authority key identifier: CF:21:52:6D:92:6C:B8:32:37:4C:8E:9B:D5:CE:1D:5B:BC:D6:60:84
Certificate issuer:       /CN=A9112407/serialNumber=CF21526D926CB832374C8E9BD5CE1D5BBCD66084
Certificate serial:       0748
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9112407/900DFF5E905911EB8F1EEE10C4F9AE02/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.mft
Manifest number:          073D
Signing time:             Mon 14 Sep 2026 21:46:27 +0000
Manifest this update:     Mon 14 Sep 2026 21:46:26 +0000
Manifest next update:     Mon 21 Sep 2026 21:46:26 +0000
Files and hashes:         1: zyFSbZJsuDI3TI6b1c4dW7zWYIQ.crl (hash: WTCCuiPyfyIVu4c4OuTMjFp4aS0ZvEfOIV9H8STi6ig=)
                          2: 3DF2A2EC3AB311EC977A5D60C4F9AE02.roa (hash: y4QF6Zzf/preGT5Q9leQWLrm++JWhs0vBjGPZhanPmQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9112407/900DFF5E905911EB8F1EEE10C4F9AE02/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.crl
                          rsync://rpki.apnic.net/member_repository/A9112407/900DFF5E905911EB8F1EEE10C4F9AE02/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 21 Sep 2026 21:46:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1864 (0x748)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9112407, serialNumber=CF21526D926CB832374C8E9BD5CE1D5BBCD66084
        Validity
            Not Before: Sep 14 21:46:26 2026 GMT
            Not After : Sep 21 21:46:26 2026 GMT
        Subject: CN=6aa86b33-00fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:98:81:c2:68:69:a8:a3:93:0e:5b:ae:0a:b0:
                    20:92:0e:48:81:23:40:ed:52:a2:76:e4:e5:6b:c3:
                    3b:1a:fd:63:ee:fb:af:87:8b:d1:fa:26:85:74:6a:
                    59:b5:fc:f7:d5:f4:c6:f7:38:76:0d:9d:6f:c4:1f:
                    0d:3a:d6:08:3d:9e:88:b6:9e:64:f1:ee:aa:73:ea:
                    3c:9e:f0:03:14:2e:1f:c2:50:5d:86:64:9d:99:e2:
                    b5:d5:31:e4:5e:6c:4e:db:4b:f5:d9:e8:41:59:e8:
                    63:87:90:85:41:81:e6:1c:76:58:92:06:09:5c:9d:
                    53:a3:75:e1:81:07:f4:c9:36:dd:19:2b:22:2f:15:
                    5a:37:d5:13:bd:21:40:90:0c:95:95:28:89:43:1b:
                    06:1e:1f:d0:ce:75:bb:64:85:cc:0b:49:e5:43:b3:
                    d9:7a:ea:d0:c8:c8:ba:7d:0c:f6:2f:47:cd:6a:a4:
                    de:20:c7:f5:75:61:2a:35:ec:5e:06:09:aa:80:e4:
                    6d:13:b8:d3:a8:b6:d3:2e:d6:ef:f3:fd:93:c2:69:
                    71:35:79:3b:7e:0d:b4:c2:bf:f9:47:98:04:9b:64:
                    03:b2:6a:28:d1:cb:c0:58:c9:c9:e5:da:fd:71:94:
                    be:1b:04:08:8a:e2:ed:af:42:e1:57:7d:06:0a:d0:
                    e4:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:AA:14:4E:92:4C:3C:1B:4B:67:3B:3F:A8:13:93:AE:9A:8B:D2:92
            X509v3 Authority Key Identifier:
                keyid:CF:21:52:6D:92:6C:B8:32:37:4C:8E:9B:D5:CE:1D:5B:BC:D6:60:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9112407/900DFF5E905911EB8F1EEE10C4F9AE02/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112407/900DFF5E905911EB8F1EEE10C4F9AE02/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:1c:3b:42:77:0b:e1:c3:a4:5b:27:ab:59:74:ef:34:ff:75:
         e6:ae:d6:ed:1d:d8:2f:7f:99:0a:62:5c:84:da:81:54:e9:5a:
         82:44:3c:b6:72:6c:55:69:12:fa:b5:ad:eb:0a:a8:f9:5b:de:
         25:de:21:5b:86:47:68:ea:43:f1:b2:15:3d:2d:78:5d:8b:7e:
         9c:fa:ab:8b:3f:b9:02:bf:db:7a:db:96:30:62:ee:0c:c3:c4:
         46:cb:10:13:b5:6b:70:25:24:af:a4:4f:a8:e3:29:34:a7:35:
         5b:da:c3:19:52:fe:65:5a:c6:81:2f:76:a1:22:6d:03:e7:14:
         55:a9:9a:2a:db:2b:58:25:c9:9f:66:b5:c2:f7:e3:1c:fc:d2:
         1e:88:c2:30:0f:66:83:6b:72:74:76:e2:11:43:1d:d0:e2:13:
         2d:ff:cc:2a:41:af:0c:ae:d0:de:e3:c5:9d:8d:25:61:df:f1:
         68:f4:10:65:8d:46:cf:ee:22:2c:81:c3:38:4f:b0:28:ab:e6:
         62:ee:e5:37:93:b0:95:68:9e:87:5f:a9:8b:cd:9b:c0:db:25:
         14:d7:e6:d0:c9:ad:b3:e1:40:79:dc:67:12:2d:0d:95:7c:9d:
         5d:18:93:39:fc:e5:ec:e9:8a:ec:39:bb:29:dd:08:89:21:95:
         89:45:96:cc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB0gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTI0MDcxMTAvBgNVBAUTKENGMjE1MjZEOTI2Q0I4MzIzNzRDOEU5QkQ1Q0UxRDVC
QkNENjYwODQwHhcNMjYwOTE0MjE0NjI2WhcNMjYwOTIxMjE0NjI2WjAYMRYwFAYD
VQQDEw02YWE4NmIzMy0wMGZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp5iBwmhpqKOTDluuCrAgkg5IgSNA7VKiduTla8M7Gv1j7vuvh4vR+iaFdGpZ
tfz31fTG9zh2DZ1vxB8NOtYIPZ6Itp5k8e6qc+o8nvADFC4fwlBdhmSdmeK11THk
XmxO20v12ehBWehjh5CFQYHmHHZYkgYJXJ1To3XhgQf0yTbdGSsiLxVaN9UTvSFA
kAyVlSiJQxsGHh/QznW7ZIXMC0nlQ7PZeurQyMi6fQz2L0fNaqTeIMf1dWEqNexe
BgmqgORtE7jTqLbTLtbv8/2TwmlxNXk7fg20wr/5R5gEm2QDsmoo0cvAWMnJ5dr9
cZS+GwQIiuLtr0LhV30GCtDkFwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOqqFE6S
TDwbS2c7P6gTk66ai9KSMB8GA1UdIwQYMBaAFM8hUm2SbLgyN0yOm9XOHVu81mCE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjQwNy85MDBERkY1RTkw
NTkxMUVCOEYxRUVFMTBDNEY5QUUwMi96eUZTYlpKc3VESTNUSTZiMWM0ZFc3eldZ
SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3p5RlNiWkpzdURJM1RJNmIxYzRkVzd6V1lJUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MjQwNy85MDBERkY1RTkwNTkxMUVCOEYxRUVFMTBDNEY5QUUwMi96eUZTYlpKc3VE
STNUSTZiMWM0ZFc3eldZSVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAiBw7QncL4cOkWyerWXTvNP915q7W7R3YL3+ZCmJchNqBVOlagkQ8tnJsVWkS
+rWt6wqo+VveJd4hW4ZHaOpD8bIVPS14XYt+nPqriz+5Ar/betuWMGLuDMPERssQ
E7VrcCUkr6RPqOMpNKc1W9rDGVL+ZVrGgS92oSJtA+cUVamaKtsrWCXJn2a1wvfj
HPzSHojCMA9mg2tydHbiEUMd0OITLf/MKkGvDK7Q3uPFnY0lYd/xaPQQZY1Gz+4i
LIHDOE+wKKvmYu7lN5OwlWieh1+pi82bwNslFNfm0Mmts+FAedxnEi0NlXydXRiT
Ofzl7OmK7Dm7Kd0IiSGViUWWzA==
-----END CERTIFICATE-----
Generated at Tue Sep 15 14:06:20 2026 by rpki-client