Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.mft
File:                     ZEUjflbuiUQr8xQ1LPxUPWXRtg4.mft (raw, json)
Hash identifier:          dBdRsGvvtFzHLgEDcJWn613SFtInixFmUzn1H6f2XyA=
Subject key identifier:   7D:40:24:CB:46:16:3A:60:D5:02:3C:0B:64:F2:30:43:62:3F:66:B0
Authority key identifier: 64:45:23:7E:56:EE:89:44:2B:F3:14:35:2C:FC:54:3D:65:D1:B6:0E
Certificate issuer:       /CN=A9115AC8/serialNumber=6445237E56EE89442BF314352CFC543D65D1B60E
Certificate serial:       02FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.mft
Manifest number:          02EA
Signing time:             Sat 31 Oct 2026 01:22:27 +0000
Manifest this update:     Sat 31 Oct 2026 01:22:27 +0000
Manifest next update:     Sat 07 Nov 2026 01:22:27 +0000
Files and hashes:         1: ZEUjflbuiUQr8xQ1LPxUPWXRtg4.crl (hash: STb32n6m3EbkA0II4nbhGn8GlmUeBrSVZIZ2aAzZiwo=)
                          2: 9261B5942D7511F0AE6EEE7CC4F9AE02.roa (hash: VgKZr+Yro+WCDJDk8+sd8xGuOog1T6cOqydm30PIbLc=)
                          3: 9333456E2D7511F0AE6EEE7CC4F9AE02.roa (hash: ZKWuilMC1mbTpNIhkFg3PCRossx3ZxzSiZXfGCxostY=)
                          4: 98F2F9C8762611F09B1FE90DC4F9AE02.roa (hash: KS7F+OziKhDMCnUVMBfodEKMFb07L8NYOvPjvyYchaI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.crl
                          rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Nov 2026 01:22:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 767 (0x2ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9115AC8, serialNumber=6445237E56EE89442BF314352CFC543D65D1B60E
        Validity
            Not Before: Oct 31 01:22:27 2026 GMT
            Not After : Nov  7 01:22:27 2026 GMT
        Subject: CN=6ae542d3-8a48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:7f:26:c6:ae:36:17:ed:df:af:d8:20:ce:e5:
                    30:a9:60:87:9a:5c:7a:94:80:c2:82:4d:87:7d:86:
                    01:b4:46:aa:45:4d:df:37:de:47:a4:6f:53:d7:99:
                    10:42:a0:e3:0d:f9:93:58:5f:99:ad:4b:df:ab:e5:
                    a2:6c:0d:84:2f:80:12:03:d4:a9:fe:21:b8:ed:c3:
                    da:b5:9d:07:ab:a4:4b:75:e3:85:04:e2:9f:56:99:
                    dc:4e:a2:f9:e7:44:92:e1:c1:d6:3c:fb:42:47:a9:
                    43:cf:49:1d:c5:fc:11:52:81:24:c5:71:dc:d1:9a:
                    87:19:da:2b:9b:39:31:9f:47:ac:94:8f:54:7d:e1:
                    6f:49:9b:81:ab:99:ee:fc:8f:6b:c8:40:16:67:ec:
                    2d:d0:ca:37:77:9d:b8:3c:9c:df:1f:ba:36:11:04:
                    06:b8:e5:33:07:69:a0:2e:a4:a4:e9:55:c8:de:07:
                    46:60:5b:0e:34:42:07:ee:15:ad:81:1d:84:2f:7c:
                    fb:07:3d:01:40:6b:1d:e3:cc:fe:ed:97:7e:17:d0:
                    05:fc:80:c9:63:4a:01:a7:94:68:ce:a8:3e:3d:8d:
                    86:bd:d3:cf:5c:3b:85:da:5d:48:63:3a:a5:16:f9:
                    34:46:db:c1:e6:fe:5d:ef:86:f1:1e:fe:fa:ae:2a:
                    26:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:40:24:CB:46:16:3A:60:D5:02:3C:0B:64:F2:30:43:62:3F:66:B0
            X509v3 Authority Key Identifier:
                keyid:64:45:23:7E:56:EE:89:44:2B:F3:14:35:2C:FC:54:3D:65:D1:B6:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:0d:82:87:ea:4c:c2:64:a3:01:16:1e:46:a8:dd:95:d2:bc:
         b3:01:28:57:06:bc:5d:c4:30:8c:b9:0b:5a:14:52:cf:46:d2:
         5a:e7:69:88:6e:d6:3e:4a:19:30:43:e6:f6:d4:94:2b:c0:26:
         6e:e3:81:b9:22:83:be:37:bc:9e:55:fd:7c:42:55:90:ef:b6:
         05:04:55:06:92:e2:ea:d4:24:0c:bd:16:38:df:a4:b1:ec:8e:
         ce:0c:f9:8f:95:25:de:a6:c7:61:17:50:cd:ed:74:cc:89:3a:
         fc:83:05:13:61:a5:47:a2:58:2e:ec:ad:d5:ce:0c:03:a7:98:
         d8:72:d8:2a:09:04:53:43:17:a3:df:3f:c8:bc:36:e9:b2:c3:
         c8:1f:77:30:cb:d7:9e:52:11:e3:a3:dc:13:91:d5:7d:5d:84:
         54:e2:af:ad:2c:f5:a7:eb:d4:5a:72:8b:fd:fc:70:f3:de:b8:
         6d:67:c8:9a:ba:04:59:27:4f:d8:69:71:22:e9:81:7c:4c:3f:
         88:24:82:2d:0e:1d:79:b4:03:90:81:08:1c:2f:06:82:39:18:
         9d:c9:1b:6f:84:d3:d6:9f:99:6e:bb:02:35:79:eb:a9:a9:d3:
         82:1c:90:31:2a:f3:74:9b:ea:5a:a5:8e:2d:08:41:11:42:ba:
         1a:5b:b9:40
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAv8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTVBQzgxMTAvBgNVBAUTKDY0NDUyMzdFNTZFRTg5NDQyQkYzMTQzNTJDRkM1NDNE
NjVEMUI2MEUwHhcNMjYxMDMxMDEyMjI3WhcNMjYxMTA3MDEyMjI3WjAYMRYwFAYD
VQQDEw02YWU1NDJkMy04YTQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoH8mxq42F+3fr9ggzuUwqWCHmlx6lIDCgk2HfYYBtEaqRU3fN95HpG9T15kQ
QqDjDfmTWF+ZrUvfq+WibA2EL4ASA9Sp/iG47cPatZ0Hq6RLdeOFBOKfVpncTqL5
50SS4cHWPPtCR6lDz0kdxfwRUoEkxXHc0ZqHGdormzkxn0eslI9UfeFvSZuBq5nu
/I9ryEAWZ+wt0Mo3d524PJzfH7o2EQQGuOUzB2mgLqSk6VXI3gdGYFsONEIH7hWt
gR2EL3z7Bz0BQGsd48z+7Zd+F9AF/IDJY0oBp5Rozqg+PY2GvdPPXDuF2l1IYzql
Fvk0RtvB5v5d74bxHv76riomGwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH1AJMtG
Fjpg1QI8C2TyMENiP2awMB8GA1UdIwQYMBaAFGRFI35W7olEK/MUNSz8VD1l0bYO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNUFDOC9CQTZEMjdENDZD
NUQxMUVEOEM1QzY0MUNDNEY5QUUwMi9aRVVqZmxidWlVUXI4eFExTFB4VVBXWFJ0
ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pFVWpmbGJ1aVVRcjh4UTFMUHhVUFdYUnRnNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NUFDOC9CQTZEMjdENDZDNUQxMUVEOEM1QzY0MUNDNEY5QUUwMi9aRVVqZmxidWlV
UXI4eFExTFB4VVBXWFJ0ZzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALQ2Ch+pMwmSjARYeRqjdldK8swEoVwa8XcQwjLkLWhRSz0bSWudpiG7WPkoZ
MEPm9tSUK8AmbuOBuSKDvje8nlX9fEJVkO+2BQRVBpLi6tQkDL0WON+kseyOzgz5
j5Ul3qbHYRdQze10zIk6/IMFE2GlR6JYLuyt1c4MA6eY2HLYKgkEU0MXo98/yLw2
6bLDyB93MMvXnlIR46PcE5HVfV2EVOKvrSz1p+vUWnKL/fxw8964bWfImroEWSdP
2GlxIumBfEw/iCSCLQ4debQDkIEIHC8GgjkYnckbb4TT1p+ZbrsCNXnrqanTghyQ
MSrzdJvqWqWOLQhBEUK6Glu5QA==
-----END CERTIFICATE-----
Generated at Sat Oct 31 09:41:23 2026 by rpki-client