Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9118278/7C7D07D2B25411F1B2211E0E6911F970/zN5Fgw42Z1mJ9l0NlOxL2kECNYU.mft
File:                     zN5Fgw42Z1mJ9l0NlOxL2kECNYU.mft (raw, json)
Hash identifier:          Fi1OhHU7IR8ImhTELZWvHEqjRZ+RQ8u6AaVN1RKV7PI=
Subject key identifier:   0A:5F:2B:F0:CA:5E:09:F7:63:8A:3B:A6:2E:3A:C6:40:0E:5D:26:35
Authority key identifier: CC:DE:45:83:0E:36:67:59:89:F6:5D:0D:94:EC:4B:DA:41:02:35:85
Certificate issuer:       /CN=A9118278/serialNumber=CCDE45830E36675989F65D0D94EC4BDA41023585
Certificate serial:       0B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zN5Fgw42Z1mJ9l0NlOxL2kECNYU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9118278/7C7D07D2B25411F1B2211E0E6911F970/zN5Fgw42Z1mJ9l0NlOxL2kECNYU.mft
Manifest number:          0A
Signing time:             Sat 03 Oct 2026 09:57:33 +0000
Manifest this update:     Sat 03 Oct 2026 09:57:32 +0000
Manifest next update:     Sat 10 Oct 2026 09:57:32 +0000
Files and hashes:         1: zN5Fgw42Z1mJ9l0NlOxL2kECNYU.crl (hash: 8TQ2TNM68BDHMlmIjs2ZzDdPb0DHPrPTCQdXxKhkvZk=)
                          2: 9609A394B25511F18445BAB96911F970.roa (hash: wqDY38WHMN2QXwss5YXm/GfOutIw/sNe6npaYh21mxc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9118278/7C7D07D2B25411F1B2211E0E6911F970/zN5Fgw42Z1mJ9l0NlOxL2kECNYU.crl
                          rsync://rpki.apnic.net/member_repository/A9118278/7C7D07D2B25411F1B2211E0E6911F970/zN5Fgw42Z1mJ9l0NlOxL2kECNYU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zN5Fgw42Z1mJ9l0NlOxL2kECNYU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 09:57:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11 (0xb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9118278, serialNumber=CCDE45830E36675989F65D0D94EC4BDA41023585
        Validity
            Not Before: Oct  3 09:57:32 2026 GMT
            Not After : Oct 10 09:57:32 2026 GMT
        Subject: CN=6ac0d18d-63e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ab:76:a2:57:71:40:44:79:3a:0b:ef:a4:99:
                    1f:64:ff:40:9c:64:2a:28:77:82:65:b9:ef:00:a8:
                    8f:50:1f:b6:5d:e0:3e:f7:31:1a:df:9d:c7:03:64:
                    2a:7d:ba:5a:cc:44:89:85:43:6f:1e:5b:e3:ce:e5:
                    29:53:6e:1a:be:d9:a9:4c:9a:20:c1:76:3f:4f:bf:
                    75:ec:5d:7f:41:4a:a0:69:a2:2d:a9:51:ed:c4:6b:
                    9a:32:18:12:bb:ae:4b:bf:a3:fd:1d:52:f6:d8:4e:
                    7c:d0:58:00:27:e6:b6:96:e5:a7:c9:fe:c5:65:e2:
                    0f:7d:7b:8e:93:c4:64:1d:77:7b:10:01:d4:5f:9e:
                    fe:fb:ab:ae:91:31:cd:78:a1:e4:a8:51:5f:b5:0c:
                    97:9e:88:4f:35:a3:b2:d5:e5:fa:90:2e:7a:dd:82:
                    ad:33:6c:8e:db:90:fc:d7:70:87:26:a0:73:fc:d4:
                    c6:26:79:fa:f8:cc:da:44:06:b6:a3:28:d6:12:68:
                    ff:b1:df:e8:4d:14:ec:31:79:4d:04:88:8a:df:84:
                    fe:02:76:e1:8e:1b:ec:70:68:d5:02:1a:1a:39:6c:
                    9e:81:0b:cd:97:93:6f:97:79:43:36:56:a5:16:4d:
                    28:e9:a2:d0:fa:2f:1c:82:36:f1:d8:65:90:56:0f:
                    90:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:5F:2B:F0:CA:5E:09:F7:63:8A:3B:A6:2E:3A:C6:40:0E:5D:26:35
            X509v3 Authority Key Identifier:
                keyid:CC:DE:45:83:0E:36:67:59:89:F6:5D:0D:94:EC:4B:DA:41:02:35:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9118278/7C7D07D2B25411F1B2211E0E6911F970/zN5Fgw42Z1mJ9l0NlOxL2kECNYU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zN5Fgw42Z1mJ9l0NlOxL2kECNYU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118278/7C7D07D2B25411F1B2211E0E6911F970/zN5Fgw42Z1mJ9l0NlOxL2kECNYU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:6d:3c:e7:f0:e2:3b:9e:71:93:29:e2:c3:65:6c:c4:1f:0e:
         32:8f:ff:75:af:ca:d3:cb:83:ee:5a:14:68:ca:0a:91:61:58:
         2d:b2:21:5c:51:2a:cf:22:ec:46:31:5f:44:5a:12:fb:54:b6:
         c7:f5:0c:ad:d3:d5:21:5c:13:ce:87:ff:47:df:6c:d9:f0:47:
         47:72:67:86:06:9d:8b:95:df:5b:0a:3d:4a:ef:d9:77:b0:01:
         fa:9e:75:8a:6c:04:a6:74:ae:34:b1:64:c9:56:5a:12:9e:52:
         0f:29:a9:2d:0d:b8:0f:63:cb:ee:d8:79:e0:7f:f4:b7:07:fa:
         22:f9:74:b0:6b:81:73:dc:3d:15:e2:1c:73:85:5b:66:a2:c1:
         c6:c5:9b:2e:fa:10:fe:1b:e4:b9:41:73:e4:b0:6c:1f:71:5e:
         80:cb:4e:e8:e0:37:fe:46:75:a9:ea:ba:97:d8:3f:f3:9c:0d:
         ac:f1:24:7e:4a:50:69:e3:aa:ba:a2:a8:2d:ef:98:f0:7f:d7:
         eb:bb:1e:81:16:31:35:e6:f0:3b:97:ad:80:bb:05:27:27:dc:
         28:71:30:7a:af:78:2a:b0:0c:6d:8c:a5:44:97:87:91:8c:a6:
         90:63:f2:a5:03:fd:73:21:e0:14:62:4c:ed:e3:5a:d9:c4:4c:
         2d:89:20:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 18:42:13 2026 by rpki-client