Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9119D6A/78115F5EB8C411E99C801A65C4F9AE02/ZuovNzZ54cNDDifZXhX6MvqNSu8.mft
File:                     ZuovNzZ54cNDDifZXhX6MvqNSu8.mft (raw, json)
Hash identifier:          jTgUpNwv00rWHVA8FQCn0GsslELJmmFlDFo2+HzVlAw=
Subject key identifier:   DD:7F:D7:8A:DA:15:49:BC:6B:74:B2:31:A1:11:67:95:E8:4B:68:F3
Authority key identifier: 66:EA:2F:37:36:79:E1:C3:43:0E:27:D9:5E:15:FA:32:FA:8D:4A:EF
Certificate issuer:       /CN=A9119D6A/serialNumber=66EA2F373679E1C3430E27D95E15FA32FA8D4AEF
Certificate serial:       0EE0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZuovNzZ54cNDDifZXhX6MvqNSu8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9119D6A/78115F5EB8C411E99C801A65C4F9AE02/ZuovNzZ54cNDDifZXhX6MvqNSu8.mft
Manifest number:          0ED2
Signing time:             Thu 08 Oct 2026 17:46:26 +0000
Manifest this update:     Thu 08 Oct 2026 17:46:25 +0000
Manifest next update:     Thu 15 Oct 2026 17:46:25 +0000
Files and hashes:         1: ZuovNzZ54cNDDifZXhX6MvqNSu8.crl (hash: OAm2jyEEnzFDMfqCY/bFKDmey9R0p84+RkvZpKbiiKU=)
                          2: F51BAEBE1B8C11F190E3CE693B3D8C67.roa (hash: lntmtUsK/UKmmG3XnsrXIU/yy3FKkaW0PJf+Akl0bIQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9119D6A/78115F5EB8C411E99C801A65C4F9AE02/ZuovNzZ54cNDDifZXhX6MvqNSu8.crl
                          rsync://rpki.apnic.net/member_repository/A9119D6A/78115F5EB8C411E99C801A65C4F9AE02/ZuovNzZ54cNDDifZXhX6MvqNSu8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZuovNzZ54cNDDifZXhX6MvqNSu8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Oct 2026 17:46:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3808 (0xee0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9119D6A, serialNumber=66EA2F373679E1C3430E27D95E15FA32FA8D4AEF
        Validity
            Not Before: Oct  8 17:46:25 2026 GMT
            Not After : Oct 15 17:46:25 2026 GMT
        Subject: CN=6ac7d6f2-7bcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ef:59:d4:40:aa:7a:03:96:37:62:9e:b4:40:
                    97:2b:2f:c4:48:2c:a0:1e:3c:8e:78:90:a9:63:74:
                    e6:d9:2e:67:15:da:72:aa:6f:c8:b4:84:77:5d:9c:
                    0a:01:1f:27:8f:9f:ed:b1:52:65:08:64:ed:67:6e:
                    01:18:b3:42:14:70:86:aa:77:60:7c:e0:6c:43:ac:
                    b7:b8:91:ec:6c:b2:2d:d4:ea:72:3d:f2:5b:be:6c:
                    fb:c4:e3:18:bb:7b:28:fe:fb:df:a9:ae:2b:ba:29:
                    0b:8a:da:1e:cc:ca:5f:cf:f7:db:3b:e2:12:0d:87:
                    56:25:37:d0:3c:a7:a2:9c:b6:3e:5b:6c:1f:20:ee:
                    04:0c:d2:e8:23:77:34:34:fc:e4:dd:f0:f6:50:4b:
                    4a:1d:54:18:c9:21:52:5e:ab:c7:7c:6c:1a:c7:49:
                    d7:22:be:37:11:49:cd:54:db:09:17:b5:2f:6f:5c:
                    38:8a:65:52:27:80:23:36:60:6a:d8:3d:81:1a:33:
                    f9:8c:01:d2:d5:8e:40:90:b5:0f:c1:00:68:5a:dc:
                    f8:2a:9b:28:ad:5a:2f:a0:d9:97:30:08:f6:18:8f:
                    f3:ce:0a:72:f4:83:ca:c5:80:1b:2b:24:d1:08:34:
                    f8:f8:ce:9f:ec:b1:52:ba:69:e8:15:ef:ea:94:c9:
                    fb:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:7F:D7:8A:DA:15:49:BC:6B:74:B2:31:A1:11:67:95:E8:4B:68:F3
            X509v3 Authority Key Identifier:
                keyid:66:EA:2F:37:36:79:E1:C3:43:0E:27:D9:5E:15:FA:32:FA:8D:4A:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9119D6A/78115F5EB8C411E99C801A65C4F9AE02/ZuovNzZ54cNDDifZXhX6MvqNSu8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZuovNzZ54cNDDifZXhX6MvqNSu8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119D6A/78115F5EB8C411E99C801A65C4F9AE02/ZuovNzZ54cNDDifZXhX6MvqNSu8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:66:5c:fd:e7:5d:69:25:cd:dd:11:58:25:fe:8b:a7:9d:fe:
         c4:a0:00:33:10:b2:6e:fb:ab:71:69:d2:9e:8b:91:99:a6:cf:
         c2:77:81:2c:d9:2e:8f:ad:31:91:52:6d:bd:ad:7f:21:b3:4a:
         0b:63:00:a1:e7:b9:cb:b2:eb:d8:9c:78:5b:68:2a:d8:6a:3b:
         1c:d4:f4:8e:7d:35:4d:01:4b:34:b7:15:af:45:78:38:03:60:
         86:9c:ac:d6:ac:db:21:57:97:90:16:99:db:ba:a0:ac:09:ec:
         49:b7:58:dc:34:e7:12:3c:5a:85:65:73:de:43:af:99:30:0e:
         2f:e7:0b:68:f1:c3:fc:18:0f:43:fc:94:3f:f1:db:7b:27:64:
         f2:71:bd:62:93:54:f5:c7:c7:04:52:29:87:d8:53:c7:60:19:
         c7:80:0b:50:6e:5c:d2:d1:73:b6:dc:c3:12:a1:e0:e9:38:2e:
         bd:ea:ef:29:1f:39:bf:4a:5e:92:ae:4d:d8:07:e0:62:82:91:
         20:1c:0f:86:45:d4:37:88:9c:b4:40:14:17:1f:ad:4e:6d:b3:
         76:f9:e6:18:00:e2:6e:47:0a:1b:9d:a5:27:09:02:22:24:aa:
         fa:fd:d3:bd:31:ef:db:1a:e5:d8:86:16:2e:42:8f:1e:2f:6e:
         04:39:b2:45
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDuAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTlENkExMTAvBgNVBAUTKDY2RUEyRjM3MzY3OUUxQzM0MzBFMjdEOTVFMTVGQTMy
RkE4RDRBRUYwHhcNMjYxMDA4MTc0NjI1WhcNMjYxMDE1MTc0NjI1WjAYMRYwFAYD
VQQDEw02YWM3ZDZmMi03YmNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvu9Z1ECqegOWN2KetECXKy/ESCygHjyOeJCpY3Tm2S5nFdpyqm/ItIR3XZwK
AR8nj5/tsVJlCGTtZ24BGLNCFHCGqndgfOBsQ6y3uJHsbLIt1OpyPfJbvmz7xOMY
u3so/vvfqa4ruikLitoezMpfz/fbO+ISDYdWJTfQPKeinLY+W2wfIO4EDNLoI3c0
NPzk3fD2UEtKHVQYySFSXqvHfGwax0nXIr43EUnNVNsJF7Uvb1w4imVSJ4AjNmBq
2D2BGjP5jAHS1Y5AkLUPwQBoWtz4KpsorVovoNmXMAj2GI/zzgpy9IPKxYAbKyTR
CDT4+M6f7LFSumnoFe/qlMn71QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN1/14ra
FUm8a3SyMaERZ5XoS2jzMB8GA1UdIwQYMBaAFGbqLzc2eeHDQw4n2V4V+jL6jUrv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOUQ2QS83ODExNUY1RUI4
QzQxMUU5OUM4MDFBNjVDNEY5QUUwMi9adW92TnpaNTRjTkREaWZaWGhYNk12cU5T
dTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1p1b3ZOelo1NGNORERpZlpYaFg2TXZxTlN1OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
OUQ2QS83ODExNUY1RUI4QzQxMUU5OUM4MDFBNjVDNEY5QUUwMi9adW92TnpaNTRj
TkREaWZaWGhYNk12cU5TdTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZGZc/eddaSXN3RFYJf6Lp53+xKAAMxCybvurcWnSnouRmabPwneBLNkuj60x
kVJtva1/IbNKC2MAoee5y7Lr2Jx4W2gq2Go7HNT0jn01TQFLNLcVr0V4OANghpys
1qzbIVeXkBaZ27qgrAnsSbdY3DTnEjxahWVz3kOvmTAOL+cLaPHD/BgPQ/yUP/Hb
eydk8nG9YpNU9cfHBFIph9hTx2AZx4ALUG5c0tFzttzDEqHg6TguvervKR85v0pe
kq5N2AfgYoKRIBwPhkXUN4ictEAUFx+tTm2zdvnmGADibkcKG52lJwkCIiSq+v3T
vTHv2xrl2IYWLkKPHi9uBDmyRQ==
-----END CERTIFICATE-----
Generated at Fri Oct 9 23:01:39 2026 by rpki-client