Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft
File:                     zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft (raw, json)
Hash identifier:          Ugj/r1yY8yLysxi2YuQvvD4a/ajOLuw69DMOMznEj/0=
Subject key identifier:   5F:97:A8:60:59:98:4F:AA:3A:30:C7:41:C0:2F:10:13:75:C1:63:6E
Authority key identifier: CD:4F:B9:10:F3:E6:F5:9C:59:CE:5A:CC:94:38:ED:D0:8D:56:FC:88
Certificate issuer:       /CN=A911E24A/serialNumber=CD4FB910F3E6F59C59CE5ACC9438EDD08D56FC88
Certificate serial:       0A1D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft
Manifest number:          0A15
Signing time:             Thu 08 Oct 2026 19:51:58 +0000
Manifest this update:     Thu 08 Oct 2026 19:51:58 +0000
Manifest next update:     Thu 15 Oct 2026 19:51:58 +0000
Files and hashes:         1: zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.crl (hash: kdwMddvQPiyMb/kRzLneMmHf+VM2M4/u1USBehEcVyQ=)
                          2: 7B68D8F2A3E811EAB397F675C4F9AE02.roa (hash: b1FfdoGhx5a9SVnzfI7f+c3x30UgLcfNHueh+5jSvgI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.crl
                          rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Oct 2026 19:51:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2589 (0xa1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911E24A, serialNumber=CD4FB910F3E6F59C59CE5ACC9438EDD08D56FC88
        Validity
            Not Before: Oct  8 19:51:58 2026 GMT
            Not After : Oct 15 19:51:58 2026 GMT
        Subject: CN=6ac7f45e-0bcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5c:06:88:40:cf:79:f3:47:db:00:99:5b:e8:
                    e2:3b:55:de:0b:50:42:1d:04:1f:b9:be:1c:d2:b5:
                    cf:67:ac:eb:fb:ae:cd:f8:0c:4b:5b:73:93:ac:4e:
                    82:16:fe:94:bd:47:35:59:ad:32:dc:94:f6:fb:c9:
                    1f:c1:9a:1a:0a:ee:23:f7:71:71:a4:44:8a:ea:b2:
                    85:6a:c1:c9:00:05:fe:49:c8:37:e8:9a:72:4b:da:
                    f8:6b:18:14:41:f0:13:67:92:23:c8:75:a9:fb:d0:
                    06:69:17:27:13:99:f4:5c:a5:29:51:35:08:33:19:
                    6a:48:d7:56:a1:16:4e:6c:ce:a1:45:e4:ba:af:f0:
                    11:6e:8f:67:ed:e0:82:ae:d8:70:4f:07:d6:d9:ba:
                    6a:f1:98:6c:0c:68:59:ad:b2:d9:b1:64:35:ee:52:
                    d3:22:26:56:2f:99:99:bf:4f:05:13:e1:29:dd:20:
                    a7:9c:00:a3:db:d6:a5:2e:9e:1c:13:27:7f:28:4f:
                    79:81:59:0d:27:d0:a6:60:8c:3f:ba:82:cb:d6:f8:
                    a5:76:fa:e1:b4:ee:ad:2b:44:c4:fa:0b:84:27:31:
                    bb:db:32:5d:62:6f:8d:a7:46:8b:d6:1f:3a:1d:48:
                    d6:7e:9d:be:c6:76:e7:f1:5c:62:a9:97:0e:07:09:
                    ef:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:97:A8:60:59:98:4F:AA:3A:30:C7:41:C0:2F:10:13:75:C1:63:6E
            X509v3 Authority Key Identifier:
                keyid:CD:4F:B9:10:F3:E6:F5:9C:59:CE:5A:CC:94:38:ED:D0:8D:56:FC:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:80:57:a0:92:b9:54:3e:56:94:b6:5d:e1:45:c9:a2:7e:e5:
         21:53:66:56:b3:c1:04:55:3c:b1:77:9d:21:9e:bb:a0:11:2a:
         8c:a2:38:b7:3a:3b:31:dc:b9:17:37:6d:33:71:cf:81:18:a6:
         ae:29:35:a5:84:52:41:b7:e5:6e:2d:88:30:6b:7c:98:b8:c4:
         6c:39:58:e9:3d:3d:91:03:70:21:e7:f5:69:20:71:cf:d0:3e:
         e0:e9:bb:e4:75:a8:b3:78:94:70:c7:b0:98:45:94:86:06:e6:
         21:55:43:45:0f:57:8c:48:99:84:21:64:03:85:53:a8:9e:2d:
         e0:46:33:6a:79:2f:2f:4d:83:b1:af:65:f1:b1:b6:83:30:76:
         0f:a1:53:1a:fc:52:04:52:34:c7:be:26:31:61:e5:7c:0c:a3:
         df:c1:43:44:09:88:d3:8f:a4:f9:67:6c:75:20:50:b0:0e:eb:
         5d:f1:ab:3c:5c:01:ee:1c:fa:53:8b:35:ff:8e:f6:1c:37:70:
         ae:16:d4:27:4a:ed:c9:de:58:ac:b0:1a:a7:42:b5:db:82:1b:
         f2:21:1d:51:ff:7a:b1:4e:02:ac:bd:4c:33:f2:92:4c:a2:79:
         ec:1a:cc:c4:07:37:ed:9a:c5:a5:fd:e8:a3:3f:c6:d1:9b:93:
         7a:da:05:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 01:32:25 2026 by rpki-client