Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912519D/B8280664C75A11EB81E99E19C4F9AE02/ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.mft
File:                     ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.mft (raw, json)
Hash identifier:          poW3UaH9o3Z4njLQ8o3N/k/2gr0g+aWK2l/V9hUldbA=
Subject key identifier:   3E:BD:3E:3F:4A:F6:08:77:84:04:22:80:DD:83:A7:89:6A:CB:87:49
Authority key identifier: 66:B9:D8:4F:43:36:A8:9D:84:D1:E0:2E:82:0A:79:68:6E:1E:52:C4
Certificate issuer:       /CN=A912519D/serialNumber=66B9D84F4336A89D84D1E02E820A79686E1E52C4
Certificate serial:       06BB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912519D/B8280664C75A11EB81E99E19C4F9AE02/ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.mft
Manifest number:          06B4
Signing time:             Tue 06 Oct 2026 22:31:24 +0000
Manifest this update:     Tue 06 Oct 2026 22:31:23 +0000
Manifest next update:     Tue 13 Oct 2026 22:31:23 +0000
Files and hashes:         1: ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.crl (hash: v+SLqm9YqIG06AituNJIATM4xLnfLW1Yx9oBqDJud0Q=)
                          2: 10581DEAC75D11EBB00EBD1AC4F9AE02.roa (hash: 5sKr5Je6hbpFf2Q5JDk7nrFaAZ90rKYQRnu0lj3etl0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912519D/B8280664C75A11EB81E99E19C4F9AE02/ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.crl
                          rsync://rpki.apnic.net/member_repository/A912519D/B8280664C75A11EB81E99E19C4F9AE02/ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 22:31:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1723 (0x6bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912519D, serialNumber=66B9D84F4336A89D84D1E02E820A79686E1E52C4
        Validity
            Not Before: Oct  6 22:31:23 2026 GMT
            Not After : Oct 13 22:31:23 2026 GMT
        Subject: CN=6ac576bb-b5ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:19:19:5c:55:ef:69:11:28:31:a1:75:ee:94:
                    b6:13:ff:d4:f6:f5:90:90:71:b6:c2:b2:3d:89:9e:
                    db:bc:52:a3:d8:cb:10:c8:af:5e:d4:f4:36:62:6e:
                    12:9c:0b:5a:56:c3:5a:54:17:7c:ba:96:05:54:b4:
                    a6:49:d4:78:a4:7f:4b:ea:6b:d9:7e:c6:ef:2d:27:
                    ca:ff:7b:98:a8:a5:79:84:c2:a1:05:9b:83:a0:c4:
                    89:3b:98:80:a8:d4:d8:2c:30:78:f7:49:a7:48:20:
                    46:d7:53:2b:a8:ee:40:62:b9:a5:60:ed:e8:76:80:
                    f1:1d:f9:c2:07:b0:ee:9f:c3:7b:0b:af:2a:33:e0:
                    1f:87:ea:57:ea:4e:f1:c5:5b:54:9c:99:09:bb:df:
                    e7:2d:d5:78:e4:c1:ff:50:2a:d1:5f:5c:75:7a:bf:
                    93:59:a9:13:e6:a0:9a:7f:c1:1d:9e:f1:3d:12:82:
                    7b:e8:5d:71:db:b7:04:33:1e:e0:19:a6:40:c0:8f:
                    67:eb:83:9c:d1:40:d9:cc:34:c0:b1:89:5b:96:de:
                    af:ef:68:8c:5e:ef:5d:58:a1:5b:b5:b4:a3:2f:9c:
                    b1:41:e5:47:94:76:d2:c0:36:e4:9e:6f:bb:7d:54:
                    f6:db:af:69:4e:31:d3:21:9d:dd:5c:30:70:67:e8:
                    8f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:BD:3E:3F:4A:F6:08:77:84:04:22:80:DD:83:A7:89:6A:CB:87:49
            X509v3 Authority Key Identifier:
                keyid:66:B9:D8:4F:43:36:A8:9D:84:D1:E0:2E:82:0A:79:68:6E:1E:52:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912519D/B8280664C75A11EB81E99E19C4F9AE02/ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912519D/B8280664C75A11EB81E99E19C4F9AE02/ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:52:31:e4:9f:33:e7:e1:1d:87:16:85:60:5c:86:64:aa:f9:
         8b:1a:11:91:ca:17:bd:ad:9d:a1:38:ef:62:54:a4:3b:f2:60:
         72:fd:8f:6c:20:92:c5:79:05:2b:be:99:17:ef:32:b6:b8:50:
         58:88:e2:ff:bc:48:f6:ca:f5:1e:4a:43:30:60:b8:24:13:dc:
         d0:35:cf:c0:4c:01:fe:71:d4:31:8f:03:bf:2b:a0:d7:6b:fa:
         3c:56:7b:9d:09:d6:50:fc:ef:ac:74:d3:48:4c:6d:07:00:08:
         05:c9:f3:7e:9e:d7:30:96:2b:fc:59:d4:07:4b:ea:69:fc:9e:
         51:ad:ed:fd:54:ac:f9:3b:0c:03:50:73:ed:db:a0:ab:42:c6:
         ed:2d:fe:c4:a3:ca:d7:be:97:64:cb:57:15:3d:f4:25:7f:0a:
         e8:6e:fa:88:2a:7f:ce:37:2a:bb:ca:b5:73:08:a3:d8:6e:22:
         3b:8a:cd:45:e3:83:16:5f:53:8e:e8:89:0a:b0:a4:0d:69:43:
         e5:7a:c7:c0:6d:c8:d2:5a:be:fa:c2:5d:53:1b:76:1f:04:0f:
         8f:03:cd:e6:5e:b4:79:de:7d:6c:0b:4b:d6:57:8f:76:69:70:
         96:91:db:5b:61:62:76:0c:02:cb:ec:51:5c:00:5d:b0:48:43:
         16:d7:f5:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 07:57:47 2026 by rpki-client