Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91253B9/9EAFFB80D1D011F0948DD341C4F9AE02/Z0uNBgE07D0YaNBUD3zYTxS5yVk.mft
File:                     Z0uNBgE07D0YaNBUD3zYTxS5yVk.mft (raw, json)
Hash identifier:          URe78VSVUEHKim2JKE4Ueh59uM29f47myL4JHsrdWZA=
Subject key identifier:   4B:AA:E5:7F:22:7E:CF:67:6A:A4:B2:37:13:51:43:95:26:90:02:E6
Authority key identifier: 67:4B:8D:06:01:34:EC:3D:18:68:D0:54:0F:7C:D8:4F:14:B9:C9:59
Certificate issuer:       /CN=A91253B9/serialNumber=674B8D060134EC3D1868D0540F7CD84F14B9C959
Certificate serial:       9F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0uNBgE07D0YaNBUD3zYTxS5yVk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91253B9/9EAFFB80D1D011F0948DD341C4F9AE02/Z0uNBgE07D0YaNBUD3zYTxS5yVk.mft
Manifest number:          9F
Signing time:             Wed 07 Oct 2026 07:50:42 +0000
Manifest this update:     Wed 07 Oct 2026 07:50:41 +0000
Manifest next update:     Wed 14 Oct 2026 07:50:41 +0000
Files and hashes:         1: Z0uNBgE07D0YaNBUD3zYTxS5yVk.crl (hash: 9mnlagAA5JhRaNTrf5cOjYs8x78axQEhfkj/bGF9ux0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91253B9/9EAFFB80D1D011F0948DD341C4F9AE02/Z0uNBgE07D0YaNBUD3zYTxS5yVk.crl
                          rsync://rpki.apnic.net/member_repository/A91253B9/9EAFFB80D1D011F0948DD341C4F9AE02/Z0uNBgE07D0YaNBUD3zYTxS5yVk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0uNBgE07D0YaNBUD3zYTxS5yVk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 07:50:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 159 (0x9f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91253B9, serialNumber=674B8D060134EC3D1868D0540F7CD84F14B9C959
        Validity
            Not Before: Oct  7 07:50:41 2026 GMT
            Not After : Oct 14 07:50:41 2026 GMT
        Subject: CN=6ac5f9d2-d977
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:45:12:26:6b:d6:ce:b6:ea:1e:5d:2c:cc:5b:
                    a2:8f:ef:95:15:bf:02:45:f4:45:cf:94:72:e9:0a:
                    38:58:03:d4:36:f6:fe:b9:7b:b3:14:b3:98:2a:cc:
                    15:33:fd:96:ff:3c:27:2b:db:38:83:21:3e:f0:74:
                    46:00:58:99:ea:37:27:c6:dd:1c:57:ef:f6:3b:8c:
                    3d:0f:62:2a:58:1d:e1:fc:82:cb:d1:42:46:9f:40:
                    f2:97:f6:51:b4:77:32:15:f8:95:40:24:55:3d:3b:
                    0f:77:7d:a2:45:91:15:a5:65:f7:42:65:c4:e1:8d:
                    d2:83:76:0b:8d:3b:f8:c3:e8:e6:fd:68:4d:62:1a:
                    d2:48:af:a0:53:63:d4:e2:70:9b:c7:e8:a2:0f:0a:
                    40:5d:7d:23:d8:22:f9:69:9a:1e:54:c6:dc:31:e8:
                    1d:7d:e9:0a:cd:c6:69:fc:fb:b0:c9:8f:61:7c:d3:
                    f8:44:fe:2c:33:a7:49:70:37:c9:81:cd:97:2d:96:
                    ee:bf:11:2f:05:49:14:78:bb:50:14:c5:5b:e0:4b:
                    8b:76:78:38:64:fb:ef:b8:2d:23:5b:e1:8b:e2:52:
                    2e:b8:3c:12:5e:a5:c2:ba:b5:7d:a7:1a:e3:cb:aa:
                    2b:95:f0:e7:f9:5e:f5:9d:b7:11:af:d3:5e:4d:bb:
                    ee:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:AA:E5:7F:22:7E:CF:67:6A:A4:B2:37:13:51:43:95:26:90:02:E6
            X509v3 Authority Key Identifier:
                keyid:67:4B:8D:06:01:34:EC:3D:18:68:D0:54:0F:7C:D8:4F:14:B9:C9:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91253B9/9EAFFB80D1D011F0948DD341C4F9AE02/Z0uNBgE07D0YaNBUD3zYTxS5yVk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0uNBgE07D0YaNBUD3zYTxS5yVk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91253B9/9EAFFB80D1D011F0948DD341C4F9AE02/Z0uNBgE07D0YaNBUD3zYTxS5yVk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:a4:54:8a:87:de:f7:ff:77:b2:3f:8e:3f:15:ad:c3:76:a8:
         d8:a1:34:78:3b:0a:37:3a:14:a0:e2:18:ed:7e:1d:6e:ee:75:
         1a:cc:54:62:33:e0:f6:8f:e9:02:dc:2e:71:82:6c:59:25:a7:
         99:9e:b1:22:a9:f4:eb:45:46:34:da:82:50:69:fa:dc:17:59:
         a6:7f:2f:0e:3f:72:0a:2c:86:9f:46:70:2c:11:b6:e9:77:3c:
         dc:49:3e:ec:a8:a6:8c:c3:63:b7:1f:c6:01:7a:7f:09:0c:d7:
         7f:30:ff:59:19:81:aa:cb:2d:87:7b:05:9c:59:ce:ec:58:c5:
         93:ee:43:2e:69:f7:e3:5e:72:ee:01:63:0e:53:8c:d6:0d:70:
         ec:93:9a:0f:2f:8c:4c:34:08:ee:4b:f5:3c:d1:22:7c:e2:2a:
         dd:58:6e:9c:c1:af:7a:d7:5a:4f:85:e2:32:ce:93:d0:01:55:
         09:f8:71:95:99:6b:a0:59:59:8e:6c:cc:47:9e:7a:02:5e:50:
         be:1b:4f:8b:0d:44:f0:f6:ff:0b:9b:f9:e7:60:b1:e1:3a:97:
         59:fc:64:fd:e5:6d:f5:47:a5:db:c4:80:8b:b8:33:d9:a5:20:
         69:19:6c:b6:04:fe:56:38:fd:d4:56:16:bb:64:3e:92:1c:b6:
         87:a7:d3:83
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjUzQjkxMTAvBgNVBAUTKDY3NEI4RDA2MDEzNEVDM0QxODY4RDA1NDBGN0NEODRG
MTRCOUM5NTkwHhcNMjYxMDA3MDc1MDQxWhcNMjYxMDE0MDc1MDQxWjAYMRYwFAYD
VQQDEw02YWM1ZjlkMi1kOTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv0USJmvWzrbqHl0szFuij++VFb8CRfRFz5Ry6Qo4WAPUNvb+uXuzFLOYKswV
M/2W/zwnK9s4gyE+8HRGAFiZ6jcnxt0cV+/2O4w9D2IqWB3h/ILL0UJGn0Dyl/ZR
tHcyFfiVQCRVPTsPd32iRZEVpWX3QmXE4Y3Sg3YLjTv4w+jm/WhNYhrSSK+gU2PU
4nCbx+iiDwpAXX0j2CL5aZoeVMbcMegdfekKzcZp/PuwyY9hfNP4RP4sM6dJcDfJ
gc2XLZbuvxEvBUkUeLtQFMVb4EuLdng4ZPvvuC0jW+GL4lIuuDwSXqXCurV9pxrj
y6orlfDn+V71nbcRr9NeTbvuowIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEuq5X8i
fs9naqSyNxNRQ5UmkALmMB8GA1UdIwQYMBaAFGdLjQYBNOw9GGjQVA982E8UuclZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTNCOS85RUFGRkI4MEQx
RDAxMUYwOTQ4REQzNDFDNEY5QUUwMi9aMHVOQmdFMDdEMFlhTkJVRDN6WVR4UzV5
VmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1owdU5CZ0UwN0QwWWFOQlVEM3pZVHhTNXlWay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NTNCOS85RUFGRkI4MEQxRDAxMUYwOTQ4REQzNDFDNEY5QUUwMi9aMHVOQmdFMDdE
MFlhTkJVRDN6WVR4UzV5VmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAsaRUiofe9/93sj+OPxWtw3ao2KE0eDsKNzoUoOIY7X4dbu51GsxUYjPg9o/p
AtwucYJsWSWnmZ6xIqn060VGNNqCUGn63BdZpn8vDj9yCiyGn0ZwLBG26Xc83Ek+
7KimjMNjtx/GAXp/CQzXfzD/WRmBqssth3sFnFnO7FjFk+5DLmn3415y7gFjDlOM
1g1w7JOaDy+MTDQI7kv1PNEifOIq3VhunMGvetdaT4XiMs6T0AFVCfhxlZlroFlZ
jmzMR556Al5QvhtPiw1E8Pb/C5v552Cx4TqXWfxk/eVt9Uel28SAi7gz2aUgaRls
tgT+Vjj91FYWu2Q+khy2h6fTgw==
-----END CERTIFICATE-----
Generated at Wed Oct 7 22:57:48 2026 by rpki-client