Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft
File:                     zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft (raw, json)
Hash identifier:          vtZrqmOjk5FdXSrMB018jtWI0Rr6CLJnsjdVFf2qzlA=
Subject key identifier:   68:14:CF:DE:78:29:B0:5B:50:45:F1:6A:B9:37:93:99:E4:F2:E6:F0
Authority key identifier: CD:C1:87:A6:42:B4:D7:EC:50:DC:AE:59:A0:06:6F:14:8D:51:08:01
Certificate issuer:       /CN=A912672E/serialNumber=CDC187A642B4D7EC50DCAE59A0066F148D510801
Certificate serial:       0322
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft
Manifest number:          031A
Signing time:             Wed 07 Oct 2026 01:12:16 +0000
Manifest this update:     Wed 07 Oct 2026 01:12:15 +0000
Manifest next update:     Wed 14 Oct 2026 01:12:15 +0000
Files and hashes:         1: zcGHpkK01-xQ3K5ZoAZvFI1RCAE.crl (hash: 02YGWbYLlQUXlTzx91mVJFtCrCHBA38b+8g33mLT8rs=)
                          2: 71CE3962337511EDAE4C4121C4F9AE02.roa (hash: SrZFCYfwkgEZN+fxU55BuSix1/7qyq8HmlWELE9+odk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.crl
                          rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 01:12:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 802 (0x322)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912672E, serialNumber=CDC187A642B4D7EC50DCAE59A0066F148D510801
        Validity
            Not Before: Oct  7 01:12:15 2026 GMT
            Not After : Oct 14 01:12:15 2026 GMT
        Subject: CN=6ac59c70-f9da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:bb:3d:3e:d8:6b:da:f0:ed:d7:6c:05:d9:29:
                    70:67:f2:03:ce:db:c3:a9:e1:2a:16:a9:fe:f4:4d:
                    58:ee:83:7d:00:dc:94:b1:36:c2:c3:a2:85:22:ab:
                    ca:e5:ed:e3:60:43:89:a5:fa:78:99:af:6d:87:e6:
                    21:aa:4f:21:44:bc:c7:b0:68:02:84:42:ad:4e:59:
                    84:39:c1:92:8c:ff:59:b2:54:c3:b7:30:e3:8c:32:
                    b5:26:a9:2c:58:73:33:a0:59:5d:a3:7d:ca:b5:0b:
                    23:29:74:15:b0:f5:4a:d1:d7:14:fa:82:6f:99:db:
                    76:c2:6c:17:dc:25:2b:ed:5b:29:e3:08:cb:b0:94:
                    a5:22:75:ac:42:ee:c9:6f:47:f8:84:21:37:ad:a8:
                    cb:91:b6:69:ad:35:75:08:c8:5a:6f:51:ef:2c:36:
                    1b:f3:75:cd:dc:ec:80:4c:f5:58:9c:b9:56:df:d1:
                    45:b5:53:fe:d0:ef:08:54:1b:5c:96:a4:bd:8d:67:
                    d9:1f:8c:cd:35:af:a9:78:cd:08:c4:4c:2b:b4:2b:
                    6c:16:1c:58:84:2e:7a:5f:02:fb:c2:6c:12:cf:1f:
                    ed:dd:71:71:2f:9c:12:f1:a3:8f:fd:05:c8:72:80:
                    b6:0e:3a:67:0f:75:de:73:d4:b6:c4:ec:a7:e2:4e:
                    43:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:14:CF:DE:78:29:B0:5B:50:45:F1:6A:B9:37:93:99:E4:F2:E6:F0
            X509v3 Authority Key Identifier:
                keyid:CD:C1:87:A6:42:B4:D7:EC:50:DC:AE:59:A0:06:6F:14:8D:51:08:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:c0:73:01:45:14:68:20:8c:9c:cf:f0:8c:29:eb:f2:16:e2:
         4b:ab:b1:b0:4b:68:40:36:1b:1c:52:57:8c:56:d4:25:cd:3f:
         ec:1b:93:57:18:e1:fc:6b:a6:b0:74:9b:34:b5:89:82:51:85:
         2f:e3:3a:e3:7c:5f:54:3b:a5:89:2c:f0:f5:fd:82:03:07:e4:
         93:67:3a:e5:49:54:63:6f:1c:7b:8e:79:66:77:c9:3d:63:c4:
         b5:37:fd:b6:ed:a6:eb:de:f9:25:89:2a:eb:0d:e9:f1:95:5b:
         ba:f0:0c:20:bb:09:fc:f4:10:a2:9e:00:0d:c4:4d:b0:72:e9:
         4a:fd:25:91:d9:77:34:e5:21:ee:9f:be:b6:d5:b4:98:18:18:
         a8:76:9e:64:e4:ec:28:85:f3:69:99:16:33:c2:09:e7:c7:07:
         89:14:8a:fb:bd:53:8f:3c:5a:dc:06:1c:7e:a3:b3:01:91:75:
         c9:ad:dd:e6:48:65:2f:e4:1d:f6:d4:7f:7a:a1:c3:db:cd:ab:
         14:70:fd:18:d7:f2:7e:2d:b1:65:c4:db:0e:2b:bb:92:eb:e9:
         34:9c:46:a0:7c:58:c6:3c:e7:43:9a:92:ff:aa:48:b9:c8:61:
         be:e4:8b:13:b4:2e:7f:d6:97:26:cb:98:56:43:71:c0:cb:57:
         f3:e6:4c:10
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAyIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjY3MkUxMTAvBgNVBAUTKENEQzE4N0E2NDJCNEQ3RUM1MERDQUU1OUEwMDY2RjE0
OEQ1MTA4MDEwHhcNMjYxMDA3MDExMjE1WhcNMjYxMDE0MDExMjE1WjAYMRYwFAYD
VQQDEw02YWM1OWM3MC1mOWRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlbs9Pthr2vDt12wF2SlwZ/IDztvDqeEqFqn+9E1Y7oN9ANyUsTbCw6KFIqvK
5e3jYEOJpfp4ma9th+Yhqk8hRLzHsGgChEKtTlmEOcGSjP9ZslTDtzDjjDK1Jqks
WHMzoFldo33KtQsjKXQVsPVK0dcU+oJvmdt2wmwX3CUr7Vsp4wjLsJSlInWsQu7J
b0f4hCE3rajLkbZprTV1CMhab1HvLDYb83XN3OyATPVYnLlW39FFtVP+0O8IVBtc
lqS9jWfZH4zNNa+peM0IxEwrtCtsFhxYhC56XwL7wmwSzx/t3XFxL5wS8aOP/QXI
coC2DjpnD3Xec9S2xOyn4k5DCwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGgUz954
KbBbUEXxark3k5nk8ubwMB8GA1UdIwQYMBaAFM3Bh6ZCtNfsUNyuWaAGbxSNUQgB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjcyRS9BRjQ2NjU3NDMz
NzIxMUVEOEVFQUQ2MUVDNEY5QUUwMi96Y0dIcGtLMDEteFEzSzVab0FadkZJMVJD
QUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3pjR0hwa0swMS14UTNLNVpvQVp2RkkxUkNBRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NjcyRS9BRjQ2NjU3NDMzNzIxMUVEOEVFQUQ2MUVDNEY5QUUwMi96Y0dIcGtLMDEt
eFEzSzVab0FadkZJMVJDQUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALMBzAUUUaCCMnM/wjCnr8hbiS6uxsEtoQDYbHFJXjFbUJc0/7BuTVxjh/Gum
sHSbNLWJglGFL+M643xfVDuliSzw9f2CAwfkk2c65UlUY28ce455ZnfJPWPEtTf9
tu2m6975JYkq6w3p8ZVbuvAMILsJ/PQQop4ADcRNsHLpSv0lkdl3NOUh7p++ttW0
mBgYqHaeZOTsKIXzaZkWM8IJ58cHiRSK+71Tjzxa3AYcfqOzAZF1ya3d5khlL+Qd
9tR/eqHD282rFHD9GNfyfi2xZcTbDiu7kuvpNJxGoHxYxjznQ5qS/6pIuchhvuSL
E7Quf9aXJsuYVkNxwMtX8+ZMEA==
-----END CERTIFICATE-----
Generated at Wed Oct 7 13:10:54 2026 by rpki-client