Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft
File:                     Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft (raw, json)
Hash identifier:          BJQzvz+P1Es+oZUidU+BIJDRNkSiUHA9R3bX8WUgQa0=
Subject key identifier:   33:07:13:64:0D:E6:15:4D:3B:FE:80:1B:B0:EB:60:43:50:71:9B:8F
Authority key identifier: 67:9C:DB:25:5B:5B:77:58:09:10:5E:90:E0:02:34:49:F7:1C:6B:6F
Certificate issuer:       /CN=A912A6CB/serialNumber=679CDB255B5B775809105E90E0023449F71C6B6F
Certificate serial:       0D57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft
Manifest number:          0D48
Signing time:             Fri 02 Oct 2026 18:20:14 +0000
Manifest this update:     Fri 02 Oct 2026 18:20:13 +0000
Manifest next update:     Fri 09 Oct 2026 18:20:13 +0000
Files and hashes:         1: Z5zbJVtbd1gJEF6Q4AI0Sfcca28.crl (hash: +nFaz9v/bZosMTw1LIT8t/GRM7dvT1nLdaMs6ac+76o=)
                          2: 5BF38D62058E11EA96051368C4F9AE02.roa (hash: mfe6dh8HV+B3Izq2cj3w4opPN3aJ9/HVDtDRjSUh3Hs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.crl
                          rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 18:20:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3415 (0xd57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A6CB, serialNumber=679CDB255B5B775809105E90E0023449F71C6B6F
        Validity
            Not Before: Oct  2 18:20:13 2026 GMT
            Not After : Oct  9 18:20:13 2026 GMT
        Subject: CN=6abff5dd-ea2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ae:97:44:3e:97:d3:fa:ff:ea:6f:2a:85:f1:
                    b3:c2:3b:80:1e:36:97:ad:b6:71:03:89:c3:35:f8:
                    b7:82:38:15:e2:fd:86:6d:f4:69:a0:db:35:e2:24:
                    95:05:b4:64:78:b9:b6:c3:80:2b:dc:06:c7:85:dc:
                    77:ef:cd:ca:1f:d3:36:a2:8a:4f:af:81:c9:81:0f:
                    03:de:3f:5f:c9:79:55:5f:b5:04:a2:6a:a5:d1:2a:
                    d8:05:5c:3a:1e:38:ef:76:60:7a:7a:82:27:e1:7b:
                    8f:b0:13:ea:af:a2:9d:45:7c:5f:c2:9d:23:ec:e9:
                    b2:83:c2:00:35:e1:e3:a1:07:50:72:1b:ad:30:e6:
                    ed:9e:37:b7:c2:94:4a:82:9e:d1:3e:b3:ef:31:b2:
                    4d:13:89:96:87:3d:e5:0e:cd:6e:f7:cd:37:80:2f:
                    db:eb:47:d2:d3:76:61:50:3c:a4:ff:ff:bc:a7:57:
                    74:2e:fd:87:07:0b:8a:4e:1c:22:77:b5:0e:c1:fe:
                    e4:56:a9:8c:c8:d1:25:b7:dc:5b:94:26:f4:c9:7b:
                    65:97:4a:d0:62:c7:1c:8a:64:d8:02:32:12:f7:58:
                    c6:5f:98:92:1e:ec:79:b1:44:11:a1:cc:8b:0e:c4:
                    2a:94:9c:48:1d:73:37:8d:b5:73:8e:35:d6:57:6b:
                    4e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:07:13:64:0D:E6:15:4D:3B:FE:80:1B:B0:EB:60:43:50:71:9B:8F
            X509v3 Authority Key Identifier:
                keyid:67:9C:DB:25:5B:5B:77:58:09:10:5E:90:E0:02:34:49:F7:1C:6B:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:45:26:eb:f5:3d:5f:3a:69:6c:e2:1d:43:39:c3:11:1c:29:
         88:6e:dd:a5:74:31:81:8a:f7:65:da:9a:88:fc:cf:95:b5:5e:
         26:78:de:0c:50:b7:c5:e1:4a:69:36:ac:c2:d9:ef:c2:73:28:
         c4:21:fe:e4:91:c7:98:d6:5f:27:b8:b4:84:24:f6:d7:ee:31:
         97:8a:ea:0c:c8:62:60:c8:47:af:3e:69:1a:f0:e6:68:97:06:
         43:b6:08:2a:78:89:e9:06:9c:90:5e:58:7d:a5:99:0e:94:3a:
         87:30:1a:1f:81:5c:19:c9:07:d1:ad:06:cc:52:b1:71:9f:b9:
         a3:11:b5:e2:21:21:7d:3b:af:6b:bd:26:7a:09:7e:16:40:bd:
         77:b1:f8:6b:ba:5e:95:52:c9:92:49:8d:e9:85:80:1d:0d:87:
         fa:7a:09:bd:ed:53:7a:2f:4f:33:f9:85:48:31:ac:91:df:c0:
         69:af:04:bc:d4:58:77:12:af:19:f5:39:91:97:81:d5:0b:66:
         08:20:0d:e5:09:57:7d:c2:59:ae:48:e8:69:1d:84:51:10:51:
         02:17:25:0b:9b:87:ca:e1:9c:f5:83:b6:38:1f:d4:c1:f2:3d:
         ff:a5:f1:42:a7:1c:d4:92:17:c4:d3:4a:69:a4:b0:ba:98:ef:
         3d:75:e6:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 19:58:29 2026 by rpki-client