Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912F158/1796621E0E8911ED99218261C4F9AE02/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.mft
File:                     Z1w2f2A3m84x3ZNPpAyAyF7pr9k.mft (raw, json)
Hash identifier:          /ehKoxf7E/PLCw3AHcv6AHgL0lBMvcHvp2SxJXnSJL0=
Subject key identifier:   6E:11:3C:7C:58:0F:C7:34:9C:7C:54:D2:86:48:45:60:E9:75:EB:8F
Authority key identifier: 67:5C:36:7F:60:37:9B:CE:31:DD:93:4F:A4:0C:80:C8:5E:E9:AF:D9
Certificate issuer:       /CN=A912F158/serialNumber=675C367F60379BCE31DD934FA40C80C85EE9AFD9
Certificate serial:       0370
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912F158/1796621E0E8911ED99218261C4F9AE02/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.mft
Manifest number:          0370
Signing time:             Mon 05 Oct 2026 00:50:38 +0000
Manifest this update:     Mon 05 Oct 2026 00:50:37 +0000
Manifest next update:     Mon 12 Oct 2026 00:50:37 +0000
Files and hashes:         1: Z1w2f2A3m84x3ZNPpAyAyF7pr9k.crl (hash: +pOlLw3ywei4QKX/wgbymGVk2ossPRkQvH5/mFp/CW8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912F158/1796621E0E8911ED99218261C4F9AE02/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.crl
                          rsync://rpki.apnic.net/member_repository/A912F158/1796621E0E8911ED99218261C4F9AE02/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 00:50:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 880 (0x370)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912F158, serialNumber=675C367F60379BCE31DD934FA40C80C85EE9AFD9
        Validity
            Not Before: Oct  5 00:50:37 2026 GMT
            Not After : Oct 12 00:50:37 2026 GMT
        Subject: CN=6ac2f45d-e8d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:76:93:52:3b:43:8a:20:71:b6:27:3e:f4:db:
                    02:25:8d:02:b4:89:57:9c:e4:13:96:60:5e:6f:64:
                    31:96:89:49:24:49:8a:65:3c:b5:1d:00:98:b1:de:
                    2d:30:bf:90:25:8e:9e:98:5e:01:ef:df:ac:47:28:
                    17:dc:e0:04:8d:69:ee:12:d0:f9:8f:10:70:fc:51:
                    89:54:7d:cb:6c:16:fb:8b:9c:be:5d:2b:25:d3:54:
                    4d:a2:90:76:19:3c:a8:ef:cb:a8:e6:bf:99:ab:e0:
                    bb:59:6f:95:2f:e6:00:7a:0c:06:50:c0:f3:1a:90:
                    df:8e:c4:c9:ae:25:dc:3f:e7:df:5d:3e:c8:2f:49:
                    ed:e2:7f:48:cd:50:42:55:ae:a2:2a:7d:bf:1d:97:
                    3c:70:91:09:65:e7:83:f1:9d:b5:d7:02:3d:ee:70:
                    4a:e5:f7:7a:6b:c3:90:f1:57:e2:50:1c:c7:7e:2e:
                    b1:8e:10:bb:b9:f0:b3:b8:90:fa:63:0c:8e:96:b7:
                    d9:39:dc:ce:5c:e2:73:2f:22:c1:31:2e:d5:f0:13:
                    55:65:69:98:a1:89:0b:a7:9e:56:83:33:aa:ea:b8:
                    87:9b:7a:0d:42:bb:f1:83:e0:33:ae:9c:3e:29:c9:
                    c7:bc:d6:c7:a0:58:fc:2c:af:ea:99:b3:0f:d3:da:
                    b1:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:11:3C:7C:58:0F:C7:34:9C:7C:54:D2:86:48:45:60:E9:75:EB:8F
            X509v3 Authority Key Identifier:
                keyid:67:5C:36:7F:60:37:9B:CE:31:DD:93:4F:A4:0C:80:C8:5E:E9:AF:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912F158/1796621E0E8911ED99218261C4F9AE02/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F158/1796621E0E8911ED99218261C4F9AE02/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:65:87:82:e8:a6:54:93:c8:d0:a0:a1:79:4f:a7:6a:43:51:
         cd:34:f7:45:32:07:76:2a:2f:6a:df:b4:89:09:6b:2b:36:fb:
         39:a3:75:e1:d1:f1:6d:dc:e2:e9:78:f0:7c:49:fd:15:f7:10:
         d2:21:31:3d:77:45:1c:b5:a2:95:54:7d:69:9d:77:a2:57:39:
         75:3b:a1:f4:3c:a7:7b:c1:d7:4f:cb:f8:14:e3:8a:67:21:ba:
         2b:f9:f0:61:11:c6:49:39:ae:a2:81:8d:b4:b7:af:76:4b:09:
         fd:0a:73:4f:a2:67:3f:20:19:8f:56:be:75:9a:12:c5:f1:2e:
         66:91:3a:36:a9:d6:b1:1d:6e:e5:fe:98:b3:40:e5:d3:61:c5:
         95:86:fd:0d:30:e8:a9:d6:76:54:7f:d8:d0:e0:c7:71:2b:9c:
         43:3e:d2:b2:29:e8:cf:35:22:ff:aa:9c:be:8a:6c:a1:df:78:
         19:3e:1e:7d:43:f3:2b:36:3c:fa:2e:c7:35:bd:fd:d5:ef:41:
         54:97:a2:f8:6c:34:30:c4:47:07:92:38:af:f3:1c:15:a8:37:
         f2:70:80:54:18:7d:5f:b5:44:da:fa:12:79:53:c3:9b:50:b6:
         c1:19:7b:ba:3c:79:ca:7c:1f:d1:5b:4a:82:1f:61:c2:e2:04:
         ff:ad:69:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 12:58:24 2026 by rpki-client