Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913CE18/B3752AB2C68211F0B76E1746C4F9AE02/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.mft
File:                     z5o_MWSDoqeUQR1ZFG-fxWQJGZc.mft (raw, json)
Hash identifier:          K0rXSbzqOSS/gw4EtxB4NYvmquwo6b0urVfhaHZBg8w=
Subject key identifier:   B9:BC:7A:6D:6E:25:4F:43:8E:2C:13:2F:58:D1:88:CF:A5:90:5B:AA
Authority key identifier: CF:9A:3F:31:64:83:A2:A7:94:41:1D:59:14:6F:9F:C5:64:09:19:97
Certificate issuer:       /CN=A913CE18/serialNumber=CF9A3F316483A2A794411D59146F9FC564091997
Certificate serial:       AF
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913CE18/B3752AB2C68211F0B76E1746C4F9AE02/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.mft
Manifest number:          AC
Signing time:             Mon 19 Oct 2026 07:49:44 +0000
Manifest this update:     Mon 19 Oct 2026 07:49:43 +0000
Manifest next update:     Mon 26 Oct 2026 07:49:43 +0000
Files and hashes:         1: z5o_MWSDoqeUQR1ZFG-fxWQJGZc.crl (hash: yf9ccWjBJ9CEGtRgC6cXbgbWpB4Pzzo9U1xK/mvG3Tk=)
                          2: 66FA3E10C68311F0A13F9748C4F9AE02.roa (hash: buWGojGruD0EkezOya613tzB5yRXr1J4Cny+XbPZUqs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913CE18/B3752AB2C68211F0B76E1746C4F9AE02/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.crl
                          rsync://rpki.apnic.net/member_repository/A913CE18/B3752AB2C68211F0B76E1746C4F9AE02/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Oct 2026 07:49:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 175 (0xaf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913CE18, serialNumber=CF9A3F316483A2A794411D59146F9FC564091997
        Validity
            Not Before: Oct 19 07:49:43 2026 GMT
            Not After : Oct 26 07:49:43 2026 GMT
        Subject: CN=6ad5cb97-51ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:dd:97:84:ba:5a:de:dc:76:b6:85:73:bc:3b:
                    31:34:0d:7f:f9:18:95:ff:69:08:94:fb:40:f4:cb:
                    61:0d:d9:6f:ba:ad:0e:10:87:f4:bc:cc:eb:88:f0:
                    99:1e:cd:8e:81:73:ed:c7:3a:6a:21:88:00:13:37:
                    72:1a:ab:48:8c:b9:b5:f5:3a:d0:86:93:3f:19:a5:
                    27:09:99:e4:4f:24:10:a2:bf:ad:6e:35:73:b0:13:
                    31:ec:6a:e0:9d:70:8d:7b:ae:01:b4:11:ee:35:ca:
                    a1:53:dc:21:59:be:08:77:ae:40:b8:cd:57:5e:53:
                    cc:84:15:2f:04:f4:b3:4b:91:f4:aa:b4:95:b1:36:
                    f9:d9:f3:0b:b5:5a:b9:ab:3d:2f:1c:d3:e5:39:8b:
                    ba:a4:47:ca:25:54:b8:94:85:0f:15:e6:58:68:fd:
                    c0:c9:ce:cd:44:34:ac:66:bf:28:db:38:52:a7:38:
                    23:85:1a:fe:fd:56:6c:47:e7:e5:b9:78:1d:00:03:
                    18:cf:af:e2:ac:c8:dd:ff:75:10:c6:d4:89:11:85:
                    c5:27:a7:6f:6c:35:49:22:ca:1a:4c:98:4a:57:f7:
                    12:1b:ca:41:c1:fe:30:85:f2:f0:dd:ed:01:55:29:
                    ec:a6:c0:96:b2:ed:9b:96:0a:06:d0:c3:ef:2a:62:
                    18:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:BC:7A:6D:6E:25:4F:43:8E:2C:13:2F:58:D1:88:CF:A5:90:5B:AA
            X509v3 Authority Key Identifier:
                keyid:CF:9A:3F:31:64:83:A2:A7:94:41:1D:59:14:6F:9F:C5:64:09:19:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913CE18/B3752AB2C68211F0B76E1746C4F9AE02/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CE18/B3752AB2C68211F0B76E1746C4F9AE02/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:fc:68:e8:93:51:8a:8e:5c:b5:51:0d:4b:2e:e3:3d:db:02:
         02:06:37:b9:49:15:89:53:b5:79:a6:a9:b6:09:3f:d3:11:39:
         8e:07:be:e7:05:b6:e8:67:df:f6:14:0b:0c:7e:0f:a6:ea:fa:
         2e:2d:2f:c8:cb:04:c7:b1:23:73:fd:05:fe:ee:1a:8f:02:d8:
         48:32:3e:1b:73:83:20:df:81:91:8d:4c:7f:e7:79:1b:98:98:
         d3:fd:29:68:3c:70:4d:0e:4f:70:b0:26:b1:3d:89:49:78:67:
         35:5b:d0:db:d0:26:a9:bd:a3:47:4b:68:47:6a:50:b6:1c:f2:
         3b:c9:67:88:12:5b:bb:61:ba:10:99:f5:4e:6e:ea:a8:42:d3:
         a6:e7:6b:07:ad:4e:26:6b:f9:65:55:ea:b7:fd:0c:56:ec:d6:
         b7:6a:be:1f:15:26:99:af:45:0b:0f:45:d3:f2:7a:67:b3:c6:
         b0:3c:67:88:2a:c4:64:a2:1b:4b:3c:d6:26:4c:b9:0a:7d:77:
         bc:17:6e:4d:d6:15:3a:27:55:55:c4:f5:d9:69:f1:30:8f:e5:
         8e:11:1f:62:0f:8f:c3:61:dd:4f:53:db:c7:53:82:f7:6b:cd:
         61:a9:ba:86:a0:27:36:de:f1:f7:0a:c1:7c:62:bd:fb:21:2f:
         5b:14:ce:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 06:51:25 2026 by rpki-client