Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913EECE/612E3FB249E211F1BB80C78FB0833773/ZVgfndzt1kYkkalmT_KWJlal-FQ.mft
File:                     ZVgfndzt1kYkkalmT_KWJlal-FQ.mft (raw, json)
Hash identifier:          ZmJ02d1qZMF+Ax/lsJRhRdxucxS7lehMzueo0Ow7YrA=
Subject key identifier:   62:30:70:BA:E1:78:07:79:DD:C7:1A:0F:52:9A:87:5E:58:2A:C6:47
Authority key identifier: 65:58:1F:9D:DC:ED:D6:46:24:91:A9:66:4F:F2:96:26:56:A5:F8:54
Certificate issuer:       /CN=A913EECE/serialNumber=65581F9DDCEDD6462491A9664FF2962656A5F854
Certificate serial:       5D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVgfndzt1kYkkalmT_KWJlal-FQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913EECE/612E3FB249E211F1BB80C78FB0833773/ZVgfndzt1kYkkalmT_KWJlal-FQ.mft
Manifest number:          5A
Signing time:             Tue 27 Oct 2026 08:29:05 +0000
Manifest this update:     Tue 27 Oct 2026 08:29:05 +0000
Manifest next update:     Tue 03 Nov 2026 08:29:05 +0000
Files and hashes:         1: ZVgfndzt1kYkkalmT_KWJlal-FQ.crl (hash: 637hYgzIRjCb+A41h8o7WIpGhWwmvLkEMA+vBp6zPR8=)
                          2: y_gp4LNOTzJ7X2SOJLw8ypIAsDo.asa (hash: S9Bc8mXLb9sh0aNUGQrKudMwGjEjDbETo3LwaIAst0c=)
                          3: 4D03668449E711F1BCBB7A79B5833773.roa (hash: LGCooesPA4j4gXzOKKJURalYXy31FTNPJfPPUMRN1nE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913EECE/612E3FB249E211F1BB80C78FB0833773/ZVgfndzt1kYkkalmT_KWJlal-FQ.crl
                          rsync://rpki.apnic.net/member_repository/A913EECE/612E3FB249E211F1BB80C78FB0833773/ZVgfndzt1kYkkalmT_KWJlal-FQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVgfndzt1kYkkalmT_KWJlal-FQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Nov 2026 08:29:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 93 (0x5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913EECE, serialNumber=65581F9DDCEDD6462491A9664FF2962656A5F854
        Validity
            Not Before: Oct 27 08:29:05 2026 GMT
            Not After : Nov  3 08:29:05 2026 GMT
        Subject: CN=6ae060d1-88b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:5e:3d:10:64:ac:e3:76:f2:6c:8a:6c:3d:1e:
                    ad:3e:ce:0e:0c:20:d5:a1:34:b8:d9:44:62:f7:80:
                    f0:5b:a2:8f:9e:e9:50:b4:f5:a0:33:24:f9:83:5f:
                    b9:c2:4c:8f:78:65:40:f5:81:23:54:2e:45:9f:23:
                    6c:e2:a3:ff:50:67:16:d6:fb:05:eb:2c:02:28:a9:
                    04:e9:c6:13:0d:d8:2b:61:a9:88:f7:90:6c:ff:fb:
                    04:d2:f2:21:e0:cc:ef:b0:29:5a:bc:31:90:a2:85:
                    a1:a1:67:cd:49:01:7a:cb:60:ab:08:7e:45:78:bc:
                    1c:5d:07:9c:f2:a5:cd:37:8f:04:7a:da:ec:75:4a:
                    89:0b:a1:34:ca:2a:42:2b:aa:d0:25:0f:50:ef:44:
                    2f:18:03:a9:44:23:e1:29:81:76:a9:0b:b5:27:76:
                    47:14:73:8d:6b:a0:42:48:69:c6:7d:ab:dd:32:ec:
                    a4:90:8a:7b:ae:97:92:61:37:3c:53:8f:f5:94:cd:
                    79:b6:53:7f:24:9d:ce:ff:cb:73:0a:15:89:eb:42:
                    8a:4a:9c:cf:2d:fb:d9:a1:e9:f9:7d:44:33:0f:67:
                    ca:c6:20:a0:53:5c:73:db:62:a2:bc:1b:ea:bd:98:
                    5f:7e:54:a8:84:84:78:0d:bb:43:a5:a2:a1:66:8a:
                    94:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:30:70:BA:E1:78:07:79:DD:C7:1A:0F:52:9A:87:5E:58:2A:C6:47
            X509v3 Authority Key Identifier:
                keyid:65:58:1F:9D:DC:ED:D6:46:24:91:A9:66:4F:F2:96:26:56:A5:F8:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913EECE/612E3FB249E211F1BB80C78FB0833773/ZVgfndzt1kYkkalmT_KWJlal-FQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVgfndzt1kYkkalmT_KWJlal-FQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EECE/612E3FB249E211F1BB80C78FB0833773/ZVgfndzt1kYkkalmT_KWJlal-FQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:58:74:7e:e3:ed:29:c2:78:a3:d4:29:6a:1b:b1:ad:5d:3f:
         12:89:aa:36:6b:08:ab:28:9c:29:b3:e4:9c:a7:8a:81:b4:5d:
         ba:e3:6e:73:82:b3:a9:90:c7:e3:10:d6:b3:9f:02:c0:e9:9a:
         45:93:f5:6c:a2:ed:3c:bc:e4:cd:b2:92:f3:67:e7:95:f7:37:
         3f:59:95:d5:b6:dd:5f:cb:b0:f1:31:93:5d:8c:e3:b4:cc:ad:
         d4:7f:21:ff:91:a1:b5:a5:81:ea:c5:aa:fa:48:a1:a0:9f:61:
         d7:18:d1:5b:9c:cf:74:8a:44:c2:1c:91:69:0c:ff:58:85:18:
         9e:aa:fc:6d:b5:3e:75:3c:e1:de:64:02:ca:85:ed:b9:16:56:
         b3:bb:70:37:89:0d:c5:39:fa:17:37:c7:57:6e:6a:21:d8:e0:
         67:6d:56:9c:7f:75:76:31:16:b9:f8:c8:12:40:65:11:5b:00:
         13:98:cc:6b:04:0e:18:b7:d7:7b:30:7d:42:68:b1:fa:3d:ba:
         9c:db:34:3b:3c:c9:d8:82:15:56:87:a2:2b:23:3c:bb:b8:df:
         37:f9:7f:9f:d8:13:47:35:ba:05:29:a0:b3:09:e9:99:6d:a3:
         a0:88:64:00:f2:e1:79:5b:1a:97:e5:43:36:6a:af:c2:48:f9:
         cb:42:6c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:19:40 2026 by rpki-client