Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.mft
File:                     zUt2FunCVC_hBdTxTq4yFljUSzs.mft (raw, json)
Hash identifier:          nSy79YQKmQ9WowrWhCNnDPiXDzjlfS8yK3c4TDf6YTA=
Subject key identifier:   74:CE:FA:40:AF:DD:9B:3D:F3:9D:90:B2:FD:DE:0C:DB:27:25:96:A4
Authority key identifier: CD:4B:76:16:E9:C2:54:2F:E1:05:D4:F1:4E:AE:32:16:58:D4:4B:3B
Certificate issuer:       /CN=A9141974/serialNumber=CD4B7616E9C2542FE105D4F14EAE321658D44B3B
Certificate serial:       0DB6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUt2FunCVC_hBdTxTq4yFljUSzs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.mft
Manifest number:          0DAC
Signing time:             Tue 06 Oct 2026 17:59:19 +0000
Manifest this update:     Tue 06 Oct 2026 17:59:19 +0000
Manifest next update:     Tue 13 Oct 2026 17:59:19 +0000
Files and hashes:         1: zUt2FunCVC_hBdTxTq4yFljUSzs.crl (hash: lVz2rQlmf0Q3KWsRZ3MiSXKNAomDearMB/q+d7Q3Z7Q=)
                          2: DD53E3B8F0B511E98108C962C4F9AE02.roa (hash: s9hmyoej1nfUvRlTuEd/SsO1eziWbeBk+9upM7WYKEI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.crl
                          rsync://rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUt2FunCVC_hBdTxTq4yFljUSzs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 17:59:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3510 (0xdb6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9141974, serialNumber=CD4B7616E9C2542FE105D4F14EAE321658D44B3B
        Validity
            Not Before: Oct  6 17:59:19 2026 GMT
            Not After : Oct 13 17:59:19 2026 GMT
        Subject: CN=6ac536f7-ea37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:2c:93:6e:74:26:f2:a5:d9:7e:d4:d1:96:db:
                    b0:b4:0c:56:90:f1:8a:73:c1:14:56:69:b7:1b:b8:
                    20:4f:ed:3d:3d:7b:cd:f0:73:5e:62:c4:a1:c7:50:
                    cb:c6:77:07:13:0b:19:ea:b4:83:84:20:83:37:18:
                    25:66:0f:84:0c:49:90:16:b1:8d:9a:42:da:27:f9:
                    8d:7f:c5:5d:64:52:14:ec:34:74:63:a3:c3:88:09:
                    67:75:6e:d0:2c:b7:6c:46:59:41:d7:71:8a:2a:bc:
                    b8:4f:c0:dd:1a:77:68:56:2e:dc:4c:72:64:36:c7:
                    c3:15:fb:7b:06:83:3d:0f:a6:cd:22:0f:80:ae:a4:
                    eb:e6:c0:98:cc:b1:42:0f:12:12:2c:a7:8a:2c:0f:
                    48:74:b7:f1:6a:07:df:62:88:aa:66:58:57:35:b7:
                    f0:d7:a3:fc:e0:8b:06:57:80:89:20:6b:e9:19:48:
                    15:f1:65:3a:c4:3d:db:42:fb:16:36:08:0f:de:d8:
                    27:dc:af:68:d2:ca:b0:6f:e0:a6:b7:34:3a:6d:91:
                    90:0a:12:71:08:cb:24:c9:c9:64:0a:7b:81:ba:fd:
                    97:b9:87:15:38:81:0e:35:02:d5:0d:a9:f6:8d:64:
                    31:d4:19:32:ba:8b:cc:17:d8:c9:58:40:c8:8d:dc:
                    cf:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:CE:FA:40:AF:DD:9B:3D:F3:9D:90:B2:FD:DE:0C:DB:27:25:96:A4
            X509v3 Authority Key Identifier:
                keyid:CD:4B:76:16:E9:C2:54:2F:E1:05:D4:F1:4E:AE:32:16:58:D4:4B:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUt2FunCVC_hBdTxTq4yFljUSzs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:81:2e:d4:03:ae:4c:28:c7:32:8a:26:dc:c2:bf:ee:fa:2f:
         69:c8:26:61:c2:ac:20:5a:73:98:c6:c7:3f:32:ed:ca:a1:22:
         c2:f4:1e:34:fb:a1:c5:97:23:ed:41:ad:5a:20:34:42:be:f3:
         86:3d:63:d6:27:e4:42:dc:2e:e6:a1:1e:7f:a8:ad:66:92:81:
         ef:d3:e4:3a:fa:06:9a:43:40:a1:2d:7f:a9:8b:75:49:04:e7:
         0d:66:5d:d1:43:05:b0:57:65:6a:16:8f:2e:fb:a4:34:9d:20:
         45:56:28:3c:f7:ef:2a:fc:a3:83:75:3d:9e:1d:ee:1b:59:84:
         5d:a2:e9:e0:5d:71:ea:5c:86:6a:84:92:fc:78:15:f7:b5:31:
         86:71:a7:88:b7:35:bf:16:1c:62:a0:76:c4:9c:e3:a9:2c:6b:
         aa:74:32:99:ae:4e:ed:39:81:34:25:d3:7a:a6:ae:2f:13:f2:
         62:de:14:28:b5:20:e8:90:8d:25:cd:6f:65:e4:f0:ad:01:af:
         3c:09:69:7c:e4:3f:6d:79:a3:6d:99:71:3e:0e:a4:01:13:93:
         27:db:62:e1:51:f8:9e:2a:30:b1:90:90:e9:00:70:30:1e:6b:
         a0:9b:d4:78:6d:7a:70:ab:fb:fd:e3:e0:d6:ce:61:51:ec:5c:
         4c:a9:34:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 06:19:49 2026 by rpki-client