Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.mft
File:                     zmxG-AKxW4z0raNFqCiK1uf6U14.mft (raw, json)
Hash identifier:          2e/K+nvskHfZGV1xbtBMfLyeqwCeel7iY4fKT9H9OM4=
Subject key identifier:   3C:93:CC:AC:FF:45:58:13:71:04:11:A0:8E:C8:9D:E5:FB:4C:AF:71
Authority key identifier: CE:6C:46:F8:02:B1:5B:8C:F4:AD:A3:45:A8:28:8A:D6:E7:FA:53:5E
Certificate issuer:       /CN=A914400E/serialNumber=CE6C46F802B15B8CF4ADA345A8288AD6E7FA535E
Certificate serial:       01F5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zmxG-AKxW4z0raNFqCiK1uf6U14.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.mft
Manifest number:          01EE
Signing time:             Mon 19 Oct 2026 03:58:29 +0000
Manifest this update:     Mon 19 Oct 2026 03:58:28 +0000
Manifest next update:     Mon 26 Oct 2026 03:58:28 +0000
Files and hashes:         1: zmxG-AKxW4z0raNFqCiK1uf6U14.crl (hash: YtB+EZxa2MOJj1OFYuzv57yJjjcM+SOJ7IuYnTZ8L8g=)
                          2: 4687D3AAD94911EEB080041BC4F9AE02.roa (hash: mDopMfVTaRsFnm6rlLIEGyxqISgf4DxErZsfORfZaA0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.crl
                          rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zmxG-AKxW4z0raNFqCiK1uf6U14.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Oct 2026 03:58:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 501 (0x1f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914400E, serialNumber=CE6C46F802B15B8CF4ADA345A8288AD6E7FA535E
        Validity
            Not Before: Oct 19 03:58:28 2026 GMT
            Not After : Oct 26 03:58:28 2026 GMT
        Subject: CN=6ad59565-e250
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:0f:97:95:53:4a:bc:86:cd:87:d8:c9:34:cc:
                    9e:33:e9:f6:34:19:85:80:c8:61:1c:d6:b5:cb:e2:
                    be:ee:ab:7e:bc:0f:c8:9b:cf:da:2f:2f:b1:13:73:
                    52:a4:c2:cd:ab:71:3f:3b:c9:e8:b8:bb:8d:7c:2b:
                    3f:75:3a:f0:d0:f1:4f:56:94:0a:2b:c2:5f:4d:98:
                    15:5a:3e:54:ea:ca:4e:77:ef:09:ba:4e:7c:a6:5a:
                    fe:ff:c7:47:10:5d:07:d4:2d:f4:e7:05:b0:6c:dc:
                    48:a9:ef:48:5b:6a:e5:3d:61:5c:5d:6b:45:99:cc:
                    45:92:e8:9c:97:6c:ff:c8:cc:11:e9:0b:b2:3b:8c:
                    e7:f6:83:b0:12:fb:8e:26:c3:6b:c3:c6:0b:06:0b:
                    d3:7e:9f:17:f9:20:8e:2e:bc:5f:fe:84:97:5a:65:
                    20:ef:52:6c:d8:57:7c:a8:b7:38:bc:8a:88:7f:6c:
                    15:6f:86:6e:e1:b2:69:cd:6c:2f:8e:72:12:28:a8:
                    49:fb:1a:58:93:89:78:54:c4:2e:b0:a6:86:88:c9:
                    4c:c4:26:64:73:72:84:72:61:12:ca:3c:e2:fa:98:
                    3e:70:fe:57:4f:01:d3:16:61:fd:37:c9:87:82:34:
                    34:a6:57:45:47:f2:ac:ee:45:7e:fc:b3:f8:1a:7b:
                    3e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:93:CC:AC:FF:45:58:13:71:04:11:A0:8E:C8:9D:E5:FB:4C:AF:71
            X509v3 Authority Key Identifier:
                keyid:CE:6C:46:F8:02:B1:5B:8C:F4:AD:A3:45:A8:28:8A:D6:E7:FA:53:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zmxG-AKxW4z0raNFqCiK1uf6U14.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:c2:28:41:af:52:51:bd:c0:01:1a:1c:53:7f:ee:d7:a7:eb:
         57:57:a9:72:16:c8:2c:87:1c:d2:1c:a2:9a:7d:83:70:a7:03:
         cb:9e:8a:37:91:5f:a9:a6:bb:7b:14:cc:1a:7e:f1:6e:5d:6e:
         3f:62:9d:4e:2f:58:2c:cd:07:6f:54:45:5f:7c:f0:f2:ec:b6:
         f1:02:b0:54:92:1f:bf:c8:91:f2:05:4a:8c:cd:ff:d0:7a:5f:
         b4:22:f9:32:3b:5c:ff:f1:a5:2b:ed:99:dd:a6:5a:14:a3:fd:
         98:9c:98:06:b3:e6:b6:68:9b:3e:af:a5:45:2f:db:b7:e8:64:
         3d:56:b8:02:59:c1:0f:2b:94:5d:64:93:76:4b:a9:ae:78:cc:
         0b:16:3f:90:3e:99:0e:dc:c5:32:ab:db:31:6a:9b:1c:e9:ee:
         bc:55:16:f7:03:7d:19:44:b5:b3:ff:51:87:a4:e1:0b:c6:db:
         b7:f9:19:67:99:90:97:03:fd:c1:5c:1a:8f:0d:4c:f3:51:df:
         09:a3:87:62:28:21:f5:1f:d1:32:1e:b9:5e:53:0a:5a:5e:e0:
         4a:9d:38:48:3c:a2:82:ea:72:1b:c4:1c:2b:61:26:ad:60:f5:
         7c:2e:57:13:4b:a1:32:34:f7:f7:3b:4e:ff:6a:de:75:c7:ec:
         5a:cc:c3:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 03:16:54 2026 by rpki-client