Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft
File:                     ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft (raw, json)
Hash identifier:          gyodVncxhhGW4cskam0II/bMSLlBgkMdRUFckC943dw=
Subject key identifier:   F5:F0:8E:3D:81:BF:1B:48:DD:07:7C:9F:6E:22:60:EE:D6:EC:37:90
Authority key identifier: 64:F0:60:D8:A1:58:D1:24:44:CB:DA:EC:BE:E0:8C:EC:B8:82:D2:C9
Certificate issuer:       /CN=A9148456/serialNumber=64F060D8A158D12444CBDAECBEE08CECB882D2C9
Certificate serial:       0267
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPBg2KFY0SREy9rsvuCM7LiC0sk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft
Manifest number:          0258
Signing time:             Wed 07 Oct 2026 02:43:26 +0000
Manifest this update:     Wed 07 Oct 2026 02:43:26 +0000
Manifest next update:     Wed 14 Oct 2026 02:43:26 +0000
Files and hashes:         1: ZPBg2KFY0SREy9rsvuCM7LiC0sk.crl (hash: M4tNBJEQ6I8b0VsK/pY8PSrfhmbkozlxssMvUK6KAxY=)
                          2: BEB0BA5031D711EE8DF6CB20C4F9AE02.roa (hash: h+trzDuVn/VxJ7NUrcdT4bIR95bu+vkwOYNceyRvSr4=)
                          3: D459D92C31D711EEBE1BFD20C4F9AE02.roa (hash: PTrTgiDcbO2YvppMDaBYJ62Z5LbYQjQvQ/7KPileW8Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.crl
                          rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPBg2KFY0SREy9rsvuCM7LiC0sk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 02:43:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 615 (0x267)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148456, serialNumber=64F060D8A158D12444CBDAECBEE08CECB882D2C9
        Validity
            Not Before: Oct  7 02:43:26 2026 GMT
            Not After : Oct 14 02:43:26 2026 GMT
        Subject: CN=6ac5b1ce-349e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1a:25:70:1f:3d:64:3a:1f:e4:c6:d7:2e:c8:
                    d3:48:39:0c:4c:9c:28:1b:03:a2:91:1d:8b:20:aa:
                    15:4c:6d:51:47:4a:a1:4f:ef:43:7f:c9:6e:f1:36:
                    9c:71:58:64:a9:56:e9:4f:0f:10:ee:e0:2f:ac:ac:
                    de:6e:6d:51:7b:75:a0:5e:22:d5:aa:ae:de:f6:71:
                    e2:c5:a6:3e:6b:2c:ce:c7:0d:16:7a:b6:18:19:a9:
                    dc:a7:84:7d:7b:e3:3f:71:7d:bf:2c:fc:8d:83:90:
                    56:be:0c:88:07:1e:3d:95:70:5b:f5:94:33:4e:d2:
                    b6:0e:67:e0:63:68:30:f9:38:85:5f:2b:57:74:12:
                    59:85:89:1e:0d:f7:a5:f7:14:10:59:19:a7:23:07:
                    3d:5c:04:21:59:b6:73:18:49:6f:b9:e3:1a:d8:19:
                    80:0b:a0:d6:8c:1c:a2:79:9d:23:55:bb:f2:41:50:
                    eb:04:af:85:cf:b7:9e:7d:36:3e:3a:67:1e:d8:43:
                    a0:a1:14:bf:96:4b:41:4b:59:7f:c5:80:d5:7d:f1:
                    3f:de:e5:7d:5a:4a:ba:39:0f:cb:94:5c:ac:55:fb:
                    f5:8b:c9:c9:53:d6:6d:8c:10:a1:53:44:a2:b1:30:
                    ed:f1:66:c3:c1:ac:68:29:10:55:c0:1e:bb:76:a0:
                    73:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:F0:8E:3D:81:BF:1B:48:DD:07:7C:9F:6E:22:60:EE:D6:EC:37:90
            X509v3 Authority Key Identifier:
                keyid:64:F0:60:D8:A1:58:D1:24:44:CB:DA:EC:BE:E0:8C:EC:B8:82:D2:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPBg2KFY0SREy9rsvuCM7LiC0sk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:9e:55:aa:00:8d:b4:30:77:f4:d0:b5:1f:11:63:72:e7:08:
         ff:98:a4:ec:80:ca:8c:f1:35:2f:29:b6:fe:ef:d5:b3:84:98:
         33:98:ee:4d:e2:6b:c5:82:bf:66:e5:dd:0c:d5:36:38:82:26:
         67:98:ad:1c:db:bc:44:a8:13:40:43:20:5f:3d:b1:5b:dd:0b:
         a1:ba:ec:42:7f:85:c6:8a:de:07:e7:c5:f8:37:26:a5:48:05:
         63:cf:8a:2a:64:f5:d2:60:10:5c:40:ae:79:b4:e5:ec:3c:9e:
         57:ab:7c:12:dc:83:74:67:15:b6:22:22:76:f3:b8:95:a5:53:
         cc:32:dd:d5:6b:58:d6:21:c0:12:7c:74:03:d5:eb:13:8c:cc:
         b9:ee:0c:04:61:24:4f:f2:c2:7a:12:3d:bb:ed:f1:0d:fa:b7:
         0d:9f:3d:88:98:cd:cb:78:c2:8a:53:cf:e7:e2:9c:be:1e:a9:
         fc:f0:fa:db:f5:ce:87:de:97:fb:63:92:a8:af:1b:bd:38:15:
         3a:c9:4e:a2:4e:99:b7:f6:77:43:cf:52:df:e2:14:34:44:59:
         6a:64:8c:dc:fb:0e:d1:03:8d:24:f3:f4:de:53:26:5d:7c:96:
         03:2e:6d:3f:9c:d2:85:e5:a0:7f:48:a0:4c:34:90:ad:18:28:
         b2:b4:70:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 22:53:47 2026 by rpki-client