Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/zQysDn6E4-geSHYXTiwhQIUJQmk.mft
File:                     zQysDn6E4-geSHYXTiwhQIUJQmk.mft (raw, json)
Hash identifier:          GxjdNVbs08kLKyTpotDywzad+GA4kW9ZobOl3VXw+nU=
Subject key identifier:   F3:87:3D:B7:05:DD:42:01:08:37:07:9B:99:68:73:E7:56:BB:C5:E2
Authority key identifier: CD:0C:AC:0E:7E:84:E3:E8:1E:48:76:17:4E:2C:21:40:85:09:42:69
Certificate issuer:       /CN=A914D249/serialNumber=CD0CAC0E7E84E3E81E4876174E2C214085094269
Certificate serial:       040A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zQysDn6E4-geSHYXTiwhQIUJQmk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/zQysDn6E4-geSHYXTiwhQIUJQmk.mft
Manifest number:          03FF
Signing time:             Wed 07 Oct 2026 00:35:19 +0000
Manifest this update:     Wed 07 Oct 2026 00:35:19 +0000
Manifest next update:     Wed 14 Oct 2026 00:35:19 +0000
Files and hashes:         1: zQysDn6E4-geSHYXTiwhQIUJQmk.crl (hash: ssK+/yFaxADjZAXf39i8r7nH/bUbE+k2MfnoXOJe2HM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/zQysDn6E4-geSHYXTiwhQIUJQmk.crl
                          rsync://rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/zQysDn6E4-geSHYXTiwhQIUJQmk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zQysDn6E4-geSHYXTiwhQIUJQmk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 00:35:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1034 (0x40a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914D249, serialNumber=CD0CAC0E7E84E3E81E4876174E2C214085094269
        Validity
            Not Before: Oct  7 00:35:19 2026 GMT
            Not After : Oct 14 00:35:19 2026 GMT
        Subject: CN=6ac593c7-5332
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:78:51:c0:d2:83:02:af:12:6e:d9:5b:16:33:
                    8f:33:07:b8:19:9a:a3:fe:b5:47:bd:93:71:bc:76:
                    57:61:57:b2:89:52:a3:95:53:43:0e:7d:ef:1d:63:
                    a2:e4:a2:e6:aa:b4:ff:23:c6:7c:7b:58:f9:ac:39:
                    42:34:ae:aa:46:65:28:8f:93:0d:90:c3:35:4c:3a:
                    f0:3c:cb:42:22:75:4f:44:c1:e3:f4:10:61:8e:1e:
                    b8:1d:8f:e7:43:58:33:6b:9c:d8:da:0d:75:ac:0b:
                    84:19:d1:22:70:37:42:d1:e5:15:c3:a4:04:23:67:
                    e7:fa:31:f6:ae:ee:1f:90:ed:3e:15:fe:03:6a:ba:
                    01:6b:4f:9d:7d:23:60:03:dd:96:dc:03:59:b7:a2:
                    dc:ff:58:72:c3:07:a4:5f:3b:e7:fb:f3:e3:f8:f0:
                    24:4f:08:4c:c8:7f:42:d7:3e:0e:a1:31:36:4f:14:
                    cf:3f:aa:e3:ff:19:c3:c1:28:84:60:f1:c5:b5:85:
                    db:5c:e2:29:ec:00:3c:ee:cf:54:08:e0:9a:b0:d1:
                    6d:d8:b8:4f:5c:5f:e9:54:50:63:3d:d3:1d:64:d3:
                    ba:7a:d8:e8:9e:af:6b:0a:a2:69:45:88:19:71:07:
                    dc:bd:78:67:32:68:47:eb:82:ab:79:ed:4c:a2:b9:
                    75:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:87:3D:B7:05:DD:42:01:08:37:07:9B:99:68:73:E7:56:BB:C5:E2
            X509v3 Authority Key Identifier:
                keyid:CD:0C:AC:0E:7E:84:E3:E8:1E:48:76:17:4E:2C:21:40:85:09:42:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/zQysDn6E4-geSHYXTiwhQIUJQmk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zQysDn6E4-geSHYXTiwhQIUJQmk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/zQysDn6E4-geSHYXTiwhQIUJQmk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:2a:d4:2a:ae:d4:85:23:c2:61:73:d4:3f:75:45:2f:d9:09:
         12:0f:7e:5a:6c:b7:75:cf:d2:ea:bb:94:c1:05:95:3b:73:8d:
         9a:2f:6f:ab:10:1a:3e:6e:df:49:1f:b3:a1:b4:a6:de:49:da:
         dd:f2:5a:e9:c7:fd:e8:79:9e:70:cb:6a:b6:ea:93:0d:dd:02:
         32:4f:a3:65:b0:65:2b:43:ce:ba:70:99:51:71:5a:f1:dd:90:
         8e:61:bb:d4:85:dd:ec:06:3a:05:b4:81:98:31:f0:61:c4:b9:
         93:43:a8:01:1f:be:a3:dd:6d:42:01:43:6b:3b:41:e4:c6:b0:
         b4:00:e3:46:33:de:aa:5b:2c:95:bd:92:d4:ee:05:8b:96:8e:
         3a:dc:df:10:ec:ac:b9:a6:3e:00:77:8a:6e:5b:b5:96:3c:9e:
         1d:9b:ab:ce:08:b2:dc:ff:11:8d:d7:1b:42:35:04:50:5d:ec:
         84:ad:89:0a:e7:0d:4b:94:63:11:1f:c4:cc:be:1d:db:d1:c5:
         be:45:03:27:77:de:fe:a0:88:4a:c3:4c:c8:22:9f:c8:67:a0:
         7f:0f:a7:59:c9:db:56:22:03:74:c7:7b:44:89:6f:24:fa:76:
         bb:b5:74:0a:ac:22:5d:21:72:1d:12:43:22:e8:87:8f:07:4f:
         3f:b2:10:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 19:56:33 2026 by rpki-client