Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.mft
File:                     Z7qlic6898PyfVPZjqxMEEzAkTU.mft (raw, json)
Hash identifier:          16i8boDN3dCk4x68Pkl6JLwajrXVuxKWijfdCLqdXZw=
Subject key identifier:   F9:70:FF:34:A0:7E:00:84:FC:A7:0F:27:23:53:5F:65:31:73:B2:5D
Authority key identifier: 67:BA:A5:89:CE:BC:F7:C3:F2:7D:53:D9:8E:AC:4C:10:4C:C0:91:35
Certificate issuer:       /CN=A9152E29/serialNumber=67BAA589CEBCF7C3F27D53D98EAC4C104CC09135
Certificate serial:       0D59
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z7qlic6898PyfVPZjqxMEEzAkTU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.mft
Manifest number:          0D4F
Signing time:             Mon 26 Oct 2026 18:07:20 +0000
Manifest this update:     Mon 26 Oct 2026 18:07:20 +0000
Manifest next update:     Mon 02 Nov 2026 18:07:20 +0000
Files and hashes:         1: Z7qlic6898PyfVPZjqxMEEzAkTU.crl (hash: iocgCZ9kzHl75g/thIUOjAqs272n7vqGrf3jMYpx3Eg=)
                          2: 94EA7370050111EA9BDD372BC4F9AE02.roa (hash: mMRUREtvZnIxIVtQ29KyF/I8MzGp8zE5JILwSK9RsUg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.crl
                          rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z7qlic6898PyfVPZjqxMEEzAkTU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Nov 2026 18:07:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3417 (0xd59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9152E29, serialNumber=67BAA589CEBCF7C3F27D53D98EAC4C104CC09135
        Validity
            Not Before: Oct 26 18:07:20 2026 GMT
            Not After : Nov  2 18:07:20 2026 GMT
        Subject: CN=6adf96d8-7899
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:48:e3:34:9c:43:48:a0:c3:4d:30:f2:b2:99:
                    71:47:b6:dd:2a:3d:14:4c:91:1b:87:8c:03:f9:71:
                    ca:6a:44:71:37:16:ba:f1:e1:62:52:07:63:aa:f6:
                    d5:68:f8:8a:70:3d:9d:18:10:68:16:d3:51:16:bc:
                    b8:52:cf:e5:1d:7a:00:1f:cf:a8:a5:1c:6c:29:a0:
                    3e:cd:61:72:1a:1d:dd:78:28:73:ae:c1:ef:10:21:
                    a8:fd:3f:ec:40:b6:5c:f0:a7:8d:cc:ef:61:e0:26:
                    fb:0b:d4:dc:4e:51:23:46:a3:91:ce:ea:33:18:a4:
                    0c:fd:41:13:99:84:15:24:46:4e:9a:a1:a9:16:0b:
                    2a:94:cc:e7:b5:ca:09:87:af:66:1c:72:0e:0c:cf:
                    0c:91:66:08:64:c5:cf:31:1f:8d:b0:7b:b7:83:0b:
                    d1:d2:b2:ef:1f:db:d1:49:60:b3:4c:0c:79:b8:1a:
                    6c:7c:21:b9:67:8b:94:7d:43:c2:4a:a8:95:59:64:
                    61:c5:c1:4c:ec:72:5b:74:b1:ce:ef:6d:fe:9d:c3:
                    19:d5:6a:fe:2d:ee:d3:59:68:d3:ec:78:b1:e8:92:
                    a6:85:73:01:92:5c:c8:91:b6:0a:b4:26:a2:bb:5a:
                    18:6d:bf:e0:ec:b6:7f:8f:ce:ee:ec:ac:b1:71:6c:
                    f7:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:70:FF:34:A0:7E:00:84:FC:A7:0F:27:23:53:5F:65:31:73:B2:5D
            X509v3 Authority Key Identifier:
                keyid:67:BA:A5:89:CE:BC:F7:C3:F2:7D:53:D9:8E:AC:4C:10:4C:C0:91:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z7qlic6898PyfVPZjqxMEEzAkTU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:74:22:85:12:1e:82:11:39:3c:9b:f7:18:df:50:8a:81:31:
         68:e7:72:25:d6:02:4b:fa:16:22:be:3e:27:7b:e4:88:c9:8a:
         3c:b4:47:d6:5a:e8:21:93:d1:d2:8d:6f:5c:07:df:1d:6d:a9:
         02:fb:4d:e5:11:62:16:b0:f3:4d:cf:32:0f:79:aa:b1:04:83:
         5a:a8:c1:36:39:70:f2:63:a1:32:24:9d:3c:9d:13:16:f5:ee:
         2d:d6:55:36:1a:14:2f:8d:9f:7c:df:e0:f6:d8:84:d0:af:c3:
         17:0d:2c:34:98:c1:86:ca:7d:5e:80:8a:c0:6c:68:a3:43:57:
         18:11:7c:dc:eb:57:8b:93:8e:75:02:99:8f:20:e2:57:8b:f1:
         38:ee:93:59:e3:2c:a7:26:b2:55:dc:47:8d:25:19:bd:cc:eb:
         b3:49:93:1e:04:f4:9c:b2:54:3c:f5:51:b3:94:27:13:f7:c3:
         a1:ca:67:62:c8:ab:cd:15:40:0b:30:6d:18:fc:ad:b2:f2:51:
         76:c8:54:5b:9f:65:e7:d7:8d:94:a7:15:65:38:67:b7:d4:d0:
         b7:5e:c2:71:35:cb:d2:f8:96:fd:bc:ae:73:53:c6:1b:67:e1:
         e4:77:e3:07:d6:7b:e5:4a:b1:09:f9:f5:7c:39:b8:45:fc:d2:
         ec:fe:3a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 06:14:22 2026 by rpki-client