Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.mft
File:                     ztCtuZ-AP0QfUNzLg87nIHbcMog.mft (raw, json)
Hash identifier:          lsHKTQRUfUCpx0wOD5DAxz+rQYu27CK6Fr5pHRwQ0tw=
Subject key identifier:   25:32:C3:E0:06:4F:24:65:C9:1C:5B:43:BF:A9:67:9A:91:B3:A5:B9
Authority key identifier: CE:D0:AD:B9:9F:80:3F:44:1F:50:DC:CB:83:CE:E7:20:76:DC:32:88
Certificate issuer:       /CN=A9158D5B/serialNumber=CED0ADB99F803F441F50DCCB83CEE72076DC3288
Certificate serial:       01B1
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ztCtuZ-AP0QfUNzLg87nIHbcMog.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.mft
Manifest number:          01AB
Signing time:             Mon 19 Oct 2026 04:46:53 +0000
Manifest this update:     Mon 19 Oct 2026 04:46:52 +0000
Manifest next update:     Mon 26 Oct 2026 04:46:52 +0000
Files and hashes:         1: ztCtuZ-AP0QfUNzLg87nIHbcMog.crl (hash: rT2xYPHP9RYfy4E4Lrsr2HaumNxrlYYUxwpRTrCwMa8=)
                          2: 1B2031C645B911EFB15BD970C4F9AE02.roa (hash: dXWvzmI36/WnRSGkqNG90+TZgLmjYERv4giBlG6EeOs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.crl
                          rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ztCtuZ-AP0QfUNzLg87nIHbcMog.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Oct 2026 04:46:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 433 (0x1b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9158D5B, serialNumber=CED0ADB99F803F441F50DCCB83CEE72076DC3288
        Validity
            Not Before: Oct 19 04:46:52 2026 GMT
            Not After : Oct 26 04:46:52 2026 GMT
        Subject: CN=6ad5a0bd-8e57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:38:5e:0c:52:ba:38:c0:83:df:f6:64:e8:25:
                    f9:4e:42:d8:a8:15:d0:c2:e6:58:e1:9f:18:c0:ec:
                    cc:41:cc:96:21:86:ac:b0:e8:a9:48:94:f7:3c:37:
                    82:32:dd:24:9b:5e:7a:2c:b1:cc:04:1c:be:11:36:
                    9e:d8:4e:f2:0d:2b:d0:49:ff:b5:f3:60:f9:64:3d:
                    1a:f0:af:43:bf:f0:71:38:13:f6:d3:65:f1:5e:ac:
                    c0:70:6c:dc:7b:60:3a:d8:10:cd:53:65:57:6b:2d:
                    a4:5f:32:23:8a:61:41:fc:11:c2:51:9c:75:63:68:
                    1d:96:dd:75:c2:2d:b7:c8:52:47:88:46:c7:46:9a:
                    60:22:9c:df:8e:61:33:f1:74:ec:76:6d:ae:ef:cb:
                    53:34:6b:88:2c:b8:64:40:f8:7f:43:48:41:5d:60:
                    d9:1c:26:35:e0:2d:17:f7:eb:eb:aa:5a:74:59:ac:
                    c4:04:a0:eb:cf:64:35:75:01:ce:70:aa:cc:cc:2e:
                    38:15:6c:e6:9a:53:61:de:5d:6d:c4:9a:d7:81:af:
                    02:4e:2d:91:b7:a9:a7:f7:7b:ef:b2:bc:38:3a:94:
                    85:7b:ce:8b:93:97:02:2b:76:1d:aa:2b:40:1b:dc:
                    71:03:c8:78:1d:c7:5d:bc:da:b6:80:e0:68:c8:09:
                    51:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:32:C3:E0:06:4F:24:65:C9:1C:5B:43:BF:A9:67:9A:91:B3:A5:B9
            X509v3 Authority Key Identifier:
                keyid:CE:D0:AD:B9:9F:80:3F:44:1F:50:DC:CB:83:CE:E7:20:76:DC:32:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ztCtuZ-AP0QfUNzLg87nIHbcMog.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:9f:1f:6d:00:b4:82:5e:d6:2a:bf:00:92:ba:76:88:2d:36:
         6c:44:83:9e:e0:54:55:1d:52:0f:f3:05:6e:f5:fd:d4:89:cc:
         49:7c:36:aa:5e:63:55:55:2c:c3:03:2b:6e:01:a4:f9:05:48:
         9b:69:1e:c0:19:45:df:36:c6:5d:90:5d:d1:1f:11:ae:51:bc:
         ac:d3:ad:07:79:bc:05:60:bf:6d:a5:48:f2:14:d7:3e:5a:6a:
         df:d3:75:bf:7f:08:00:85:bb:f0:dd:6f:f4:91:5f:62:1d:96:
         7a:18:e7:e1:e1:d8:cb:07:5d:95:81:bc:ef:28:4c:c2:1d:37:
         e5:3a:c4:2e:34:3c:ad:2e:fd:94:34:74:ce:90:00:27:6f:7e:
         d3:9b:f3:68:04:a5:e2:33:b5:3d:1a:86:37:42:49:e3:60:32:
         dd:14:ad:c2:3b:f1:48:31:12:93:8a:48:55:a5:c8:c2:a0:77:
         68:60:be:b4:8f:2d:76:95:68:a6:7d:e3:e9:6e:85:f8:60:0d:
         39:0e:b6:0e:8a:60:d5:3a:b5:44:d6:ed:92:db:8f:d3:6c:97:
         b8:fb:0c:e7:67:be:98:1d:e8:30:31:6a:33:81:39:86:b1:42:
         b8:82:d1:c4:e1:58:e6:de:e3:bd:7a:5b:dc:fd:70:7d:6a:35:
         91:dc:8a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 02:41:58 2026 by rpki-client