Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91629F2/E183CEC44C0411F18A6F8D79A1833773/PzD_G7sm8QLtikdaS_vJQqHfMoo.mft
File:                     PzD_G7sm8QLtikdaS_vJQqHfMoo.mft (raw, json)
Hash identifier:          G+b0lcALMcKy29SkL4BSzmRGdsiNUTogWTojjXbPPwI=
Subject key identifier:   0F:7E:58:5B:E6:E0:63:1B:A0:96:B1:83:50:E4:1E:B2:97:4F:13:58
Authority key identifier: 3F:30:FF:1B:BB:26:F1:02:ED:8A:47:5A:4B:FB:C9:42:A1:DF:32:8A
Certificate issuer:       /CN=A91629F2/serialNumber=3F30FF1BBB26F102ED8A475A4BFBC942A1DF328A
Certificate serial:       4C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PzD_G7sm8QLtikdaS_vJQqHfMoo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91629F2/E183CEC44C0411F18A6F8D79A1833773/PzD_G7sm8QLtikdaS_vJQqHfMoo.mft
Manifest number:          4B
Signing time:             Thu 01 Oct 2026 09:48:26 +0000
Manifest this update:     Thu 01 Oct 2026 09:48:25 +0000
Manifest next update:     Thu 08 Oct 2026 09:48:25 +0000
Files and hashes:         1: PzD_G7sm8QLtikdaS_vJQqHfMoo.crl (hash: tHqsvmrUCxVSfuO8geYdXmHsanSDmdsss9kPyMGqIQk=)
                          2: 94B0F0DE4C0B11F1996C5785A4833773.roa (hash: 01xIz/rgNcJT7guVWtVDsLnpVBDWMjTBSig7MAakmHY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91629F2/E183CEC44C0411F18A6F8D79A1833773/PzD_G7sm8QLtikdaS_vJQqHfMoo.crl
                          rsync://rpki.apnic.net/member_repository/A91629F2/E183CEC44C0411F18A6F8D79A1833773/PzD_G7sm8QLtikdaS_vJQqHfMoo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PzD_G7sm8QLtikdaS_vJQqHfMoo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 08 Oct 2026 09:48:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 76 (0x4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91629F2, serialNumber=3F30FF1BBB26F102ED8A475A4BFBC942A1DF328A
        Validity
            Not Before: Oct  1 09:48:25 2026 GMT
            Not After : Oct  8 09:48:25 2026 GMT
        Subject: CN=6abe2c6a-8ab8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:51:be:dd:21:90:80:c4:c6:8d:54:31:01:ef:
                    91:60:02:de:73:01:af:2c:00:63:22:c0:a2:a5:71:
                    dd:de:21:0b:73:13:ea:44:38:f8:d9:57:e3:f5:94:
                    40:d8:3e:5b:d5:71:da:b5:9f:0c:b8:d0:09:00:e5:
                    7f:51:a6:81:48:9e:82:fe:6a:2e:f7:85:05:ec:f3:
                    35:15:83:21:9e:87:73:0b:60:5e:2f:60:83:63:d4:
                    56:a2:55:c2:71:2d:d5:a9:cf:8a:3c:64:38:22:28:
                    2e:37:05:ed:c9:02:42:e4:68:e6:df:e2:cb:13:d9:
                    51:b7:b9:84:67:4a:5c:7c:d2:76:91:94:fb:84:e8:
                    48:e9:a1:26:f0:78:51:e9:15:15:24:2d:f2:d6:80:
                    92:d8:40:d5:cf:c2:82:d1:2e:2d:a4:73:68:eb:6a:
                    bf:7c:b4:25:26:ed:fd:a3:16:7a:c3:94:89:db:d4:
                    bd:9d:ee:23:02:04:a8:49:ad:46:dd:37:bf:a4:bd:
                    ef:d1:97:a2:ff:c0:8c:59:80:d4:82:ac:74:7f:f5:
                    9b:d8:b7:d2:66:05:5a:b5:6a:16:a0:5d:fa:3b:ac:
                    41:41:e6:00:96:09:6b:f9:1d:48:4d:5b:5d:48:1f:
                    a7:5a:65:70:41:11:6a:41:bb:a3:b9:38:05:9e:ea:
                    f7:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:7E:58:5B:E6:E0:63:1B:A0:96:B1:83:50:E4:1E:B2:97:4F:13:58
            X509v3 Authority Key Identifier:
                keyid:3F:30:FF:1B:BB:26:F1:02:ED:8A:47:5A:4B:FB:C9:42:A1:DF:32:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91629F2/E183CEC44C0411F18A6F8D79A1833773/PzD_G7sm8QLtikdaS_vJQqHfMoo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PzD_G7sm8QLtikdaS_vJQqHfMoo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91629F2/E183CEC44C0411F18A6F8D79A1833773/PzD_G7sm8QLtikdaS_vJQqHfMoo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:cd:eb:03:41:20:29:5f:99:77:c0:59:5f:7c:0f:a8:c4:fb:
         24:95:8f:62:6c:1d:5a:f7:ee:dd:1f:82:e2:30:fa:84:e7:90:
         16:e7:ff:e4:51:2c:c8:6d:45:9a:5e:29:d3:e6:4c:f2:89:06:
         07:46:f2:ef:7e:08:17:7c:58:c5:ab:06:4d:8f:04:33:7b:c8:
         db:f1:ee:9a:dc:5f:07:20:95:84:94:72:41:36:32:b2:c4:69:
         30:9d:3b:1c:a3:7a:d8:88:79:48:e0:41:0c:92:80:26:36:ce:
         8a:c3:8b:30:96:38:01:8e:bb:e1:e1:41:bf:03:b5:08:2c:d3:
         17:0e:58:21:e1:88:11:4a:c5:a3:1b:57:0b:85:cf:27:99:50:
         15:6a:16:cd:ec:48:06:f1:7b:11:e8:bc:73:f7:4a:28:fd:36:
         40:3c:95:0a:f2:1c:ac:a9:8f:db:4c:4b:5a:30:9a:e9:d4:07:
         87:05:c6:b1:5d:c2:32:34:db:14:98:2c:45:da:53:26:58:1d:
         8f:c0:10:fd:29:e4:a0:2d:c4:85:0d:7d:0d:a8:76:4f:94:cb:
         8b:94:87:0f:b1:72:56:56:96:6a:aa:31:a1:7b:df:d1:50:89:
         04:36:ea:4a:95:65:3f:a8:98:32:c5:43:6c:ba:77:60:4c:8c:
         71:b9:53:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 15:53:41 2026 by rpki-client