Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft
File:                     zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft (raw, json)
Hash identifier:          8qJq7RGKJ3kJljKWQYOSXY9JhVukfl4mIjNjvb7ZnmE=
Subject key identifier:   19:1A:FF:1B:94:CC:7C:9E:34:C3:4E:F5:C4:EE:8E:22:29:17:E2:13
Authority key identifier: CC:36:90:F8:96:EF:56:73:11:53:5B:C4:44:DF:1E:B7:41:FD:8B:B4
Certificate issuer:       /CN=A916EBCB/serialNumber=CC3690F896EF567311535BC444DF1EB741FD8BB4
Certificate serial:       0CE6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zDaQ-JbvVnMRU1vERN8et0H9i7Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft
Manifest number:          0CDB
Signing time:             Tue 06 Oct 2026 18:34:46 +0000
Manifest this update:     Tue 06 Oct 2026 18:34:46 +0000
Manifest next update:     Tue 13 Oct 2026 18:34:46 +0000
Files and hashes:         1: zDaQ-JbvVnMRU1vERN8et0H9i7Q.crl (hash: 2Dmg/vhBwjGe32SHWubD+Xln/x1MZIkyrho12psJVzM=)
                          2: 81C5BFF8192811EA9B88D87DC4F9AE02.roa (hash: MlGQE6i/naYke0ZwsPc47N+NQobrGaPsNs00jN9E6oo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.crl
                          rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zDaQ-JbvVnMRU1vERN8et0H9i7Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 18:34:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3302 (0xce6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916EBCB, serialNumber=CC3690F896EF567311535BC444DF1EB741FD8BB4
        Validity
            Not Before: Oct  6 18:34:46 2026 GMT
            Not After : Oct 13 18:34:46 2026 GMT
        Subject: CN=6ac53f46-adcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b9:08:b2:8e:46:c7:ce:e6:e5:9d:94:3c:5a:
                    26:f4:45:c9:62:38:ca:59:f4:d1:5c:64:3b:dc:b9:
                    32:12:02:29:4d:5f:cf:4b:64:77:ca:5b:9b:84:c8:
                    b0:6a:f9:5b:d9:08:1f:2f:84:64:34:80:d9:5a:49:
                    d8:7c:43:a7:79:20:5c:0f:ee:3c:11:fe:48:75:a2:
                    e7:05:e6:df:41:f8:38:ba:54:8b:a4:64:d3:33:c0:
                    69:ad:49:96:f0:51:9a:dd:88:cf:ac:8a:04:bf:18:
                    b4:cd:57:f7:53:50:09:2f:b0:96:d0:aa:57:7e:0e:
                    e4:92:03:88:42:1a:50:55:b6:c0:15:41:ad:16:c2:
                    e8:dc:7c:2e:96:19:13:10:a6:77:82:46:2f:1d:0c:
                    de:dd:ef:68:37:44:fe:51:90:f3:63:f1:b4:c6:ef:
                    1f:89:6e:bb:50:bc:1a:50:f3:11:f1:d2:cd:56:3b:
                    9d:9e:13:c6:97:18:ed:8e:2f:2c:77:15:e6:2d:b4:
                    a1:e8:ef:ae:3f:e6:2f:40:d9:e9:73:d1:15:57:42:
                    08:9d:d2:11:a3:67:a0:00:aa:76:7d:a4:78:e5:bb:
                    0f:18:21:ee:83:b0:68:e6:ce:8b:46:f2:80:28:f1:
                    3f:d8:1c:0f:39:23:85:35:de:ff:ea:0a:d8:5f:df:
                    76:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:1A:FF:1B:94:CC:7C:9E:34:C3:4E:F5:C4:EE:8E:22:29:17:E2:13
            X509v3 Authority Key Identifier:
                keyid:CC:36:90:F8:96:EF:56:73:11:53:5B:C4:44:DF:1E:B7:41:FD:8B:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zDaQ-JbvVnMRU1vERN8et0H9i7Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:f5:39:fd:9a:e8:da:d2:e1:99:af:22:0b:30:d1:1a:cf:b0:
         7e:04:5d:54:0d:cf:42:a5:59:47:d0:33:83:f4:4f:75:6c:9a:
         a6:59:90:53:d8:4c:32:64:1e:8d:79:6d:d8:42:4e:53:ff:e8:
         9f:35:23:d1:c7:4d:d4:41:8e:22:51:11:ec:65:0e:9d:7c:9e:
         47:27:4f:f1:4c:f9:2f:8b:28:7a:b4:0d:26:db:b8:20:95:78:
         1c:50:fe:b0:3a:bd:f3:1d:64:42:01:51:22:74:67:3c:fb:91:
         f3:c4:5b:4b:e4:bc:ef:d8:4e:90:bd:c1:5a:c6:2c:f2:9c:99:
         02:0d:f6:bb:be:2b:c4:e0:8b:ec:73:ae:10:ab:fe:e2:d7:72:
         ba:88:8e:69:90:84:2c:fb:47:99:1e:f8:74:f3:1a:72:db:cb:
         b6:3a:11:a4:7a:71:e5:f5:74:25:7a:f5:6f:c8:be:80:b3:8d:
         bd:e6:c6:05:28:de:2e:9d:c6:d4:78:ea:05:1c:c0:57:d9:f3:
         c0:ab:35:29:a5:01:ea:bf:3e:41:26:c8:79:80:63:93:17:6b:
         92:77:5f:6f:2c:9d:bf:41:62:8f:b4:be:3d:9b:bd:94:8f:d3:
         63:49:6d:ad:e6:72:30:eb:e2:61:24:da:94:8a:53:80:9f:3e:
         44:88:88:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 07:20:35 2026 by rpki-client