Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.mft
File:                     Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.mft (raw, json)
Hash identifier:          D/v37F2p5+9gzRM1HnNuMmPw7XlNwPYqnHohaUP8rUk=
Subject key identifier:   2B:81:E2:52:B4:C4:BB:43:C5:2C:4D:B4:13:1B:0F:BA:B3:ED:5D:BE
Authority key identifier: 67:3D:05:54:9D:41:34:D0:AC:35:5D:D9:B6:50:DF:3C:1C:68:AA:5D
Certificate issuer:       /CN=A9181EAA/serialNumber=673D05549D4134D0AC355DD9B650DF3C1C68AA5D
Certificate serial:       1E24
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.mft
Manifest number:          1E12
Signing time:             Thu 08 Oct 2026 16:07:31 +0000
Manifest this update:     Thu 08 Oct 2026 16:07:31 +0000
Manifest next update:     Thu 15 Oct 2026 16:07:31 +0000
Files and hashes:         1: Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.crl (hash: tpgdSdokNVdHX4y838YS/W6QvsbmmKKpyWafltr9P90=)
                          2: 14FFD39467BE11E8910CB13EC4F9AE02.roa (hash: MpN4UJBw57MNof0CtG3ZS+FwTRjq6IUTFa6dQ81jM38=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.crl
                          rsync://rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Oct 2026 16:07:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7716 (0x1e24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9181EAA, serialNumber=673D05549D4134D0AC355DD9B650DF3C1C68AA5D
        Validity
            Not Before: Oct  8 16:07:31 2026 GMT
            Not After : Oct 15 16:07:31 2026 GMT
        Subject: CN=6ac7bfc3-c651
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:45:1a:e3:f1:8b:6b:23:63:0a:6a:fa:57:1c:
                    93:48:1c:0d:26:48:46:5a:90:a2:e5:f9:63:bf:68:
                    98:ff:1a:65:76:15:9e:17:72:e1:d3:85:62:11:27:
                    67:2d:fb:cb:78:ef:b1:ef:a2:f6:69:53:41:d1:3e:
                    0e:d7:0e:dd:3f:46:7a:33:db:fb:72:3c:73:4c:64:
                    21:16:ca:a8:53:c1:2b:ae:65:36:a9:f3:7b:83:fb:
                    76:f4:56:ed:c8:4b:ce:67:93:d3:cd:4b:79:5a:3b:
                    55:9e:20:70:8f:9a:d4:af:c8:9f:05:6b:01:9e:50:
                    45:e1:3a:d8:5c:34:33:ac:03:38:16:4f:26:1f:c8:
                    85:cd:4f:57:f5:5f:ee:ac:32:e7:4a:c2:b3:07:bb:
                    3c:ad:99:48:0b:d0:7b:a8:1b:a9:f3:3e:32:05:25:
                    04:1e:1c:15:aa:f6:f4:f1:43:52:a1:be:9b:ad:7f:
                    53:b3:b7:9d:29:7e:39:00:1c:fc:6c:17:c5:06:57:
                    bd:34:c8:cb:df:8a:c3:8b:d3:84:75:54:eb:50:f8:
                    5d:07:65:4e:e0:f8:14:c9:3d:af:80:d2:eb:09:e4:
                    76:22:c8:14:e7:70:34:ac:0e:1f:b6:3d:05:4c:b5:
                    3a:4c:ad:f6:cf:20:23:94:42:1f:31:59:36:6b:6f:
                    e6:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:81:E2:52:B4:C4:BB:43:C5:2C:4D:B4:13:1B:0F:BA:B3:ED:5D:BE
            X509v3 Authority Key Identifier:
                keyid:67:3D:05:54:9D:41:34:D0:AC:35:5D:D9:B6:50:DF:3C:1C:68:AA:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:6e:de:df:01:a7:a8:cd:6b:62:45:ec:8c:79:5d:32:46:a0:
         db:e7:00:87:79:47:f6:06:09:3d:12:96:e4:ac:71:0f:bf:3b:
         a9:b3:89:43:ac:89:88:08:95:12:b5:bc:53:0d:88:96:d7:85:
         27:af:74:af:24:9a:20:81:b0:47:ef:1b:86:03:05:7d:32:02:
         17:e1:b5:67:bb:62:d7:0e:72:8d:15:e7:3b:31:25:5f:b5:0f:
         23:44:28:fa:20:24:bd:7e:72:30:44:dc:ec:ef:30:3a:99:42:
         81:ca:cb:f1:53:fc:69:38:4a:01:40:8a:cc:05:6a:8a:32:66:
         0d:a0:7e:45:11:21:14:ea:3a:2d:ea:00:97:3b:89:93:59:8c:
         c0:a8:f1:d1:4c:8b:e8:68:56:bd:24:5e:04:26:a9:ff:90:4c:
         bf:31:36:ef:59:b6:79:ce:f6:25:54:8e:da:0c:b5:21:a9:4a:
         45:0d:47:9d:6c:7f:19:0a:60:08:46:a9:9e:2a:cc:4d:73:5c:
         59:c6:d8:c4:3d:52:ff:18:61:2a:c3:39:40:4a:fa:8a:2e:fd:
         00:95:16:5d:af:24:c1:16:d1:b9:b8:c3:ac:ed:ce:a9:66:47:
         a0:3f:aa:56:6e:23:9f:26:c5:60:09:2f:84:b2:28:67:44:3a:
         d3:29:c0:71
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICHiQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODFFQUExMTAvBgNVBAUTKDY3M0QwNTU0OUQ0MTM0RDBBQzM1NUREOUI2NTBERjND
MUM2OEFBNUQwHhcNMjYxMDA4MTYwNzMxWhcNMjYxMDE1MTYwNzMxWjAYMRYwFAYD
VQQDEw02YWM3YmZjMy1jNjUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlEUa4/GLayNjCmr6VxyTSBwNJkhGWpCi5fljv2iY/xpldhWeF3Lh04ViESdn
LfvLeO+x76L2aVNB0T4O1w7dP0Z6M9v7cjxzTGQhFsqoU8ErrmU2qfN7g/t29Fbt
yEvOZ5PTzUt5WjtVniBwj5rUr8ifBWsBnlBF4TrYXDQzrAM4Fk8mH8iFzU9X9V/u
rDLnSsKzB7s8rZlIC9B7qBup8z4yBSUEHhwVqvb08UNSob6brX9Ts7edKX45ABz8
bBfFBle9NMjL34rDi9OEdVTrUPhdB2VO4PgUyT2vgNLrCeR2IsgU53A0rA4ftj0F
TLU6TK32zyAjlEIfMVk2a2/mAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCuB4lK0
xLtDxSxNtBMbD7qz7V2+MB8GA1UdIwQYMBaAFGc9BVSdQTTQrDVd2bZQ3zwcaKpd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MUVBQS84ODI4RDBGNEJC
NzcxMUU2OTU2MzYzMzhDNEY5QUUwMi9aejBGVkoxQk5OQ3NOVjNadGxEZlBCeG9x
bDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1p6MEZWSjFCTk5Dc05WM1p0bERmUEJ4b3FsMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MUVBQS84ODI4RDBGNEJCNzcxMUU2OTU2MzYzMzhDNEY5QUUwMi9aejBGVkoxQk5O
Q3NOVjNadGxEZlBCeG9xbDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAA27e3wGnqM1rYkXsjHldMkag2+cAh3lH9gYJPRKW5KxxD787qbOJQ6yJiAiV
ErW8Uw2IlteFJ690rySaIIGwR+8bhgMFfTICF+G1Z7ti1w5yjRXnOzElX7UPI0Qo
+iAkvX5yMETc7O8wOplCgcrL8VP8aThKAUCKzAVqijJmDaB+RREhFOo6LeoAlzuJ
k1mMwKjx0UyL6GhWvSReBCap/5BMvzE271m2ec72JVSO2gy1IalKRQ1HnWx/GQpg
CEapnirMTXNcWcbYxD1S/xhhKsM5QEr6ii79AJUWXa8kwRbRubjDrO3OqWZHoD+q
Vm4jnybFYAkvhLIoZ0Q60ynAcQ==
-----END CERTIFICATE-----
Generated at Fri Oct 9 05:13:55 2026 by rpki-client