Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/zq7A6H2VhStEwGE5VUa34MHRHFc.mft
File:                     zq7A6H2VhStEwGE5VUa34MHRHFc.mft (raw, json)
Hash identifier:          HZ/Ot7PWiRoaDV18lDMv0WXzhkczii0o9wYqnf2BHR0=
Subject key identifier:   83:90:06:19:FF:E2:80:F0:68:16:C7:25:CA:6A:F5:87:8D:2F:A1:B5
Authority key identifier: CE:AE:C0:E8:7D:95:85:2B:44:C0:61:39:55:46:B7:E0:C1:D1:1C:57
Certificate issuer:       /CN=A918B909/serialNumber=CEAEC0E87D95852B44C061395546B7E0C1D11C57
Certificate serial:       8D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zq7A6H2VhStEwGE5VUa34MHRHFc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/zq7A6H2VhStEwGE5VUa34MHRHFc.mft
Manifest number:          86
Signing time:             Fri 11 Sep 2026 07:43:47 +0000
Manifest this update:     Fri 11 Sep 2026 07:43:46 +0000
Manifest next update:     Fri 18 Sep 2026 07:43:46 +0000
Files and hashes:         1: zq7A6H2VhStEwGE5VUa34MHRHFc.crl (hash: 4v0jSzAVhXXpnPXheM1+1fLjJz2tK1xFFKxA5JgoCSw=)
                          2: F48C677A94A611F18AF960C06E11F970.roa (hash: +pzLDlt5lYIFfMCF1ONeGinj3z1dcCirBUMVhDDIgNQ=)
                          3: 5B7F78E0948A11F193C8715B6511F970.roa (hash: p83LjNke8Ymi6mycmLDbyA/QmdOPAdeSckRGwIMfBdg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/zq7A6H2VhStEwGE5VUa34MHRHFc.crl
                          rsync://rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/zq7A6H2VhStEwGE5VUa34MHRHFc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zq7A6H2VhStEwGE5VUa34MHRHFc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Sep 2026 06:44:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 141 (0x8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918B909, serialNumber=CEAEC0E87D95852B44C061395546B7E0C1D11C57
        Validity
            Not Before: Sep 11 07:43:46 2026 GMT
            Not After : Sep 18 07:43:46 2026 GMT
        Subject: CN=6aa3b132-a36d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:cf:e1:3b:47:1d:ca:d5:dc:3c:52:0d:3b:80:
                    65:b0:c2:cf:5b:2f:f7:bd:25:1c:23:fa:23:c8:a9:
                    62:28:27:70:0e:c4:2a:4f:a5:68:f1:41:79:a7:9a:
                    6e:00:72:7c:54:b8:14:16:54:4b:bf:ff:b4:4b:22:
                    46:38:4b:99:ae:4a:70:86:b9:03:6d:9a:a3:ce:ab:
                    91:07:28:77:0c:99:8e:57:a1:6c:d9:88:35:19:5b:
                    9c:29:07:d7:18:11:55:30:7b:fa:0c:df:a1:4f:ee:
                    22:1f:bb:bb:0a:60:3b:8a:69:ec:1a:29:93:6f:40:
                    98:2d:3f:20:2b:20:e7:cc:e8:7c:0f:25:f9:f8:3e:
                    2f:28:09:ae:f9:fd:a2:e6:38:08:db:dc:8f:25:b9:
                    6c:73:ff:13:05:18:d6:74:0e:fe:c8:fa:2a:01:15:
                    1f:30:97:38:96:bb:5c:15:a9:9a:c0:99:db:ae:f0:
                    8e:f7:4c:e5:d2:ab:38:c6:1f:ab:3f:1e:d2:28:a3:
                    ed:94:bf:2a:65:d5:5e:62:74:f4:4e:58:55:c5:04:
                    f1:de:0b:6b:18:94:66:c5:78:df:76:60:52:fc:11:
                    d0:ce:01:2a:31:37:c0:8d:11:ec:53:3d:ca:98:2f:
                    91:9f:39:9b:b6:85:3d:db:90:d4:42:b4:89:6a:9f:
                    5d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:90:06:19:FF:E2:80:F0:68:16:C7:25:CA:6A:F5:87:8D:2F:A1:B5
            X509v3 Authority Key Identifier:
                keyid:CE:AE:C0:E8:7D:95:85:2B:44:C0:61:39:55:46:B7:E0:C1:D1:1C:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/zq7A6H2VhStEwGE5VUa34MHRHFc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zq7A6H2VhStEwGE5VUa34MHRHFc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/zq7A6H2VhStEwGE5VUa34MHRHFc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:64:46:a7:46:8a:fd:f9:16:ba:3d:8d:82:cf:24:35:ba:92:
         b6:6a:6c:32:4f:ac:9e:63:f7:70:c6:ba:f9:12:94:2a:9a:fb:
         20:35:c7:fd:40:c0:6d:36:16:5f:fe:cc:ce:e9:24:6f:3a:47:
         65:39:f9:e6:59:36:07:61:0d:5b:88:38:c0:ed:6c:57:f6:3a:
         87:fd:2f:2a:49:f8:fc:1b:f9:3c:dd:ec:09:21:ae:78:70:49:
         14:02:c9:7b:9a:fe:9a:33:47:af:6c:b3:cf:e1:c0:6a:de:03:
         65:ad:c3:ac:a5:5c:14:66:07:86:68:f2:e8:3f:9c:3d:29:42:
         a1:63:bf:2d:ea:d5:d7:5f:f0:3c:59:47:7d:a2:56:50:73:2c:
         aa:ef:cf:08:1a:0c:18:53:97:36:1d:8d:01:e2:26:a7:58:b0:
         99:4a:23:c6:56:ad:76:c9:34:ac:a5:8b:1e:6d:91:1d:bf:9e:
         d2:8d:3a:3f:c9:98:1e:c8:e8:59:e1:a7:63:49:ba:b8:89:c1:
         cb:2c:f9:2f:03:08:de:0a:b9:73:86:cb:8b:bb:6b:5f:7b:96:
         56:a1:f6:9d:9f:77:e5:a7:25:78:61:1e:3c:85:b0:fc:45:1d:
         45:bd:71:16:8f:e2:8e:cc:2e:94:80:d4:07:6b:5b:02:33:36:
         af:78:70:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 14:24:20 2026 by rpki-client