Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9193045/BFADC6109F2911EC9C2D6785C4F9AE02/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.mft
File:                     ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.mft (raw, json)
Hash identifier:          NT4OD92LUic5/Ckylr+Ra7pqqYbDhL2BtTm2hvw1Vqw=
Subject key identifier:   FE:79:63:B6:B3:EA:9F:A9:0F:E5:BB:D3:86:54:4D:25:03:26:98:9D
Authority key identifier: 66:E8:54:61:BB:35:2A:49:8D:B5:57:03:64:63:05:CA:37:E7:4F:B4
Certificate issuer:       /CN=A9193045/serialNumber=66E85461BB352A498DB55703646305CA37E74FB4
Certificate serial:       04D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193045/BFADC6109F2911EC9C2D6785C4F9AE02/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.mft
Manifest number:          04AB
Signing time:             Mon 05 Oct 2026 00:00:59 +0000
Manifest this update:     Mon 05 Oct 2026 00:00:58 +0000
Manifest next update:     Mon 12 Oct 2026 00:00:58 +0000
Files and hashes:         1: ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.crl (hash: SeXZMpbCpIrKvugg4XUUi9WjeYART7GwYF0MuOdgbTg=)
                          2: 62AC0F740B1511F189F6F0D93B3D8C67.roa (hash: Htk1BqkRKiaFa9x+yTZJCZVf/zPXHwbaP6hoH1eBN/c=)
                          3: E57F70C206C311F185D816DB103D8C67.roa (hash: Wz+Aa2wnMlwpT85yT4ccSaJKxyuxT87QuUWxfJ/y6fU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193045/BFADC6109F2911EC9C2D6785C4F9AE02/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.crl
                          rsync://rpki.apnic.net/member_repository/A9193045/BFADC6109F2911EC9C2D6785C4F9AE02/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 00:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1239 (0x4d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193045, serialNumber=66E85461BB352A498DB55703646305CA37E74FB4
        Validity
            Not Before: Oct  5 00:00:58 2026 GMT
            Not After : Oct 12 00:00:58 2026 GMT
        Subject: CN=6ac2e8bb-6f76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:04:c3:f5:a5:f9:7b:e5:01:02:a6:a4:d5:98:
                    65:ae:d8:57:98:eb:b5:b3:d6:f7:05:56:89:d8:f3:
                    39:c3:0e:9f:72:c8:91:c5:94:89:fd:f1:28:18:35:
                    ca:7a:e1:7a:89:83:5f:61:c7:f0:91:24:ee:34:ff:
                    e9:18:ea:ac:35:15:9e:77:76:60:2d:94:32:66:09:
                    6d:3c:2a:2d:40:b6:5c:2f:9a:21:a9:f8:10:04:d7:
                    8f:48:2e:3d:b2:cf:8d:56:cd:e4:b6:e5:e6:42:46:
                    10:b4:44:0b:87:5b:c1:58:b6:2b:36:de:91:31:0d:
                    a4:c5:03:cb:27:77:7c:53:ae:12:21:8d:93:d0:75:
                    ba:07:cb:b4:ae:7e:1a:4e:69:a8:30:2e:c2:e7:21:
                    e9:d3:5c:8d:7e:f3:64:43:99:32:a4:0f:0f:6a:2f:
                    d7:52:7c:18:d5:06:3f:06:0d:12:09:33:85:7f:29:
                    75:7c:fd:42:43:1c:62:51:2c:8e:04:75:90:a7:d8:
                    0f:f5:25:b2:19:1a:b4:1e:c6:43:91:5b:50:72:10:
                    2a:bf:f9:8f:67:95:b9:5e:24:d7:9b:49:2d:9e:85:
                    b9:53:44:99:39:8b:11:18:ec:f8:fc:0d:02:38:39:
                    a4:6c:d7:10:3c:90:12:57:fe:d1:0c:4d:2c:d3:55:
                    c1:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:79:63:B6:B3:EA:9F:A9:0F:E5:BB:D3:86:54:4D:25:03:26:98:9D
            X509v3 Authority Key Identifier:
                keyid:66:E8:54:61:BB:35:2A:49:8D:B5:57:03:64:63:05:CA:37:E7:4F:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193045/BFADC6109F2911EC9C2D6785C4F9AE02/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193045/BFADC6109F2911EC9C2D6785C4F9AE02/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:44:d9:1a:05:c7:b5:17:e5:36:5a:b0:ee:92:91:e1:62:bf:
         71:bb:57:4d:dc:51:e5:2f:2e:f6:11:5e:de:00:29:9f:d4:8a:
         5d:22:5c:b7:64:2b:b7:0d:ca:66:e9:d2:03:56:a4:c3:80:cf:
         62:64:a7:9b:86:23:77:c8:fb:80:32:25:2f:cf:09:31:37:cb:
         a6:79:5b:63:59:98:e4:60:c8:b6:aa:d2:5a:23:36:25:c1:7f:
         63:75:cd:2a:7a:96:f5:a4:79:2b:c6:52:5f:8f:2f:89:38:b8:
         cc:f5:6b:22:83:2b:dd:c7:ad:56:10:40:58:bf:78:d7:90:4a:
         17:b8:7a:a7:42:97:71:3b:b9:2f:a0:5b:4f:32:c9:9c:ec:2a:
         6f:34:6b:04:db:0c:eb:7d:29:cf:5d:5b:fd:a1:55:1f:05:1e:
         97:1f:0c:c5:36:6a:79:ab:e4:85:7e:21:1f:be:54:c1:61:06:
         a2:e4:4e:84:4c:82:8c:dc:92:35:96:fa:c9:81:16:0c:e9:6c:
         5b:cd:de:f9:6f:1e:20:62:26:b5:9e:b9:9d:5e:3c:08:63:c1:
         45:64:98:d5:7d:04:db:f9:7d:cf:5e:4f:3c:a5:33:17:f6:d5:
         9e:c6:8c:12:04:26:81:07:0d:86:4a:53:d0:7b:5f:13:22:e6:
         a9:13:cc:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 14:47:08 2026 by rpki-client