Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A3AD9/77274DC0F98011F087DA99084F6F56BC/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.mft
File:                     pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.mft (raw, json)
Hash identifier:          ZsqAJ6egPfKn7nQUWaZ+MYJGYzob1k8O5eKYyQdI+2A=
Subject key identifier:   B1:C3:4D:BC:C9:3B:67:D4:57:72:B6:60:4E:CE:23:B6:95:BD:CA:13
Authority key identifier: A7:39:38:74:78:C8:AD:9D:D5:D1:95:53:AB:4B:1D:EE:F1:A9:61:FF
Certificate issuer:       /CN=A91A3AD9/serialNumber=A739387478C8AD9DD5D19553AB4B1DEEF1A961FF
Certificate serial:       9A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A3AD9/77274DC0F98011F087DA99084F6F56BC/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.mft
Manifest number:          94
Signing time:             Wed 21 Oct 2026 08:07:50 +0000
Manifest this update:     Wed 21 Oct 2026 08:07:49 +0000
Manifest next update:     Wed 28 Oct 2026 08:07:49 +0000
Files and hashes:         1: pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.crl (hash: 0vtnOIBWmOkHqDRD5EbPondZc4OkX3d7/ddQhLioAlk=)
                          2: 8B10B888061111F18D858310203D8C67.roa (hash: qh+VyOJbj+ug4XtQyEZqsUr8GU3LhsaDi56G0+/mtA8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A3AD9/77274DC0F98011F087DA99084F6F56BC/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.crl
                          rsync://rpki.apnic.net/member_repository/A91A3AD9/77274DC0F98011F087DA99084F6F56BC/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Oct 2026 04:44:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 154 (0x9a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A3AD9, serialNumber=A739387478C8AD9DD5D19553AB4B1DEEF1A961FF
        Validity
            Not Before: Oct 21 08:07:49 2026 GMT
            Not After : Oct 28 08:07:49 2026 GMT
        Subject: CN=6ad872d6-56dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ac:f6:04:a5:cc:90:d8:c6:c1:0c:fb:9d:41:
                    b7:29:34:37:c1:49:3b:ea:73:ad:32:c9:b4:db:7a:
                    f9:fd:1e:7f:97:64:cc:40:84:b6:04:47:83:b3:a1:
                    7d:87:9c:0a:66:c4:ff:33:7e:ba:52:12:d0:71:ac:
                    6c:37:3b:6e:8f:dd:80:3f:1a:2d:94:a7:74:8f:ad:
                    b0:ee:93:59:c8:67:6e:dc:e6:a4:a3:c5:b5:b7:45:
                    04:af:9c:cf:03:51:7b:bc:5e:cd:e0:9a:99:63:28:
                    51:57:77:c2:c2:7b:c6:b0:ff:88:99:6f:93:3e:d7:
                    a6:70:1c:cf:bf:64:79:2a:08:fa:1d:1e:e4:50:34:
                    5d:cc:d9:4e:d7:76:d3:8e:49:41:a8:c0:37:e6:da:
                    de:fb:67:eb:a6:25:65:1c:be:ac:23:fb:8e:70:6f:
                    e1:01:b8:3d:d2:9f:bc:45:e8:76:ec:e8:33:bc:80:
                    d8:20:fc:e5:15:07:eb:b6:05:83:99:d1:90:46:0d:
                    40:f1:a3:9a:56:ea:9f:a5:41:5e:8c:9a:fe:e5:c6:
                    92:23:f0:4f:a4:c8:20:f9:69:50:bf:6f:85:15:f2:
                    52:e4:5e:95:1b:96:7b:47:ef:66:af:a1:9f:ea:eb:
                    bb:92:bd:20:5c:b9:b2:5b:e9:a4:03:3b:03:c3:18:
                    da:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:C3:4D:BC:C9:3B:67:D4:57:72:B6:60:4E:CE:23:B6:95:BD:CA:13
            X509v3 Authority Key Identifier:
                keyid:A7:39:38:74:78:C8:AD:9D:D5:D1:95:53:AB:4B:1D:EE:F1:A9:61:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A3AD9/77274DC0F98011F087DA99084F6F56BC/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3AD9/77274DC0F98011F087DA99084F6F56BC/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:eb:ce:e8:38:79:00:6c:19:2b:a3:98:9c:2b:5d:c7:41:9f:
         2d:bc:40:de:57:ba:32:7f:9f:49:92:4b:cf:f9:5b:97:04:38:
         92:67:a6:be:9b:41:e4:2a:d1:fe:89:0e:da:9b:43:aa:a7:79:
         ab:15:50:f0:20:cf:51:58:e4:93:d0:18:61:95:31:30:d8:d7:
         a6:56:b4:3d:24:42:9f:8f:bb:f7:23:7f:67:73:de:09:4b:08:
         1f:fd:65:a4:55:97:d7:8b:d3:fc:17:ea:f4:f2:b9:48:70:c1:
         58:c1:43:5d:cd:6d:04:2a:b2:52:19:9a:08:a4:0e:d4:62:71:
         1d:29:89:16:77:66:bd:bc:4e:00:19:63:ea:c2:6c:fc:fd:65:
         fc:11:1c:9b:7b:aa:ef:8d:0b:55:af:57:34:73:56:53:0d:1d:
         d4:3f:9f:eb:82:1f:34:76:e5:3c:ae:1f:13:88:c2:19:00:0d:
         ba:64:61:56:92:ee:da:a7:99:bb:db:62:03:cb:d4:83:30:f2:
         4b:4e:56:99:9d:5e:be:2c:a9:b4:d9:bb:a3:43:fe:ff:70:21:
         77:e0:e1:b9:66:54:62:0a:13:43:f6:60:56:45:d0:db:23:82:
         69:9b:b4:9e:dd:a3:38:cf:b2:cd:35:0b:76:e5:ec:12:8a:fc:
         98:ca:5c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 06:34:52 2026 by rpki-client