Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A8CB9/C0D500F4E65511EBB0F29027C4F9AE02/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.mft
File:                     E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.mft (raw, json)
Hash identifier:          g5nX3rqWGfLP+Y5N9848FXCaW6/v6LoxiP/4tFUUV/E=
Subject key identifier:   7D:55:B4:95:96:D1:0C:48:FF:EC:54:48:0E:BB:6A:BB:18:C8:DC:AC
Authority key identifier: 13:D6:4D:5D:8F:B7:B1:CF:89:38:77:01:1B:80:CF:40:16:F6:16:38
Certificate issuer:       /CN=A91A8CB9/serialNumber=13D64D5D8FB7B1CF893877011B80CF4016F61638
Certificate serial:       066C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A8CB9/C0D500F4E65511EBB0F29027C4F9AE02/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.mft
Manifest number:          0664
Signing time:             Thu 08 Oct 2026 22:47:41 +0000
Manifest this update:     Thu 08 Oct 2026 22:47:41 +0000
Manifest next update:     Thu 15 Oct 2026 22:47:41 +0000
Files and hashes:         1: E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.crl (hash: 209twg0JjjMhE0ZqEMW54fNqbJhM0POjQvuXdaA6x0I=)
                          2: BC009860E65811EBA233DC2DC4F9AE02.roa (hash: iTInClo5GHvqtVK3uiFLhYz61JoRiiB86yoY8jK4EnU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A8CB9/C0D500F4E65511EBB0F29027C4F9AE02/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.crl
                          rsync://rpki.apnic.net/member_repository/A91A8CB9/C0D500F4E65511EBB0F29027C4F9AE02/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Oct 2026 22:47:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1644 (0x66c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A8CB9, serialNumber=13D64D5D8FB7B1CF893877011B80CF4016F61638
        Validity
            Not Before: Oct  8 22:47:41 2026 GMT
            Not After : Oct 15 22:47:41 2026 GMT
        Subject: CN=6ac81d8d-8213
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ab:1b:1f:b4:5a:a6:45:c9:1c:5b:0f:f2:6d:
                    b7:62:ee:6b:1f:d6:38:cb:95:0e:96:01:e2:30:f5:
                    2b:eb:72:d1:07:5b:a6:3e:07:f0:a4:38:e1:0b:6b:
                    4b:c0:21:1d:67:1d:19:e5:00:8d:66:98:28:d1:77:
                    5b:24:1c:f4:70:8e:98:5d:8a:ee:72:45:7e:27:dc:
                    f8:2d:b1:14:93:f7:c1:a1:3b:6b:8d:5a:81:f4:fa:
                    b2:52:bc:79:12:61:a5:c4:5a:ed:a4:66:f7:c3:1d:
                    6c:be:a1:ba:95:ad:db:d8:88:b4:4f:db:58:bc:73:
                    0b:0a:6d:f7:8e:4f:1a:86:ac:92:07:4c:c0:8c:7f:
                    7f:a8:65:de:38:ed:7c:44:ed:bb:d0:80:26:74:87:
                    77:f3:1f:80:83:9a:07:5f:84:9e:55:40:a9:58:66:
                    46:6b:74:37:8c:6a:f7:84:64:b7:f0:14:a6:20:ce:
                    77:03:47:43:04:ed:88:7a:76:9f:2f:d0:81:d2:d7:
                    e6:97:27:d1:74:d3:d3:08:4f:01:02:5d:d1:26:f4:
                    51:8c:aa:32:1f:15:22:7c:23:51:2e:95:6d:10:b3:
                    68:20:fc:89:13:82:bf:be:f0:ab:30:3c:3e:3c:98:
                    89:d3:67:2f:3e:11:9f:9f:98:6d:88:c3:42:8a:00:
                    a4:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:55:B4:95:96:D1:0C:48:FF:EC:54:48:0E:BB:6A:BB:18:C8:DC:AC
            X509v3 Authority Key Identifier:
                keyid:13:D6:4D:5D:8F:B7:B1:CF:89:38:77:01:1B:80:CF:40:16:F6:16:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A8CB9/C0D500F4E65511EBB0F29027C4F9AE02/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8CB9/C0D500F4E65511EBB0F29027C4F9AE02/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:23:a7:8f:99:23:8e:d8:45:a1:c3:46:76:e4:03:e7:fc:71:
         84:02:a1:50:de:32:a1:9f:39:c2:de:6a:92:72:e4:66:34:e2:
         2c:15:ca:d0:50:44:43:b4:a5:c0:29:57:83:9f:86:2a:e4:c8:
         84:72:c9:7a:00:12:7a:5b:ef:af:4c:10:18:7c:3b:c7:b3:80:
         bc:1e:0a:be:4d:3d:3d:00:68:ad:ed:32:42:20:7e:df:31:e6:
         d6:0a:b2:c1:ba:0b:09:d6:49:38:f7:da:9e:52:3c:fa:e7:59:
         23:a4:31:fc:48:17:cf:19:33:2a:f9:01:2f:4d:d2:9d:63:b4:
         9e:f5:44:04:a7:23:06:14:cb:c6:f2:e7:85:cc:48:75:90:b2:
         5a:72:e8:ef:6c:06:ec:b7:e6:db:4f:0d:f2:4d:2a:b7:d7:89:
         6e:c4:89:bf:00:6b:65:ed:58:5e:d5:5e:12:70:b6:01:b1:5a:
         b8:ad:5c:04:7c:8c:cf:7e:7c:fb:7d:65:79:28:e4:5d:28:a3:
         c5:da:be:cc:4f:fe:78:e9:ca:15:0a:77:c1:d0:6b:dc:c5:d9:
         43:3c:4e:e1:65:c4:38:68:4a:66:c2:d9:78:03:f6:69:e1:69:
         e7:ef:11:ae:e5:f5:6d:6a:f7:09:eb:d0:c6:a1:1c:0f:7e:75:
         05:15:c9:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 17:43:13 2026 by rpki-client