Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.mft
File:                     ZJQ7HSvi-T3WQOAk65TY043OaoM.mft (raw, json)
Hash identifier:          IanuSnoQzAUlmRZYJycvjx+Z/746EhVmF0+g0upViLI=
Subject key identifier:   B0:19:A7:D9:B8:52:42:EB:CD:81:E5:9E:F9:2A:0E:A8:B1:68:43:1C
Authority key identifier: 64:94:3B:1D:2B:E2:F9:3D:D6:40:E0:24:EB:94:D8:D3:8D:CE:6A:83
Certificate issuer:       /CN=A91B8F34/serialNumber=64943B1D2BE2F93DD640E024EB94D8D38DCE6A83
Certificate serial:       022F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJQ7HSvi-T3WQOAk65TY043OaoM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.mft
Manifest number:          0216
Signing time:             Tue 27 Oct 2026 03:18:27 +0000
Manifest this update:     Tue 27 Oct 2026 03:18:27 +0000
Manifest next update:     Tue 03 Nov 2026 03:18:27 +0000
Files and hashes:         1: ZJQ7HSvi-T3WQOAk65TY043OaoM.crl (hash: 6crFtoXjcgvVWFmgEg6eirXk2Ds+zCVxHXrlbqpSedU=)
                          2: D1DEC18AB5B711EEB1FB8657C4F9AE02.roa (hash: vS3X0b44bYIp6/Y6sLtHQmuycQrRy1x+aaB6Q+t5xg4=)
                          3: 0D5F2416B5B811EEA8ACF557C4F9AE02.roa (hash: qfFd1OkdxxfsdrGhnn3dqFBraYFvXPIV0iQiCI0Bu+U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.crl
                          rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJQ7HSvi-T3WQOAk65TY043OaoM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Nov 2026 03:18:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 559 (0x22f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B8F34, serialNumber=64943B1D2BE2F93DD640E024EB94D8D38DCE6A83
        Validity
            Not Before: Oct 27 03:18:27 2026 GMT
            Not After : Nov  3 03:18:27 2026 GMT
        Subject: CN=6ae01803-324b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5f:9f:e1:e6:b6:78:77:9d:5e:ee:fe:43:f0:
                    b9:3a:28:51:44:74:b7:8d:65:7e:3d:d0:5b:e6:3f:
                    2a:e6:cf:0c:57:52:5e:a0:98:45:cf:53:e5:29:a4:
                    54:8a:4a:a9:2d:ed:ef:eb:38:1e:6a:d8:d7:d4:8c:
                    63:a7:a5:93:b4:4e:c7:d9:ed:50:e7:2d:4d:5d:83:
                    f0:f7:92:75:ed:23:7b:54:db:d6:46:14:e5:6b:43:
                    52:7e:55:e4:33:33:be:d2:a2:31:f1:e9:ed:d2:ce:
                    02:fd:fb:0b:0d:9c:45:f7:87:ed:64:0d:a5:70:11:
                    79:2e:5b:9b:5b:27:87:25:01:3e:50:cb:97:1e:5e:
                    97:5d:df:a8:28:76:22:79:be:bc:04:63:87:cf:61:
                    37:e7:95:33:86:7f:55:03:3c:54:4e:b8:18:cd:19:
                    fc:c8:13:06:85:f2:0c:2d:c5:b5:36:c1:79:03:53:
                    e8:b3:71:ad:e1:44:b0:36:4e:79:2a:fc:18:b9:20:
                    29:c9:1b:35:50:52:a8:7c:bd:61:1c:31:64:90:ed:
                    1c:a2:47:32:8b:4f:3d:01:d9:eb:9d:54:44:64:a6:
                    33:f1:a8:a2:ff:92:0b:ac:bf:4f:36:9e:5d:69:0f:
                    13:05:5f:31:80:3f:9e:37:68:93:10:92:2e:08:eb:
                    7f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:19:A7:D9:B8:52:42:EB:CD:81:E5:9E:F9:2A:0E:A8:B1:68:43:1C
            X509v3 Authority Key Identifier:
                keyid:64:94:3B:1D:2B:E2:F9:3D:D6:40:E0:24:EB:94:D8:D3:8D:CE:6A:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJQ7HSvi-T3WQOAk65TY043OaoM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         fc:6a:b5:57:87:02:9e:10:d3:5d:aa:48:16:36:36:73:16:1e:
         51:8c:b5:2b:14:01:d9:36:d0:a6:17:88:f9:c7:53:1c:c8:d7:
         3f:7c:d7:ce:f5:58:77:a9:ff:d5:b9:cd:2f:ed:77:0f:75:e0:
         6e:83:ec:f2:a5:89:9d:72:36:44:02:eb:91:39:1f:f3:40:f2:
         49:8c:20:f4:99:1c:1f:e1:d7:b1:97:49:4b:16:13:0b:8b:2f:
         cd:fc:13:ae:e8:85:e0:12:c2:63:10:4a:ff:a3:1f:a8:91:17:
         6c:81:f6:4d:56:27:c7:15:3f:c4:6d:a4:68:db:57:cb:28:d4:
         9e:10:7d:e4:e2:49:50:1e:83:82:66:ef:f8:a1:54:27:1e:81:
         2f:57:0e:b2:25:81:de:a9:93:7a:e9:11:fe:cd:06:78:fd:12:
         30:f2:47:67:db:97:46:41:97:62:fb:fe:06:fc:53:55:2d:a5:
         a0:69:c1:d3:2d:1e:95:0d:8a:87:50:59:b3:bc:26:61:c4:05:
         ac:f1:db:ad:db:52:9a:23:18:44:6d:22:8d:00:dc:60:e1:e9:
         3d:8c:3f:fb:52:76:a2:a5:81:69:a0:64:81:3a:40:26:72:90:
         44:05:09:ed:c2:7f:23:91:be:55:6b:93:04:56:a4:cb:c3:a7:
         b7:dd:1d:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 00:46:16 2026 by rpki-client