Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B9F08/3090D914A14C11E98475A82DC4F9AE02/zoytNWIakBLECzY3U3ykDj0H6M8.mft
File:                     zoytNWIakBLECzY3U3ykDj0H6M8.mft (raw, json)
Hash identifier:          KCEYX5dCafJSYSBtQ5iPw2O46bQlHagTT+YijV1cHPQ=
Subject key identifier:   27:87:F1:08:49:2E:B1:CE:A9:E1:48:2D:C7:77:DB:23:9D:D0:04:8A
Authority key identifier: CE:8C:AD:35:62:1A:90:12:C4:0B:36:37:53:7C:A4:0E:3D:07:E8:CF
Certificate issuer:       /CN=A91B9F08/serialNumber=CE8CAD35621A9012C40B3637537CA40E3D07E8CF
Certificate serial:       0F56
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zoytNWIakBLECzY3U3ykDj0H6M8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B9F08/3090D914A14C11E98475A82DC4F9AE02/zoytNWIakBLECzY3U3ykDj0H6M8.mft
Manifest number:          0F43
Signing time:             Thu 08 Oct 2026 17:39:06 +0000
Manifest this update:     Thu 08 Oct 2026 17:39:05 +0000
Manifest next update:     Thu 15 Oct 2026 17:39:05 +0000
Files and hashes:         1: zoytNWIakBLECzY3U3ykDj0H6M8.crl (hash: 3Tyuh2AGTKZKtfVti64YeM76W6qhQPS8ksgngO9ZTUE=)
                          2: 8ADFF772924011ED867BE311C4F9AE02.roa (hash: WSppEKr3uUGfSP4JpZ6XY6kJsR4i7zyDZgxCkaSBcy4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B9F08/3090D914A14C11E98475A82DC4F9AE02/zoytNWIakBLECzY3U3ykDj0H6M8.crl
                          rsync://rpki.apnic.net/member_repository/A91B9F08/3090D914A14C11E98475A82DC4F9AE02/zoytNWIakBLECzY3U3ykDj0H6M8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zoytNWIakBLECzY3U3ykDj0H6M8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Oct 2026 17:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3926 (0xf56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B9F08, serialNumber=CE8CAD35621A9012C40B3637537CA40E3D07E8CF
        Validity
            Not Before: Oct  8 17:39:05 2026 GMT
            Not After : Oct 15 17:39:05 2026 GMT
        Subject: CN=6ac7d539-e493
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5c:9d:7a:ef:4c:92:59:6b:08:be:5f:d4:46:
                    36:c0:9d:0f:44:de:f2:b5:43:5f:6d:b9:b3:4d:9a:
                    e0:b6:68:0c:b7:4c:d1:69:4f:dd:01:41:47:f4:d2:
                    3c:6b:bd:73:0d:14:36:47:4f:03:6d:94:c6:d9:bf:
                    95:94:41:ba:01:46:d9:fb:60:f6:03:b1:2b:6e:c9:
                    be:0e:05:b4:10:c4:70:5c:58:b8:84:3a:de:2d:40:
                    60:3b:97:00:be:a8:d4:dc:8a:fe:46:b7:77:4d:cb:
                    1d:4a:b5:ec:52:e7:2f:38:35:8b:24:49:7e:3c:2c:
                    eb:a3:06:90:99:16:c0:6c:4f:37:5b:98:d4:d8:74:
                    27:98:a1:2e:dd:85:71:20:d2:77:0e:1a:bb:06:0d:
                    ed:8c:d4:56:e8:a5:df:2d:62:8f:6c:24:03:c6:f2:
                    a0:b1:60:68:3b:fd:d7:fd:b1:05:90:63:6f:5a:ad:
                    44:b5:85:3e:8a:f4:a7:5d:06:1d:51:33:84:14:65:
                    b4:85:98:c6:3a:15:5a:f6:52:1a:c0:f5:41:33:7a:
                    c1:2d:82:02:70:98:a6:96:67:65:f3:ba:ef:aa:c5:
                    ac:f1:0f:1f:7d:ad:c0:3d:bd:3f:99:62:ff:73:d6:
                    70:46:e2:16:d7:cf:be:1b:08:32:92:aa:dd:68:ef:
                    52:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:87:F1:08:49:2E:B1:CE:A9:E1:48:2D:C7:77:DB:23:9D:D0:04:8A
            X509v3 Authority Key Identifier:
                keyid:CE:8C:AD:35:62:1A:90:12:C4:0B:36:37:53:7C:A4:0E:3D:07:E8:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B9F08/3090D914A14C11E98475A82DC4F9AE02/zoytNWIakBLECzY3U3ykDj0H6M8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zoytNWIakBLECzY3U3ykDj0H6M8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9F08/3090D914A14C11E98475A82DC4F9AE02/zoytNWIakBLECzY3U3ykDj0H6M8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:ff:c0:96:4c:26:dc:1b:33:d6:2b:1f:c4:26:76:bd:f9:86:
         a0:5c:6b:b4:52:0a:40:c9:ab:35:18:2a:f0:af:27:51:47:f6:
         ee:7d:9f:d8:2c:fd:39:e4:b5:8d:ff:c0:21:c2:89:b3:b4:23:
         b6:cf:38:e4:0b:d9:e2:be:56:bf:f1:cc:ab:ab:b3:19:50:77:
         d3:53:dc:43:7d:77:20:a3:a2:1a:8b:7f:cd:66:ac:f2:5c:ce:
         16:aa:43:b8:be:21:63:b6:c8:d6:f0:96:79:70:23:b2:4e:57:
         2c:bb:fd:cf:d0:87:c2:d7:17:12:70:56:ef:71:6e:42:3a:c1:
         78:5d:6d:23:1a:b9:25:7a:e7:c8:8b:c9:e4:c8:ce:d5:a1:c2:
         60:fb:11:6a:ba:6f:4a:36:0e:69:d0:bb:84:22:27:e7:d1:97:
         79:2f:20:83:1b:bc:35:93:d1:b7:33:d6:90:fd:69:ee:25:4c:
         73:67:6f:ca:21:16:1c:95:15:e2:67:e4:00:07:3d:03:ce:37:
         95:45:5d:99:8e:9f:74:3d:de:db:05:74:31:ef:53:c7:7c:f9:
         39:de:24:84:cf:48:6b:d1:ee:c1:af:5c:1b:85:e0:56:e9:d6:
         e3:c7:c1:f6:93:57:73:d8:03:ff:90:4a:e9:48:21:09:21:41:
         36:6d:b8:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 09:38:18 2026 by rpki-client