Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C9E82/E230322A636F11EE97C74B5CC4F9AE02/z9EY2pb_YF-93yeqSqAmO072edo.mft
File:                     z9EY2pb_YF-93yeqSqAmO072edo.mft (raw, json)
Hash identifier:          xOA1HinqOej6IqEiKpRzn5cEwnHQ7rxGuJ8YoySFxWU=
Subject key identifier:   85:01:D6:DE:D4:43:F7:28:C6:10:70:A9:C7:84:F3:01:A2:EF:D8:80
Authority key identifier: CF:D1:18:DA:96:FF:60:5F:BD:DF:27:AA:4A:A0:26:3B:4E:F6:79:DA
Certificate issuer:       /CN=A91C9E82/serialNumber=CFD118DA96FF605FBDDF27AA4AA0263B4EF679DA
Certificate serial:       023B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z9EY2pb_YF-93yeqSqAmO072edo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9E82/E230322A636F11EE97C74B5CC4F9AE02/z9EY2pb_YF-93yeqSqAmO072edo.mft
Manifest number:          023B
Signing time:             Wed 21 Oct 2026 03:03:25 +0000
Manifest this update:     Wed 21 Oct 2026 03:03:25 +0000
Manifest next update:     Wed 28 Oct 2026 03:03:25 +0000
Files and hashes:         1: z9EY2pb_YF-93yeqSqAmO072edo.crl (hash: gLw2SSf/D4fXzetWwg1OsTtbJFHMbCrMrYZVrlcwZcI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9E82/E230322A636F11EE97C74B5CC4F9AE02/z9EY2pb_YF-93yeqSqAmO072edo.crl
                          rsync://rpki.apnic.net/member_repository/A91C9E82/E230322A636F11EE97C74B5CC4F9AE02/z9EY2pb_YF-93yeqSqAmO072edo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z9EY2pb_YF-93yeqSqAmO072edo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Oct 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 571 (0x23b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9E82, serialNumber=CFD118DA96FF605FBDDF27AA4AA0263B4EF679DA
        Validity
            Not Before: Oct 21 03:03:25 2026 GMT
            Not After : Oct 28 03:03:25 2026 GMT
        Subject: CN=6ad82b7d-ed6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:8e:3b:f2:22:84:56:b2:03:e9:fe:d2:5a:7b:
                    02:a0:23:da:c3:d8:35:f8:01:e8:18:b7:5e:ec:ae:
                    ca:b4:a9:31:50:f4:ce:b6:5c:cf:f3:4a:37:15:12:
                    2b:c0:c6:c0:62:3a:9d:9e:4b:6c:7c:16:f3:a5:ad:
                    fe:38:38:18:09:7d:9d:5b:c1:1e:7d:72:62:0d:47:
                    8d:21:a9:07:ca:89:ca:c0:96:b4:63:28:c5:1b:95:
                    1c:f6:4d:70:88:a8:c0:0f:b6:89:88:ef:4c:f9:79:
                    38:bf:a5:45:cb:48:fe:00:17:99:8f:40:b1:ca:03:
                    ae:33:d1:d1:81:b2:6e:7e:50:aa:45:f6:6b:16:09:
                    6d:b9:25:fe:a7:e8:e4:21:d1:b8:78:15:bf:9a:37:
                    83:db:fe:0b:14:47:de:8c:ed:63:df:c7:56:f5:bd:
                    2f:75:d0:f5:2d:de:e0:1f:62:1d:6c:37:1d:c4:03:
                    0b:bd:37:0b:dd:be:ad:33:71:ee:18:02:e9:1b:0b:
                    ba:9b:55:c4:75:33:4c:69:7c:47:c5:64:8c:5f:2a:
                    f1:3c:33:73:4e:ae:77:99:90:23:18:c5:ae:50:fb:
                    bc:07:6b:20:da:e9:05:18:9b:81:bf:cc:75:80:a7:
                    e2:c4:48:f0:a6:87:ae:cb:e5:1c:ea:94:c0:f6:c5:
                    41:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:01:D6:DE:D4:43:F7:28:C6:10:70:A9:C7:84:F3:01:A2:EF:D8:80
            X509v3 Authority Key Identifier:
                keyid:CF:D1:18:DA:96:FF:60:5F:BD:DF:27:AA:4A:A0:26:3B:4E:F6:79:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9E82/E230322A636F11EE97C74B5CC4F9AE02/z9EY2pb_YF-93yeqSqAmO072edo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z9EY2pb_YF-93yeqSqAmO072edo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9E82/E230322A636F11EE97C74B5CC4F9AE02/z9EY2pb_YF-93yeqSqAmO072edo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:b0:97:07:89:54:c0:ea:6c:5f:8a:51:ec:0c:57:ed:70:31:
         1d:d2:66:34:b0:72:b0:d2:17:66:24:2a:9e:73:d6:38:28:2d:
         25:5e:89:3a:51:12:7e:57:7d:c0:af:d3:38:87:92:02:3d:67:
         82:04:26:61:f3:fd:8b:e8:0c:ca:fa:5e:62:af:c7:2a:7d:12:
         eb:98:04:da:91:54:34:18:55:de:3e:a0:31:91:4d:93:b5:8e:
         44:b5:09:98:6f:9a:47:5b:87:d7:15:7b:e2:7f:0b:cf:5d:24:
         a5:bd:98:75:fb:d3:e9:25:e3:04:07:d6:5e:ae:87:39:6b:00:
         c9:08:82:33:84:27:32:a3:a7:89:d9:52:6c:a4:84:86:12:8a:
         b3:f0:c2:44:fd:c7:6a:3d:8a:90:aa:51:c4:d8:44:42:04:32:
         4b:1d:64:90:19:b3:7f:5a:ed:dd:10:4c:01:98:31:94:34:d1:
         d3:12:20:5e:6b:b8:20:c3:85:fe:bd:a7:2c:01:15:23:ce:f8:
         f7:60:21:ea:25:8d:32:b7:bb:26:be:2a:86:5f:e9:db:cc:58:
         1e:9d:62:79:28:f1:2c:d6:46:ad:d9:5a:05:1d:b9:ca:b0:39:
         90:ac:68:89:67:67:75:37:9a:ee:a3:8a:60:0a:98:1b:0b:5c:
         25:8b:b4:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 13:46:32 2026 by rpki-client