Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D2B9A/77969B8CF12211F0AC5CDA7E4E6F56BC/SZ1pGw9zLZAG6VE8YLc2a05pBAA.mft
File:                     SZ1pGw9zLZAG6VE8YLc2a05pBAA.mft (raw, json)
Hash identifier:          UfHyqUnf3Y0G1GrioeOgGYH14N2hvc1n+HiVATojf8E=
Subject key identifier:   15:93:8D:BC:45:AC:DA:20:60:61:89:3F:75:3A:BC:6B:35:C2:89:9B
Authority key identifier: 49:9D:69:1B:0F:73:2D:90:06:E9:51:3C:60:B7:36:6B:4E:69:04:00
Certificate issuer:       /CN=A91D2B9A/serialNumber=499D691B0F732D9006E9513C60B7366B4E690400
Certificate serial:       98
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SZ1pGw9zLZAG6VE8YLc2a05pBAA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D2B9A/77969B8CF12211F0AC5CDA7E4E6F56BC/SZ1pGw9zLZAG6VE8YLc2a05pBAA.mft
Manifest number:          96
Signing time:             Fri 23 Oct 2026 08:03:29 +0000
Manifest this update:     Fri 23 Oct 2026 08:03:29 +0000
Manifest next update:     Fri 30 Oct 2026 08:03:29 +0000
Files and hashes:         1: SZ1pGw9zLZAG6VE8YLc2a05pBAA.crl (hash: iRqIpb/3EOE4SM0lkgtFYwqVViKSdaCd209/+Tovhbk=)
                          2: 75BE67B2F12311F09E054F8D4F6F56BC.roa (hash: QeHn1agdKxmdJdH278JH44lkIuCADGys4RpsqprN2FU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D2B9A/77969B8CF12211F0AC5CDA7E4E6F56BC/SZ1pGw9zLZAG6VE8YLc2a05pBAA.crl
                          rsync://rpki.apnic.net/member_repository/A91D2B9A/77969B8CF12211F0AC5CDA7E4E6F56BC/SZ1pGw9zLZAG6VE8YLc2a05pBAA.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SZ1pGw9zLZAG6VE8YLc2a05pBAA.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Oct 2026 08:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 152 (0x98)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D2B9A, serialNumber=499D691B0F732D9006E9513C60B7366B4E690400
        Validity
            Not Before: Oct 23 08:03:29 2026 GMT
            Not After : Oct 30 08:03:29 2026 GMT
        Subject: CN=6adb14d1-cd00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a6:eb:15:15:a0:f3:94:d0:b9:b2:0f:26:fa:
                    c1:d1:2d:ac:dc:a1:24:ab:d5:66:06:a2:87:bc:c7:
                    2b:17:0a:3b:14:e4:dd:29:2b:36:48:80:fa:ea:63:
                    71:93:f1:a3:8e:9b:c7:b2:d5:80:ee:e2:91:61:75:
                    fe:f0:e0:3d:f0:6f:7c:f3:68:b9:07:84:f4:ca:7b:
                    5e:96:09:f3:f2:d4:66:fd:9d:bb:89:68:18:49:68:
                    ba:ee:8f:e2:19:7b:ae:7e:fb:3d:6b:c0:81:f9:14:
                    c4:01:09:e7:ef:11:ba:8d:1e:9f:15:b6:74:41:02:
                    e7:8b:82:4d:89:ea:ae:a0:64:65:c4:ec:ca:aa:7c:
                    7b:03:0a:ed:33:5f:74:e1:29:3b:a9:66:80:0a:63:
                    27:45:24:9b:3c:ab:10:38:53:c0:a1:fa:8c:a5:a3:
                    3a:2d:c1:a6:2d:5b:a2:7c:61:5f:0b:93:c9:41:b5:
                    96:2a:e0:0b:5e:0b:a5:ab:42:fb:b7:cc:c0:66:29:
                    d6:60:10:08:f0:f5:63:80:0d:97:9a:b1:72:98:c2:
                    a5:e3:93:6f:4b:4e:82:21:f9:44:a7:38:c8:c1:12:
                    c6:2e:4b:fc:af:65:76:b8:66:e0:c3:12:93:90:fb:
                    ce:4f:30:fa:8b:5a:2b:53:64:dd:e8:80:50:d0:9b:
                    65:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:93:8D:BC:45:AC:DA:20:60:61:89:3F:75:3A:BC:6B:35:C2:89:9B
            X509v3 Authority Key Identifier:
                keyid:49:9D:69:1B:0F:73:2D:90:06:E9:51:3C:60:B7:36:6B:4E:69:04:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D2B9A/77969B8CF12211F0AC5CDA7E4E6F56BC/SZ1pGw9zLZAG6VE8YLc2a05pBAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SZ1pGw9zLZAG6VE8YLc2a05pBAA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2B9A/77969B8CF12211F0AC5CDA7E4E6F56BC/SZ1pGw9zLZAG6VE8YLc2a05pBAA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:4f:87:1e:95:a5:bd:06:50:d3:c3:8d:16:fb:8a:4a:f2:3e:
         cc:e0:86:ae:e0:15:42:bd:18:74:c7:cc:b0:56:2e:12:75:d4:
         28:f9:b7:3d:ef:0a:c5:c3:52:94:bf:f8:53:b1:1d:ca:b9:0f:
         54:17:5c:b4:b3:86:b4:f2:23:af:0a:26:3a:57:f1:56:d0:0e:
         1e:0a:61:69:cd:69:03:1e:8b:2d:62:3d:25:c7:16:a1:0d:49:
         c8:88:7a:ec:0d:32:e3:6f:7c:ce:30:76:2c:f4:0c:15:bb:36:
         6b:a8:1b:3b:26:16:34:eb:64:a3:42:7e:fc:18:e4:94:1e:9a:
         02:95:f7:44:bb:19:f7:9c:82:c0:cf:81:47:7e:a7:22:45:51:
         24:f4:d0:31:56:27:f2:e4:c4:6a:e2:e2:a7:29:d1:62:1a:cc:
         9a:4f:08:cb:3e:dc:7b:2c:7a:5f:15:14:00:13:03:a4:99:fb:
         5c:dc:c5:40:26:3d:ab:e8:41:a3:55:a2:ab:be:d9:b4:c2:da:
         75:2a:8e:54:ae:33:7e:cd:16:c2:2b:a6:2a:51:0c:06:ad:33:
         61:34:54:63:4d:e9:56:61:ce:e3:a9:4d:b1:32:43:61:65:5e:
         27:a2:a5:2e:4e:7a:4c:4c:1f:04:b5:ab:7c:78:53:8b:2a:20:
         26:db:ad:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 18:47:24 2026 by rpki-client