Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft
File:                     ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft (raw, json)
Hash identifier:          GbjAu13AKyPsdGxXTivULeXy1aMsiP9u39u7nMgE7hQ=
Subject key identifier:   9A:24:73:5A:BD:92:63:F3:6A:BC:8C:71:D2:77:98:23:BD:4F:56:50
Authority key identifier: 65:D9:19:0F:FC:86:9C:94:F5:82:19:0F:AA:D4:0F:05:14:A5:BA:4E
Certificate issuer:       /CN=A91D58F6/serialNumber=65D9190FFC869C94F582190FAAD40F0514A5BA4E
Certificate serial:       0F38
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZdkZD_yGnJT1ghkPqtQPBRSluk4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft
Manifest number:          0F28
Signing time:             Tue 06 Oct 2026 17:40:38 +0000
Manifest this update:     Tue 06 Oct 2026 17:40:38 +0000
Manifest next update:     Tue 13 Oct 2026 17:40:38 +0000
Files and hashes:         1: ZdkZD_yGnJT1ghkPqtQPBRSluk4.crl (hash: +s8m/IbJUKGNX1LUXwkVO0/citvoz5HxyijZWzBbsvw=)
                          2: C0743AE8A6B611E9AB731B69C4F9AE02.roa (hash: KpHP3J6wffkQyJYpj3PgvrHuC90SNYDQDGnCB+spAtI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.crl
                          rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZdkZD_yGnJT1ghkPqtQPBRSluk4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 17:40:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3896 (0xf38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D58F6, serialNumber=65D9190FFC869C94F582190FAAD40F0514A5BA4E
        Validity
            Not Before: Oct  6 17:40:38 2026 GMT
            Not After : Oct 13 17:40:38 2026 GMT
        Subject: CN=6ac53296-6a7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f6:be:cc:8e:b4:31:65:1d:07:a6:98:5c:b5:
                    d1:84:24:cc:a4:67:b6:f0:bc:26:df:a4:4d:3b:63:
                    2b:24:27:87:45:87:ba:2d:fd:92:d7:af:81:91:9a:
                    67:c8:31:20:90:5a:b6:0c:d3:65:ce:f4:cb:d8:e0:
                    31:b9:9a:38:a2:cf:0b:ae:30:77:8f:cb:8d:d0:4b:
                    c6:b3:55:1b:a8:b3:c7:92:ef:c7:dd:44:dc:a7:c1:
                    f4:3d:3c:5a:c6:34:03:e3:73:4d:20:7f:7b:de:53:
                    f6:ec:e0:f6:34:9a:b0:f2:53:ae:2d:7f:6a:7f:3b:
                    64:70:25:f8:4a:b0:b6:1d:72:c4:2e:b2:0c:94:a8:
                    9b:3c:2d:bb:74:51:d6:3d:36:71:cc:a6:66:38:6c:
                    9b:81:9c:82:68:3c:d3:af:a0:22:83:aa:b8:d9:ce:
                    5f:8f:91:8f:54:bd:c6:79:70:d8:65:d9:20:87:6c:
                    be:db:46:ec:e5:a0:9c:20:d8:39:82:8a:9d:0b:6b:
                    b8:c3:39:9c:df:96:68:1c:57:f4:87:f6:9c:9b:32:
                    91:68:df:d6:12:e7:ed:9e:09:b4:3a:74:ef:38:b5:
                    ae:bb:b6:2b:c9:f2:e3:4b:ca:53:5c:0f:c6:5a:59:
                    29:29:d5:93:b1:63:dd:5e:38:11:73:82:96:2f:c7:
                    7f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:24:73:5A:BD:92:63:F3:6A:BC:8C:71:D2:77:98:23:BD:4F:56:50
            X509v3 Authority Key Identifier:
                keyid:65:D9:19:0F:FC:86:9C:94:F5:82:19:0F:AA:D4:0F:05:14:A5:BA:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZdkZD_yGnJT1ghkPqtQPBRSluk4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:59:d0:de:f4:9f:91:ef:52:76:38:67:8e:8f:d0:36:9c:14:
         50:f2:65:50:e3:4f:03:9b:a2:6a:bc:40:ef:9c:2a:64:f1:ea:
         f2:b1:59:de:2e:73:b9:0b:85:36:88:1b:29:cb:fe:55:5d:20:
         e9:83:32:15:96:91:be:d7:de:28:71:75:8c:f0:c4:f7:0a:2a:
         7f:f7:2f:3a:44:68:3b:1a:af:da:64:63:fd:42:76:9a:ed:82:
         58:14:4a:42:7a:8b:78:cf:6b:cf:c8:0f:e7:db:c4:88:4a:52:
         db:51:f5:0c:32:f8:78:92:0c:50:3a:43:22:96:d2:48:83:6a:
         70:fd:e0:97:58:90:9c:67:94:d3:24:b1:50:37:74:88:df:2a:
         94:6e:7e:3d:63:7e:e7:59:1e:e1:e3:ba:82:47:f7:d3:d1:45:
         28:60:c0:3c:86:3c:dc:72:7c:59:09:c4:19:ee:af:cb:7d:ab:
         9c:24:0a:3e:21:ee:04:bb:1f:bc:5c:60:2d:d0:de:55:a2:32:
         de:79:c6:71:3f:5c:ce:a4:4d:78:9c:b4:a8:05:2f:42:a2:d4:
         c4:e4:19:5d:f5:12:57:8f:e8:86:47:21:06:96:6c:a2:54:57:
         0f:3a:9b:d6:76:7b:34:3f:1a:51:3f:93:b2:4a:26:47:f1:9f:
         85:9a:fd:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 10:07:42 2026 by rpki-client