Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D624F/0B913B0EB46F11EAA7FC8A09C4F9AE02/zzsT07SYEjiVRn-_iuTtv-PJPXg.mft
File:                     zzsT07SYEjiVRn-_iuTtv-PJPXg.mft (raw, json)
Hash identifier:          Ce6arbF+x5Kk9s1uGOrun+c0LNJnfiamsTPlJrMDwMU=
Subject key identifier:   97:FF:17:6E:A1:F9:E7:E3:F3:F9:4B:4F:4D:1B:F9:42:AB:68:1D:5F
Authority key identifier: CF:3B:13:D3:B4:98:12:38:95:46:7F:BF:8A:E4:ED:BF:E3:C9:3D:78
Certificate issuer:       /CN=A91D624F/serialNumber=CF3B13D3B498123895467FBF8AE4EDBFE3C93D78
Certificate serial:       09CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zzsT07SYEjiVRn-_iuTtv-PJPXg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D624F/0B913B0EB46F11EAA7FC8A09C4F9AE02/zzsT07SYEjiVRn-_iuTtv-PJPXg.mft
Manifest number:          09C0
Signing time:             Sun 04 Oct 2026 19:57:53 +0000
Manifest this update:     Sun 04 Oct 2026 19:57:52 +0000
Manifest next update:     Sun 11 Oct 2026 19:57:52 +0000
Files and hashes:         1: zzsT07SYEjiVRn-_iuTtv-PJPXg.crl (hash: ayI1bRei9ZBsspcq10XZuyTZSsrObkt2jds4ZHlVmps=)
                          2: E43DC97CB46F11EA889ACA09C4F9AE02.roa (hash: 4CJejTHtynL+BrSqDFZ0izetNY3w+q46K5KLuu2Bpf8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D624F/0B913B0EB46F11EAA7FC8A09C4F9AE02/zzsT07SYEjiVRn-_iuTtv-PJPXg.crl
                          rsync://rpki.apnic.net/member_repository/A91D624F/0B913B0EB46F11EAA7FC8A09C4F9AE02/zzsT07SYEjiVRn-_iuTtv-PJPXg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zzsT07SYEjiVRn-_iuTtv-PJPXg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 19:57:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2506 (0x9ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D624F, serialNumber=CF3B13D3B498123895467FBF8AE4EDBFE3C93D78
        Validity
            Not Before: Oct  4 19:57:52 2026 GMT
            Not After : Oct 11 19:57:52 2026 GMT
        Subject: CN=6ac2afc0-eca3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:91:97:96:38:a4:da:a6:0b:d4:35:ea:dc:2c:
                    af:36:9c:15:49:de:69:f3:65:cd:3d:80:d8:dc:89:
                    64:0b:c6:91:7b:88:7f:36:c5:a7:22:75:fa:00:b8:
                    c0:ea:5c:59:06:5e:38:25:b7:31:b3:96:08:b0:8a:
                    13:5a:29:e9:a5:cd:fa:9b:32:c0:6b:4b:9e:72:56:
                    67:e3:78:e0:22:fd:4b:52:d3:42:2f:c8:ed:38:69:
                    9d:ec:96:1e:78:61:7b:15:c6:a3:64:e8:ec:d3:f3:
                    ec:17:72:38:24:7d:ed:5b:92:4b:71:47:cc:83:be:
                    08:41:ee:5b:cb:53:b4:92:c3:a0:09:c5:9e:1e:7e:
                    2d:ec:29:40:05:21:e6:ce:de:2f:c5:b1:84:0c:7f:
                    b7:08:c8:ad:84:bf:c1:2f:ec:52:2b:79:16:d1:7a:
                    18:37:ee:e9:5e:8e:7f:52:a1:81:55:e6:72:c4:d7:
                    1a:5b:8c:73:4d:b8:13:98:86:c5:1b:31:10:d0:86:
                    ed:de:ca:0d:f3:67:06:7b:a2:73:9d:ce:d6:89:c9:
                    90:4d:cf:1b:d2:2d:cf:4a:9e:ea:63:40:16:8b:24:
                    a8:cd:f3:17:ff:31:a7:1d:e7:f2:f2:6c:e7:27:cf:
                    c2:52:63:2d:12:80:c8:3f:a0:48:f9:0c:d3:92:61:
                    09:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:FF:17:6E:A1:F9:E7:E3:F3:F9:4B:4F:4D:1B:F9:42:AB:68:1D:5F
            X509v3 Authority Key Identifier:
                keyid:CF:3B:13:D3:B4:98:12:38:95:46:7F:BF:8A:E4:ED:BF:E3:C9:3D:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D624F/0B913B0EB46F11EAA7FC8A09C4F9AE02/zzsT07SYEjiVRn-_iuTtv-PJPXg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zzsT07SYEjiVRn-_iuTtv-PJPXg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D624F/0B913B0EB46F11EAA7FC8A09C4F9AE02/zzsT07SYEjiVRn-_iuTtv-PJPXg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:48:cf:95:1e:16:75:c6:9d:b8:de:12:f4:74:fe:2f:c7:b5:
         5e:09:64:c3:0a:87:fc:2e:55:dd:f0:e6:0c:91:14:b0:d2:47:
         0d:af:36:73:5b:45:39:48:2e:5a:f5:78:36:8d:f6:24:3b:8a:
         e5:61:f6:f1:5c:ca:a0:c4:56:14:b0:0d:1d:9b:ed:55:a9:0b:
         26:fd:ba:4c:72:ca:cf:eb:b9:a1:ea:c3:c1:51:34:ac:82:72:
         7d:19:7b:cd:cc:02:aa:bc:b9:a6:2a:81:2b:9d:51:06:11:d1:
         44:1d:62:91:8c:d8:f5:d5:6a:8f:c8:28:80:6f:b5:e4:c8:ff:
         b8:25:eb:6c:bf:61:e9:79:69:4f:21:e6:74:f6:3c:72:7b:88:
         87:49:d0:e7:04:eb:6a:ff:c8:c7:f6:0d:a7:56:db:99:c1:34:
         2c:7a:1e:e1:a4:e6:bc:cf:c3:d8:49:64:b9:79:20:47:65:47:
         f5:0a:41:d7:79:91:34:6d:ca:bf:62:f4:a1:a5:40:f0:35:50:
         89:96:2e:a2:37:e4:e1:65:0e:9f:77:c9:09:02:7a:6d:db:69:
         ae:4d:5b:b5:fb:b0:30:8c:f2:e6:38:b5:0d:72:f8:76:0a:7e:
         37:8a:44:1a:2a:b5:34:03:ba:50:f1:16:ee:5c:cd:a9:9c:0f:
         eb:91:19:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 18:15:40 2026 by rpki-client