Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E8FFF/5913E262EED111F0B0ACD276736F56BC/zJ8vu_rtxEx2MrGMK9O8WOzte_U.mft
File:                     zJ8vu_rtxEx2MrGMK9O8WOzte_U.mft (raw, json)
Hash identifier:          fEqWsFIMkPXZMM0UsfvfrQdbrSxupyg/X+ZdI7oJ5G4=
Subject key identifier:   F3:33:F3:C4:C1:2A:78:A6:10:60:76:8A:4F:54:01:D3:79:5F:8A:81
Authority key identifier: CC:9F:2F:BB:FA:ED:C4:4C:76:32:B1:8C:2B:D3:BC:58:EC:ED:7B:F5
Certificate issuer:       /CN=A91E8FFF/serialNumber=CC9F2FBBFAEDC44C7632B18C2BD3BC58ECED7BF5
Certificate serial:       94
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zJ8vu_rtxEx2MrGMK9O8WOzte_U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8FFF/5913E262EED111F0B0ACD276736F56BC/zJ8vu_rtxEx2MrGMK9O8WOzte_U.mft
Manifest number:          92
Signing time:             Mon 19 Oct 2026 08:10:42 +0000
Manifest this update:     Mon 19 Oct 2026 08:10:41 +0000
Manifest next update:     Mon 26 Oct 2026 08:10:41 +0000
Files and hashes:         1: zJ8vu_rtxEx2MrGMK9O8WOzte_U.crl (hash: YIJyZKu/ypYd72kmMcclpRCmnIDTlvLj7Uv0M2ugSxA=)
                          2: DBA60106EED111F0AB3DEEA1736F56BC.roa (hash: Zm5NVQiX1B1lMh6YYC6ofTBSfpDnYcLSn7pw+rOzSFc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8FFF/5913E262EED111F0B0ACD276736F56BC/zJ8vu_rtxEx2MrGMK9O8WOzte_U.crl
                          rsync://rpki.apnic.net/member_repository/A91E8FFF/5913E262EED111F0B0ACD276736F56BC/zJ8vu_rtxEx2MrGMK9O8WOzte_U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zJ8vu_rtxEx2MrGMK9O8WOzte_U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Oct 2026 08:10:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 148 (0x94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8FFF, serialNumber=CC9F2FBBFAEDC44C7632B18C2BD3BC58ECED7BF5
        Validity
            Not Before: Oct 19 08:10:41 2026 GMT
            Not After : Oct 26 08:10:41 2026 GMT
        Subject: CN=6ad5d081-935d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:90:cb:bb:bf:58:9e:0a:20:16:60:7c:80:93:
                    bc:4b:85:86:5b:87:04:0f:e1:ac:28:d5:a3:49:21:
                    24:5f:c9:b1:fe:7e:53:f4:42:0f:47:ce:06:62:5d:
                    0b:9e:18:44:51:c4:15:a6:28:35:45:be:0c:16:30:
                    1f:af:30:47:84:f1:61:90:e0:7d:34:91:0e:2b:b5:
                    fa:6a:99:8f:0e:2e:09:93:9d:05:b6:52:16:f6:8e:
                    f2:03:ce:db:19:32:7e:f2:96:9f:86:d3:56:e0:23:
                    dd:9a:40:76:04:09:df:35:c8:1d:a3:bb:8d:e8:90:
                    05:ef:0a:be:1c:72:80:06:2c:3a:34:89:ad:dc:15:
                    87:ed:de:c6:35:7f:7e:fe:22:13:fd:80:39:17:5d:
                    be:70:ef:29:69:b3:be:a9:8c:db:ac:a6:b3:94:70:
                    ed:c7:58:13:ef:c5:01:42:e4:f1:bd:ad:9a:9f:34:
                    e4:37:dd:f2:a4:c5:72:aa:2d:c9:2b:c9:74:69:70:
                    11:8a:69:37:c1:1d:f9:bb:4b:c6:fa:69:a3:14:25:
                    6a:f5:1e:bc:47:d7:31:f1:e4:c9:1c:39:c6:22:0a:
                    0d:ba:ac:f5:29:f4:6f:44:dc:fc:1c:75:09:5b:65:
                    b8:80:af:93:80:00:58:36:6f:c2:d1:0e:72:eb:a8:
                    58:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:33:F3:C4:C1:2A:78:A6:10:60:76:8A:4F:54:01:D3:79:5F:8A:81
            X509v3 Authority Key Identifier:
                keyid:CC:9F:2F:BB:FA:ED:C4:4C:76:32:B1:8C:2B:D3:BC:58:EC:ED:7B:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8FFF/5913E262EED111F0B0ACD276736F56BC/zJ8vu_rtxEx2MrGMK9O8WOzte_U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zJ8vu_rtxEx2MrGMK9O8WOzte_U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8FFF/5913E262EED111F0B0ACD276736F56BC/zJ8vu_rtxEx2MrGMK9O8WOzte_U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:55:98:51:b1:da:50:8f:2f:b0:b6:08:30:23:69:05:37:1e:
         a4:e2:ca:c7:9c:7b:68:dd:d3:ff:db:cc:33:a7:c5:2b:2b:14:
         bf:fd:45:2d:f8:c5:cc:e9:78:38:be:39:69:8f:3a:e4:92:12:
         08:9c:39:f1:9d:bf:ae:4d:7d:81:f8:69:46:39:43:33:81:48:
         52:fd:bc:09:ab:c7:ed:12:41:8e:08:1c:9e:d7:93:cc:09:12:
         d0:75:29:a2:25:cb:94:d4:bc:4a:df:bf:95:1b:45:6b:bc:bd:
         b8:6b:53:6a:bb:46:30:77:33:2c:49:e9:9e:d3:f8:72:7d:bf:
         f3:ef:6c:f9:f9:a2:bc:5e:9e:7d:85:6a:11:a8:83:e3:83:a3:
         b8:c3:fa:64:39:9b:72:97:3f:ce:66:01:3c:3d:80:be:9f:1f:
         07:e1:ce:4c:c9:20:68:aa:91:e6:16:38:0d:3f:f1:81:f2:a5:
         68:87:8c:ac:1d:f8:59:e8:9c:d0:1d:f8:22:ff:3a:d1:2b:88:
         9b:58:7b:d0:14:0e:a3:86:04:45:bb:25:ee:55:30:51:59:bb:
         62:97:57:d0:b7:e3:2f:86:cc:6b:a8:72:93:8f:91:f9:f8:dd:
         98:e9:18:a1:af:e3:94:e8:34:1d:fd:e1:39:ab:c0:d3:93:bd:
         d4:96:c3:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 18:24:14 2026 by rpki-client