Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E9D0C/814F6D041A1A11EC9D1CDF1EC4F9AE02/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.mft
File:                     Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.mft (raw, json)
Hash identifier:          DY6MA/BiGm9dkfOYR3CMRNEoagik9V0RIVEuijRxeB8=
Subject key identifier:   F6:AA:E2:A7:FA:5E:D5:AD:18:DB:6C:81:FF:E3:1D:A6:2A:D6:1F:29
Authority key identifier: 09:DE:19:67:E9:52:EE:8E:1B:2D:D6:0F:88:F6:3B:A2:60:57:53:EF
Certificate issuer:       /CN=A91E9D0C/serialNumber=09DE1967E952EE8E1B2DD60F88F63BA2605753EF
Certificate serial:       05ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E9D0C/814F6D041A1A11EC9D1CDF1EC4F9AE02/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.mft
Manifest number:          05E4
Signing time:             Sun 04 Oct 2026 23:00:10 +0000
Manifest this update:     Sun 04 Oct 2026 23:00:09 +0000
Manifest next update:     Sun 11 Oct 2026 23:00:09 +0000
Files and hashes:         1: Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.crl (hash: wdvd+vtHkeJIwFOShyR4IEx2UiWOLE7bB7JWukEiOlc=)
                          2: 630BCB6E1A1D11EC99B84C20C4F9AE02.roa (hash: 7sdaRztYfffuMPbpIvWHbP2AaEjIDw99pX3bZR2f4wQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E9D0C/814F6D041A1A11EC9D1CDF1EC4F9AE02/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.crl
                          rsync://rpki.apnic.net/member_repository/A91E9D0C/814F6D041A1A11EC9D1CDF1EC4F9AE02/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 23:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1517 (0x5ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E9D0C, serialNumber=09DE1967E952EE8E1B2DD60F88F63BA2605753EF
        Validity
            Not Before: Oct  4 23:00:09 2026 GMT
            Not After : Oct 11 23:00:09 2026 GMT
        Subject: CN=6ac2da79-d4b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:4e:6e:9d:15:3c:41:99:82:b1:8e:55:df:82:
                    8a:c6:d6:f0:b8:92:6e:be:ad:0d:23:87:75:6b:36:
                    72:b2:3d:26:67:ee:37:9a:b7:89:ac:d0:a9:8d:53:
                    73:4b:1c:a8:0c:85:0b:4a:b7:82:40:92:7d:3c:1a:
                    f6:25:6d:a7:16:c9:e9:a7:aa:0b:8e:a9:96:f1:09:
                    71:2e:c2:2a:93:c7:cd:98:36:67:93:a5:91:d4:f2:
                    e1:96:a4:9b:d5:8a:e8:c1:69:17:41:ba:de:84:2b:
                    5a:ab:23:2a:9b:f6:13:65:28:e0:48:c4:79:73:66:
                    30:d5:77:08:bf:49:b2:3e:c0:7f:13:85:74:87:80:
                    27:dc:bc:38:1b:5d:f0:44:c0:b7:a1:93:48:a4:0e:
                    b3:15:c0:32:71:38:87:cc:06:7a:f3:f1:8c:42:b3:
                    d3:d7:77:1d:83:c7:c8:f7:bc:69:c9:8c:b6:a6:cd:
                    c5:bc:d1:8e:17:e9:9a:09:a2:9f:3d:e0:0d:5c:b6:
                    d4:17:3f:c3:28:81:5e:31:f2:f9:61:5b:e4:ec:1a:
                    cf:e5:13:67:f4:68:42:48:91:a1:6a:ba:97:8e:3f:
                    d0:45:df:b0:97:f9:ad:4d:69:a3:72:89:7e:e7:75:
                    6d:1c:da:2d:14:e1:06:1b:01:a5:73:7b:f6:ae:68:
                    11:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:AA:E2:A7:FA:5E:D5:AD:18:DB:6C:81:FF:E3:1D:A6:2A:D6:1F:29
            X509v3 Authority Key Identifier:
                keyid:09:DE:19:67:E9:52:EE:8E:1B:2D:D6:0F:88:F6:3B:A2:60:57:53:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E9D0C/814F6D041A1A11EC9D1CDF1EC4F9AE02/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9D0C/814F6D041A1A11EC9D1CDF1EC4F9AE02/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:93:e9:e6:fb:4a:f7:56:d4:0e:25:a6:5c:2a:13:48:c5:54:
         27:dd:82:88:06:30:83:e5:f6:fb:f5:d5:b7:41:8a:de:42:14:
         b9:21:0e:da:9d:f8:18:e5:65:4d:dd:b4:08:ed:0f:b9:8e:6b:
         67:25:2f:da:c5:89:6e:05:ba:90:69:67:32:76:8e:38:0f:8a:
         92:7c:24:bd:38:80:c2:26:ab:39:42:81:e2:af:60:59:00:c0:
         3c:2a:4e:53:93:17:ec:4a:11:77:01:36:ee:6f:68:ea:d2:90:
         a5:fd:7c:77:68:63:95:a6:73:3c:01:d7:59:00:86:02:f9:0c:
         0f:d4:e9:c3:43:a1:fa:2d:19:72:4b:a8:e0:14:43:a2:b4:41:
         eb:9b:b5:76:5d:8e:89:17:e8:b1:fc:e0:85:2b:07:3e:6b:b8:
         c6:40:7e:1d:30:d8:c1:1f:22:28:fb:45:38:c7:83:f9:4d:ee:
         3b:c4:0f:22:50:bb:67:23:92:8e:0d:50:ce:0c:56:93:b3:f2:
         fc:28:2c:5c:6c:a6:a2:d7:63:7a:0c:f6:88:e5:65:61:80:cc:
         1b:a3:78:52:f3:19:11:5b:0c:7a:57:45:2b:a4:61:72:90:d9:
         f5:16:29:d4:76:b7:93:21:b5:e6:87:c3:cd:6e:00:48:75:9a:
         0d:6f:0c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 17:34:27 2026 by rpki-client