Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/zdfMWZTjQE5sI66UKlkhi1fFwTE.mft
File:                     zdfMWZTjQE5sI66UKlkhi1fFwTE.mft (raw, json)
Hash identifier:          1GyBgN9ku43xA5B4fKFPbirSYcE8dzTbO1IgmPHDbZM=
Subject key identifier:   E6:D7:4E:26:50:E5:A2:40:DF:A5:10:A3:E9:C4:2F:3D:85:6F:2F:E2
Authority key identifier: CD:D7:CC:59:94:E3:40:4E:6C:23:AE:94:2A:59:21:8B:57:C5:C1:31
Certificate issuer:       /CN=A91EA6A1/serialNumber=CDD7CC5994E3404E6C23AE942A59218B57C5C131
Certificate serial:       0286
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zdfMWZTjQE5sI66UKlkhi1fFwTE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/zdfMWZTjQE5sI66UKlkhi1fFwTE.mft
Manifest number:          0274
Signing time:             Sat 03 Oct 2026 02:37:09 +0000
Manifest this update:     Sat 03 Oct 2026 02:37:09 +0000
Manifest next update:     Sat 10 Oct 2026 02:37:09 +0000
Files and hashes:         1: zdfMWZTjQE5sI66UKlkhi1fFwTE.crl (hash: 17IrPQjeWYScZ0KwOKPN2gefWmgqRiyieJAD26BGzCo=)
                          2: 1E7F6B9603C211EEB2272068C4F9AE02.roa (hash: 63/+lesN0/eCHS2MKvIDobrmNwR0+nGA552s4bk+OsY=)
                          3: 1DDE652A03C211EEB2272068C4F9AE02.roa (hash: llFnAd4PvWtf3MG4Cdslgb2xYToNMlGGxLhDUepbhB0=)
                          4: 1D45B78003C211EEB2272068C4F9AE02.roa (hash: C3/n/+v8kI1L85XbnP1WA7ETUgCOUM9dKDiIQ1P+/Ys=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/zdfMWZTjQE5sI66UKlkhi1fFwTE.crl
                          rsync://rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/zdfMWZTjQE5sI66UKlkhi1fFwTE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zdfMWZTjQE5sI66UKlkhi1fFwTE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 02:37:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 646 (0x286)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA6A1, serialNumber=CDD7CC5994E3404E6C23AE942A59218B57C5C131
        Validity
            Not Before: Oct  3 02:37:09 2026 GMT
            Not After : Oct 10 02:37:09 2026 GMT
        Subject: CN=6ac06a55-1823
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:df:62:44:6c:5f:dc:23:17:3c:ec:ec:f0:7f:
                    85:1e:f6:0b:8b:d4:0c:46:e8:57:e3:e5:54:f8:f0:
                    3c:13:71:77:96:ff:27:b6:48:8d:20:b3:28:7c:d4:
                    46:a3:65:45:19:d1:e6:16:5c:5e:be:5a:32:d4:72:
                    f8:bf:66:75:2f:d8:34:77:21:2c:2c:31:57:de:39:
                    7b:c2:66:97:25:36:43:0c:07:6e:a2:d7:ee:af:bb:
                    66:c8:8c:2e:04:12:06:ed:e7:f4:97:5f:52:1c:53:
                    fb:f6:60:0c:86:7e:a8:90:7e:8c:1c:d4:ea:ba:2d:
                    95:95:a8:9d:2c:23:13:e6:f4:76:93:92:51:8b:07:
                    6f:4c:89:7d:41:19:1e:b5:2f:b7:ef:70:64:40:c3:
                    d0:00:56:56:19:6b:56:d5:f5:ca:fb:c5:7a:fa:6b:
                    a8:df:3b:07:37:c5:86:c9:25:bd:98:d1:db:5c:6a:
                    28:e1:4a:87:7c:8e:df:13:fd:34:f3:eb:5d:fb:31:
                    02:16:a4:1f:ac:59:d6:23:f0:3a:4c:0d:34:48:d2:
                    6a:05:9b:71:6f:65:ff:40:a8:46:9d:89:b3:cc:36:
                    0c:f8:4c:f9:12:59:36:a3:aa:a9:4a:7c:dd:06:d8:
                    25:d5:a7:2a:e8:5d:5d:ab:fb:03:20:5e:7a:50:0e:
                    39:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:D7:4E:26:50:E5:A2:40:DF:A5:10:A3:E9:C4:2F:3D:85:6F:2F:E2
            X509v3 Authority Key Identifier:
                keyid:CD:D7:CC:59:94:E3:40:4E:6C:23:AE:94:2A:59:21:8B:57:C5:C1:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/zdfMWZTjQE5sI66UKlkhi1fFwTE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zdfMWZTjQE5sI66UKlkhi1fFwTE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/zdfMWZTjQE5sI66UKlkhi1fFwTE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:34:a3:46:5f:df:d4:3f:6d:91:47:50:cc:00:2d:95:26:0e:
         d8:b0:79:5b:82:e6:cc:de:78:e2:3e:a3:fe:fc:8d:77:98:2c:
         5a:3b:d9:f0:27:1e:b5:ca:f4:d0:4a:39:3a:38:26:b5:e0:bf:
         b9:5b:2d:5a:64:9a:5a:ea:29:6d:78:e5:29:0c:86:28:ed:35:
         22:d2:11:08:3d:a5:32:7f:d6:da:63:87:74:56:af:8f:42:55:
         eb:f4:a9:03:9e:d3:d1:1c:93:04:b7:50:57:d4:63:0f:fb:ee:
         f4:b6:19:ce:67:e5:a4:4d:cb:9c:b4:f6:a5:6c:51:1b:0c:02:
         c0:cd:f7:78:6f:45:52:cf:30:f1:83:64:0c:b9:8f:e2:ac:87:
         33:50:50:6f:0e:c8:6f:e8:5a:ce:0e:a8:dd:f8:b3:9a:95:b3:
         52:ad:54:7f:8c:d7:6d:79:0c:f9:56:86:ba:a0:a8:cb:c6:28:
         f3:75:62:0a:aa:08:d3:a7:58:6e:c3:41:fa:e3:5e:f2:04:f5:
         20:4d:31:3e:c8:c1:bc:b5:15:5e:29:b6:bb:46:d4:b5:c6:5e:
         86:2d:02:ab:c0:77:01:d5:e1:e2:f2:9d:14:2f:01:2e:62:48:
         37:aa:59:58:d2:eb:e8:c9:d1:8f:67:23:15:4e:6a:bc:6a:a5:
         18:9e:4b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:05:24 2026 by rpki-client