Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FF14D/9352CD5E939A11F098B82C0EC4F9AE02/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.mft
File:                     ZDd-hxhm3TdOxZ4jg7oQ-mox__0.mft (raw, json)
Hash identifier:          P1ngcFfNJvy6YMGqt4DgioaEeLQRddIJHimhGasadyE=
Subject key identifier:   45:31:20:D4:4D:F6:79:17:0E:B5:45:D9:AE:A2:80:22:36:82:54:13
Authority key identifier: 64:37:7E:87:18:66:DD:37:4E:C5:9E:23:83:BA:10:FA:6A:31:FF:FD
Certificate issuer:       /CN=A91FF14D/serialNumber=64377E871866DD374EC59E2383BA10FA6A31FFFD
Certificate serial:       C0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FF14D/9352CD5E939A11F098B82C0EC4F9AE02/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.mft
Manifest number:          BD
Signing time:             Sat 19 Sep 2026 06:58:50 +0000
Manifest this update:     Sat 19 Sep 2026 06:58:50 +0000
Manifest next update:     Sat 26 Sep 2026 06:58:50 +0000
Files and hashes:         1: ZDd-hxhm3TdOxZ4jg7oQ-mox__0.crl (hash: C/8EkipRj5Ga8oYdl6hv+sABwfYiAdFyPteI9j8a1P0=)
                          2: 18F61C18939B11F0820C0E13C4F9AE02.roa (hash: 4erGdBnjkoQaip/prXBFbazFGlYREkwzQKijTls7llo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FF14D/9352CD5E939A11F098B82C0EC4F9AE02/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.crl
                          rsync://rpki.apnic.net/member_repository/A91FF14D/9352CD5E939A11F098B82C0EC4F9AE02/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 192 (0xc0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FF14D, serialNumber=64377E871866DD374EC59E2383BA10FA6A31FFFD
        Validity
            Not Before: Sep 19 06:58:50 2026 GMT
            Not After : Sep 26 06:58:50 2026 GMT
        Subject: CN=6aae32aa-c829
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0a:43:24:6d:0d:05:bc:91:ea:e2:4f:9d:e9:
                    9a:6f:ae:75:ca:cb:f6:f9:c3:bc:ce:e9:f1:83:b6:
                    41:1c:86:e5:b4:31:b0:d8:3e:3b:09:c3:56:85:d8:
                    56:ec:96:fc:bc:cc:80:ab:79:d9:66:c6:b8:39:fe:
                    64:42:e8:20:ca:5f:6f:bb:3b:c4:b8:f8:ef:35:26:
                    92:f9:1c:9e:f2:ac:24:c6:00:5f:61:a3:75:c1:27:
                    1e:ee:19:c8:7a:71:2e:51:64:d2:47:70:b3:0f:53:
                    24:2d:3e:42:4a:bc:c5:5b:95:45:33:e3:29:7a:33:
                    3c:bb:5b:c8:50:3e:06:7c:da:38:54:8e:c4:fd:9a:
                    b3:d1:f2:e0:62:f0:62:05:19:ac:c4:32:96:ac:47:
                    3e:f6:20:aa:b6:54:f6:35:47:12:5a:f7:66:e9:2d:
                    87:2c:2f:b4:66:c4:9a:3d:d1:1b:c6:77:4c:84:73:
                    74:86:95:c0:f7:31:4a:67:0b:cf:f5:b6:f2:5b:c9:
                    04:f3:6b:c7:66:54:dd:b1:a2:da:4b:9b:ac:aa:69:
                    46:65:b9:b9:43:df:f7:26:63:37:15:11:f6:06:c4:
                    1c:e1:15:ac:4f:ae:db:59:16:06:3c:26:9b:97:4c:
                    b0:e7:36:fb:a6:45:19:69:e6:8c:bd:01:b7:c0:f4:
                    13:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:31:20:D4:4D:F6:79:17:0E:B5:45:D9:AE:A2:80:22:36:82:54:13
            X509v3 Authority Key Identifier:
                keyid:64:37:7E:87:18:66:DD:37:4E:C5:9E:23:83:BA:10:FA:6A:31:FF:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FF14D/9352CD5E939A11F098B82C0EC4F9AE02/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF14D/9352CD5E939A11F098B82C0EC4F9AE02/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:f9:e0:45:14:e8:0f:00:7a:77:ab:da:1d:e7:61:95:5b:c6:
         22:3b:8f:3f:ab:43:44:17:be:47:7b:2d:a1:41:09:9b:4a:e6:
         58:fd:65:d0:f0:de:03:4e:61:67:62:5f:d2:a7:ae:c5:b9:7c:
         b8:33:8a:b7:f9:26:76:d4:27:b5:91:45:24:35:6d:70:5e:5d:
         96:71:ce:68:49:80:4d:7b:24:24:2f:b4:1d:45:b6:05:09:fd:
         1e:bf:cd:35:83:7b:e7:c0:c1:5f:97:43:61:5e:b7:c7:7f:3e:
         86:94:16:b9:a4:a2:47:cf:e0:bb:6c:bd:7a:64:8e:8e:63:c6:
         0f:31:ea:e7:38:ec:25:23:05:48:f5:c7:cb:25:6d:7e:79:3d:
         a7:f5:61:46:54:57:c9:4b:05:5f:38:2e:df:7c:b4:8d:e1:46:
         7e:89:c7:2b:fe:3a:f1:8a:95:c9:99:ff:b5:d3:8d:51:b6:ba:
         27:57:8f:f0:50:fa:54:56:3c:53:69:64:5b:0e:72:53:fe:e4:
         ce:11:23:9d:8c:b1:7f:4e:f4:93:0e:fd:0b:ae:d5:39:c2:e4:
         1c:1e:63:dc:46:f2:64:cf:54:00:66:b2:6c:13:51:41:bb:68:
         f6:20:d5:af:3d:d4:80:e4:b9:2c:4f:8b:d7:6c:72:51:77:1c:
         74:bd:57:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 04:16:26 2026 by rpki-client