Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft
File:                     zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft (raw, json)
Hash identifier:          aHXp3t8VEnhqOHxDdmFps5UzTxqgEKsL8R7twI/Is7w=
Subject key identifier:   CB:C8:E1:55:54:F9:44:64:06:A7:83:A9:D3:CA:A9:DE:6A:91:AA:D5
Authority key identifier: CE:E4:16:01:EE:A9:F5:1B:35:25:DA:55:DD:4A:C9:5C:EF:AF:5A:BC
Certificate issuer:       /CN=A912FC73/serialNumber=CEE41601EEA9F51B3525DA55DD4AC95CEFAF5ABC
Certificate serial:       0618
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft
Manifest number:          0556
Signing time:             Thu 12 Nov 2026 23:42:17 +0000
Manifest this update:     Thu 12 Nov 2026 23:42:16 +0000
Manifest next update:     Thu 19 Nov 2026 23:42:16 +0000
Files and hashes:         1: zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl (hash: FFnbvMmlzyHErw65H4v7niJqfRg8Wpo0dP1mtUzUKdw=)
                          2: 33B5008E817811F198EF28E28EA30FBC.roa (hash: 3KQQOe77uBIe2bfugmSonIMCKPZtyrqafT5scatLfZA=)
                          3: 85E1EA3CBD2011F181CACAEB4C11F970.roa (hash: 0fFpLgylWik5AUihdajfhV+EarzIno/5HOOHH7xFom8=)
                          4: FCC76842A3FE11F1AD0732AA6311F970.roa (hash: Dbd87sYM2xjyTjqX3ZIXD0xaqX4gJqpBMsR2NeyvrX0=)
                          5: 5C92DD9AA40111F1A3E298106411F970.roa (hash: KG+G+msG3NFkOvmjS926LU4fDxLG3jRizDtniggkfB4=)
                          6: 62D9B996A3FF11F19DE49AE66311F970.roa (hash: vkm51HCZULUC34XeMCKyLkV+vEOyxt2XA1TlXEMZT6U=)
                          7: 3050FB0E9F7511F085D9D70FC4F9AE02.roa (hash: cxFpd8YkhhSyEo49SdD/UDOXzwAIuaaISKDDdB8uQeA=)
                          8: 37D5EC8CB68A11F09D04E950C4F9AE02.roa (hash: K5UpNUHa6t6Y1d0NaTfgXbCJO963+ZytJ1fygBZFsus=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl
                          rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Nov 2026 23:42:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1560 (0x618)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912FC73, serialNumber=CEE41601EEA9F51B3525DA55DD4AC95CEFAF5ABC
        Validity
            Not Before: Nov 12 23:42:16 2026 GMT
            Not After : Nov 19 23:42:16 2026 GMT
        Subject: CN=6af64ed9-9bc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:61:ca:f5:97:1d:e9:59:44:b9:fa:c3:6e:1a:
                    ae:de:b2:24:2e:13:c1:07:88:7b:90:e0:92:1a:6f:
                    21:69:19:31:d5:3a:2d:8f:3d:07:18:a9:5c:d5:9b:
                    55:25:0a:ee:1c:6e:2e:bf:c0:1d:57:0b:bf:49:18:
                    9f:7f:d3:63:0e:ab:01:a9:c1:19:8b:a1:d3:3a:0d:
                    40:df:a2:22:de:c7:22:27:5b:25:06:ee:e5:10:ef:
                    fc:d0:38:77:7e:f9:85:7d:f2:45:e2:17:eb:7f:25:
                    87:ff:c9:7e:59:a0:8b:e6:a4:d8:a3:89:94:aa:2d:
                    fe:40:c8:7a:98:14:de:53:53:c6:27:f3:7a:fe:96:
                    07:07:8f:d5:3e:59:a8:5b:87:58:68:14:1c:42:7e:
                    55:8c:6e:31:0f:1a:04:5e:47:6c:e9:b8:07:d8:21:
                    fe:c2:32:85:fc:e3:61:25:ea:c5:65:55:06:0f:bd:
                    be:8d:5c:6b:fd:60:75:a2:a5:95:e0:f8:bc:ad:67:
                    c3:dc:15:7b:2a:e0:13:d1:f7:c7:a3:61:3f:82:55:
                    3d:89:22:2c:03:9e:6f:62:25:a7:b3:74:0a:57:8d:
                    98:61:57:0a:2a:6d:21:0e:ab:a2:52:0e:1d:e1:ca:
                    bb:7f:58:ea:5d:34:43:2c:75:92:83:82:8c:51:07:
                    fc:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:C8:E1:55:54:F9:44:64:06:A7:83:A9:D3:CA:A9:DE:6A:91:AA:D5
            X509v3 Authority Key Identifier:
                keyid:CE:E4:16:01:EE:A9:F5:1B:35:25:DA:55:DD:4A:C9:5C:EF:AF:5A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:20:fb:29:8a:f5:65:7e:9a:be:2c:cd:58:37:33:2f:87:a8:
         bd:48:8a:64:24:f9:b5:4d:3b:44:d4:e8:5c:c2:e1:20:04:aa:
         2c:8c:1a:59:0e:96:53:8f:9e:f9:a3:ee:f8:bb:8a:b2:5c:d3:
         84:1a:dc:b1:11:92:9f:5a:79:ae:6a:c3:84:f4:36:40:7b:0b:
         c0:dd:d4:97:9d:af:31:97:55:15:5a:d4:92:1f:5d:d0:9e:fc:
         b0:f0:cb:ed:75:e1:d8:71:bc:06:45:96:59:ea:61:d7:e8:99:
         a4:f9:bc:da:88:2d:94:b2:e0:c6:54:80:64:e1:e3:d5:23:13:
         7d:31:04:c8:63:41:15:1c:bd:24:fd:dd:25:80:2f:93:cd:60:
         76:a8:25:8b:ae:c6:22:18:db:ab:f6:c0:d3:a4:0f:d4:ab:fd:
         1d:6c:c9:76:5a:ce:32:16:f6:9e:ec:e4:f0:a7:1a:d9:36:89:
         ba:59:54:9d:33:ea:26:26:b8:03:24:98:37:15:36:38:45:ff:
         8c:0a:f4:1d:d7:dc:71:f1:46:09:17:7c:af:71:1c:f7:e9:ad:
         48:10:eb:35:6e:ff:07:07:0c:57:d1:b2:58:e0:46:1b:3c:3f:
         7c:b8:39:71:97:91:d0:1f:a8:fa:f2:6b:ee:9a:3e:93:c6:8c:
         e5:03:ac:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:49:16 2026 by rpki-client