Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9142187/392C1826CA5911F0A73A846BC4F9AE02/ZaHSWvtmp255SpZv8ztrBgx_gN8.mft
File:                     ZaHSWvtmp255SpZv8ztrBgx_gN8.mft (raw, json)
Hash identifier:          uXH3JibayetU+CHyRR7EJ/vkt9dSMYAhC10QfXy2wrU=
Subject key identifier:   42:FE:46:0B:F9:B9:63:D5:2A:5C:E4:1E:87:FE:EF:76:1E:A0:37:F0
Authority key identifier: 65:A1:D2:5A:FB:66:A7:6E:79:4A:96:6F:F3:3B:6B:06:0C:7F:80:DF
Certificate issuer:       /CN=A9142187/serialNumber=65A1D25AFB66A76E794A966FF33B6B060C7F80DF
Certificate serial:       B3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZaHSWvtmp255SpZv8ztrBgx_gN8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142187/392C1826CA5911F0A73A846BC4F9AE02/ZaHSWvtmp255SpZv8ztrBgx_gN8.mft
Manifest number:          A2
Signing time:             Fri 25 Sep 2026 07:25:38 +0000
Manifest this update:     Fri 25 Sep 2026 07:25:37 +0000
Manifest next update:     Fri 02 Oct 2026 07:25:37 +0000
Files and hashes:         1: ZaHSWvtmp255SpZv8ztrBgx_gN8.crl (hash: UT2oJlzD0AiafWPh0bgyFz2TjsWOaieZl57COxc7/jg=)
                          2: 357523A6CB1411F08DA0B25FC4F9AE02.roa (hash: HPrmPWZKTNrEQpqvXno/ycTGyKPtl5yRHQH8yuzYnug=)
                          3: 275E04E80BB711F1A64B03C6263D8C67.roa (hash: 9fFWODKU53GVq1qlZZ9LxoXAA6Tn5rDg6Hrhm4oZML0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142187/392C1826CA5911F0A73A846BC4F9AE02/ZaHSWvtmp255SpZv8ztrBgx_gN8.crl
                          rsync://rpki.apnic.net/member_repository/A9142187/392C1826CA5911F0A73A846BC4F9AE02/ZaHSWvtmp255SpZv8ztrBgx_gN8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZaHSWvtmp255SpZv8ztrBgx_gN8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 07:25:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 179 (0xb3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142187, serialNumber=65A1D25AFB66A76E794A966FF33B6B060C7F80DF
        Validity
            Not Before: Sep 25 07:25:37 2026 GMT
            Not After : Oct  2 07:25:37 2026 GMT
        Subject: CN=6ab621f2-0126
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:96:b7:2a:2c:79:3c:4e:94:bf:6d:12:8f:d5:
                    74:30:60:49:29:9d:83:72:6a:42:b5:49:97:f5:a8:
                    3b:92:95:6c:83:30:d2:3b:97:93:00:47:ef:21:fe:
                    32:79:20:c6:2f:ae:15:b3:0f:d3:29:16:14:89:c2:
                    c9:f1:12:7a:d0:d8:8e:8f:ff:7e:c2:7c:01:47:ac:
                    55:b0:2c:a1:e1:8c:89:9b:fa:fc:f4:8c:4d:10:e8:
                    0a:1f:74:39:72:ae:ea:22:06:73:7a:05:59:c8:2d:
                    fe:ff:49:30:8d:b6:8f:f0:60:b3:09:70:aa:bc:16:
                    03:17:55:f7:5e:5c:19:61:d1:fb:f8:94:13:87:c1:
                    64:e4:6a:17:41:d0:91:fd:54:0f:09:db:97:fb:88:
                    47:4e:bf:23:d6:76:d3:2e:78:c6:2e:58:42:8c:83:
                    89:0c:ff:93:f6:b0:59:f5:2f:9a:e3:66:8a:a1:21:
                    3d:e3:27:4f:72:ee:3d:37:bc:bd:b1:6f:03:d2:d3:
                    93:01:32:b6:6e:05:59:5a:84:06:0b:9d:ee:f4:f3:
                    df:37:bf:f4:de:5f:1c:d8:38:65:b3:8d:46:aa:56:
                    7e:e9:2e:a6:81:2f:6e:82:5b:83:b7:c1:fb:58:b6:
                    cb:36:94:2d:e1:ee:aa:9a:4e:89:d4:67:39:7a:e7:
                    c2:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:FE:46:0B:F9:B9:63:D5:2A:5C:E4:1E:87:FE:EF:76:1E:A0:37:F0
            X509v3 Authority Key Identifier:
                keyid:65:A1:D2:5A:FB:66:A7:6E:79:4A:96:6F:F3:3B:6B:06:0C:7F:80:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142187/392C1826CA5911F0A73A846BC4F9AE02/ZaHSWvtmp255SpZv8ztrBgx_gN8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZaHSWvtmp255SpZv8ztrBgx_gN8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142187/392C1826CA5911F0A73A846BC4F9AE02/ZaHSWvtmp255SpZv8ztrBgx_gN8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:78:5f:e9:b1:c7:2c:98:49:bb:85:a6:d7:d1:03:7d:6a:6a:
         6f:67:8e:51:96:ae:49:f3:f6:17:e5:ae:d6:ce:d6:fd:0b:38:
         94:9a:89:b1:8a:d8:a3:46:76:a1:39:52:29:c2:1a:1c:db:37:
         12:44:5b:72:8a:44:90:7a:6e:c0:b4:61:6e:7d:87:cc:51:8d:
         e3:1f:76:48:da:92:57:04:50:d5:56:bd:ee:f6:b9:a8:a5:ec:
         da:64:4f:cb:ac:e6:22:44:d8:90:d3:6d:42:65:a7:c2:4f:17:
         67:dd:56:d4:fb:56:e2:9e:a9:8e:91:64:b3:35:1e:0f:fb:ac:
         cc:ba:b9:24:57:51:60:9b:13:25:da:2f:ea:8e:92:15:f4:13:
         e0:16:41:6b:ab:30:50:30:9f:71:12:a5:a1:b2:f2:ec:93:0a:
         6c:74:8a:5e:1d:1f:f6:0a:25:23:84:45:f0:ae:a3:4a:cb:1c:
         a6:bb:96:41:9e:2b:84:31:95:95:86:f3:1e:37:2d:d9:13:b7:
         b8:70:65:e5:4f:b7:4e:82:6e:ff:e2:05:c4:3b:55:84:69:1b:
         58:e5:12:b9:3d:cf:9b:ec:0a:1b:29:fd:fc:cd:76:11:2c:0d:
         c1:69:5c:95:f9:18:ad:7b:df:ec:fc:18:74:13:bf:22:0b:46:
         2d:59:45:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 12:53:25 2026 by rpki-client