Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft
File:                     ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft (raw, json)
Hash identifier:          k/wI4LLdAABFF8yNHFCZAE17RfHbl1XMjfya0rC3i8Y=
Subject key identifier:   A0:22:75:A4:DD:11:BC:05:90:87:57:53:81:9B:AB:D3:C0:9A:41:AB
Authority key identifier: 64:F6:F7:86:B8:EC:86:9C:76:68:6A:F3:C9:9B:C4:7B:99:FD:D4:44
Certificate issuer:       /CN=A914E3F8/serialNumber=64F6F786B8EC869C76686AF3C99BC47B99FDD444
Certificate serial:       09FA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPb3hrjshpx2aGrzyZvEe5n91EQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft
Manifest number:          09F9
Signing time:             Tue 22 Sep 2026 19:36:21 +0000
Manifest this update:     Tue 22 Sep 2026 19:36:21 +0000
Manifest next update:     Tue 29 Sep 2026 19:36:21 +0000
Files and hashes:         1: ZPb3hrjshpx2aGrzyZvEe5n91EQ.crl (hash: TDfyDEXA5HDzKv3bwfmW8GC5ryO3kAT9triOqx4UX7E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.crl
                          rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPb3hrjshpx2aGrzyZvEe5n91EQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 19:36:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2554 (0x9fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E3F8, serialNumber=64F6F786B8EC869C76686AF3C99BC47B99FDD444
        Validity
            Not Before: Sep 22 19:36:21 2026 GMT
            Not After : Sep 29 19:36:21 2026 GMT
        Subject: CN=6ab2d8b5-380f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c2:3e:32:2f:fa:18:c1:7a:97:5f:2f:93:28:
                    27:24:69:4e:c0:f1:39:84:c0:51:2c:e9:9e:21:a9:
                    dc:e6:64:4f:a9:9e:3b:17:40:6d:20:c4:74:6d:bc:
                    32:53:7f:5d:c5:69:47:82:1d:0b:6f:3a:3a:88:ec:
                    72:6e:82:45:23:ed:f9:0b:17:71:89:02:ee:58:0f:
                    73:10:fa:1b:3b:02:47:fe:66:9d:8f:1a:ed:bd:27:
                    1c:ae:3a:4f:51:76:79:fd:c4:36:34:06:4e:06:ea:
                    50:25:57:fd:a1:a9:37:08:3b:15:c6:22:0f:39:d2:
                    55:b0:f3:f5:48:37:ef:60:bb:61:55:ad:7d:de:e5:
                    c5:e9:e3:ed:4f:0d:b5:3a:bc:44:fc:58:8b:c9:7f:
                    3b:46:58:b5:c9:15:18:f6:a6:0d:6f:0a:8b:55:d9:
                    31:f2:04:89:4a:9b:79:35:80:48:53:8c:a6:1d:a1:
                    c6:63:55:1a:98:f8:b1:04:c2:3a:14:6b:9b:a7:2b:
                    1d:2e:c0:42:a5:c8:18:f2:9e:ad:b3:c6:cb:f2:ab:
                    bf:48:4e:17:74:8a:4b:ad:54:c8:a3:e3:9c:15:4e:
                    12:01:e6:d6:09:e7:b7:17:13:a0:bc:12:0a:54:db:
                    ca:4a:2c:fe:31:e3:39:5a:77:c9:6c:4a:d4:da:e8:
                    d8:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:22:75:A4:DD:11:BC:05:90:87:57:53:81:9B:AB:D3:C0:9A:41:AB
            X509v3 Authority Key Identifier:
                keyid:64:F6:F7:86:B8:EC:86:9C:76:68:6A:F3:C9:9B:C4:7B:99:FD:D4:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPb3hrjshpx2aGrzyZvEe5n91EQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:14:88:8b:06:10:fc:58:47:be:97:47:75:25:36:3b:0d:a9:
         9d:1a:97:42:35:d1:a1:cd:3a:2f:b0:07:55:84:51:ba:d3:64:
         f9:e7:aa:2a:a9:16:29:d2:df:68:3a:5a:68:b9:08:3b:23:7d:
         02:cb:4a:e9:cc:d9:6b:e1:53:7e:c6:1a:55:a2:f0:d6:e8:81:
         4d:18:8b:a8:e0:a2:f8:3f:57:15:77:dd:21:c4:ee:66:bf:e6:
         7e:9e:0e:d3:09:1e:e4:71:95:ed:7a:b5:57:76:83:3d:ed:03:
         4f:41:5d:52:a4:38:61:b2:6f:e7:be:37:73:d5:6a:14:14:95:
         1d:04:a9:9e:34:cd:93:c9:ce:40:0d:0e:a7:fc:52:39:32:3f:
         04:bb:cf:5a:ed:4b:ef:5f:21:3e:aa:cb:80:ec:68:3f:91:08:
         ec:e2:e5:4f:1d:7d:fd:fb:76:d3:f0:2a:9d:1a:ca:66:38:80:
         6d:c6:69:e5:09:f3:41:ec:24:76:13:86:ed:4a:04:fc:d9:e2:
         fe:ab:4f:9e:a2:88:8c:30:54:5c:b9:39:ee:7b:2b:aa:b5:06:
         fd:ef:28:34:83:15:08:20:7f:27:af:e1:49:0d:0c:42:62:66:
         0f:00:50:97:39:20:77:a6:a1:2d:c4:45:68:ca:e9:f3:3f:ee:
         6e:85:89:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:59:46 2026 by rpki-client