Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9169E72/072FA8863EC811F189ABCFB6AC833773/Z8sRRaic2LZ67Z5OUocD9VwVIbM.mft
File:                     Z8sRRaic2LZ67Z5OUocD9VwVIbM.mft (raw, json)
Hash identifier:          EsfSomzbE0EgHdGPfjxyzdsgWeH/snH4yFI1o5gxgVk=
Subject key identifier:   E8:72:A8:32:E4:3C:2B:48:98:85:F5:E7:D4:95:10:75:92:FD:33:34
Authority key identifier: 67:CB:11:45:A8:9C:D8:B6:7A:ED:9E:4E:52:87:03:F5:5C:15:21:B3
Certificate issuer:       /CN=A9169E72/serialNumber=67CB1145A89CD8B67AED9E4E528703F55C1521B3
Certificate serial:       52
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z8sRRaic2LZ67Z5OUocD9VwVIbM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169E72/072FA8863EC811F189ABCFB6AC833773/Z8sRRaic2LZ67Z5OUocD9VwVIbM.mft
Manifest number:          51
Signing time:             Tue 29 Sep 2026 08:52:11 +0000
Manifest this update:     Tue 29 Sep 2026 08:52:11 +0000
Manifest next update:     Tue 06 Oct 2026 08:52:11 +0000
Files and hashes:         1: Z8sRRaic2LZ67Z5OUocD9VwVIbM.crl (hash: NwOVFJ5tOrLK583BZjYiI0Gf7xVU8wSSs3KsQr5k79Q=)
                          2: 2EC97C2C3EC911F18D9C5FE1AC833773.roa (hash: EvUSWLNIQOqqmidD5PHrkwd8fAUpWrCITwdT6HKeSIE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9169E72/072FA8863EC811F189ABCFB6AC833773/Z8sRRaic2LZ67Z5OUocD9VwVIbM.crl
                          rsync://rpki.apnic.net/member_repository/A9169E72/072FA8863EC811F189ABCFB6AC833773/Z8sRRaic2LZ67Z5OUocD9VwVIbM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z8sRRaic2LZ67Z5OUocD9VwVIbM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 06 Oct 2026 08:52:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 82 (0x52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169E72, serialNumber=67CB1145A89CD8B67AED9E4E528703F55C1521B3
        Validity
            Not Before: Sep 29 08:52:11 2026 GMT
            Not After : Oct  6 08:52:11 2026 GMT
        Subject: CN=6abb7c3b-ea7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1a:29:fd:33:af:c4:38:81:00:55:66:a9:e4:
                    73:d5:6a:66:69:8e:be:fe:99:33:c2:69:fc:fe:42:
                    8d:88:7f:ac:1d:87:8a:21:c2:6f:da:8a:ea:ad:b5:
                    c0:10:6d:15:c9:98:05:f1:68:a1:1f:fc:f9:e8:aa:
                    16:44:88:ff:ac:32:11:04:20:84:96:00:d8:23:9e:
                    1c:a3:54:17:b5:42:7e:99:b7:cb:dd:5f:3e:bf:55:
                    af:c9:ec:69:cb:eb:23:7e:e4:f1:bf:26:c8:d7:3b:
                    ed:d0:73:a0:b2:99:0a:55:65:9a:b4:fb:a5:9e:35:
                    07:33:34:4c:ba:49:01:c5:f4:bd:ff:ff:23:0a:06:
                    72:72:cd:e9:40:1a:49:49:db:41:89:72:04:7f:d5:
                    75:6d:be:ff:a6:5c:4e:a2:ed:2b:c2:ab:4b:82:66:
                    f4:30:61:ac:69:98:dc:3d:97:a6:c3:5e:a9:7a:c3:
                    06:fe:26:2d:0d:d2:90:32:a3:a8:01:39:a9:0a:f6:
                    e2:b3:86:cb:02:c7:ca:cb:27:8a:ad:1e:8a:3d:e1:
                    b2:11:9e:48:a4:cf:c9:06:4e:59:35:90:1b:31:45:
                    c7:d5:90:b1:5a:ca:43:e5:6c:f1:9f:cd:53:6e:90:
                    ff:03:05:7b:ba:b1:31:86:76:34:38:d8:0c:27:8e:
                    73:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:72:A8:32:E4:3C:2B:48:98:85:F5:E7:D4:95:10:75:92:FD:33:34
            X509v3 Authority Key Identifier:
                keyid:67:CB:11:45:A8:9C:D8:B6:7A:ED:9E:4E:52:87:03:F5:5C:15:21:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169E72/072FA8863EC811F189ABCFB6AC833773/Z8sRRaic2LZ67Z5OUocD9VwVIbM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z8sRRaic2LZ67Z5OUocD9VwVIbM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169E72/072FA8863EC811F189ABCFB6AC833773/Z8sRRaic2LZ67Z5OUocD9VwVIbM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:9b:28:1e:73:d6:d5:0e:27:28:5b:75:bd:53:a7:f5:57:65:
         13:a6:32:1d:26:ce:c6:77:68:23:85:9d:3a:55:ff:cf:c4:28:
         13:ac:72:1c:10:2e:4b:e6:16:b0:fa:26:55:60:b9:bc:f9:e1:
         4b:27:d8:2b:a7:f6:39:64:ae:50:cb:15:5e:ad:24:c8:e2:0e:
         4c:ca:79:a3:aa:0c:c7:59:5a:c0:0b:3e:30:bf:74:98:b3:3d:
         e2:96:6c:81:6f:b8:41:51:90:57:3a:dc:77:02:e4:64:8b:c9:
         65:8d:74:92:30:e9:ab:5e:89:a7:97:81:37:63:f4:40:0f:ba:
         af:69:a5:a7:01:fb:6c:0d:76:1d:a4:8a:e3:71:ce:7b:62:d1:
         b4:3f:59:20:a3:42:bc:63:a1:5d:27:ae:4d:2f:ff:86:b5:ee:
         9d:45:59:ff:f5:9f:db:9d:9e:0c:6e:5b:73:3f:ab:1b:39:ee:
         b6:4d:ef:99:f3:9b:75:03:ef:42:95:8f:0b:32:dd:d0:53:4e:
         9a:f0:04:08:f6:a1:35:3d:7e:c4:cb:e9:5f:06:72:73:c4:6f:
         38:f0:9a:45:75:bd:ad:fd:0d:92:ab:50:2a:76:44:f8:40:0e:
         1d:08:52:88:02:44:42:3b:63:99:df:fc:bd:e3:c8:4a:00:c5:
         2a:17:2f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 05:56:46 2026 by rpki-client