Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft
File:                     zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft (raw, json)
Hash identifier:          mV+I9Q7MZhw+OPcVroAlId8FD6vBQ9N6evrsVDCVlGc=
Subject key identifier:   15:87:A0:92:D8:F6:EB:C6:6C:FA:5F:B3:0D:6C:05:6F:D6:C7:5F:F1
Authority key identifier: CC:36:90:F8:96:EF:56:73:11:53:5B:C4:44:DF:1E:B7:41:FD:8B:B4
Certificate issuer:       /CN=A916EBCB/serialNumber=CC3690F896EF567311535BC444DF1EB741FD8BB4
Certificate serial:       0CDF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zDaQ-JbvVnMRU1vERN8et0H9i7Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft
Manifest number:          0CD4
Signing time:             Tue 22 Sep 2026 18:21:16 +0000
Manifest this update:     Tue 22 Sep 2026 18:21:15 +0000
Manifest next update:     Tue 29 Sep 2026 18:21:15 +0000
Files and hashes:         1: zDaQ-JbvVnMRU1vERN8et0H9i7Q.crl (hash: g1s8MCUKBVwoFqprD1yHwlvUriyFgMBOatBnAb5bIFU=)
                          2: 81C5BFF8192811EA9B88D87DC4F9AE02.roa (hash: MlGQE6i/naYke0ZwsPc47N+NQobrGaPsNs00jN9E6oo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.crl
                          rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zDaQ-JbvVnMRU1vERN8et0H9i7Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 15:21:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3295 (0xcdf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916EBCB, serialNumber=CC3690F896EF567311535BC444DF1EB741FD8BB4
        Validity
            Not Before: Sep 22 18:21:15 2026 GMT
            Not After : Sep 29 18:21:15 2026 GMT
        Subject: CN=6ab2c71c-f618
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:83:3d:2d:32:8d:1b:fd:9f:76:7c:45:bb:43:
                    83:62:1a:ac:7d:81:7b:cd:5a:4a:44:63:31:32:30:
                    10:f0:e1:d5:59:56:cd:55:64:18:4f:0d:3d:d2:da:
                    70:d1:f1:6b:63:d9:cc:1a:b6:ea:74:95:7c:7d:62:
                    60:19:f6:1e:0b:ff:38:4d:8c:a3:77:58:8b:78:a6:
                    20:05:6b:64:df:28:e7:97:05:65:68:65:05:85:98:
                    85:63:f7:e2:7c:2f:5d:08:fc:18:09:e9:7a:cd:d2:
                    81:b3:76:8e:ec:d3:d4:58:f2:fd:72:36:d3:03:52:
                    4f:f7:56:82:9c:22:73:e5:5f:ab:8d:77:cf:c2:17:
                    4a:e9:10:cc:4d:e0:ee:76:4c:03:de:35:5e:09:39:
                    f3:7e:49:23:55:da:d7:b2:98:74:38:4a:64:6f:1d:
                    14:1d:79:5a:c8:4e:f7:21:f3:a0:a0:65:9c:55:06:
                    9d:22:68:2c:19:9d:74:af:8e:9e:04:0d:65:ff:8f:
                    a5:21:90:c7:68:37:6d:b9:ee:c7:67:86:fa:de:c8:
                    2c:e0:cc:4e:02:47:97:2e:87:b9:61:1d:70:7c:f3:
                    0d:cb:6f:de:87:8d:d1:d3:9a:76:20:2e:c8:8a:f3:
                    77:44:61:bf:13:7f:9f:1a:e3:c3:48:c5:96:cb:9c:
                    ec:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:87:A0:92:D8:F6:EB:C6:6C:FA:5F:B3:0D:6C:05:6F:D6:C7:5F:F1
            X509v3 Authority Key Identifier:
                keyid:CC:36:90:F8:96:EF:56:73:11:53:5B:C4:44:DF:1E:B7:41:FD:8B:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zDaQ-JbvVnMRU1vERN8et0H9i7Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:29:fb:62:56:1a:69:55:1b:25:77:7d:26:27:ce:aa:db:ab:
         18:45:55:cc:56:80:87:6f:16:0b:aa:12:87:01:34:82:43:27:
         af:e7:b0:5b:67:07:cb:c5:a4:66:b3:f3:9d:d0:20:dd:92:59:
         1e:e8:fb:e2:35:82:d2:2d:ac:7d:c7:c0:39:79:91:96:cc:a8:
         b0:5e:82:54:f3:46:3f:72:1c:42:bd:94:e8:28:e0:86:0c:05:
         96:0d:33:5f:04:66:41:eb:26:cb:64:e8:2c:28:a4:6f:3f:d5:
         52:35:af:43:b9:de:13:7a:9d:74:8c:8b:ef:ea:8f:32:e6:d1:
         c3:a5:06:19:05:b2:41:db:c1:ab:6b:9f:99:a7:20:d9:26:5a:
         78:4d:be:b0:f2:65:a7:41:d1:c3:6d:c4:63:c1:e7:8e:b7:a0:
         8e:b6:39:1c:ac:25:4f:94:bb:b2:b8:a8:b5:58:13:9a:46:40:
         a7:1b:68:b7:2a:27:95:a3:f6:06:09:18:af:35:e7:41:ab:51:
         c4:ad:7b:47:5c:e6:d1:49:33:8c:8e:64:8f:10:42:24:e3:a4:
         79:cf:95:0a:e9:ee:b1:fe:a9:de:02:06:87:d2:7b:55:c0:e3:
         b3:e6:f3:71:d7:67:83:89:9f:ac:2a:ec:79:71:5a:32:6b:b3:
         dd:ca:9c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:46:21 2026 by rpki-client