Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.mft
File:                     p0zn2tX7UE2xa75wwvnfCqnwBgk.mft (raw, json)
Hash identifier:          4VuK9tvLizOE0az9Pl8cyOcDmKeetXwDVSQ2l/LlPxY=
Subject key identifier:   9B:33:D6:07:40:12:F6:AD:D1:A2:7A:15:6C:DF:60:7D:86:20:F0:2A
Authority key identifier: A7:4C:E7:DA:D5:FB:50:4D:B1:6B:BE:70:C2:F9:DF:0A:A9:F0:06:09
Certificate issuer:       /CN=A918D699/serialNumber=A74CE7DAD5FB504DB16BBE70C2F9DF0AA9F00609
Certificate serial:       01D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0zn2tX7UE2xa75wwvnfCqnwBgk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.mft
Manifest number:          01C3
Signing time:             Tue 29 Sep 2026 04:21:29 +0000
Manifest this update:     Tue 29 Sep 2026 04:21:28 +0000
Manifest next update:     Tue 06 Oct 2026 04:21:28 +0000
Files and hashes:         1: p0zn2tX7UE2xa75wwvnfCqnwBgk.crl (hash: /BnSnNvVgaESHQjjI3o6iXcwKzy23tIFUFOKe7/d3RY=)
                          2: C564E80017E911EF9D471E18C4F9AE02.roa (hash: qze2BxN1ZqkUR8sLJAr7IWqQzGJrYs19cA2fz8g+u+Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.crl
                          rsync://rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0zn2tX7UE2xa75wwvnfCqnwBgk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 06 Oct 2026 04:16:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 464 (0x1d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D699, serialNumber=A74CE7DAD5FB504DB16BBE70C2F9DF0AA9F00609
        Validity
            Not Before: Sep 29 04:21:28 2026 GMT
            Not After : Oct  6 04:21:28 2026 GMT
        Subject: CN=6abb3cc8-d20f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:dc:87:fb:a9:8c:f5:9b:0c:16:02:9e:b5:31:
                    36:f6:c8:b1:d8:5f:ca:e2:c7:1e:7d:c4:57:01:45:
                    22:b4:a0:ef:41:da:45:b9:c1:f1:93:21:27:a7:17:
                    94:ac:ed:b4:be:95:7a:9d:56:27:56:17:47:11:3b:
                    e6:5e:2d:f0:82:94:50:10:bb:4b:a2:0b:99:ea:44:
                    95:09:c4:23:a5:08:66:b7:57:da:d4:a7:36:86:b2:
                    28:b0:70:74:5a:ef:c0:db:2c:96:d8:99:07:f1:fb:
                    93:d4:e6:b4:4e:c9:d6:a8:1a:f3:22:2b:7e:db:20:
                    9e:25:f4:af:90:5b:8b:36:07:7f:cc:b0:5e:b9:12:
                    14:49:ce:69:bb:f1:05:8c:60:16:e0:fd:a8:7b:f0:
                    09:71:a9:27:21:9e:b8:bc:f2:70:21:40:01:93:a3:
                    4d:05:52:f3:07:7d:c6:6b:45:14:f5:db:38:59:df:
                    57:eb:5e:3f:08:dc:bf:c4:21:47:2f:b0:f3:8a:c2:
                    1f:71:5e:a7:94:2d:b5:8b:95:7c:2d:5f:13:bf:0e:
                    65:61:e4:e7:4e:1e:93:0b:42:b0:b3:1b:00:df:d9:
                    44:cc:47:da:f1:37:af:96:45:c1:e9:49:80:12:e0:
                    76:57:d7:d8:23:f3:ad:f1:ca:72:0c:ed:5a:95:94:
                    cd:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:33:D6:07:40:12:F6:AD:D1:A2:7A:15:6C:DF:60:7D:86:20:F0:2A
            X509v3 Authority Key Identifier:
                keyid:A7:4C:E7:DA:D5:FB:50:4D:B1:6B:BE:70:C2:F9:DF:0A:A9:F0:06:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0zn2tX7UE2xa75wwvnfCqnwBgk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:b8:52:9e:6a:84:8e:bf:66:78:0a:0f:88:2c:d0:50:e9:2c:
         a8:03:a3:a5:67:e5:52:6a:8d:e8:fe:12:83:d1:ef:c3:4a:13:
         37:fc:6c:11:3d:3c:f7:33:50:58:ce:20:e6:b2:28:7b:88:e9:
         bd:a3:c6:40:87:74:15:36:8e:04:89:a7:d7:bd:6c:13:2c:fe:
         54:27:d0:46:14:73:81:d2:13:2f:df:93:23:e5:81:1d:8a:b8:
         5d:79:4a:4c:f4:4e:2d:16:e0:77:f1:2e:6b:6f:50:8c:b2:8e:
         de:a2:4c:04:11:fd:2b:76:bb:b1:76:f5:dc:f1:44:2e:98:98:
         64:66:37:0b:4d:d4:e9:5c:65:5b:73:39:79:26:49:29:f1:70:
         47:08:33:36:ce:bf:56:46:8a:f5:0d:f1:fd:ed:b8:4d:b9:3f:
         bd:1a:a9:fb:b0:bd:2e:37:26:4e:92:fb:96:54:f2:b3:34:72:
         b6:11:62:29:98:2f:a7:6c:26:53:40:47:81:ff:d2:7c:45:a7:
         8b:eb:39:f2:af:9c:d4:95:9d:7e:d5:00:00:b2:ab:45:d6:c9:
         83:38:82:00:8c:d3:9e:7d:4c:f3:2c:45:11:b0:bd:de:e9:05:
         d0:e9:e4:f4:8a:e5:62:de:7e:c1:1e:42:d1:d6:70:82:87:8d:
         f9:3e:c7:32
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAdAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEQ2OTkxMTAvBgNVBAUTKEE3NENFN0RBRDVGQjUwNERCMTZCQkU3MEMyRjlERjBB
QTlGMDA2MDkwHhcNMjYwOTI5MDQyMTI4WhcNMjYxMDA2MDQyMTI4WjAYMRYwFAYD
VQQDEw02YWJiM2NjOC1kMjBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA69yH+6mM9ZsMFgKetTE29six2F/K4scefcRXAUUitKDvQdpFucHxkyEnpxeU
rO20vpV6nVYnVhdHETvmXi3wgpRQELtLoguZ6kSVCcQjpQhmt1fa1Kc2hrIosHB0
Wu/A2yyW2JkH8fuT1Oa0TsnWqBrzIit+2yCeJfSvkFuLNgd/zLBeuRIUSc5pu/EF
jGAW4P2oe/AJcaknIZ64vPJwIUABk6NNBVLzB33Ga0UU9ds4Wd9X614/CNy/xCFH
L7DzisIfcV6nlC21i5V8LV8Tvw5lYeTnTh6TC0KwsxsA39lEzEfa8TevlkXB6UmA
EuB2V9fYI/Ot8cpyDO1alZTN1QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJsz1gdA
Evat0aJ6FWzfYH2GIPAqMB8GA1UdIwQYMBaAFKdM59rV+1BNsWu+cML53wqp8AYJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDY5OS81NTg2RUY2QTE3
RTkxMUVGQTJDRDUwMTdDNEY5QUUwMi9wMHpuMnRYN1VFMnhhNzV3d3ZuZkNxbndC
Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3Awem4ydFg3VUUyeGE3NXd3dm5mQ3Fud0Jnay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RDY5OS81NTg2RUY2QTE3RTkxMUVGQTJDRDUwMTdDNEY5QUUwMi9wMHpuMnRYN1VF
MnhhNzV3d3ZuZkNxbndCZ2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlLhSnmqEjr9meAoPiCzQUOksqAOjpWflUmqN6P4Sg9Hvw0oTN/xsET089zNQ
WM4g5rIoe4jpvaPGQId0FTaOBImn171sEyz+VCfQRhRzgdITL9+TI+WBHYq4XXlK
TPROLRbgd/Eua29QjLKO3qJMBBH9K3a7sXb13PFELpiYZGY3C03U6VxlW3M5eSZJ
KfFwRwgzNs6/VkaK9Q3x/e24Tbk/vRqp+7C9LjcmTpL7llTyszRythFiKZgvp2wm
U0BHgf/SfEWni+s58q+c1JWdftUAALKrRdbJgziCAIzTnn1M8yxFEbC93ukF0Onk
9IrlYt5+wR5C0dZwgoeN+T7HMg==
-----END CERTIFICATE-----
Generated at Tue Sep 29 07:51:12 2026 by rpki-client