Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B1E55/555B040A78FA11EFA44FE586C4F9AE02/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.mft
File:                     ZDGVZSsiDcsi2pHQf9Y9pp64FNU.mft (raw, json)
Hash identifier:          eGSqTB15fO4QCy1SalzvgeABqPfjwVAbSM3hrmR8GOY=
Subject key identifier:   82:4D:2C:C5:59:A5:DC:21:13:E4:44:7E:7D:7D:47:EF:B1:72:49:AF
Authority key identifier: 64:31:95:65:2B:22:0D:CB:22:DA:91:D0:7F:D6:3D:A6:9E:B8:14:D5
Certificate issuer:       /CN=A91B1E55/serialNumber=643195652B220DCB22DA91D07FD63DA69EB814D5
Certificate serial:       0176
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B1E55/555B040A78FA11EFA44FE586C4F9AE02/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.mft
Manifest number:          0176
Signing time:             Wed 23 Sep 2026 04:32:26 +0000
Manifest this update:     Wed 23 Sep 2026 04:32:25 +0000
Manifest next update:     Wed 30 Sep 2026 04:32:25 +0000
Files and hashes:         1: ZDGVZSsiDcsi2pHQf9Y9pp64FNU.crl (hash: ytdhtDytb6nQavC4rHtjfFmNscMuWkPXBSfsKgpn5Zo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B1E55/555B040A78FA11EFA44FE586C4F9AE02/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.crl
                          rsync://rpki.apnic.net/member_repository/A91B1E55/555B040A78FA11EFA44FE586C4F9AE02/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 04:32:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 374 (0x176)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B1E55, serialNumber=643195652B220DCB22DA91D07FD63DA69EB814D5
        Validity
            Not Before: Sep 23 04:32:25 2026 GMT
            Not After : Sep 30 04:32:25 2026 GMT
        Subject: CN=6ab3565a-e704
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:74:42:58:57:53:d9:19:b6:3e:1b:65:b4:df:
                    2b:f8:8a:1c:31:c3:78:92:5c:cd:4d:2b:5a:d7:0e:
                    dd:c9:72:ac:80:83:90:11:71:f4:9e:75:c2:99:df:
                    38:c1:3b:b9:0d:4c:42:70:dd:c9:88:88:9c:17:e0:
                    af:4a:a3:5b:97:e8:a2:22:d0:78:68:9a:2f:f5:f5:
                    07:cf:e6:3f:ea:ee:e0:7a:4c:74:d8:45:08:7f:12:
                    72:6a:51:97:fc:bc:53:07:60:ae:72:cd:f0:f3:53:
                    ab:b6:37:78:08:d0:3a:88:9c:65:d5:bb:4b:86:63:
                    92:61:83:71:75:d9:45:8f:d3:18:be:d7:06:2f:38:
                    8f:17:92:3b:6c:cd:5e:9f:6a:f1:b7:8f:b7:d8:c2:
                    83:6b:7b:b9:c0:17:66:b6:c8:41:22:99:df:8c:ee:
                    2a:c1:45:59:1a:99:97:ef:52:02:9e:24:66:3e:38:
                    dc:70:c5:a8:a4:ef:06:6a:1a:08:67:d7:15:09:1b:
                    2f:e9:1e:a7:fd:b5:46:0c:14:90:e4:87:29:a1:6e:
                    86:0b:35:db:a2:49:aa:b4:fe:47:a4:6c:57:2c:ee:
                    c8:d3:93:94:fa:e7:11:b3:d9:21:50:94:de:bb:f2:
                    6c:ee:c1:5c:72:6c:6f:17:21:35:80:9b:5b:e6:21:
                    5e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:4D:2C:C5:59:A5:DC:21:13:E4:44:7E:7D:7D:47:EF:B1:72:49:AF
            X509v3 Authority Key Identifier:
                keyid:64:31:95:65:2B:22:0D:CB:22:DA:91:D0:7F:D6:3D:A6:9E:B8:14:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B1E55/555B040A78FA11EFA44FE586C4F9AE02/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1E55/555B040A78FA11EFA44FE586C4F9AE02/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:01:42:45:45:aa:df:86:6f:4c:a2:10:21:4b:df:b9:b8:5a:
         26:11:72:26:02:70:f6:c8:59:1e:48:02:6b:c4:34:e3:07:8d:
         d3:27:c9:4b:87:46:93:f0:17:7d:02:7c:39:c0:47:26:34:cc:
         bb:9a:e8:d3:e8:99:da:bf:f5:05:c9:a7:a8:d8:c3:13:13:32:
         bc:c7:ec:98:b5:5a:e6:8c:e7:bd:cc:aa:3d:92:6d:c9:da:46:
         95:f6:63:84:44:81:a6:b5:4a:b1:e9:55:c0:6b:98:63:ad:a1:
         d9:c3:a0:c4:48:53:9d:b8:0d:10:2f:44:64:93:40:6c:82:15:
         28:01:3d:5f:9e:f5:33:08:85:60:6a:36:18:c5:d7:52:e6:73:
         1f:d0:02:01:41:eb:10:c7:8a:90:44:eb:22:51:47:c7:b2:8b:
         b4:16:c4:bf:97:8e:fe:a0:95:45:bf:4d:3c:0e:ec:5d:53:91:
         31:2c:26:9f:17:df:f1:f9:c0:68:7a:96:e8:24:84:f8:f5:0a:
         95:e9:bd:03:ce:02:10:89:0c:cc:6b:d0:3f:41:fd:0e:89:c7:
         11:74:c0:0d:05:2d:a9:92:b1:de:bd:9a:a5:5d:3b:17:09:3b:
         c7:56:a3:bf:ea:d6:0d:ff:65:1b:3d:49:03:60:e1:d7:1e:0b:
         e5:3c:af:4c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAXYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjFFNTUxMTAvBgNVBAUTKDY0MzE5NTY1MkIyMjBEQ0IyMkRBOTFEMDdGRDYzREE2
OUVCODE0RDUwHhcNMjYwOTIzMDQzMjI1WhcNMjYwOTMwMDQzMjI1WjAYMRYwFAYD
VQQDEw02YWIzNTY1YS1lNzA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv3RCWFdT2Rm2PhtltN8r+IocMcN4klzNTSta1w7dyXKsgIOQEXH0nnXCmd84
wTu5DUxCcN3JiIicF+CvSqNbl+iiItB4aJov9fUHz+Y/6u7gekx02EUIfxJyalGX
/LxTB2Cucs3w81Ortjd4CNA6iJxl1btLhmOSYYNxddlFj9MYvtcGLziPF5I7bM1e
n2rxt4+32MKDa3u5wBdmtshBIpnfjO4qwUVZGpmX71ICniRmPjjccMWopO8GahoI
Z9cVCRsv6R6n/bVGDBSQ5IcpoW6GCzXbokmqtP5HpGxXLO7I05OU+ucRs9khUJTe
u/Js7sFccmxvFyE1gJtb5iFeiwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIJNLMVZ
pdwhE+REfn19R++xckmvMB8GA1UdIwQYMBaAFGQxlWUrIg3LItqR0H/WPaaeuBTV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUU1NS81NTVCMDQwQTc4
RkExMUVGQTQ0RkU1ODZDNEY5QUUwMi9aREdWWlNzaURjc2kycEhRZjlZOXBwNjRG
TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pER1ZaU3NpRGNzaTJwSFFmOVk5cHA2NEZOVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MUU1NS81NTVCMDQwQTc4RkExMUVGQTQ0RkU1ODZDNEY5QUUwMi9aREdWWlNzaURj
c2kycEhRZjlZOXBwNjRGTlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASAFCRUWq34ZvTKIQIUvfubhaJhFyJgJw9shZHkgCa8Q04weN0yfJS4dGk/AX
fQJ8OcBHJjTMu5ro0+iZ2r/1BcmnqNjDExMyvMfsmLVa5oznvcyqPZJtydpGlfZj
hESBprVKselVwGuYY62h2cOgxEhTnbgNEC9EZJNAbIIVKAE9X571MwiFYGo2GMXX
UuZzH9ACAUHrEMeKkETrIlFHx7KLtBbEv5eO/qCVRb9NPA7sXVORMSwmnxff8fnA
aHqW6CSE+PUKlem9A84CEIkMzGvQP0H9DonHEXTADQUtqZKx3r2apV07Fwk7x1aj
v+rWDf9lGz1JA2Dh1x4L5TyvTA==
-----END CERTIFICATE-----
Generated at Thu Sep 24 19:29:54 2026 by rpki-client