Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C146D/ECB00B42003711F0BBD72475C4F9AE02/Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.mft
File:                     Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.mft (raw, json)
Hash identifier:          QiexCyDKZXuC9Z7rA0gKhoQc8awDNIyYMco+Ky4NBSI=
Subject key identifier:   90:0D:22:FE:AA:24:F1:48:AC:0F:E6:78:B6:D8:E3:FC:AC:A5:6B:B9
Authority key identifier: 66:4E:59:A0:00:B9:1E:72:F8:03:E6:D8:68:41:15:4C:80:56:B8:8A
Certificate issuer:       /CN=A91C146D/serialNumber=664E59A000B91E72F803E6D86841154C8056B88A
Certificate serial:       012E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C146D/ECB00B42003711F0BBD72475C4F9AE02/Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.mft
Manifest number:          0125
Signing time:             Wed 23 Sep 2026 05:38:50 +0000
Manifest this update:     Wed 23 Sep 2026 05:38:50 +0000
Manifest next update:     Wed 30 Sep 2026 05:38:50 +0000
Files and hashes:         1: Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.crl (hash: JtLqNmQonMjollATXkhZWqm2AEf29idelQ/k4RNot5g=)
                          2: 992A7358004211F0AC90656CC4F9AE02.roa (hash: p1iNzs7m8iHrfQ8AnJhFGKvDY9F4t1QWaHIUzSsJTWE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C146D/ECB00B42003711F0BBD72475C4F9AE02/Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.crl
                          rsync://rpki.apnic.net/member_repository/A91C146D/ECB00B42003711F0BBD72475C4F9AE02/Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 05:38:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 302 (0x12e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C146D, serialNumber=664E59A000B91E72F803E6D86841154C8056B88A
        Validity
            Not Before: Sep 23 05:38:50 2026 GMT
            Not After : Sep 30 05:38:50 2026 GMT
        Subject: CN=6ab365ea-06dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:48:ea:ea:94:5b:6d:96:6e:45:d4:9b:c7:5d:
                    87:22:31:af:81:ab:65:69:7b:6c:f4:3e:ee:28:40:
                    1e:b4:4e:08:87:36:82:51:89:e2:c9:91:3e:26:43:
                    d7:d0:21:e6:45:f6:0a:7f:0d:f6:b5:62:1a:a4:4b:
                    67:6c:4e:5e:6b:2d:75:33:a7:a7:bf:26:63:a8:f9:
                    9d:48:cc:b4:e5:1c:a5:9c:0e:3a:34:4d:5a:2e:c1:
                    7d:28:48:01:1d:29:3b:dd:e5:f4:4e:1a:98:cb:73:
                    f8:36:59:1c:31:4a:f4:b0:29:4b:be:f0:5d:fe:3b:
                    91:8f:d6:44:4e:79:4c:28:63:84:93:6f:95:5c:e1:
                    29:01:10:c8:50:4d:1b:72:98:70:53:2e:28:08:8b:
                    3b:4d:de:33:73:52:ed:af:95:4f:19:15:ab:15:d4:
                    db:cf:75:8d:68:39:12:07:82:d7:13:31:c4:8f:af:
                    0c:6f:b6:2c:cd:85:c6:e4:bb:77:01:dc:7e:bf:6b:
                    d8:91:97:e1:cc:cb:62:f5:60:ec:81:64:c6:04:70:
                    78:dd:5e:b9:9c:32:65:05:e6:6b:28:60:0a:0a:09:
                    07:82:a9:c8:f4:e2:9e:e1:b5:35:8a:84:ec:2a:77:
                    11:35:bb:44:e7:eb:a2:20:be:4b:84:64:14:a1:51:
                    d5:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:0D:22:FE:AA:24:F1:48:AC:0F:E6:78:B6:D8:E3:FC:AC:A5:6B:B9
            X509v3 Authority Key Identifier:
                keyid:66:4E:59:A0:00:B9:1E:72:F8:03:E6:D8:68:41:15:4C:80:56:B8:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C146D/ECB00B42003711F0BBD72475C4F9AE02/Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C146D/ECB00B42003711F0BBD72475C4F9AE02/Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:39:91:a3:11:51:f0:ca:00:21:03:a7:c6:e7:7a:65:eb:3f:
         e5:d6:1b:a8:3d:29:3e:a7:9f:fe:0a:38:9e:5e:d5:b2:d6:46:
         2d:e5:77:50:8f:51:f8:f6:b0:44:eb:e8:1b:c0:8b:b0:a7:66:
         36:f2:f9:3b:96:0b:c0:80:89:69:80:22:1a:05:c8:d4:cf:3a:
         1d:40:eb:f0:df:10:ce:d0:31:8e:de:3e:3f:44:31:ff:fb:e3:
         8c:f2:6c:55:e9:69:f4:48:93:b0:19:f2:ab:bb:61:99:73:57:
         09:ea:d8:a5:8f:66:b5:a7:dd:97:96:e0:1d:8a:13:a8:d6:3c:
         88:9f:17:e3:65:da:45:91:ea:57:bd:19:de:63:c5:95:5d:9d:
         78:58:bd:e5:a1:ff:26:27:2f:fb:ad:f9:d1:c2:24:30:3a:3c:
         60:b0:75:b8:64:1d:c6:35:43:ce:69:1c:44:4e:ef:fe:8b:13:
         1d:93:ba:b7:4a:0b:bf:b4:4a:4b:58:26:6b:a0:55:60:b5:f6:
         16:9d:1f:2f:e2:9d:80:f9:c6:44:15:7d:7e:be:01:49:c8:16:
         6d:51:98:58:ec:21:a3:5e:b7:b3:b8:51:84:2d:37:1c:77:22:
         c9:13:53:ef:36:09:e6:4b:d8:c6:8c:ab:a7:c7:26:8e:df:ab:
         49:53:66:5b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzE0NkQxMTAvBgNVBAUTKDY2NEU1OUEwMDBCOTFFNzJGODAzRTZEODY4NDExNTRD
ODA1NkI4OEEwHhcNMjYwOTIzMDUzODUwWhcNMjYwOTMwMDUzODUwWjAYMRYwFAYD
VQQDEw02YWIzNjVlYS0wNmRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyEjq6pRbbZZuRdSbx12HIjGvgatlaXts9D7uKEAetE4IhzaCUYniyZE+JkPX
0CHmRfYKfw32tWIapEtnbE5eay11M6envyZjqPmdSMy05RylnA46NE1aLsF9KEgB
HSk73eX0ThqYy3P4NlkcMUr0sClLvvBd/juRj9ZETnlMKGOEk2+VXOEpARDIUE0b
cphwUy4oCIs7Td4zc1Ltr5VPGRWrFdTbz3WNaDkSB4LXEzHEj68Mb7YszYXG5Lt3
Adx+v2vYkZfhzMti9WDsgWTGBHB43V65nDJlBeZrKGAKCgkHgqnI9OKe4bU1ioTs
KncRNbtE5+uiIL5LhGQUoVHVsQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJANIv6q
JPFIrA/meLbY4/yspWu5MB8GA1UdIwQYMBaAFGZOWaAAuR5y+APm2GhBFUyAVriK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTQ2RC9FQ0IwMEI0MjAw
MzcxMUYwQkJENzI0NzVDNEY5QUUwMi9aazVab0FDNUhuTDRBLWJZYUVFVlRJQld1
SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1prNVpvQUM1SG5MNEEtYllhRUVWVElCV3VJby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MTQ2RC9FQ0IwMEI0MjAwMzcxMUYwQkJENzI0NzVDNEY5QUUwMi9aazVab0FDNUhu
TDRBLWJZYUVFVlRJQld1SW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUzmRoxFR8MoAIQOnxud6Zes/5dYbqD0pPqef/go4nl7VstZGLeV3UI9R+Paw
ROvoG8CLsKdmNvL5O5YLwICJaYAiGgXI1M86HUDr8N8QztAxjt4+P0Qx//vjjPJs
Velp9EiTsBnyq7thmXNXCerYpY9mtafdl5bgHYoTqNY8iJ8X42XaRZHqV70Z3mPF
lV2deFi95aH/Jicv+6350cIkMDo8YLB1uGQdxjVDzmkcRE7v/osTHZO6t0oLv7RK
S1gma6BVYLX2Fp0fL+KdgPnGRBV9fr4BScgWbVGYWOwho163s7hRhC03HHciyRNT
7zYJ5kvYxoyrp8cmjt+rSVNmWw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 01:42:43 2026 by rpki-client