Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft
File:                     ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft (raw, json)
Hash identifier:          Xsbc5IvPM1CLdqlHCqgeYtmoV4HGdIpDsHOUV6VCt+8=
Subject key identifier:   56:0D:46:A2:C4:23:0A:8C:52:2C:B7:33:F0:B8:F5:66:D2:21:1A:9B
Authority key identifier: 66:94:1D:A7:EA:F3:0E:93:44:E0:32:1F:0B:75:4E:7A:EF:FC:35:29
Certificate issuer:       /CN=A91CCAF1/serialNumber=66941DA7EAF30E9344E0321F0B754E7AEFFC3529
Certificate serial:       019E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft
Manifest number:          018C
Signing time:             Sun 15 Nov 2026 04:47:29 +0000
Manifest this update:     Sun 15 Nov 2026 04:47:28 +0000
Manifest next update:     Sun 22 Nov 2026 04:47:28 +0000
Files and hashes:         1: ZpQdp-rzDpNE4DIfC3VOeu_8NSk.crl (hash: 1+BhbqxxfTY3sGAz5zPNq1NAfZBVcZgGRxzBx/uD6gQ=)
                          2: CEF8F2768AAD11EF9133DE6EC4F9AE02.roa (hash: 29N0/Pto5Qtfpphej2/9iShMt++zfcDr+xCewBLs+Zs=)
                          3: 52D518588AAF11EF9F5A6313C4F9AE02.roa (hash: oEnlXV7mYmXvv738neoWp88oLRBr1QzlCLxiAzbuFig=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.crl
                          rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Nov 2026 04:25:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 414 (0x19e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CCAF1, serialNumber=66941DA7EAF30E9344E0321F0B754E7AEFFC3529
        Validity
            Not Before: Nov 15 04:47:28 2026 GMT
            Not After : Nov 22 04:47:28 2026 GMT
        Subject: CN=6af93961-9574
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:8a:93:3c:ef:62:aa:f5:83:31:9f:fe:2e:d6:
                    e9:58:2f:e4:25:2a:e9:88:b4:a9:60:0d:08:f8:0f:
                    18:ba:91:92:1b:5a:ae:f5:66:d7:c6:8d:f2:8c:79:
                    dc:69:dd:5e:1c:e3:f4:b3:c2:c9:eb:ff:1b:86:1d:
                    55:cc:eb:5a:01:8f:f4:40:c4:99:eb:a4:09:44:70:
                    18:2d:43:87:bc:e6:f1:54:d1:33:f3:53:d7:32:12:
                    6b:72:4e:83:a6:09:8b:5f:87:66:de:d6:fa:44:45:
                    14:45:17:8f:7e:ac:c4:b9:2b:2a:61:88:92:2e:77:
                    0f:13:6f:9d:d2:fb:14:ff:06:30:ea:ba:54:49:85:
                    b2:b5:3b:53:e2:7b:ed:88:83:b7:00:10:d6:b6:5e:
                    e8:42:ac:ed:7b:44:af:4f:bf:31:53:a3:1e:86:0b:
                    61:9a:19:12:3a:a8:53:91:9c:c8:59:e3:6d:0c:bf:
                    0b:04:6d:e8:e7:1a:67:8d:02:51:0b:28:7a:59:83:
                    d3:10:d3:92:78:21:eb:bb:9c:9b:1f:f4:63:2d:ba:
                    77:db:13:f2:38:2a:d0:3b:60:14:1e:9a:94:83:15:
                    b4:80:bc:22:0a:26:3f:19:06:16:c8:3c:1b:2a:38:
                    5e:5e:1c:19:d7:b7:ca:47:29:4a:e2:81:81:11:5a:
                    ee:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:0D:46:A2:C4:23:0A:8C:52:2C:B7:33:F0:B8:F5:66:D2:21:1A:9B
            X509v3 Authority Key Identifier:
                keyid:66:94:1D:A7:EA:F3:0E:93:44:E0:32:1F:0B:75:4E:7A:EF:FC:35:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:b2:09:c7:a7:19:95:ec:4f:89:5e:c6:5d:17:94:18:cb:e3:
         7f:8e:31:66:7a:de:30:d0:31:a2:53:3d:a5:f1:c3:6a:8d:ed:
         4e:4c:9c:b7:8c:a3:3c:62:32:3d:07:a9:5e:16:45:59:48:30:
         d8:73:c6:25:39:75:05:8b:3e:6a:10:d8:b4:01:0b:1a:99:c0:
         7a:cb:17:56:91:93:06:8e:cc:f5:d2:0e:5a:ca:b8:06:ea:9b:
         ad:24:c2:4c:27:9c:14:94:4e:e6:28:4b:aa:f2:fe:d4:67:92:
         b0:8d:0e:13:8b:bb:8f:6d:2c:bf:04:90:5b:6e:6a:8a:50:98:
         64:d1:f9:ad:67:ae:6e:a7:09:8d:44:11:d3:44:20:95:6f:cc:
         5f:fc:a3:3f:2f:4c:b2:98:ef:76:05:a7:56:b9:60:73:08:2b:
         03:bf:79:8f:93:50:f6:be:a8:53:71:92:45:28:b5:45:96:2d:
         ec:30:b9:a3:77:58:87:a1:95:a3:1a:73:3c:51:c4:b6:76:0d:
         30:f2:06:1f:96:76:9a:0e:5e:e0:b8:f8:c2:64:e9:32:23:df:
         bd:14:0c:e4:90:23:f1:ce:7c:cc:c0:33:8a:83:79:9f:5c:4d:
         f8:04:2a:6c:d9:66:49:fc:e2:55:2a:29:ed:52:2f:8e:14:05:
         d2:6b:45:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:42:03 2026 by rpki-client