Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.mft
File:                     Z1qGdu030Wq7yi_vjqofI_JXsp8.mft (raw, json)
Hash identifier:          mlA7+bm15SdbQhL5+HRWV340uM15FydmHMbpfsh2glk=
Subject key identifier:   19:F9:74:27:E5:29:34:2E:DD:54:C3:11:BC:3B:5D:A7:5D:18:AE:54
Authority key identifier: 67:5A:86:76:ED:37:D1:6A:BB:CA:2F:EF:8E:AA:1F:23:F2:57:B2:9F
Certificate issuer:       /CN=A91D56CA/serialNumber=675A8676ED37D16ABBCA2FEF8EAA1F23F257B29F
Certificate serial:       18EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1qGdu030Wq7yi_vjqofI_JXsp8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.mft
Manifest number:          18D3
Signing time:             Thu 24 Sep 2026 16:26:42 +0000
Manifest this update:     Thu 24 Sep 2026 16:26:41 +0000
Manifest next update:     Thu 01 Oct 2026 16:26:41 +0000
Files and hashes:         1: Z1qGdu030Wq7yi_vjqofI_JXsp8.crl (hash: cJoU0z11Y7oWfpl4xG+at5MXrHFre0BaABWHJzKzJ2Y=)
                          2: A6DF4CF8C34B11ECAFB25A68C4F9AE02.roa (hash: rdOZCJ3dicwt2ZQgE2QnLuQhDeAJoxWmp9bzW22pmwI=)
                          3: 0EE83FA4C34611EC9290F072C4F9AE02.roa (hash: ZFGFBfx4/7JIn5J81VyjxgzCJGuEFQLjcxwfK1UOBRQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.crl
                          rsync://rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1qGdu030Wq7yi_vjqofI_JXsp8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 16:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6380 (0x18ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D56CA, serialNumber=675A8676ED37D16ABBCA2FEF8EAA1F23F257B29F
        Validity
            Not Before: Sep 24 16:26:41 2026 GMT
            Not After : Oct  1 16:26:41 2026 GMT
        Subject: CN=6ab54f41-58c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b6:6e:c8:9b:45:6e:cb:88:f8:3a:7b:1a:5c:
                    23:e9:6c:37:37:3c:4f:38:3e:84:d2:c5:85:b7:68:
                    ed:03:b1:74:f3:dc:61:47:a0:4d:bf:2a:81:84:c5:
                    12:3c:3a:50:e6:b5:35:ba:7e:71:61:85:ef:d2:93:
                    d9:7f:bd:e4:89:9c:f4:fb:fb:6c:7c:bc:ca:ec:6e:
                    74:e9:46:b0:9e:ad:24:78:6e:4b:d8:ba:93:43:cc:
                    86:9b:68:6d:aa:15:5b:9c:8e:be:7c:1d:2e:b6:14:
                    c4:9f:c1:fe:a3:bf:1a:0f:d5:cb:29:09:e4:e3:f2:
                    3d:ec:1d:8a:c5:a6:b8:63:42:6d:c5:b9:60:87:74:
                    f3:95:3a:07:b5:d4:6f:5a:90:ed:8a:aa:bf:e0:91:
                    84:86:eb:38:f4:91:36:96:31:2a:6e:14:fd:92:90:
                    dd:90:75:41:24:7a:49:75:d4:19:67:ec:7c:10:c3:
                    76:9d:b3:9d:ba:d2:0e:ef:f1:05:c9:81:0d:75:54:
                    f2:ca:63:a7:04:94:e3:f5:b6:20:9f:92:97:bd:60:
                    72:71:4d:91:06:76:df:e7:3a:45:a5:f6:7b:bf:88:
                    96:24:59:c2:17:4d:33:d3:84:9f:35:73:5d:1f:48:
                    4f:67:35:b4:b4:ca:ad:d4:2d:1b:fa:1b:ff:63:9f:
                    54:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:F9:74:27:E5:29:34:2E:DD:54:C3:11:BC:3B:5D:A7:5D:18:AE:54
            X509v3 Authority Key Identifier:
                keyid:67:5A:86:76:ED:37:D1:6A:BB:CA:2F:EF:8E:AA:1F:23:F2:57:B2:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1qGdu030Wq7yi_vjqofI_JXsp8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:5a:e4:2d:43:1f:8e:57:8a:c1:cf:f3:c0:ee:f8:9c:f8:75:
         66:9f:82:e7:ba:72:df:14:a6:e9:10:cc:ce:66:81:dd:93:b2:
         02:98:6c:7d:38:2c:f9:2f:be:a2:c2:40:17:83:eb:f3:77:9a:
         23:a0:1d:bd:c1:b7:e1:99:bf:5d:bc:74:2a:11:e8:36:42:b3:
         8c:f2:74:25:54:aa:62:13:fe:77:f5:0e:2d:54:1d:89:81:52:
         ef:ee:9e:5a:df:78:c6:11:7c:0f:52:da:55:41:11:66:19:21:
         e2:ff:ac:60:33:35:46:0e:74:f7:5f:1e:f0:6c:d3:6d:ed:62:
         20:1c:51:ef:d9:90:9d:cd:33:6f:6a:b1:ba:db:0d:1d:31:4c:
         f8:8d:a3:f9:2c:99:82:4e:a7:e7:34:f9:23:16:b1:9b:6d:73:
         f0:ba:a8:64:a8:bf:0f:05:95:d2:e6:6d:08:15:1e:bb:33:4b:
         99:7a:fa:f9:09:43:00:34:37:de:15:2d:50:34:a6:f2:ad:a0:
         30:7a:e0:7b:c4:fe:6e:c0:e0:d0:95:12:4a:8a:c2:8c:a1:28:
         85:23:96:1f:28:5b:ce:3e:ad:2c:2c:5c:39:e3:af:7a:86:0f:
         3c:76:bf:fa:f8:cf:78:a9:77:38:37:c1:30:04:d4:80:aa:78:
         a0:51:5c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:00:43 2026 by rpki-client