Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.mft
File:                     ZjJswGhaN2NqRbxwlHwhnQtczGA.mft (raw, json)
Hash identifier:          WlMClCdnNs3HGXoaGyJ1cIF/4/UvLwluSzCWO2mDg0E=
Subject key identifier:   76:C1:B2:69:1A:BE:5F:9B:A5:4B:34:DA:8D:02:9E:5A:C4:B8:66:3A
Authority key identifier: 66:32:6C:C0:68:5A:37:63:6A:45:BC:70:94:7C:21:9D:0B:5C:CC:60
Certificate issuer:       /CN=A91E0961/serialNumber=66326CC0685A37636A45BC70947C219D0B5CCC60
Certificate serial:       F2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjJswGhaN2NqRbxwlHwhnQtczGA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.mft
Manifest number:          EE
Signing time:             Sat 03 Oct 2026 07:11:04 +0000
Manifest this update:     Sat 03 Oct 2026 07:11:04 +0000
Manifest next update:     Sat 10 Oct 2026 07:11:04 +0000
Files and hashes:         1: ZjJswGhaN2NqRbxwlHwhnQtczGA.crl (hash: AkKpsdo6+E3xQH3pv5kKsE2rLFLUxyVTIdcVxMlciUE=)
                          2: E2245D966E8B11F09764751EC4F9AE02.roa (hash: BxOM7SgqdGJtQ0VBZeNqfMKq52lRmXi/Ew1Q7dVeV+g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.crl
                          rsync://rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjJswGhaN2NqRbxwlHwhnQtczGA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 07:11:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 242 (0xf2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0961, serialNumber=66326CC0685A37636A45BC70947C219D0B5CCC60
        Validity
            Not Before: Oct  3 07:11:04 2026 GMT
            Not After : Oct 10 07:11:04 2026 GMT
        Subject: CN=6ac0aa88-a245
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:97:82:ec:77:e0:05:04:3d:22:7d:fb:44:de:
                    9c:d9:33:5c:2a:f2:ef:aa:c3:db:8b:12:15:c1:04:
                    2d:77:10:f9:5d:fd:96:d8:cd:67:81:9c:cf:f0:26:
                    35:9c:4f:84:fd:36:60:fb:cc:13:50:6b:c7:76:40:
                    d4:f0:85:81:e7:6d:56:43:c8:45:01:43:b8:41:f9:
                    3a:b2:a2:c7:b2:71:96:e2:ae:38:e8:b4:57:49:2f:
                    61:d5:fb:83:6f:04:6e:1b:34:0e:70:55:a9:3b:b8:
                    4d:c8:78:78:87:d2:da:d1:5f:8e:df:16:18:2b:bd:
                    95:63:45:f7:9a:b1:09:0d:d9:30:78:b0:5d:3b:9e:
                    a3:ce:61:8a:4b:bb:5e:5e:5e:d4:9c:e9:0d:68:84:
                    83:50:b7:2a:85:2f:4c:7a:4e:9e:96:56:e6:e8:26:
                    92:56:72:b1:06:7a:b0:26:6d:47:26:18:1c:17:8d:
                    7c:27:4b:75:70:da:92:40:57:ff:7f:16:36:cf:a2:
                    1d:54:4c:cc:d8:82:c5:10:ac:d0:96:3b:33:49:bb:
                    1d:6c:4e:8c:52:72:21:7c:b2:bf:49:ff:e6:ce:70:
                    a8:bb:f3:e4:75:72:78:95:a6:2c:4b:48:b9:88:ff:
                    24:ec:fb:9e:7c:ce:19:c1:96:f2:65:40:3c:43:9f:
                    3c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:C1:B2:69:1A:BE:5F:9B:A5:4B:34:DA:8D:02:9E:5A:C4:B8:66:3A
            X509v3 Authority Key Identifier:
                keyid:66:32:6C:C0:68:5A:37:63:6A:45:BC:70:94:7C:21:9D:0B:5C:CC:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjJswGhaN2NqRbxwlHwhnQtczGA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:61:39:b1:a9:92:ae:ba:18:40:45:e6:68:6e:4e:17:bd:f9:
         4a:46:47:c3:31:5e:e7:4a:95:8a:d9:b6:f8:0e:eb:3a:c5:1c:
         4a:22:b9:f8:18:74:85:d1:26:85:6e:85:be:9a:fb:31:51:90:
         7b:42:ae:5c:a3:4c:c9:5d:ab:a1:28:04:a8:0a:db:d1:62:4c:
         b8:87:95:20:e3:0a:53:01:f1:f9:15:ad:68:38:4d:ec:01:44:
         a1:f8:c8:3e:08:d6:0a:72:ef:9f:47:c0:4b:1d:7c:a8:cb:d0:
         08:9a:9b:89:e0:c2:08:44:af:14:06:91:d0:ff:de:c0:b8:6e:
         e1:91:76:31:48:9b:06:06:b1:dc:8c:49:c7:75:dc:9b:0c:97:
         b3:92:14:96:05:13:d1:2b:7e:b0:b3:42:a3:78:b3:62:cd:dc:
         53:67:7d:31:ce:c1:5f:5a:3e:37:eb:18:26:e7:ce:52:fb:97:
         71:e7:d3:ed:a0:4e:c6:4e:9a:f0:cd:16:b5:70:3c:60:44:9c:
         83:56:2c:a7:b9:91:bc:69:69:54:e8:70:b1:3f:0e:6e:2d:d6:
         ff:f3:55:64:30:7f:d1:74:dc:8a:f8:98:43:7f:32:94:aa:b9:
         95:60:17:c6:37:fd:6c:74:af:03:58:6e:c7:a2:c2:3d:6b:7d:
         92:21:65:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 22:35:10 2026 by rpki-client