Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/ZUb1EMG5JJHKcJC-dHokKJJBg6o.mft
File:                     ZUb1EMG5JJHKcJC-dHokKJJBg6o.mft (raw, json)
Hash identifier:          fnaxx0SQOMXOG6nln3lEdncJO2zmEdGxJqlHSDIp45w=
Subject key identifier:   C0:F4:BD:15:15:7B:E0:A7:A1:0B:DF:B3:22:C0:33:ED:94:90:85:F0
Authority key identifier: 65:46:F5:10:C1:B9:24:91:CA:70:90:BE:74:7A:24:28:92:41:83:AA
Certificate issuer:       /CN=A91E41C9/serialNumber=6546F510C1B92491CA7090BE747A2428924183AA
Certificate serial:       B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUb1EMG5JJHKcJC-dHokKJJBg6o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/ZUb1EMG5JJHKcJC-dHokKJJBg6o.mft
Manifest number:          0A2F
Signing time:             Thu 24 Sep 2026 20:00:22 +0000
Manifest this update:     Thu 24 Sep 2026 20:00:21 +0000
Manifest next update:     Thu 01 Oct 2026 20:00:21 +0000
Files and hashes:         1: ZUb1EMG5JJHKcJC-dHokKJJBg6o.crl (hash: Orgd0hc94DDiqwci+qSP6LkxTZqDXRtlnrEs85mM+To=)
                          2: 3FACB1ECAE3911F099A5E452C4F9AE02.roa (hash: 5RbDYlZaIKQenAR20w6lc3nfzj9SDGCtSWGXdzXfTX8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/ZUb1EMG5JJHKcJC-dHokKJJBg6o.crl
                          rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/ZUb1EMG5JJHKcJC-dHokKJJBg6o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUb1EMG5JJHKcJC-dHokKJJBg6o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 20:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 180 (0xb4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E41C9, serialNumber=6546F510C1B92491CA7090BE747A2428924183AA
        Validity
            Not Before: Sep 24 20:00:21 2026 GMT
            Not After : Oct  1 20:00:21 2026 GMT
        Subject: CN=6ab58156-8db3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:68:30:b0:43:1b:fe:af:1f:e7:56:7d:3c:3b:
                    a5:27:00:7d:ef:5c:c9:a9:0d:74:1b:34:b0:27:96:
                    08:23:a5:68:aa:dd:87:9f:12:1e:5c:f9:b2:19:ae:
                    f9:ee:c5:be:0e:ec:13:9d:45:22:6d:0b:18:5e:e4:
                    62:12:37:41:ca:7a:8e:3d:51:0b:85:b8:b1:f0:2e:
                    50:73:8c:98:84:14:1b:08:b9:b1:f5:e6:cd:29:a3:
                    33:cc:be:3e:a0:de:15:bb:e2:d1:dc:b7:c2:bf:d4:
                    44:18:38:d5:85:27:31:5a:59:f9:8c:a9:f2:3f:a5:
                    f4:a2:26:aa:60:d3:0b:a1:3b:48:eb:cb:f0:40:63:
                    a1:08:d1:9f:cf:81:93:b3:63:95:8f:c7:2f:1f:80:
                    90:8a:1c:45:84:12:09:11:36:1a:b6:f7:69:a9:cf:
                    a7:d9:af:f4:d1:bf:85:64:3b:6c:77:00:51:e2:ea:
                    6c:08:85:fb:be:00:83:73:d4:ed:fe:cf:3f:71:f1:
                    b3:20:63:09:61:8b:ba:76:24:39:5e:2e:40:a9:ff:
                    f5:03:00:76:c2:8a:7d:2c:28:21:a4:f8:a7:98:c7:
                    2d:38:e7:f0:b8:95:68:b1:ea:81:ea:75:3e:b7:0c:
                    92:66:1e:10:10:5e:f9:00:f3:4a:37:16:69:29:5d:
                    23:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:F4:BD:15:15:7B:E0:A7:A1:0B:DF:B3:22:C0:33:ED:94:90:85:F0
            X509v3 Authority Key Identifier:
                keyid:65:46:F5:10:C1:B9:24:91:CA:70:90:BE:74:7A:24:28:92:41:83:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/ZUb1EMG5JJHKcJC-dHokKJJBg6o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUb1EMG5JJHKcJC-dHokKJJBg6o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/ZUb1EMG5JJHKcJC-dHokKJJBg6o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:57:85:1c:7b:57:ff:27:8b:1f:92:7d:f2:98:df:77:1e:82:
         0f:26:bd:22:16:3c:0f:18:65:ad:2f:b5:ef:f4:f6:e3:1d:8c:
         36:8d:d5:e6:52:74:9a:71:4c:6d:d8:5b:fd:35:fa:8a:23:64:
         ff:34:40:80:2f:bf:7f:cf:e2:03:6e:cf:28:4f:6e:e3:bd:eb:
         30:79:98:81:ca:ba:ee:0b:3e:a4:8c:a2:99:80:23:1d:5c:ad:
         f9:22:9e:db:d6:59:60:cc:74:7b:ce:a0:c5:d0:ca:c9:6a:9c:
         fa:62:85:be:53:d5:d4:3f:23:6d:7c:9b:10:ad:a3:a3:ce:5e:
         9a:40:4a:0f:12:cb:f2:45:e0:ff:24:1a:0c:f8:85:55:7f:ad:
         61:82:19:fc:3f:44:5d:59:80:e8:63:dd:14:99:af:9f:ab:ae:
         61:95:65:69:df:68:c4:03:75:d3:67:70:b3:04:a5:45:a8:ab:
         f7:42:18:39:91:32:4b:77:ea:89:68:90:37:66:4a:0f:24:d9:
         0f:d9:8d:fe:c7:8b:e5:d1:91:24:42:e5:8e:20:c4:c9:d1:b4:
         0b:f9:62:8b:3d:41:78:6d:e3:b0:c4:13:f1:1f:6c:03:b4:03:
         93:07:66:b4:45:30:4b:45:79:77:6c:eb:0f:97:94:60:89:ef:
         76:03:5f:85
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICALQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTQxQzkxMTAvBgNVBAUTKDY1NDZGNTEwQzFCOTI0OTFDQTcwOTBCRTc0N0EyNDI4
OTI0MTgzQUEwHhcNMjYwOTI0MjAwMDIxWhcNMjYxMDAxMjAwMDIxWjAYMRYwFAYD
VQQDEw02YWI1ODE1Ni04ZGIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoGgwsEMb/q8f51Z9PDulJwB971zJqQ10GzSwJ5YII6Voqt2HnxIeXPmyGa75
7sW+DuwTnUUibQsYXuRiEjdBynqOPVELhbix8C5Qc4yYhBQbCLmx9ebNKaMzzL4+
oN4Vu+LR3LfCv9REGDjVhScxWln5jKnyP6X0oiaqYNMLoTtI68vwQGOhCNGfz4GT
s2OVj8cvH4CQihxFhBIJETYatvdpqc+n2a/00b+FZDtsdwBR4upsCIX7vgCDc9Tt
/s8/cfGzIGMJYYu6diQ5Xi5Aqf/1AwB2wop9LCghpPinmMctOOfwuJVoseqB6nU+
twySZh4QEF75APNKNxZpKV0jHwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMD0vRUV
e+CnoQvfsyLAM+2UkIXwMB8GA1UdIwQYMBaAFGVG9RDBuSSRynCQvnR6JCiSQYOq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDFDOS80OUJEOURBNkMw
RjgxMUVBOEFDNkM0NkNDNEY5QUUwMi9aVWIxRU1HNUpKSEtjSkMtZEhva0tKSkJn
Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pVYjFFTUc1SkpIS2NKQy1kSG9rS0pKQmc2by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NDFDOS80OUJEOURBNkMwRjgxMUVBOEFDNkM0NkNDNEY5QUUwMi9aVWIxRU1HNUpK
SEtjSkMtZEhva0tKSkJnNm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHVeFHHtX/yeLH5J98pjfdx6CDya9IhY8DxhlrS+17/T24x2MNo3V5lJ0mnFM
bdhb/TX6iiNk/zRAgC+/f8/iA27PKE9u473rMHmYgcq67gs+pIyimYAjHVyt+SKe
29ZZYMx0e86gxdDKyWqc+mKFvlPV1D8jbXybEK2jo85emkBKDxLL8kXg/yQaDPiF
VX+tYYIZ/D9EXVmA6GPdFJmvn6uuYZVlad9oxAN102dwswSlRair90IYOZEyS3fq
iWiQN2ZKDyTZD9mN/seL5dGRJELljiDEydG0C/liiz1BeG3jsMQT8R9sA7QDkwdm
tEUwS0V5d2zrD5eUYInvdgNfhQ==
-----END CERTIFICATE-----
Generated at Sat Sep 26 03:15:29 2026 by rpki-client