Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91594AE/3D8B8C4852B511EAA4A9D20EC4F9AE02/zaR-Ch7rUl87Wg-vsvoNuzY7-k0.mft
File:                     zaR-Ch7rUl87Wg-vsvoNuzY7-k0.mft (raw, json)
Hash identifier:          WWCZ+vZWO5bkoe3DHVXjBKchcRmRdVTLvTsDcSEQqHg=
Subject key identifier:   AB:34:52:F8:2D:91:79:F0:01:6A:CD:15:22:28:25:AC:9F:E1:EB:31
Authority key identifier: CD:A4:7E:0A:1E:EB:52:5F:3B:5A:0F:AF:B2:FA:0D:BB:36:3B:FA:4D
Certificate issuer:       /CN=A91594AE/serialNumber=CDA47E0A1EEB525F3B5A0FAFB2FA0DBB363BFA4D
Certificate serial:       0BBE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zaR-Ch7rUl87Wg-vsvoNuzY7-k0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91594AE/3D8B8C4852B511EAA4A9D20EC4F9AE02/zaR-Ch7rUl87Wg-vsvoNuzY7-k0.mft
Manifest number:          0BB4
Signing time:             Sun 04 Oct 2026 19:06:36 +0000
Manifest this update:     Sun 04 Oct 2026 19:06:36 +0000
Manifest next update:     Sun 11 Oct 2026 19:06:36 +0000
Files and hashes:         1: zaR-Ch7rUl87Wg-vsvoNuzY7-k0.crl (hash: 6PRlLsRmiO04cqgo/MTwRuR3fcTYmJShN3n+vjwLO7w=)
                          2: 38CAF4EC52B911EAACE8041BC4F9AE02.roa (hash: ujeUTP56Z66beEqAmdIwzEcYV4pQg/db+qJ48FDN5s0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91594AE/3D8B8C4852B511EAA4A9D20EC4F9AE02/zaR-Ch7rUl87Wg-vsvoNuzY7-k0.crl
                          rsync://rpki.apnic.net/member_repository/A91594AE/3D8B8C4852B511EAA4A9D20EC4F9AE02/zaR-Ch7rUl87Wg-vsvoNuzY7-k0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zaR-Ch7rUl87Wg-vsvoNuzY7-k0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 19:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3006 (0xbbe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91594AE, serialNumber=CDA47E0A1EEB525F3B5A0FAFB2FA0DBB363BFA4D
        Validity
            Not Before: Oct  4 19:06:36 2026 GMT
            Not After : Oct 11 19:06:36 2026 GMT
        Subject: CN=6ac2a3bc-d2ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:45:ca:e6:d8:e2:c4:b0:dc:be:2f:87:64:5b:
                    d3:a0:2c:1f:a3:fd:18:a1:73:3a:5a:69:0d:e4:34:
                    9c:0b:14:5b:5d:eb:d4:f3:a9:f8:05:3a:1c:20:82:
                    ac:c4:a3:04:0f:a4:e9:83:84:04:c0:91:18:08:7f:
                    04:ba:88:0c:6d:80:5d:ca:9d:61:7f:e6:85:eb:49:
                    d5:0d:aa:18:89:3e:a0:85:cb:99:12:90:b1:34:18:
                    ad:c1:9f:c4:2c:18:ac:d5:0f:f6:f2:89:09:36:61:
                    97:6c:80:72:ff:90:8f:44:f4:9f:c1:68:ef:89:49:
                    d9:40:40:25:b3:d9:f5:b4:1a:8d:73:ae:cf:29:d6:
                    ba:b1:c7:53:96:d1:94:fd:2c:54:de:dd:dd:5e:85:
                    be:d0:05:40:47:26:fe:fa:62:87:8d:b5:de:d5:34:
                    4a:67:30:95:c1:dc:ed:fc:5d:ed:df:89:35:cf:12:
                    2e:6f:65:2a:6b:50:61:1b:78:d4:25:d8:68:a6:ba:
                    9b:d5:a5:ea:ee:fc:1b:b2:db:a1:a5:91:78:c7:ae:
                    02:b1:df:80:49:07:68:14:26:e3:59:0c:b2:b2:7e:
                    d7:b2:5e:1a:6e:ef:f8:70:3a:78:73:b8:27:9c:53:
                    5e:35:91:d1:69:82:98:3d:93:c7:f7:79:84:0c:23:
                    30:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:34:52:F8:2D:91:79:F0:01:6A:CD:15:22:28:25:AC:9F:E1:EB:31
            X509v3 Authority Key Identifier:
                keyid:CD:A4:7E:0A:1E:EB:52:5F:3B:5A:0F:AF:B2:FA:0D:BB:36:3B:FA:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91594AE/3D8B8C4852B511EAA4A9D20EC4F9AE02/zaR-Ch7rUl87Wg-vsvoNuzY7-k0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zaR-Ch7rUl87Wg-vsvoNuzY7-k0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91594AE/3D8B8C4852B511EAA4A9D20EC4F9AE02/zaR-Ch7rUl87Wg-vsvoNuzY7-k0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:dd:e8:6b:14:47:04:b2:1f:38:22:31:d2:85:c4:53:18:25:
         94:7b:11:37:75:08:c0:67:3e:a2:36:8a:00:43:27:f9:fe:57:
         7f:1a:a0:bf:5c:2e:b0:44:dd:4d:96:e1:fd:a5:c5:fa:6e:2a:
         d5:83:79:33:dc:6b:8e:90:b4:44:de:64:a8:0d:5c:db:cc:84:
         a3:31:ff:54:a9:7a:ef:fc:5e:ad:1a:77:6d:55:21:0e:f2:ff:
         26:51:b8:68:e6:0d:91:b7:6d:b5:f7:e1:4a:e4:32:57:74:97:
         ae:16:d6:6e:a6:e7:80:1a:4a:43:7f:81:bb:a0:05:58:93:31:
         13:4f:04:9b:1a:af:ca:db:cb:a0:5b:69:bb:ff:79:aa:b7:3f:
         37:5b:28:c6:d2:cf:29:3d:79:7b:e5:02:65:3a:f2:99:fe:a9:
         11:4f:d0:49:ca:50:48:00:79:8c:69:dd:28:24:a5:ee:44:de:
         fa:45:c9:28:6d:b8:b7:ad:76:7b:25:9e:18:66:84:63:df:b1:
         90:60:4a:fc:39:08:d0:71:77:5c:5e:e5:a4:c6:21:b8:da:dd:
         7b:84:01:51:2a:25:93:6c:24:c0:bb:2b:56:fa:85:e4:13:e8:
         40:0e:a4:dd:13:5f:1d:d8:72:4b:e8:28:d2:3f:48:ef:ae:f6:
         a4:e1:b6:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 14:20:15 2026 by rpki-client