Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915FD96/7566F5260DDB11EBAF7B107CC4F9AE02/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.mft
File:                     zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.mft (raw, json)
Hash identifier:          80N54CmT9v0+bdtwDmfnD+lDLuI1JQVgsh00W6tDrOQ=
Subject key identifier:   14:54:E6:8B:48:7D:C3:F2:14:ED:EE:C6:B8:95:68:6E:76:09:02:FC
Authority key identifier: CD:8B:BE:70:6C:CD:9B:55:32:CF:3E:B1:D5:FB:BD:7D:3E:3E:BE:A4
Certificate issuer:       /CN=A915FD96/serialNumber=CD8BBE706CCD9B5532CF3EB1D5FBBD7D3E3EBEA4
Certificate serial:       0895
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915FD96/7566F5260DDB11EBAF7B107CC4F9AE02/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.mft
Manifest number:          0887
Signing time:             Sun 20 Sep 2026 20:41:01 +0000
Manifest this update:     Sun 20 Sep 2026 20:41:00 +0000
Manifest next update:     Sun 27 Sep 2026 20:41:00 +0000
Files and hashes:         1: zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.crl (hash: y6s2CSWQUNTtd8jYzRw1WjWXwAH7x3vIXheK5B/4am4=)
                          2: 074C5C04644211EFA6AFE95CC4F9AE02.roa (hash: HjZ7t8kgpdJxOePYiWhvfCYqV48LdKYANpWFvHjvxbY=)
                          3: BAC363F00DDD11EBAF7D927FC4F9AE02.roa (hash: HV0/anJzdS8nf2kchQZlfcYKNq8/3UYN6t+tlx/5po4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915FD96/7566F5260DDB11EBAF7B107CC4F9AE02/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.crl
                          rsync://rpki.apnic.net/member_repository/A915FD96/7566F5260DDB11EBAF7B107CC4F9AE02/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 20:41:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2197 (0x895)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915FD96, serialNumber=CD8BBE706CCD9B5532CF3EB1D5FBBD7D3E3EBEA4
        Validity
            Not Before: Sep 20 20:41:00 2026 GMT
            Not After : Sep 27 20:41:00 2026 GMT
        Subject: CN=6ab044dd-ab33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:79:d2:0a:ce:f0:b1:52:46:87:b8:c5:96:7a:
                    7a:d6:55:b1:b5:ec:44:cf:5b:72:0f:a7:5c:d3:cd:
                    d6:64:39:ef:06:2c:29:86:d3:f5:de:9a:99:1a:6b:
                    b3:7e:84:8f:d8:ba:fe:3d:70:9a:3b:99:f1:a4:17:
                    d8:58:a2:aa:d1:04:d5:0b:de:f2:7a:bb:b1:bc:e2:
                    25:a4:1d:b3:c3:d2:79:c5:91:13:22:fd:28:68:0b:
                    97:ab:32:0e:36:2a:19:f0:19:cb:ed:08:a4:ba:05:
                    79:0d:84:7a:64:d3:14:04:b1:ab:b5:48:70:39:7c:
                    c5:57:d0:6a:16:75:44:7a:5f:89:62:dd:1c:de:c7:
                    e5:06:dc:09:16:9b:3b:db:88:ff:74:fb:6a:60:6a:
                    ba:1f:0c:71:a5:2c:0f:1a:9f:db:68:cf:1a:2f:1d:
                    50:1f:f6:97:24:5e:44:55:59:d9:d7:6b:52:72:93:
                    d8:43:46:a1:31:e1:d0:35:4c:c3:ee:fd:8d:41:88:
                    7c:7f:f6:46:04:35:64:b8:b1:0f:45:ce:41:32:c4:
                    0d:1d:7c:14:3b:c3:51:5f:55:4e:ec:53:af:55:02:
                    b1:c1:d0:d5:c5:98:6a:f2:74:bd:a4:70:af:a0:91:
                    f0:dd:ef:2e:48:f2:02:76:92:8a:c9:c7:5b:6f:f8:
                    ed:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:54:E6:8B:48:7D:C3:F2:14:ED:EE:C6:B8:95:68:6E:76:09:02:FC
            X509v3 Authority Key Identifier:
                keyid:CD:8B:BE:70:6C:CD:9B:55:32:CF:3E:B1:D5:FB:BD:7D:3E:3E:BE:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915FD96/7566F5260DDB11EBAF7B107CC4F9AE02/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FD96/7566F5260DDB11EBAF7B107CC4F9AE02/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:85:19:e7:65:e0:f8:c1:e0:9d:2e:3a:a2:fe:7c:c1:64:fa:
         15:86:84:01:72:85:ec:8c:a7:dd:67:fd:81:a1:c5:8f:d3:fb:
         10:fc:c5:c5:cd:ca:9d:a7:0c:c5:c5:c6:e4:d6:d0:f7:5c:c4:
         4b:94:fa:f9:b7:23:7d:ab:b9:5e:07:95:1f:2b:29:db:86:7e:
         1e:d6:8e:7e:d6:64:b0:9e:f9:5f:ed:a8:c9:20:a5:27:8e:8a:
         8c:b2:88:29:d5:bc:85:d5:a3:eb:5f:ed:06:28:57:db:60:46:
         8b:79:0c:bd:db:0a:79:9c:38:f4:f9:1d:97:83:a4:dc:c6:b0:
         88:87:00:5f:15:a5:42:80:df:10:ac:7f:d3:80:c3:cc:29:5f:
         e4:76:93:5f:a9:aa:b9:68:d9:d5:f5:13:67:cd:3e:0c:c2:03:
         97:3e:91:a9:34:ed:55:92:ee:b0:16:3a:8f:1d:3c:f0:1b:40:
         5c:46:f9:b9:70:a9:bc:fa:1c:5d:45:2e:90:91:81:f7:df:62:
         f9:7c:89:9c:84:e9:9d:92:0b:83:88:54:e5:73:af:c2:b9:6b:
         71:d0:77:80:4a:12:f3:ff:f9:0b:78:2d:e4:a6:26:d7:2b:63:
         da:d0:5a:1e:aa:e9:f3:26:90:b0:8a:8c:5b:05:2e:b3:6b:98:
         61:77:cd:3e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUZEOTYxMTAvBgNVBAUTKENEOEJCRTcwNkNDRDlCNTUzMkNGM0VCMUQ1RkJCRDdE
M0UzRUJFQTQwHhcNMjYwOTIwMjA0MTAwWhcNMjYwOTI3MjA0MTAwWjAYMRYwFAYD
VQQDEw02YWIwNDRkZC1hYjMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqHnSCs7wsVJGh7jFlnp61lWxtexEz1tyD6dc083WZDnvBiwphtP13pqZGmuz
foSP2Lr+PXCaO5nxpBfYWKKq0QTVC97yeruxvOIlpB2zw9J5xZETIv0oaAuXqzIO
NioZ8BnL7QikugV5DYR6ZNMUBLGrtUhwOXzFV9BqFnVEel+JYt0c3sflBtwJFps7
24j/dPtqYGq6HwxxpSwPGp/baM8aLx1QH/aXJF5EVVnZ12tScpPYQ0ahMeHQNUzD
7v2NQYh8f/ZGBDVkuLEPRc5BMsQNHXwUO8NRX1VO7FOvVQKxwdDVxZhq8nS9pHCv
oJHw3e8uSPICdpKKycdbb/jtZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBRU5otI
fcPyFO3uxriVaG52CQL8MB8GA1UdIwQYMBaAFM2LvnBszZtVMs8+sdX7vX0+Pr6k
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkQ5Ni83NTY2RjUyNjBE
REIxMUVCQUY3QjEwN0NDNEY5QUUwMi96WXUtY0d6Tm0xVXl6ejZ4MWZ1OWZUNC12
cVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3pZdS1jR3pObTFVeXp6NngxZnU5ZlQ0LXZxUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
RkQ5Ni83NTY2RjUyNjBEREIxMUVCQUY3QjEwN0NDNEY5QUUwMi96WXUtY0d6Tm0x
VXl6ejZ4MWZ1OWZUNC12cVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAU4UZ52Xg+MHgnS46ov58wWT6FYaEAXKF7Iyn3Wf9gaHFj9P7EPzFxc3KnacM
xcXG5NbQ91zES5T6+bcjfau5XgeVHysp24Z+HtaOftZksJ75X+2oySClJ46KjLKI
KdW8hdWj61/tBihX22BGi3kMvdsKeZw49Pkdl4Ok3MawiIcAXxWlQoDfEKx/04DD
zClf5HaTX6mquWjZ1fUTZ80+DMIDlz6RqTTtVZLusBY6jx088BtAXEb5uXCpvPoc
XUUukJGB999i+XyJnITpnZILg4hU5XOvwrlrcdB3gEoS8//5C3gt5KYm1ytj2tBa
Hqrp8yaQsIqMWwUus2uYYXfNPg==
-----END CERTIFICATE-----
Generated at Tue Sep 22 05:16:50 2026 by rpki-client