Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.mft
File:                     zEJAcHQQNjc16_bvsZT7Zw80X0I.mft (raw, json)
Hash identifier:          YWrdr2Nr5KQ0P4BLO0ipBx9z2yyX19/noKJGAfEMTaA=
Subject key identifier:   E6:23:A4:14:C1:A7:97:2B:B5:49:1B:CF:FB:79:FA:D7:63:F8:9D:5A
Authority key identifier: CC:42:40:70:74:10:36:37:35:EB:F6:EF:B1:94:FB:67:0F:34:5F:42
Certificate issuer:       /CN=A9160AEE/serialNumber=CC4240707410363735EBF6EFB194FB670F345F42
Certificate serial:       DC
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zEJAcHQQNjc16_bvsZT7Zw80X0I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.mft
Manifest number:          CC
Signing time:             Fri 25 Sep 2026 07:04:04 +0000
Manifest this update:     Fri 25 Sep 2026 07:04:03 +0000
Manifest next update:     Fri 02 Oct 2026 07:04:03 +0000
Files and hashes:         1: zEJAcHQQNjc16_bvsZT7Zw80X0I.crl (hash: grzND3zml4sJ9aO980N+sFsjLk9QuuM8I4seh+IIUHs=)
                          2: 6FBBA45AFD2711F0B1802E18426F56BC.roa (hash: InU5YhYgQdECTfOQlDj5F02bMyaCjuUJFEGGYk6O1Jc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.crl
                          rsync://rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zEJAcHQQNjc16_bvsZT7Zw80X0I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 07:04:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 220 (0xdc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9160AEE, serialNumber=CC4240707410363735EBF6EFB194FB670F345F42
        Validity
            Not Before: Sep 25 07:04:03 2026 GMT
            Not After : Oct  2 07:04:03 2026 GMT
        Subject: CN=6ab61ce3-5b2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:fa:d7:6d:e2:81:24:9d:aa:cc:0f:8d:38:aa:
                    56:cb:2e:f6:08:6c:39:bd:8b:6d:a9:f6:7d:25:3a:
                    fb:b1:ce:2d:f8:ae:55:af:ac:c2:83:1b:f7:58:78:
                    44:03:cd:d5:a5:b0:c8:02:b4:a0:1d:86:7c:16:79:
                    29:8c:01:42:ed:e9:2f:d6:69:d1:6e:a1:c3:32:9d:
                    da:6a:df:a1:e9:24:64:8e:e9:46:52:36:ad:26:e9:
                    7c:9e:77:4b:94:43:5c:44:1e:66:75:93:be:0f:b1:
                    81:f1:b3:97:9b:e9:fa:45:89:19:e5:c0:fc:8a:6e:
                    0a:67:2b:ff:2f:df:9b:72:1c:3a:32:b2:9e:1c:24:
                    df:41:8e:34:d6:f5:1b:e8:79:68:ad:b2:b6:dc:5b:
                    20:07:72:9c:39:e0:6d:1c:9e:66:83:de:42:0b:2b:
                    27:93:bf:3e:14:11:de:e0:63:ad:c3:54:08:17:b0:
                    b1:0c:7c:e3:e5:75:11:96:ef:bc:72:06:0c:30:1e:
                    8d:94:e6:e8:7f:73:c8:c0:68:93:ee:c0:f8:47:8f:
                    43:1c:37:ee:64:6f:a6:ac:06:65:3c:a1:2b:36:a6:
                    c7:3b:56:c6:a1:df:06:cc:ae:04:51:b0:ba:8e:3c:
                    1e:c2:0a:43:ad:67:64:a1:66:13:68:88:68:4f:45:
                    cd:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:23:A4:14:C1:A7:97:2B:B5:49:1B:CF:FB:79:FA:D7:63:F8:9D:5A
            X509v3 Authority Key Identifier:
                keyid:CC:42:40:70:74:10:36:37:35:EB:F6:EF:B1:94:FB:67:0F:34:5F:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zEJAcHQQNjc16_bvsZT7Zw80X0I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:9b:75:6b:1e:fd:4c:cc:1f:61:7c:f4:9c:74:13:85:49:7b:
         0e:12:15:2e:6d:52:55:5e:cb:e7:c0:0a:94:0b:2e:d1:91:2b:
         dc:fe:34:04:98:05:fa:b3:7e:c6:20:de:4a:58:54:9c:48:43:
         bf:2c:fc:c1:57:d1:e3:3b:42:6e:c0:ff:39:39:97:6a:d8:f6:
         ec:ae:75:ca:92:03:11:ea:f4:93:57:59:b8:f0:49:2d:03:b1:
         f6:9d:ef:5a:2e:70:4c:26:7a:c3:1e:03:63:3a:49:b0:78:49:
         17:56:a7:d3:9c:0f:1e:82:ee:5a:4e:a9:86:fe:27:90:7b:ab:
         be:bb:8e:1d:4d:1d:28:a6:8c:3c:cf:e7:46:8e:d3:38:48:58:
         8a:6d:7d:25:c5:a0:3c:8e:04:a1:e0:ce:bb:2c:06:e8:c7:b7:
         9a:33:0d:a5:b7:17:dc:93:ea:4a:b0:89:8d:b0:2f:a4:a6:d5:
         33:69:d2:0e:57:1c:66:7b:cd:fa:d4:08:b7:ab:44:78:40:76:
         48:e6:1d:16:ca:7a:7d:73:78:b4:e5:b0:f7:5a:b6:48:69:81:
         68:5e:21:33:0f:c7:64:a4:4d:20:8e:17:d8:22:32:57:df:e5:
         66:5f:8a:ce:c2:9c:95:46:3e:2b:0b:2e:9a:70:f3:97:6d:ae:
         26:7a:b1:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 17:18:48 2026 by rpki-client