Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91694A4/22698E4465BC11F19A81043C7E47A888/ZGSo1Mt6a8krlJ0aHm8JkzPFbfE.mft
File:                     ZGSo1Mt6a8krlJ0aHm8JkzPFbfE.mft (raw, json)
Hash identifier:          SjyIKSgwX+vGogERXJLcyoNn7F6tInw9uDM1Cf5KcVs=
Subject key identifier:   79:B1:B0:C7:6E:C6:FA:05:F4:EE:03:A8:57:E4:B2:B6:DA:43:5A:1F
Authority key identifier: 64:64:A8:D4:CB:7A:6B:C9:2B:94:9D:1A:1E:6F:09:93:33:C5:6D:F1
Certificate issuer:       /CN=A91694A4/serialNumber=6464A8D4CB7A6BC92B949D1A1E6F099333C56DF1
Certificate serial:       42
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZGSo1Mt6a8krlJ0aHm8JkzPFbfE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91694A4/22698E4465BC11F19A81043C7E47A888/ZGSo1Mt6a8krlJ0aHm8JkzPFbfE.mft
Manifest number:          41
Signing time:             Tue 13 Oct 2026 09:16:09 +0000
Manifest this update:     Tue 13 Oct 2026 09:16:08 +0000
Manifest next update:     Tue 20 Oct 2026 09:16:08 +0000
Files and hashes:         1: ZGSo1Mt6a8krlJ0aHm8JkzPFbfE.crl (hash: LOoo2/Az/OYyJ77fvzAnLcHNlpup13OfDM87SIMT+bc=)
                          2: CCB3F0C665C411F19AAB55CC8147A888.roa (hash: 6HsQ3Z7sCMaiW2glN0WOtCM/Fh9gJPdbJXQJdZ4RzC8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91694A4/22698E4465BC11F19A81043C7E47A888/ZGSo1Mt6a8krlJ0aHm8JkzPFbfE.crl
                          rsync://rpki.apnic.net/member_repository/A91694A4/22698E4465BC11F19A81043C7E47A888/ZGSo1Mt6a8krlJ0aHm8JkzPFbfE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZGSo1Mt6a8krlJ0aHm8JkzPFbfE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 Oct 2026 09:16:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 66 (0x42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91694A4, serialNumber=6464A8D4CB7A6BC92B949D1A1E6F099333C56DF1
        Validity
            Not Before: Oct 13 09:16:08 2026 GMT
            Not After : Oct 20 09:16:08 2026 GMT
        Subject: CN=6acdf6d8-d78a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:00:d4:bd:79:f7:6f:33:22:4e:6e:a6:25:f6:
                    5a:9d:0b:c4:ae:4c:5c:e4:fc:2c:4e:86:9d:e6:60:
                    02:d4:64:bc:41:46:f3:e8:6e:bc:ac:ec:82:1e:60:
                    16:0c:6f:31:7c:8e:05:1d:5f:31:80:37:09:4b:11:
                    52:b0:06:b9:77:3d:2e:85:91:e1:c0:8f:5d:64:ee:
                    4b:0c:16:c4:bb:6b:3d:60:2f:8c:f3:c9:0d:09:75:
                    6c:e7:44:bd:aa:bc:c6:a9:54:f8:89:94:a8:50:41:
                    b7:9c:5f:58:c7:b2:ea:da:72:14:4b:76:90:ba:de:
                    ae:d4:68:2f:f3:ef:6f:3a:2d:1e:24:c4:bd:00:4c:
                    95:9b:04:26:63:5e:37:fe:13:cf:b6:b6:0b:3b:7e:
                    c5:13:43:f5:a0:a9:1f:74:6f:b1:a6:40:10:de:54:
                    80:b1:60:2e:c8:1d:af:e8:52:95:05:77:81:1d:f5:
                    b5:9c:ac:6d:3f:c6:fd:e1:c7:c6:61:a8:23:88:79:
                    92:dd:f4:7b:2b:4e:fe:bb:16:df:05:48:a2:bf:88:
                    cd:f6:6e:9c:e9:df:85:9d:28:b2:3b:be:3c:b7:6f:
                    4d:02:05:8d:7a:a0:3b:0f:5e:3e:b0:87:91:9e:2b:
                    9d:ac:18:73:2a:51:1b:d3:ad:d8:0a:91:01:1d:03:
                    7b:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:B1:B0:C7:6E:C6:FA:05:F4:EE:03:A8:57:E4:B2:B6:DA:43:5A:1F
            X509v3 Authority Key Identifier:
                keyid:64:64:A8:D4:CB:7A:6B:C9:2B:94:9D:1A:1E:6F:09:93:33:C5:6D:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91694A4/22698E4465BC11F19A81043C7E47A888/ZGSo1Mt6a8krlJ0aHm8JkzPFbfE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZGSo1Mt6a8krlJ0aHm8JkzPFbfE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91694A4/22698E4465BC11F19A81043C7E47A888/ZGSo1Mt6a8krlJ0aHm8JkzPFbfE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:4d:38:bc:e5:60:33:d6:2a:72:81:09:dd:dc:0a:45:16:1d:
         c6:e7:7b:5c:6f:b0:25:83:ef:2f:6c:a9:a1:fd:a8:0f:1d:aa:
         98:db:be:e1:db:60:85:6e:8c:03:17:2c:8b:01:7a:2d:92:6c:
         cc:fa:4b:4b:79:c9:83:60:fd:8c:8a:ab:fd:71:fa:df:86:5f:
         9a:fe:0b:66:f6:1e:86:6a:71:b5:82:26:01:18:bb:7e:0f:64:
         c9:6f:e6:82:0d:35:b1:51:5b:1a:c1:bb:68:0c:da:65:5b:3a:
         23:8e:4a:12:dd:d4:07:9a:b5:21:9e:21:d4:d8:38:46:bb:30:
         45:31:b5:7b:69:a5:b9:04:fa:45:fc:b2:c6:2c:c7:af:50:61:
         e0:a2:67:fb:d8:58:ee:3c:19:d5:f9:d5:0e:bc:af:20:24:42:
         d8:c4:fc:83:20:f0:44:3d:25:e2:91:24:42:9f:64:d2:fe:f8:
         40:7e:57:1d:ce:84:7f:36:f8:79:28:3c:59:01:b8:32:e6:75:
         e5:69:e8:c9:90:a1:53:d2:da:c3:1f:f5:ba:2f:3a:35:5a:9f:
         cf:e1:89:43:be:68:33:b2:83:00:65:35:20:35:7d:48:08:b3:
         88:95:78:3e:7f:40:cc:e6:47:e9:88:24:a9:54:d0:d3:3c:a0:
         44:fe:10:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 06:02:08 2026 by rpki-client