Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.mft
File:                     ZpvKCpDeWAORqO5km-TvvjbOhBg.mft (raw, json)
Hash identifier:          CIGtBMVUJgbcWfv6PzzVpRLOT0HUy6Awkjp7I9ZPbMA=
Subject key identifier:   CC:5D:31:B2:F4:40:ED:5C:08:19:CE:F2:93:70:46:B0:EB:AD:05:2A
Authority key identifier: 66:9B:CA:0A:90:DE:58:03:91:A8:EE:64:9B:E4:EF:BE:36:CE:84:18
Certificate issuer:       /CN=A918031D/serialNumber=669BCA0A90DE580391A8EE649BE4EFBE36CE8418
Certificate serial:       019E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpvKCpDeWAORqO5km-TvvjbOhBg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.mft
Manifest number:          0195
Signing time:             Fri 25 Sep 2026 04:24:47 +0000
Manifest this update:     Fri 25 Sep 2026 04:24:46 +0000
Manifest next update:     Fri 02 Oct 2026 04:24:46 +0000
Files and hashes:         1: ZpvKCpDeWAORqO5km-TvvjbOhBg.crl (hash: oHp2me8HO7d3nvuZnfdtkxziLZeW3uVQE7F5050N3k0=)
                          2: 314597D64EEF11EF8BACFA30C4F9AE02.roa (hash: 9qSoXVlEycNCIEdeN++oa2o1NIklOSP03YZ6af8JV3c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.crl
                          rsync://rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpvKCpDeWAORqO5km-TvvjbOhBg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 04:24:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 414 (0x19e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918031D, serialNumber=669BCA0A90DE580391A8EE649BE4EFBE36CE8418
        Validity
            Not Before: Sep 25 04:24:46 2026 GMT
            Not After : Oct  2 04:24:46 2026 GMT
        Subject: CN=6ab5f78e-ef6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5b:90:2d:64:9f:4d:8a:c6:4c:2a:fa:d7:49:
                    e2:d0:c8:b9:77:f8:36:e0:48:2b:31:8e:ee:ff:39:
                    d2:74:b9:91:de:f3:ad:b0:b5:63:6c:b0:4e:00:a3:
                    9b:8a:8d:0e:1e:fc:9c:70:5c:36:c0:5e:8a:55:15:
                    20:58:57:77:52:8f:e9:bf:b9:43:33:c5:6f:46:eb:
                    00:45:ed:df:d6:9c:70:10:a5:d0:08:0c:d6:ca:32:
                    75:50:d8:9f:2b:f1:89:db:54:d2:16:46:bc:28:eb:
                    7f:fe:dd:5e:ae:bf:ff:57:ad:31:f6:46:6f:fe:68:
                    06:8a:14:bb:8c:13:9f:fe:2b:85:0b:3e:01:05:f7:
                    59:3b:23:1a:fc:31:e5:be:eb:cd:61:f3:04:10:62:
                    3e:f9:8b:2a:df:aa:ba:39:17:82:b5:73:a4:22:1e:
                    ab:1b:29:80:4a:7e:fe:6c:b3:7b:c4:14:9b:db:4f:
                    8b:11:fc:4c:53:1d:cf:f5:3c:8a:95:77:18:1b:51:
                    bc:e9:67:c4:8a:6b:2f:da:10:a5:09:f7:60:e4:f8:
                    a0:8f:15:cc:17:28:95:a5:73:2e:8e:67:71:38:b9:
                    d1:b6:47:98:cf:bd:f3:4d:a3:f2:63:5f:21:4d:8a:
                    07:b4:eb:2a:44:a1:0a:8e:b4:a8:22:7e:0e:6a:49:
                    d8:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:5D:31:B2:F4:40:ED:5C:08:19:CE:F2:93:70:46:B0:EB:AD:05:2A
            X509v3 Authority Key Identifier:
                keyid:66:9B:CA:0A:90:DE:58:03:91:A8:EE:64:9B:E4:EF:BE:36:CE:84:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpvKCpDeWAORqO5km-TvvjbOhBg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:10:23:01:9e:f8:39:09:e6:ad:8a:9d:c1:8e:f8:73:4c:c9:
         62:5b:25:c0:a8:39:2c:fb:25:fc:fb:25:80:39:ef:cc:a2:ab:
         0a:aa:1c:a8:87:0c:50:88:9f:96:bd:30:f6:50:eb:df:7a:4c:
         11:a5:99:9d:37:cf:9c:9c:c3:0e:bb:02:9f:60:43:79:c7:80:
         18:cc:df:eb:10:b2:81:dd:92:39:c3:45:df:f4:6c:0d:e0:e3:
         a2:37:f0:41:f4:42:28:4d:96:89:cd:9c:52:ea:a6:50:04:07:
         ae:ad:80:70:5a:28:0d:11:4a:90:2a:60:e7:34:87:56:27:a6:
         55:9f:90:4f:b7:99:49:0a:25:3b:80:b1:8e:4a:71:77:a3:1e:
         2f:c2:31:1b:a3:cc:f3:5b:b6:cd:3c:4a:ba:e7:7a:e6:20:b6:
         d4:a0:a4:19:13:67:74:7b:2e:63:99:16:af:23:96:a0:31:0c:
         33:66:80:fe:4f:42:05:4f:ba:36:9d:f9:95:32:96:24:8d:e9:
         66:0c:b4:74:43:bb:3c:91:e2:da:c0:d0:23:6c:97:cd:e8:5c:
         62:05:7b:b5:73:e5:1f:64:8b:b7:92:9e:7f:0a:b6:f8:bc:ac:
         52:02:bf:5c:c9:02:59:b9:72:55:77:e9:2a:06:48:d8:1d:1f:
         6d:f6:64:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:53:30 2026 by rpki-client