Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.mft
File:                     zYJ7-WRYNh9gmLIvdYVI1-rvoWg.mft (raw, json)
Hash identifier:          WBU5/++XP13XsTPG7zMvsL92etZ2UOuVVJNn/T3EMrA=
Subject key identifier:   68:20:D7:C8:EF:CA:11:EC:33:1A:2B:CF:FB:A0:81:A9:4E:92:95:06
Authority key identifier: CD:82:7B:F9:64:58:36:1F:60:98:B2:2F:75:85:48:D7:EA:EF:A1:68
Certificate issuer:       /CN=A918054D/serialNumber=CD827BF96458361F6098B22F758548D7EAEFA168
Certificate serial:       0893
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.mft
Manifest number:          0873
Signing time:             Sat 10 Oct 2026 20:57:34 +0000
Manifest this update:     Sat 10 Oct 2026 20:57:33 +0000
Manifest next update:     Sat 17 Oct 2026 20:57:33 +0000
Files and hashes:         1: zYJ7-WRYNh9gmLIvdYVI1-rvoWg.crl (hash: PORx5Ohs4I7Vkogw1IF48cJx7vrp+J6hUx+Odbi3yQg=)
                          2: 0CACB5AC198E11EBBDF60275C4F9AE02.roa (hash: kswNh4oQmVLSKCpaizjtywziRkakPGEMk3+r2p83GRI=)
                          3: 78AFDDB84A8211EB8760D667C4F9AE02.roa (hash: 4/IcjjLj330SqD/Q7AAdU1kh1KBOFfWc4SaKg7w4SQI=)
                          4: 303C97563EB611EBA4FCB055C4F9AE02.roa (hash: QlgAUCXmC3Vf8gn3/9F5D2vvghvKK1U9Va+wORc0M0U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.crl
                          rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Oct 2026 20:57:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2195 (0x893)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918054D, serialNumber=CD827BF96458361F6098B22F758548D7EAEFA168
        Validity
            Not Before: Oct 10 20:57:33 2026 GMT
            Not After : Oct 17 20:57:33 2026 GMT
        Subject: CN=6acaa6bd-dbd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:50:d3:a1:7d:ca:ae:7f:38:37:f3:14:08:7e:
                    67:31:e5:d0:28:b1:d6:d1:2c:5d:2b:9c:36:8d:34:
                    db:00:0f:dd:8c:e0:0d:9a:75:b4:7e:e2:90:c5:36:
                    30:03:82:1a:25:2d:40:5c:7d:3e:62:8e:26:d2:e8:
                    52:db:72:be:71:51:83:5a:ee:13:93:e7:aa:9f:cd:
                    f3:71:87:97:53:36:12:6d:62:e7:4c:7e:39:1d:2f:
                    e9:6a:07:8f:7c:c8:09:f4:b8:ae:99:cb:b2:ad:d5:
                    52:c7:81:a3:61:b1:50:42:d2:2d:6c:27:4a:80:27:
                    e0:0f:04:f1:b9:8a:d0:02:25:b6:92:91:7c:07:ba:
                    c5:46:33:37:ad:ed:5e:c0:cc:fa:44:44:72:6f:ea:
                    e6:f4:32:d3:97:eb:fd:0b:66:12:2f:86:96:90:51:
                    f7:43:fd:39:97:ea:cf:d0:60:8f:03:59:9d:f1:f1:
                    e3:65:04:52:ad:67:9d:58:3c:dc:8e:b0:c2:70:57:
                    5f:aa:83:4e:6b:02:61:57:07:92:4b:46:5c:96:d5:
                    e3:c8:bc:e3:94:d1:b2:e0:ed:4c:09:25:f1:c8:8b:
                    5b:74:e8:62:23:8b:2a:63:5f:dd:12:c0:a5:df:09:
                    1f:90:87:11:d9:a8:ed:31:76:5b:c9:b4:00:08:94:
                    e9:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:20:D7:C8:EF:CA:11:EC:33:1A:2B:CF:FB:A0:81:A9:4E:92:95:06
            X509v3 Authority Key Identifier:
                keyid:CD:82:7B:F9:64:58:36:1F:60:98:B2:2F:75:85:48:D7:EA:EF:A1:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:a1:b9:8f:19:f3:2f:fa:6f:23:33:15:4f:48:74:47:c2:8d:
         e2:5b:64:8a:c9:94:c2:0c:82:b8:34:49:40:cc:bf:41:08:5d:
         5a:a8:81:f7:ae:bf:63:22:06:e0:8f:42:42:fa:87:51:61:fd:
         2f:49:97:21:42:9f:c4:db:89:d9:38:7a:f3:c4:25:d3:b3:c7:
         1e:8c:a7:c8:38:79:3d:0f:96:13:6b:30:6b:7a:a2:7f:2c:13:
         90:eb:79:e1:04:1b:14:9b:24:eb:7f:2c:ef:c0:59:dd:c6:c0:
         53:be:6b:ff:92:42:c0:35:0e:fa:6b:e7:ee:51:cc:6c:80:ce:
         10:29:ff:a4:38:3c:b0:45:62:7a:c4:80:d4:ce:fe:92:fb:ec:
         99:ff:45:72:db:b0:9e:3b:1e:c1:4a:b5:33:81:8a:51:47:26:
         4e:93:39:19:3d:16:40:af:39:46:94:5b:39:2a:0c:1f:da:80:
         e1:54:d5:ae:17:4f:2a:13:4a:7c:95:a9:42:47:50:b2:de:fb:
         53:ed:29:40:1b:f2:e7:90:b8:4b:6c:02:cf:0b:b8:eb:9c:06:
         61:03:48:1c:2d:cb:d8:fd:d1:99:5b:2f:ee:b2:b1:97:fb:4e:
         c4:96:6d:af:8f:9e:9d:b0:5c:97:99:9b:a0:63:39:f0:5c:0f:
         a8:4a:98:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 11:32:07 2026 by rpki-client