Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A8219/EC0A70F8EA8011E78B42A432C4F9AE02/ZVPDwhgLl-LrN8tx9qHOqnuVykc.mft
File:                     ZVPDwhgLl-LrN8tx9qHOqnuVykc.mft (raw, json)
Hash identifier:          GKJiKoIkaP9XJpp1YjGx2tMDaJVnuKfS5X4wfw/1VEs=
Subject key identifier:   FA:15:73:A4:51:4A:19:E1:8E:DE:B3:92:51:6F:3D:E4:0B:42:63:E8
Authority key identifier: 65:53:C3:C2:18:0B:97:E2:EB:37:CB:71:F6:A1:CE:AA:7B:95:CA:47
Certificate issuer:       /CN=A91A8219/serialNumber=6553C3C2180B97E2EB37CB71F6A1CEAA7B95CA47
Certificate serial:       1813
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVPDwhgLl-LrN8tx9qHOqnuVykc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A8219/EC0A70F8EA8011E78B42A432C4F9AE02/ZVPDwhgLl-LrN8tx9qHOqnuVykc.mft
Manifest number:          1804
Signing time:             Mon 12 Oct 2026 16:36:03 +0000
Manifest this update:     Mon 12 Oct 2026 16:36:02 +0000
Manifest next update:     Mon 19 Oct 2026 16:36:02 +0000
Files and hashes:         1: ZVPDwhgLl-LrN8tx9qHOqnuVykc.crl (hash: WDn9laTe9jXRV6C79hsbbD/m4a/3i8epGvkc8hgM5Wc=)
                          2: 314E917C651E11E8A8903D42C4F9AE02.roa (hash: 9ej0uJb9isKtTSetZZYMiqBTjxBpRK1yCazawhZTpz4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A8219/EC0A70F8EA8011E78B42A432C4F9AE02/ZVPDwhgLl-LrN8tx9qHOqnuVykc.crl
                          rsync://rpki.apnic.net/member_repository/A91A8219/EC0A70F8EA8011E78B42A432C4F9AE02/ZVPDwhgLl-LrN8tx9qHOqnuVykc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVPDwhgLl-LrN8tx9qHOqnuVykc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 Oct 2026 16:36:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6163 (0x1813)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A8219, serialNumber=6553C3C2180B97E2EB37CB71F6A1CEAA7B95CA47
        Validity
            Not Before: Oct 12 16:36:02 2026 GMT
            Not After : Oct 19 16:36:02 2026 GMT
        Subject: CN=6acd0c73-095c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:fe:c9:36:f6:ac:9f:3e:12:04:a3:c8:c6:64:
                    02:55:b1:82:1a:b8:98:c6:b7:a9:eb:19:10:7b:4e:
                    39:5d:3c:7f:c9:67:41:e9:28:fd:43:b8:4d:88:5e:
                    03:3c:78:5a:3a:dc:4a:c2:0f:f5:e3:d0:9b:9e:ff:
                    d5:87:67:cf:42:e7:a7:bf:e7:c5:6e:01:90:e9:83:
                    e5:5f:4b:8e:9e:4a:03:0b:06:eb:b6:d9:0a:43:8e:
                    cf:95:23:c6:04:20:be:3f:c3:e3:e6:1f:db:80:46:
                    40:0b:a0:7f:b1:6d:8a:2f:6e:7a:d1:00:06:74:c2:
                    a5:1d:fa:20:d5:44:f5:43:ad:05:3d:1a:a1:29:ee:
                    64:bf:00:bd:0a:39:e9:ad:97:dd:bc:29:f0:42:9f:
                    d6:6d:34:23:9b:3b:d7:cc:99:aa:8b:7e:bc:06:05:
                    d6:09:86:d5:4b:9d:5d:f9:aa:ff:ab:4a:cb:4c:0d:
                    fe:a1:39:66:10:09:a5:9f:78:d0:5f:06:c3:6b:12:
                    d6:66:a2:73:d4:ed:07:d8:ad:33:ac:d0:1c:60:97:
                    b4:e2:7c:8d:8c:91:2d:09:e9:99:c0:9d:d3:38:04:
                    f0:b0:a8:06:12:25:0c:b0:87:cc:8d:ff:23:90:59:
                    f3:ac:08:0c:ce:46:f2:8d:cb:d3:83:6c:09:94:d2:
                    9d:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:15:73:A4:51:4A:19:E1:8E:DE:B3:92:51:6F:3D:E4:0B:42:63:E8
            X509v3 Authority Key Identifier:
                keyid:65:53:C3:C2:18:0B:97:E2:EB:37:CB:71:F6:A1:CE:AA:7B:95:CA:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A8219/EC0A70F8EA8011E78B42A432C4F9AE02/ZVPDwhgLl-LrN8tx9qHOqnuVykc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVPDwhgLl-LrN8tx9qHOqnuVykc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8219/EC0A70F8EA8011E78B42A432C4F9AE02/ZVPDwhgLl-LrN8tx9qHOqnuVykc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:b7:39:0f:05:73:28:b2:10:1b:f2:bd:07:3e:a6:93:84:f0:
         23:62:4b:82:e6:2e:02:16:46:35:7d:40:5b:fe:91:d8:47:f7:
         a8:2d:ed:c3:36:b1:34:a5:43:e2:a5:94:51:17:1f:e1:ae:5c:
         da:30:d4:e2:e6:20:a8:b2:0d:2f:1a:e2:18:ef:e6:03:56:d9:
         d4:eb:f5:c8:26:b9:5c:fd:a8:35:cf:61:99:f5:b8:5c:7c:e4:
         6d:7a:e3:16:b7:ef:0a:da:7b:77:7c:13:4b:6f:7d:41:ec:7d:
         8c:56:15:d9:7d:b7:65:61:42:6e:91:b5:52:65:5f:b8:e9:33:
         92:c1:02:2b:67:6a:6b:ff:b1:e0:53:d3:4b:eb:04:4a:9d:3e:
         39:be:27:a4:71:e3:39:3e:97:01:18:06:db:ed:00:4d:57:9c:
         d6:f0:13:76:6c:84:0d:3b:2d:8a:3a:e6:38:c5:87:bb:0e:a4:
         ac:a2:9a:b1:c1:9d:30:7a:ba:9f:93:48:67:4a:7b:42:ed:b3:
         b4:c4:de:f9:52:6b:33:19:dd:83:ab:66:c7:d3:bb:7e:c6:ff:
         7b:5d:81:39:81:a8:f1:eb:3d:78:e0:a9:ab:07:58:ba:3d:98:
         23:ed:c0:b5:f3:8d:39:cb:b4:9e:67:1a:83:77:0f:0b:53:f0:
         09:cf:3c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 23:50:28 2026 by rpki-client