Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D404F/D5D0FEB4CBF711EF869C904FC4F9AE02/_nzI0SyMuUDQbq7bWwrUPQUDYvE.mft
File:                     _nzI0SyMuUDQbq7bWwrUPQUDYvE.mft (raw, json)
Hash identifier:          KehtBKk2Y6vXE41B2ulg5XAfNqgStKoG/P3or6GrOkI=
Subject key identifier:   77:5A:BA:DC:8D:DB:FC:C8:A9:56:17:A4:AC:11:B9:DE:4C:74:D6:5C
Authority key identifier: FE:7C:C8:D1:2C:8C:B9:40:D0:6E:AE:DB:5B:0A:D4:3D:05:03:62:F1
Certificate issuer:       /CN=A91D404F/serialNumber=FE7CC8D12C8CB940D06EAEDB5B0AD43D050362F1
Certificate serial:       0149
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_nzI0SyMuUDQbq7bWwrUPQUDYvE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D404F/D5D0FEB4CBF711EF869C904FC4F9AE02/_nzI0SyMuUDQbq7bWwrUPQUDYvE.mft
Manifest number:          0141
Signing time:             Sat 19 Sep 2026 05:30:17 +0000
Manifest this update:     Sat 19 Sep 2026 05:30:16 +0000
Manifest next update:     Sat 26 Sep 2026 05:30:16 +0000
Files and hashes:         1: _nzI0SyMuUDQbq7bWwrUPQUDYvE.crl (hash: h+WWpOL/rWqahK15gA0LdITDSx/jVr7kHgM+75TFsHQ=)
                          2: F943DF74CBF711EFB86EC74FC4F9AE02.roa (hash: 4hDTlCGLeED2V5NneVQ9VwBSF0HWPTNuGKERbuoxtX4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D404F/D5D0FEB4CBF711EF869C904FC4F9AE02/_nzI0SyMuUDQbq7bWwrUPQUDYvE.crl
                          rsync://rpki.apnic.net/member_repository/A91D404F/D5D0FEB4CBF711EF869C904FC4F9AE02/_nzI0SyMuUDQbq7bWwrUPQUDYvE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_nzI0SyMuUDQbq7bWwrUPQUDYvE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 329 (0x149)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D404F, serialNumber=FE7CC8D12C8CB940D06EAEDB5B0AD43D050362F1
        Validity
            Not Before: Sep 19 05:30:16 2026 GMT
            Not After : Sep 26 05:30:16 2026 GMT
        Subject: CN=6aae1de9-e967
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:ed:4d:84:cf:af:23:9e:6e:a9:49:d7:4c:96:
                    d7:26:3c:51:08:5d:ac:21:53:a4:6a:fd:34:e1:c3:
                    e2:27:c8:58:8d:a5:84:c4:4e:54:06:ab:84:5f:ef:
                    08:5c:e2:c1:7d:7f:9e:4c:c9:da:13:99:01:7f:af:
                    ac:4e:ed:c2:1b:94:5c:6f:79:f2:4e:46:cf:ed:f8:
                    07:e7:a9:e1:fe:83:8f:88:4a:55:11:14:da:42:be:
                    88:50:ae:e1:cb:5d:ab:a8:38:f1:c6:e0:dd:df:0f:
                    a9:0f:69:fd:4a:a9:15:9b:14:e0:78:d9:fd:d8:fc:
                    87:e5:76:f6:92:ad:93:3f:43:44:5a:38:10:c5:ab:
                    41:a6:f2:f8:0e:db:ba:22:f8:8b:c2:77:43:d8:9d:
                    c9:5a:32:88:5d:bc:86:f8:94:ac:a4:95:3e:1e:b1:
                    a5:b6:66:4c:62:d7:9e:9c:9c:c5:ac:23:c5:1f:86:
                    be:3a:34:46:7b:b1:28:76:a0:dd:10:9f:be:a2:12:
                    78:7a:8c:8c:f4:1d:bf:fd:66:0e:55:12:4f:c7:31:
                    39:37:cb:45:3a:25:05:1f:9c:9b:9e:d9:84:2f:88:
                    f7:e5:1d:62:25:55:0c:e3:7c:db:23:08:e6:a6:fa:
                    ae:93:0d:f9:c8:0e:dd:ea:7c:7a:ae:17:a0:b2:c6:
                    95:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:5A:BA:DC:8D:DB:FC:C8:A9:56:17:A4:AC:11:B9:DE:4C:74:D6:5C
            X509v3 Authority Key Identifier:
                keyid:FE:7C:C8:D1:2C:8C:B9:40:D0:6E:AE:DB:5B:0A:D4:3D:05:03:62:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D404F/D5D0FEB4CBF711EF869C904FC4F9AE02/_nzI0SyMuUDQbq7bWwrUPQUDYvE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_nzI0SyMuUDQbq7bWwrUPQUDYvE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D404F/D5D0FEB4CBF711EF869C904FC4F9AE02/_nzI0SyMuUDQbq7bWwrUPQUDYvE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:40:48:3e:30:f0:30:39:93:16:f1:d2:78:a7:50:ef:1a:c3:
         ef:1f:c8:94:02:2d:d3:c9:25:b7:51:87:58:83:e6:8b:e7:24:
         de:47:7f:16:3b:e4:6b:7e:2e:85:d0:2f:99:fc:de:1f:7e:ec:
         9d:25:d4:4a:6d:a4:97:f6:cc:8a:35:29:7a:f0:6f:95:0d:58:
         2e:00:99:6a:5e:cc:b2:2a:6d:35:f3:c9:40:78:24:c3:84:d1:
         58:e2:c7:d5:ae:77:94:aa:19:64:52:63:64:9d:b9:91:4c:ae:
         34:56:7a:fc:bc:8b:bc:72:8b:7d:e0:97:26:f2:06:37:db:5a:
         58:57:99:bd:d7:0a:f3:94:27:1f:e0:cb:7f:ca:93:49:1a:2a:
         30:c1:2b:7d:53:9d:52:41:dd:52:2c:ff:aa:2e:a3:c5:6e:41:
         d8:22:d5:af:bf:c5:10:15:cf:81:8c:0d:d9:df:76:0a:eb:3e:
         aa:41:42:b5:64:7d:29:46:ec:d7:15:4d:b6:bd:b7:2d:dc:07:
         51:77:de:6f:e6:26:3a:20:c3:3d:ae:97:4d:e0:c8:22:b1:36:
         d0:0f:a3:fa:82:57:f3:15:9a:71:be:a5:28:cf:75:a3:d8:b6:
         45:56:08:67:72:e0:3e:1d:68:8b:f2:81:c3:47:61:9e:99:88:
         4d:fa:0a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 07:23:17 2026 by rpki-client