Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D8A94/6CD00DD298CB11F082C3F05FC4F9AE02/ZMDB2WFQEQYlE-9HuO44iYHT6A8.mft
File:                     ZMDB2WFQEQYlE-9HuO44iYHT6A8.mft (raw, json)
Hash identifier:          Ka/bR7mlDiBbeR0+ldqXdLEhK9ip00VoTitlruwFmp0=
Subject key identifier:   21:09:66:6D:D2:51:DF:25:6A:EC:38:17:2A:7A:63:3F:59:A1:09:0C
Authority key identifier: 64:C0:C1:D9:61:50:11:06:25:13:EF:47:B8:EE:38:89:81:D3:E8:0F
Certificate issuer:       /CN=A91D8A94/serialNumber=64C0C1D9615011062513EF47B8EE388981D3E80F
Certificate serial:       EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMDB2WFQEQYlE-9HuO44iYHT6A8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D8A94/6CD00DD298CB11F082C3F05FC4F9AE02/ZMDB2WFQEQYlE-9HuO44iYHT6A8.mft
Manifest number:          E1
Signing time:             Sun 15 Nov 2026 06:49:04 +0000
Manifest this update:     Sun 15 Nov 2026 06:49:04 +0000
Manifest next update:     Sun 22 Nov 2026 06:49:04 +0000
Files and hashes:         1: ZMDB2WFQEQYlE-9HuO44iYHT6A8.crl (hash: v2YKOCsR3fmgZekBDob1+ha2MOgQ5AH90m4jog2/FYg=)
                          2: B57E9D8C98D511F0912EFD62C4F9AE02.roa (hash: 4nKg+X7JGFIuP3mpoxMRrEp0mp4b6ki1NFU060UN+wQ=)
                          3: W6NdVPjvVbHf_uh7B-JzCFXRMKI.asa (hash: F8+S6NNolT5zv1AuCWs0wXYBh/1JLmdoGgHQKX9Q89U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D8A94/6CD00DD298CB11F082C3F05FC4F9AE02/ZMDB2WFQEQYlE-9HuO44iYHT6A8.crl
                          rsync://rpki.apnic.net/member_repository/A91D8A94/6CD00DD298CB11F082C3F05FC4F9AE02/ZMDB2WFQEQYlE-9HuO44iYHT6A8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMDB2WFQEQYlE-9HuO44iYHT6A8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Nov 2026 06:49:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 236 (0xec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D8A94, serialNumber=64C0C1D9615011062513EF47B8EE388981D3E80F
        Validity
            Not Before: Nov 15 06:49:04 2026 GMT
            Not After : Nov 22 06:49:04 2026 GMT
        Subject: CN=6af955e0-584f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:62:5f:ee:52:6c:aa:ed:a6:ed:00:50:d3:63:
                    8f:2b:c8:41:cc:ca:db:c4:b0:ab:24:05:eb:64:d3:
                    07:0a:62:67:20:84:c1:2a:a4:61:01:ac:7c:47:6a:
                    85:b5:a5:68:ae:9b:3d:99:b1:bf:83:29:e1:e3:2e:
                    4d:32:16:dd:33:fe:da:75:52:4d:76:68:3d:79:a5:
                    19:2f:7d:46:fe:e5:a3:2c:aa:bb:9d:3c:03:16:47:
                    e0:60:86:54:44:a9:3a:dc:af:19:a1:63:c1:9a:7d:
                    7e:67:c8:38:0c:02:68:fe:d4:3a:ca:a1:00:95:38:
                    04:4b:e3:20:1b:41:cb:b6:8f:10:c4:fc:15:2d:93:
                    c1:63:03:88:fa:84:93:78:7a:05:11:22:91:58:87:
                    d7:15:6f:8d:35:d7:58:a4:78:86:c5:b0:de:4a:26:
                    82:c6:bd:dc:fa:2a:8e:6a:2d:4e:0e:6f:05:26:df:
                    ad:a1:2d:b0:9f:a3:eb:07:27:4b:e2:3b:8d:cd:a3:
                    e1:47:66:5f:fd:de:47:45:04:4f:ba:d5:48:2a:79:
                    87:b3:2f:3b:c2:82:ba:a6:80:c5:ce:db:1f:fe:df:
                    f2:84:88:64:63:d9:03:1f:d3:24:b9:74:2f:38:61:
                    dc:48:3b:a4:29:d8:c7:37:9b:b2:aa:d0:05:c0:38:
                    2f:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:09:66:6D:D2:51:DF:25:6A:EC:38:17:2A:7A:63:3F:59:A1:09:0C
            X509v3 Authority Key Identifier:
                keyid:64:C0:C1:D9:61:50:11:06:25:13:EF:47:B8:EE:38:89:81:D3:E8:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D8A94/6CD00DD298CB11F082C3F05FC4F9AE02/ZMDB2WFQEQYlE-9HuO44iYHT6A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMDB2WFQEQYlE-9HuO44iYHT6A8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8A94/6CD00DD298CB11F082C3F05FC4F9AE02/ZMDB2WFQEQYlE-9HuO44iYHT6A8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:04:af:38:80:e4:dc:ad:7f:44:35:e5:73:08:31:66:64:a4:
         01:74:bd:76:ae:4b:7c:4b:3d:98:e9:89:81:20:68:cc:4c:7a:
         5a:35:d5:53:63:8f:a5:e9:fc:2d:0d:a9:3d:c6:f8:20:ae:49:
         5f:7b:68:7b:03:77:e0:a5:07:3e:35:6d:eb:1e:1f:ad:5e:4f:
         9c:e4:eb:7c:50:3d:7b:79:6f:31:20:15:6d:54:11:61:2b:85:
         02:00:1c:19:cf:37:93:c2:a8:d0:24:ae:c0:7b:83:26:8d:32:
         05:1d:49:8f:9f:24:c8:89:61:c7:63:f7:42:6c:79:b0:4b:e7:
         6b:f7:ad:d3:14:9f:be:af:d8:7e:33:83:b4:72:23:71:6e:b2:
         38:f3:b7:df:72:cf:6f:8d:61:fd:f7:98:d2:59:c8:dd:14:42:
         20:6e:af:7a:37:86:ed:ba:f2:07:b7:d4:8a:32:04:a8:96:3a:
         69:01:d8:c5:2d:94:71:03:8f:c6:5f:0a:56:64:b5:b6:52:a8:
         44:98:a8:41:ab:da:17:a0:47:77:32:3f:4c:8a:aa:22:b0:74:
         ac:75:19:23:d9:8c:c2:c9:fd:a8:c2:1c:ca:a9:6f:e5:7d:af:
         5a:b6:72:4a:fa:ed:8b:0c:7e:cd:20:22:f0:5c:f4:84:2b:69:
         e3:92:ba:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 20:31:39 2026 by rpki-client