Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DA13E/4E8531CA06B511EB9372D32BC4F9AE02/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.mft
File:                     Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.mft (raw, json)
Hash identifier:          je0lSNS6WiwSgOSmCXu7yo+wPH5ouFMmL1e/c7XRI6w=
Subject key identifier:   83:E0:4C:A3:17:1E:B4:7A:67:E6:73:E0:CE:AF:6C:DF:23:1A:EC:AE
Authority key identifier: 67:F3:B9:FA:AA:10:D2:0C:B0:17:F0:7F:CC:9A:15:4D:88:B6:63:A0
Certificate issuer:       /CN=A91DA13E/serialNumber=67F3B9FAAA10D20CB017F07FCC9A154D88B663A0
Certificate serial:       08AC
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DA13E/4E8531CA06B511EB9372D32BC4F9AE02/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.mft
Manifest number:          08A0
Signing time:             Thu 24 Sep 2026 20:36:26 +0000
Manifest this update:     Thu 24 Sep 2026 20:36:26 +0000
Manifest next update:     Thu 01 Oct 2026 20:36:26 +0000
Files and hashes:         1: Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.crl (hash: M0+O9aZl8MWN7UdPC2Sw1miz/3Mzl+bZHsWS2vRd/VE=)
                          2: 28D471BA06B611EBBBFD6B2CC4F9AE02.roa (hash: 6D7ij53r9ioYBrQpTrEg7bEtxQIHnICUtJjGzqeUXdY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DA13E/4E8531CA06B511EB9372D32BC4F9AE02/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.crl
                          rsync://rpki.apnic.net/member_repository/A91DA13E/4E8531CA06B511EB9372D32BC4F9AE02/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 20:36:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2220 (0x8ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DA13E, serialNumber=67F3B9FAAA10D20CB017F07FCC9A154D88B663A0
        Validity
            Not Before: Sep 24 20:36:26 2026 GMT
            Not After : Oct  1 20:36:26 2026 GMT
        Subject: CN=6ab589ca-6838
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f4:a3:e3:9f:09:9f:48:b2:db:6b:54:f1:9d:
                    58:45:08:aa:fc:9f:fd:39:5a:71:bb:93:45:fb:8c:
                    9f:85:fb:44:58:16:f1:28:1d:8d:91:91:f7:4c:90:
                    2b:ac:ca:4c:db:f6:8a:20:77:2d:ae:c7:99:c2:29:
                    d9:f3:55:23:bf:ad:80:fa:8f:1b:83:31:0b:96:09:
                    99:26:d1:fb:31:c3:7d:5c:f2:07:5f:15:e5:a6:e6:
                    e5:12:be:d2:14:e1:ed:5f:01:92:1a:34:39:7d:2c:
                    6f:bb:8d:d4:3b:31:3d:f5:e9:57:1d:1f:43:c8:57:
                    b5:6c:21:d8:3e:17:f3:f2:32:2f:a7:84:42:a3:d5:
                    72:7d:31:2f:34:54:be:95:5d:80:f2:23:f3:57:7c:
                    df:d1:14:d1:ff:41:34:ee:fa:63:51:33:45:63:f1:
                    66:38:1a:8a:ce:64:d9:66:e6:47:03:1a:7d:cc:88:
                    b7:c7:21:f6:39:f3:16:08:38:10:18:90:2c:62:09:
                    c4:51:1e:a6:cb:cd:ad:5f:e2:76:ca:9b:04:c3:ef:
                    e6:91:ea:06:64:d6:af:c6:79:32:bb:a3:be:d6:44:
                    e9:15:3a:89:75:e1:8e:06:45:07:48:7c:6b:47:b4:
                    65:db:78:60:07:fe:00:67:44:17:41:3b:6d:aa:f2:
                    73:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:E0:4C:A3:17:1E:B4:7A:67:E6:73:E0:CE:AF:6C:DF:23:1A:EC:AE
            X509v3 Authority Key Identifier:
                keyid:67:F3:B9:FA:AA:10:D2:0C:B0:17:F0:7F:CC:9A:15:4D:88:B6:63:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DA13E/4E8531CA06B511EB9372D32BC4F9AE02/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA13E/4E8531CA06B511EB9372D32BC4F9AE02/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:34:d6:71:8b:40:1b:d6:6d:2e:59:ca:86:60:88:15:0b:f5:
         da:8d:bf:1d:9b:03:19:4f:97:b0:01:40:68:93:1a:01:83:f5:
         ce:79:17:0f:8e:88:7b:b0:5f:20:fa:fc:a6:f5:dc:4a:9c:ef:
         8c:ba:44:db:79:1e:0c:50:db:bc:02:9d:37:e3:39:bd:95:8a:
         b4:f3:36:b4:be:c5:e4:63:df:c1:57:62:65:fe:2e:55:3a:b1:
         2b:2c:05:de:07:3a:b2:02:2f:b3:d0:50:47:21:f6:2c:44:95:
         db:35:70:a0:86:d4:9a:42:c3:4a:b3:45:23:3a:d1:cf:ac:07:
         be:fe:45:e6:fc:30:58:97:ce:59:84:ca:3f:ce:76:34:cf:04:
         ae:d6:21:83:f1:b3:b1:f1:a1:a6:1a:53:32:f0:e5:26:aa:6b:
         fd:27:f3:6d:0a:13:99:00:c7:da:00:b1:15:b2:4e:dd:95:f9:
         a2:34:b6:4e:47:56:42:9e:75:02:c0:b7:34:8e:8f:b7:c6:8c:
         e2:f8:37:67:14:72:06:c2:15:8c:f0:f9:e7:0e:49:ba:cb:ad:
         8b:da:d8:8e:d1:90:07:4d:22:cf:ff:1b:72:fe:89:d8:73:6c:
         03:b9:66:2d:e4:01:08:4d:fc:b6:93:04:b3:88:37:91:6d:64:
         13:77:b9:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:53:16 2026 by rpki-client