Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E9D0C/814F6D041A1A11EC9D1CDF1EC4F9AE02/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.mft
File:                     Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.mft (raw, json)
Hash identifier:          ZWWFfow+95HLMYoCu7VjTLry5mQ4C6Z6MFfqcAZoVrA=
Subject key identifier:   B0:3F:D3:CB:B3:42:80:45:5A:78:FC:5A:07:8A:E0:D8:33:D8:04:99
Authority key identifier: 09:DE:19:67:E9:52:EE:8E:1B:2D:D6:0F:88:F6:3B:A2:60:57:53:EF
Certificate issuer:       /CN=A91E9D0C/serialNumber=09DE1967E952EE8E1B2DD60F88F63BA2605753EF
Certificate serial:       05E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E9D0C/814F6D041A1A11EC9D1CDF1EC4F9AE02/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.mft
Manifest number:          05DD
Signing time:             Sun 20 Sep 2026 22:51:24 +0000
Manifest this update:     Sun 20 Sep 2026 22:51:24 +0000
Manifest next update:     Sun 27 Sep 2026 22:51:24 +0000
Files and hashes:         1: Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.crl (hash: tFH+qUmU7kj/IM4nB2mVcLX9wqFWanHi4UdZ72UHvQg=)
                          2: 630BCB6E1A1D11EC99B84C20C4F9AE02.roa (hash: 7sdaRztYfffuMPbpIvWHbP2AaEjIDw99pX3bZR2f4wQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E9D0C/814F6D041A1A11EC9D1CDF1EC4F9AE02/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.crl
                          rsync://rpki.apnic.net/member_repository/A91E9D0C/814F6D041A1A11EC9D1CDF1EC4F9AE02/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 22:51:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1510 (0x5e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E9D0C, serialNumber=09DE1967E952EE8E1B2DD60F88F63BA2605753EF
        Validity
            Not Before: Sep 20 22:51:24 2026 GMT
            Not After : Sep 27 22:51:24 2026 GMT
        Subject: CN=6ab0636c-284f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:6c:29:9c:e4:20:c9:08:74:00:b0:ad:9a:4e:
                    4e:a9:34:df:84:c7:d5:5d:b1:13:ef:bd:12:0d:59:
                    46:a1:42:69:c9:d6:3e:33:31:dd:9d:cf:4d:2b:3b:
                    d4:91:ef:c0:89:55:32:aa:a3:3a:34:6d:ad:20:c2:
                    7e:c0:52:f1:97:ca:ab:28:48:7f:89:63:43:f2:35:
                    c5:8a:dc:de:0b:a5:7b:7e:d8:3d:1c:62:9a:93:a1:
                    f1:91:5e:f9:f0:85:47:c1:e3:89:62:9f:49:f1:ee:
                    17:53:50:f2:f8:0d:f3:f1:7d:aa:fd:d0:6f:90:48:
                    08:76:f3:61:50:e6:73:dc:16:3e:bd:2f:d8:e4:f8:
                    a6:f3:35:b3:e3:b0:ff:c6:da:4e:cf:4a:ca:41:a3:
                    c6:82:fb:dc:ed:44:3a:51:d0:00:85:25:72:4a:05:
                    8a:b2:94:63:54:26:83:e1:7d:c8:a6:47:46:5a:ed:
                    20:cf:5c:e7:15:56:2d:98:dc:10:02:61:52:a6:eb:
                    b6:ef:97:ca:59:89:44:c3:e6:b7:fd:5e:62:88:d5:
                    8d:d8:9e:58:d7:77:55:4c:a1:b6:16:ef:e6:43:c7:
                    80:27:5e:d9:dd:fb:25:a2:15:94:d8:50:21:e6:13:
                    a5:10:6c:7d:6c:eb:9a:26:8a:ad:91:37:ae:77:cd:
                    94:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:3F:D3:CB:B3:42:80:45:5A:78:FC:5A:07:8A:E0:D8:33:D8:04:99
            X509v3 Authority Key Identifier:
                keyid:09:DE:19:67:E9:52:EE:8E:1B:2D:D6:0F:88:F6:3B:A2:60:57:53:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E9D0C/814F6D041A1A11EC9D1CDF1EC4F9AE02/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9D0C/814F6D041A1A11EC9D1CDF1EC4F9AE02/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:1b:fc:40:2d:ba:4f:58:9d:ef:36:e2:48:ba:a9:c8:78:80:
         78:44:6a:fc:e9:3a:6f:19:61:de:44:2b:00:28:58:35:a6:2a:
         91:f6:be:2b:31:24:df:e0:54:05:3a:15:56:ea:59:f0:98:3f:
         28:fb:1b:33:36:57:50:74:66:69:59:5d:da:2a:07:ca:96:41:
         c4:0a:4d:bd:da:8a:c3:5e:e3:b5:05:70:c0:e6:2a:f1:ad:a4:
         56:8b:42:4f:8f:c7:67:09:9a:de:f2:99:ea:ea:ea:c1:a2:f5:
         c7:7c:fc:21:68:5e:8e:97:b4:5a:3c:18:de:1a:bd:66:47:03:
         50:97:5f:e0:0c:49:2e:9b:da:8c:4e:83:6c:19:93:f9:e3:f8:
         e3:a0:31:86:58:1e:90:cb:63:f4:9d:90:2c:55:a3:d1:9b:af:
         99:89:e0:be:8d:0e:20:49:d3:26:c9:a7:cf:77:6c:21:1f:64:
         4c:23:ef:1e:c9:42:45:80:70:3e:90:95:e8:32:76:7f:22:e8:
         1e:3c:9c:b5:0a:46:2a:3e:f6:6f:15:a7:c6:41:00:94:ba:4b:
         1a:98:19:d3:68:5c:9b:84:7f:c9:21:e2:a2:86:f8:c3:df:85:
         17:31:1f:77:44:27:25:a3:af:77:67:a0:0e:fa:b9:a8:86:e5:
         e9:3a:36:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:31:11 2026 by rpki-client