Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.mft
File:                     zLjgj5mQp1Ux6TatsG26yqcxtVI.mft (raw, json)
Hash identifier:          KO/tud/bDAcFl64Xi7uOxh/mKNYmcbNWT/sNdKY9DpI=
Subject key identifier:   8A:B1:E7:40:7A:DB:36:28:8E:FD:CD:A7:C2:2E:C3:11:40:93:4C:47
Authority key identifier: CC:B8:E0:8F:99:90:A7:55:31:E9:36:AD:B0:6D:BA:CA:A7:31:B5:52
Certificate issuer:       /CN=A91364F5/serialNumber=CCB8E08F9990A75531E936ADB06DBACAA731B552
Certificate serial:       0204
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zLjgj5mQp1Ux6TatsG26yqcxtVI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.mft
Manifest number:          01FB
Signing time:             Fri 23 Oct 2026 03:52:45 +0000
Manifest this update:     Fri 23 Oct 2026 03:52:44 +0000
Manifest next update:     Fri 30 Oct 2026 03:52:44 +0000
Files and hashes:         1: zLjgj5mQp1Ux6TatsG26yqcxtVI.crl (hash: C7wxMMgXxCtoHuKCfhPFxuj0FFlWO83k6vuLUt6GSJw=)
                          2: 654E27420CA311F0A866C650C4F9AE02.roa (hash: eRA3ggdDb9SZ/usM83jI/rG8aFaHS14k+X9wZnX4XR0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.crl
                          rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zLjgj5mQp1Ux6TatsG26yqcxtVI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Oct 2026 03:52:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 516 (0x204)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91364F5, serialNumber=CCB8E08F9990A75531E936ADB06DBACAA731B552
        Validity
            Not Before: Oct 23 03:52:44 2026 GMT
            Not After : Oct 30 03:52:44 2026 GMT
        Subject: CN=6adada0d-750e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:51:6a:30:58:c5:da:be:c1:b3:d5:b7:c1:48:
                    5b:68:f5:bb:69:c1:06:a4:af:01:f2:a7:8c:7b:6e:
                    50:bf:e8:1f:93:12:66:87:ac:d0:53:7d:af:d7:ab:
                    11:63:26:df:77:2f:6d:bf:54:ad:ea:b5:5e:11:8d:
                    3f:73:01:83:8a:d6:8d:f9:28:fa:03:66:fc:73:31:
                    17:9d:e3:24:b4:b3:d6:67:e7:0b:e7:aa:77:b6:a1:
                    79:69:7a:36:52:ab:b4:81:22:d4:2f:b9:87:63:6b:
                    41:95:34:a4:46:ee:5d:f8:6a:cb:bb:fb:f7:c2:42:
                    e1:e7:b4:15:0c:e0:90:c3:06:d4:df:6a:c0:a4:70:
                    46:c8:4b:5c:f7:88:f7:22:ea:ee:02:b6:91:2f:a8:
                    81:32:74:91:5e:5d:3e:d3:20:bb:64:39:cd:c0:44:
                    56:82:66:6a:9d:1e:0e:5f:33:a2:f8:45:d3:4c:4f:
                    d8:fe:7f:c4:48:0c:93:cf:d7:79:61:60:ab:f0:b8:
                    00:d1:67:84:37:16:9f:3b:ca:d3:93:36:f8:13:d0:
                    0b:0f:ec:8e:ce:d0:12:a4:38:ac:59:5f:1b:64:8e:
                    f3:1b:e7:a6:2a:1e:40:69:22:cf:ee:c4:08:9e:9b:
                    b8:57:e1:86:91:a7:35:4b:06:a6:77:95:e4:f5:44:
                    1f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:B1:E7:40:7A:DB:36:28:8E:FD:CD:A7:C2:2E:C3:11:40:93:4C:47
            X509v3 Authority Key Identifier:
                keyid:CC:B8:E0:8F:99:90:A7:55:31:E9:36:AD:B0:6D:BA:CA:A7:31:B5:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zLjgj5mQp1Ux6TatsG26yqcxtVI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:26:84:43:47:53:a5:6c:bc:98:a3:d2:5a:bd:59:f0:4f:d9:
         e9:ac:d0:f6:d0:26:f0:d2:d6:d4:9a:09:0a:53:41:80:a3:5c:
         bb:a7:09:1e:3c:c6:59:33:4b:30:9c:0d:9c:9d:a0:d1:53:90:
         18:9b:c1:a9:24:94:33:ac:c0:b9:23:ab:7c:84:ce:37:03:f8:
         ab:4c:9e:f5:8d:74:e6:39:32:d7:7a:e1:ea:6c:0c:aa:2d:ba:
         48:fa:d3:09:24:18:4e:85:0d:8c:2b:b1:63:c3:42:d4:09:c7:
         2f:4e:70:fa:cc:4b:de:da:ff:f7:89:41:20:0a:63:b4:37:94:
         af:4d:fa:65:8e:ef:c5:e0:2f:3b:1c:83:db:c4:a9:4d:5c:ca:
         f8:6b:24:de:51:b8:98:08:56:13:02:4e:78:d5:ef:77:df:7c:
         3d:35:53:cb:4c:82:24:d7:05:cf:d7:c0:bd:78:19:5e:59:a9:
         4c:ae:a0:df:8b:71:16:0b:30:39:ba:48:b7:b8:af:d0:86:2b:
         a8:a0:b8:de:fb:60:b7:46:2f:e8:b6:f1:f9:ec:67:11:80:b6:
         35:0a:50:62:5d:a5:b1:eb:e0:c2:a5:3e:07:fc:47:ba:04:67:
         7a:3c:43:d3:6c:68:99:df:34:dd:f2:e3:2c:f7:ba:0f:c0:a6:
         aa:ab:9a:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 11:15:14 2026 by rpki-client