Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9121E1E/8C9DD9649F9611F1A0C006F54311F970/Z8yoslZifZLRcDYUO_9qEKe22ew.mft
File:                     Z8yoslZifZLRcDYUO_9qEKe22ew.mft (raw, json)
Hash identifier:          nYFBH1FGxY2KDSoJkj7cDOLf5ql61C1XeLt7co6nJFQ=
Subject key identifier:   ED:C2:6D:53:17:87:DF:7C:2B:21:F8:6D:1A:02:72:A9:61:8B:8B:B4
Authority key identifier: 67:CC:A8:B2:56:62:7D:92:D1:70:36:14:3B:FF:6A:10:A7:B6:D9:EC
Certificate issuer:       /CN=A9121E1E/serialNumber=67CCA8B256627D92D17036143BFF6A10A7B6D9EC
Certificate serial:       18
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z8yoslZifZLRcDYUO_9qEKe22ew.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9121E1E/8C9DD9649F9611F1A0C006F54311F970/Z8yoslZifZLRcDYUO_9qEKe22ew.mft
Manifest number:          16
Signing time:             Tue 29 Sep 2026 09:41:54 +0000
Manifest this update:     Tue 29 Sep 2026 09:41:54 +0000
Manifest next update:     Tue 06 Oct 2026 09:41:54 +0000
Files and hashes:         1: Z8yoslZifZLRcDYUO_9qEKe22ew.crl (hash: Hy4lKFS2TzI0n8XYG/FbxvFiVDUvL4FdCY3Y6dodF7s=)
                          2: 2A23164A9F9711F19B115F094411F970.roa (hash: NnIG7XSOCJWmPtwlTSlZ0/zNRsexl7ybGGJ/J6cm5Ic=)
                          3: LAH7Du9F9cuiAoOOWQhAoAjf5EI.asa (hash: ag2EOhhJZZyvZxakYWuVQNtDTZ4ck9KIHpSWh0q3VT0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9121E1E/8C9DD9649F9611F1A0C006F54311F970/Z8yoslZifZLRcDYUO_9qEKe22ew.crl
                          rsync://rpki.apnic.net/member_repository/A9121E1E/8C9DD9649F9611F1A0C006F54311F970/Z8yoslZifZLRcDYUO_9qEKe22ew.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z8yoslZifZLRcDYUO_9qEKe22ew.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 06 Oct 2026 09:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24 (0x18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9121E1E, serialNumber=67CCA8B256627D92D17036143BFF6A10A7B6D9EC
        Validity
            Not Before: Sep 29 09:41:54 2026 GMT
            Not After : Oct  6 09:41:54 2026 GMT
        Subject: CN=6abb87e2-93e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:36:af:b5:5e:aa:dd:de:12:dd:a9:0e:b9:10:
                    4a:14:04:32:68:4c:e5:fc:be:a1:43:e5:d2:6d:d3:
                    05:d5:76:02:36:60:43:68:04:64:d6:2d:0d:7f:ac:
                    01:ed:f4:9c:46:9f:e3:1b:70:aa:4f:01:d9:d8:e2:
                    c4:21:e8:ea:10:32:95:d1:a4:0b:0d:b7:fd:bc:72:
                    59:f5:10:06:20:d1:9c:ff:33:7c:22:a7:30:4b:83:
                    ae:50:eb:98:b8:e0:1a:ba:75:93:b8:7f:30:08:83:
                    64:43:8b:c0:6f:74:02:88:28:f3:fa:ce:37:95:b9:
                    3d:fb:eb:69:0b:fa:23:21:39:42:6e:90:bf:2d:85:
                    f6:f8:d6:2e:8e:7c:14:2b:99:f8:92:71:7c:62:a0:
                    ff:67:42:68:36:0b:cb:7f:e8:55:e5:5f:36:5d:73:
                    74:e4:93:43:9e:f1:d4:da:34:a4:8a:8a:9d:ea:59:
                    70:12:05:17:fa:fa:64:cb:73:60:c7:15:d7:2c:07:
                    78:01:eb:26:5e:2d:23:42:f1:38:41:39:ee:29:a1:
                    b8:ea:e5:1c:af:38:b3:e6:d0:73:9c:2a:2a:96:5d:
                    2d:c1:b0:3c:94:c2:32:32:6f:9f:94:7d:a9:1e:46:
                    d9:ed:ae:ce:62:76:4e:49:df:4c:8a:c0:0c:c9:a1:
                    6d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:C2:6D:53:17:87:DF:7C:2B:21:F8:6D:1A:02:72:A9:61:8B:8B:B4
            X509v3 Authority Key Identifier:
                keyid:67:CC:A8:B2:56:62:7D:92:D1:70:36:14:3B:FF:6A:10:A7:B6:D9:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9121E1E/8C9DD9649F9611F1A0C006F54311F970/Z8yoslZifZLRcDYUO_9qEKe22ew.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z8yoslZifZLRcDYUO_9qEKe22ew.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121E1E/8C9DD9649F9611F1A0C006F54311F970/Z8yoslZifZLRcDYUO_9qEKe22ew.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:43:32:09:d2:2a:3a:81:14:60:ea:a7:dc:39:80:bb:74:b1:
         65:54:ea:48:86:5f:43:d4:ed:ab:42:d1:3f:4b:bb:e3:10:97:
         71:86:b0:41:1c:f5:89:3d:f5:26:e9:27:d2:97:7d:c8:03:0b:
         9c:51:91:c3:05:83:e5:cb:d2:3d:d4:05:fb:a8:25:95:9b:e4:
         7c:b3:d3:68:79:19:02:74:bf:7a:25:bc:84:e7:58:a0:1a:67:
         b4:58:a6:54:32:46:f1:87:65:8e:28:df:df:a9:c1:1b:67:34:
         4e:eb:67:d1:da:81:d8:22:96:17:30:4f:7f:fe:e4:50:ec:d1:
         06:15:e4:7d:86:fd:de:49:ac:b1:c8:e6:7b:d3:0c:03:13:90:
         f0:a6:1a:fc:10:54:63:1b:e1:75:3b:5e:a0:d9:aa:67:ab:cd:
         43:52:8c:4a:bf:3b:9b:cb:74:65:5d:57:b1:fb:fd:13:88:04:
         d8:14:78:60:49:ab:55:8e:4d:e1:2d:5e:44:05:b1:3c:5c:bd:
         a1:cd:8e:dc:f3:f1:3f:8e:c6:c0:4a:8c:2b:50:1e:8d:59:dd:
         7a:f3:49:93:b5:dc:41:f2:19:4a:a9:03:e7:dc:24:ce:4f:39:
         a3:a5:f8:05:a6:86:d8:bf:a2:31:2a:4d:2d:bf:2c:d5:16:ab:
         1e:86:fe:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 03:45:43 2026 by rpki-client