Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.mft
File:                     Z0EvDHMNn0VGelJsOCXsOP5wC2M.mft (raw, json)
Hash identifier:          Ciia0OP5cS6aB/j5fFn3Lb/JotyIZpkXAJVDEHR3Gpw=
Subject key identifier:   1C:1F:85:0C:42:28:75:02:7E:44:03:CB:9A:5F:28:DE:87:8E:45:86
Authority key identifier: 67:41:2F:0C:73:0D:9F:45:46:7A:52:6C:38:25:EC:38:FE:70:0B:63
Certificate issuer:       /CN=A9135F86/serialNumber=67412F0C730D9F45467A526C3825EC38FE700B63
Certificate serial:       0136
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0EvDHMNn0VGelJsOCXsOP5wC2M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.mft
Manifest number:          0132
Signing time:             Sat 03 Oct 2026 06:19:25 +0000
Manifest this update:     Sat 03 Oct 2026 06:19:25 +0000
Manifest next update:     Sat 10 Oct 2026 06:19:25 +0000
Files and hashes:         1: Z0EvDHMNn0VGelJsOCXsOP5wC2M.crl (hash: jScm9VisVVldWdLJyGLJgK/XQ2g01qBmu//560FJ7wc=)
                          2: 4A41D220EF2D11EF8502717CC4F9AE02.roa (hash: C0UeRmdUC5XES5gqgoPUp5FT+eSznO9ZwMgEuNb9JBA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.crl
                          rsync://rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0EvDHMNn0VGelJsOCXsOP5wC2M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 06:19:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 310 (0x136)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9135F86, serialNumber=67412F0C730D9F45467A526C3825EC38FE700B63
        Validity
            Not Before: Oct  3 06:19:25 2026 GMT
            Not After : Oct 10 06:19:25 2026 GMT
        Subject: CN=6ac09e6d-7b76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:9f:9f:d9:55:3d:fe:cf:64:76:cd:cb:3c:cf:
                    38:1e:4e:bb:b7:20:88:9f:b3:c6:de:9d:70:47:a7:
                    1b:82:cb:9c:a1:34:a5:11:fa:2f:08:77:98:c6:3c:
                    7d:5b:09:f7:9a:bb:ed:a9:26:be:db:53:8a:c3:0f:
                    58:06:36:7d:5b:05:b4:dd:1f:a3:58:3e:04:0f:86:
                    88:4f:f2:49:89:13:6f:b6:c5:76:b1:86:0e:6c:4a:
                    95:40:34:ca:37:ae:7e:7f:70:e9:03:79:4f:f9:81:
                    c1:22:fa:22:db:04:2c:f2:75:aa:71:11:a3:4a:e0:
                    4b:be:90:68:bd:09:8a:92:f4:16:45:7d:b5:51:66:
                    0a:28:73:31:ff:f4:14:7b:a0:dc:fd:86:af:c1:e3:
                    0e:4f:8e:05:cf:a7:b1:d6:3d:29:b3:a0:f3:72:1d:
                    49:fb:82:70:0d:0e:9e:a4:2d:5f:12:94:69:e9:31:
                    ca:8e:b8:3f:68:56:30:62:db:19:b1:c1:cf:c2:85:
                    db:df:2c:5e:c2:84:72:d1:8f:84:28:84:61:0d:b2:
                    43:80:eb:e7:9c:29:c8:af:70:1c:4b:9e:3c:1e:d8:
                    84:a2:4f:26:19:6f:71:d6:dc:7b:81:09:07:37:78:
                    99:49:8d:e9:28:9c:ac:ee:48:ac:7a:33:94:0f:95:
                    e6:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:1F:85:0C:42:28:75:02:7E:44:03:CB:9A:5F:28:DE:87:8E:45:86
            X509v3 Authority Key Identifier:
                keyid:67:41:2F:0C:73:0D:9F:45:46:7A:52:6C:38:25:EC:38:FE:70:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0EvDHMNn0VGelJsOCXsOP5wC2M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:ac:9a:0c:f1:39:b8:50:95:26:da:a0:d2:39:13:08:ae:52:
         24:14:ae:18:b9:48:7e:3f:0a:54:69:87:b6:df:d6:44:da:0c:
         cf:17:a7:ea:9b:ac:02:5d:b4:88:e8:24:ad:9c:bf:b5:a5:60:
         80:27:23:95:28:5c:cc:4f:9e:90:f1:66:c8:f6:3a:11:c9:c0:
         f1:68:1e:b0:1b:f0:b5:df:49:d4:d4:8e:8a:09:d7:4a:58:0e:
         4e:65:d9:2a:f5:a1:fd:14:6e:e2:97:83:2a:a3:6d:9d:43:22:
         3f:33:ec:42:98:95:e6:e1:97:45:01:d9:ab:ea:e4:9b:17:d4:
         e4:54:dd:e8:13:b5:92:ac:6f:84:c5:e4:71:f3:3a:18:3d:7e:
         a8:f0:f4:aa:38:81:1b:ad:e7:f8:e7:31:ee:d5:7a:81:36:14:
         e6:33:24:16:58:f5:18:9a:a7:29:20:80:a7:5d:57:ad:d1:d7:
         ae:4e:d8:76:33:c5:a1:2a:31:fc:f9:ba:b1:b9:14:94:61:1c:
         24:33:85:b5:cb:2a:59:5e:89:51:61:5a:85:d2:56:01:b7:0a:
         e3:3b:38:6d:87:d2:db:9a:c3:86:77:54:b4:8b:77:71:6a:33:
         f6:84:b9:71:c5:4c:60:8e:99:5f:6d:ce:b3:d3:aa:b6:0f:36:
         0f:09:87:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 18:00:18 2026 by rpki-client