Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9149907/F714BDCACC2E11EC823BEE35C4F9AE02/ZmkYZX5BYz4X6shsJrGE26PoHi4.mft
File:                     ZmkYZX5BYz4X6shsJrGE26PoHi4.mft (raw, json)
Hash identifier:          Ed6C2ZOH9/ZFN3f+Qfvait+dC6RrmyQo6VAQimvYnug=
Subject key identifier:   D0:21:51:18:DC:2C:4F:6C:2E:35:90:06:48:19:46:ED:1E:B9:AD:E1
Authority key identifier: 66:69:18:65:7E:41:63:3E:17:EA:C8:6C:26:B1:84:DB:A3:E8:1E:2E
Certificate issuer:       /CN=A9149907/serialNumber=666918657E41633E17EAC86C26B184DBA3E81E2E
Certificate serial:       0429
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZmkYZX5BYz4X6shsJrGE26PoHi4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149907/F714BDCACC2E11EC823BEE35C4F9AE02/ZmkYZX5BYz4X6shsJrGE26PoHi4.mft
Manifest number:          041D
Signing time:             Tue 29 Sep 2026 00:27:18 +0000
Manifest this update:     Tue 29 Sep 2026 00:27:17 +0000
Manifest next update:     Tue 06 Oct 2026 00:27:17 +0000
Files and hashes:         1: ZmkYZX5BYz4X6shsJrGE26PoHi4.crl (hash: wcwob26o4MxOSO00LEUvm5dLz9ZesuJS5Ee70ULsyrs=)
                          2: 6EE5FAE4544F11EFA572D230C4F9AE02.roa (hash: 06iHCsokSQ39HgOy2KJzWubeFrH/1VczqWMzLvyLOHM=)
                          3: 6E4711FE544F11EFA572D230C4F9AE02.roa (hash: PZXeG2z5Up6Bnr/fbTuUWxL/M8azNuvO/Wv2mvuOFVk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149907/F714BDCACC2E11EC823BEE35C4F9AE02/ZmkYZX5BYz4X6shsJrGE26PoHi4.crl
                          rsync://rpki.apnic.net/member_repository/A9149907/F714BDCACC2E11EC823BEE35C4F9AE02/ZmkYZX5BYz4X6shsJrGE26PoHi4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZmkYZX5BYz4X6shsJrGE26PoHi4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 06 Oct 2026 00:27:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1065 (0x429)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149907, serialNumber=666918657E41633E17EAC86C26B184DBA3E81E2E
        Validity
            Not Before: Sep 29 00:27:17 2026 GMT
            Not After : Oct  6 00:27:17 2026 GMT
        Subject: CN=6abb05e6-1666
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:aa:9c:2a:7e:ab:e2:41:5a:b2:3f:88:e2:9c:
                    2a:47:4e:c0:ef:b9:a6:fb:92:79:3d:14:57:be:20:
                    b5:76:da:9f:51:1f:7a:f4:41:9e:4f:2e:cb:f2:29:
                    5e:6b:6d:87:40:37:56:c7:0a:cd:28:8c:fd:23:59:
                    d8:2f:0d:82:45:66:fd:19:75:5e:54:21:22:69:46:
                    ca:47:75:84:92:a7:bf:24:08:6f:a8:b5:97:df:92:
                    1d:ca:45:e4:3e:6e:15:a0:48:78:c4:e3:77:f7:33:
                    b1:c4:b3:f9:5d:ea:42:33:9a:81:a1:9d:a6:10:71:
                    fd:38:e0:0f:d5:b9:77:82:ae:09:c7:6f:ff:51:1b:
                    35:99:e0:65:d4:a5:55:d2:e9:e8:15:a8:fc:df:a6:
                    21:e8:55:27:d7:aa:99:0d:ab:90:16:0a:e5:5b:1a:
                    6d:45:07:9e:54:56:6e:87:c6:56:15:d3:df:e4:2e:
                    b9:d3:34:83:f1:66:c9:96:43:46:b3:12:cf:cd:1b:
                    e2:01:d2:94:2c:92:44:bb:f9:1d:08:78:b2:d3:b2:
                    c3:c8:72:d0:36:39:12:81:58:7e:56:6c:65:e7:75:
                    3e:7c:f0:a5:d4:4b:9a:19:74:28:11:d6:80:03:a2:
                    18:75:ac:91:cf:95:47:e9:d6:23:73:65:be:11:d1:
                    82:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:21:51:18:DC:2C:4F:6C:2E:35:90:06:48:19:46:ED:1E:B9:AD:E1
            X509v3 Authority Key Identifier:
                keyid:66:69:18:65:7E:41:63:3E:17:EA:C8:6C:26:B1:84:DB:A3:E8:1E:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149907/F714BDCACC2E11EC823BEE35C4F9AE02/ZmkYZX5BYz4X6shsJrGE26PoHi4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZmkYZX5BYz4X6shsJrGE26PoHi4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149907/F714BDCACC2E11EC823BEE35C4F9AE02/ZmkYZX5BYz4X6shsJrGE26PoHi4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:ef:b3:dc:80:9b:e3:f6:00:0d:99:dd:2f:7f:f2:30:84:c0:
         28:07:bc:67:5c:8d:d5:9c:5e:d1:f3:3b:b8:47:a8:73:32:24:
         f9:94:72:5b:7d:31:96:04:24:af:06:f3:f7:70:74:c2:ab:c6:
         29:ef:25:45:2d:23:d8:0e:21:57:d0:17:c3:ad:c8:2a:cb:1e:
         51:69:27:e8:a0:c0:c6:db:84:cf:e2:7e:47:14:32:98:3c:9f:
         93:39:5a:49:34:2a:93:f4:fe:62:aa:ba:00:f8:2b:ab:31:37:
         8e:75:b0:3f:83:de:f2:6b:1a:4e:12:f9:eb:1f:f6:60:a6:cf:
         67:37:d7:98:e7:a7:65:dc:79:f9:0c:ac:b6:fd:02:21:43:1e:
         82:6a:6d:1b:82:73:7e:e4:05:0d:d0:8d:85:f5:b8:d2:15:c0:
         40:a5:96:f9:a4:e2:4f:f0:68:29:94:32:40:85:bb:f3:bb:d3:
         81:6d:15:85:e3:68:7f:91:08:aa:96:a5:5f:11:e0:76:05:81:
         bb:1b:7d:77:31:aa:a8:21:d7:ce:fb:12:b4:25:66:ae:b4:e2:
         92:7c:66:f5:87:40:71:94:84:22:61:4f:15:56:c5:8a:a5:d2:
         1b:2b:7b:8f:bf:e4:f0:16:90:cc:7e:f5:22:78:fe:66:31:e2:
         c2:fd:48:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 19:45:38 2026 by rpki-client