Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915B358/C8FD800438A211F186E88F207EEE528E/zcExhQol8Mzfybm5zI7mTDr6bQg.mft
File:                     zcExhQol8Mzfybm5zI7mTDr6bQg.mft (raw, json)
Hash identifier:          TXTctiky5z8sYNVon1EYISyj/vj0LpP/IwZOXLiiMeA=
Subject key identifier:   C5:81:F7:3C:1B:22:97:97:A8:E3:5D:53:B4:CC:9D:DC:8D:1B:7D:DA
Authority key identifier: CD:C1:31:85:0A:25:F0:CC:DF:C9:B9:B9:CC:8E:E6:4C:3A:FA:6D:08
Certificate issuer:       /CN=A915B358/serialNumber=CDC131850A25F0CCDFC9B9B9CC8EE64C3AFA6D08
Certificate serial:       6E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zcExhQol8Mzfybm5zI7mTDr6bQg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B358/C8FD800438A211F186E88F207EEE528E/zcExhQol8Mzfybm5zI7mTDr6bQg.mft
Manifest number:          69
Signing time:             Mon 19 Oct 2026 08:12:18 +0000
Manifest this update:     Mon 19 Oct 2026 08:12:18 +0000
Manifest next update:     Mon 26 Oct 2026 08:12:18 +0000
Files and hashes:         1: zcExhQol8Mzfybm5zI7mTDr6bQg.crl (hash: 88Km6zXR2xZzYIYdvI/WSHOlX5HAQiN7nWkRaYxZ5Mg=)
                          2: 93D240467ABE11F18A7AD4526AA30FBC.roa (hash: w1g0+OCm5KdHfXk1uQN4NK1n9UsJBgBEWbSV3G4nl+0=)
                          3: 5B12B2B0915511F1A8A4FE826911F970.roa (hash: HrmVhWrBT16ZorM9C2f2yDdovxpvH6JykEKOijJcSOk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B358/C8FD800438A211F186E88F207EEE528E/zcExhQol8Mzfybm5zI7mTDr6bQg.crl
                          rsync://rpki.apnic.net/member_repository/A915B358/C8FD800438A211F186E88F207EEE528E/zcExhQol8Mzfybm5zI7mTDr6bQg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zcExhQol8Mzfybm5zI7mTDr6bQg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Oct 2026 08:12:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110 (0x6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B358, serialNumber=CDC131850A25F0CCDFC9B9B9CC8EE64C3AFA6D08
        Validity
            Not Before: Oct 19 08:12:18 2026 GMT
            Not After : Oct 26 08:12:18 2026 GMT
        Subject: CN=6ad5d0e2-13ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:87:c0:89:36:b8:71:1e:82:13:b2:c5:39:6f:
                    8b:c8:ed:ae:5d:58:ed:19:da:fb:32:77:7b:ae:37:
                    6f:97:5b:de:f3:2f:20:b0:36:43:dd:10:4f:31:0e:
                    c2:50:4b:f7:b5:ac:71:58:ad:91:8c:6c:0d:57:28:
                    89:7b:69:5e:b1:13:54:e0:0a:99:e5:78:43:87:e1:
                    ba:86:18:4d:72:aa:b5:0f:53:a9:d3:5d:a7:a2:97:
                    aa:c0:b8:25:f8:4f:ac:d7:a6:2a:63:c3:57:3f:f6:
                    25:8a:90:8e:cd:4e:7d:ff:03:a8:23:3b:19:d2:0e:
                    be:20:19:72:33:45:39:bd:2b:8f:72:8f:39:e1:8d:
                    1e:9f:00:0f:48:c1:eb:e1:9b:9b:ca:3e:88:bb:3a:
                    a2:8b:2a:f6:43:39:d0:ab:b3:08:a7:de:5b:08:91:
                    85:c0:17:23:22:d5:8d:be:08:8d:f5:3f:52:75:2c:
                    81:20:e2:be:69:a4:f3:3f:a8:00:a9:5b:0e:63:c4:
                    c2:39:17:b9:ce:d7:2e:96:e7:7b:b2:b0:cc:df:88:
                    8a:31:77:18:dd:47:d3:e7:1a:dd:cd:01:af:d9:13:
                    ed:ab:7f:f5:66:73:7a:f9:63:dc:78:b3:f0:22:dc:
                    35:02:16:bc:00:4d:f9:a0:3e:04:23:4c:60:43:34:
                    fc:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:81:F7:3C:1B:22:97:97:A8:E3:5D:53:B4:CC:9D:DC:8D:1B:7D:DA
            X509v3 Authority Key Identifier:
                keyid:CD:C1:31:85:0A:25:F0:CC:DF:C9:B9:B9:CC:8E:E6:4C:3A:FA:6D:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B358/C8FD800438A211F186E88F207EEE528E/zcExhQol8Mzfybm5zI7mTDr6bQg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zcExhQol8Mzfybm5zI7mTDr6bQg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B358/C8FD800438A211F186E88F207EEE528E/zcExhQol8Mzfybm5zI7mTDr6bQg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:75:77:02:98:68:71:d3:47:f3:74:ef:f0:fd:08:cb:cc:8c:
         1b:74:80:ef:cc:3e:b4:3c:40:9f:9f:99:31:5c:f0:27:d3:06:
         6e:e1:dd:e2:02:c3:31:70:eb:8f:cc:3d:8d:b9:cb:9e:a7:68:
         c5:01:d1:fd:af:bd:1b:53:d3:af:19:b2:26:9c:99:85:70:14:
         ba:1b:29:4f:d4:5d:bf:d2:00:d5:0d:5f:61:d9:7c:c0:9a:59:
         92:2b:7f:e0:fe:dc:e0:a2:dd:b6:7a:04:36:c6:dc:83:ea:47:
         1d:4d:22:8a:60:77:e5:c6:2d:8b:33:0b:2a:5d:d0:59:94:47:
         4d:93:0a:6a:21:0d:1c:af:f6:dc:3e:9f:1c:b5:dc:de:e4:43:
         63:75:d3:2a:54:45:b2:7f:94:72:8f:ea:a1:75:74:44:ef:cb:
         d8:2f:55:cd:ee:06:1d:1d:59:19:18:cc:cd:37:e0:ae:1a:45:
         3c:c5:9a:11:cf:03:5a:51:58:f7:5f:97:d4:54:4e:3c:64:b4:
         bd:09:a0:1d:9e:54:70:4d:82:3f:63:2f:33:60:7c:37:52:92:
         dd:1b:88:82:a0:5d:81:e7:de:78:d7:d0:d4:9b:9a:ea:df:7e:
         9f:47:6b:7a:b2:f0:72:0b:8d:69:a6:b7:48:ee:15:24:86:6e:
         ac:a3:60:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 19:14:23 2026 by rpki-client