Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916CAE6/65D044C4941811EA940FB530C4F9AE02/ZMpUJqx6VQvaEFOgEoMUTi3NK9c.mft
File:                     ZMpUJqx6VQvaEFOgEoMUTi3NK9c.mft (raw, json)
Hash identifier:          09UynepoBzNKNC49Qnjs5CXRoZDYtjsOmt4qUbju/xQ=
Subject key identifier:   A5:30:FD:0F:9E:54:C6:E7:81:69:E1:85:D5:AD:10:90:29:B8:DD:6B
Authority key identifier: 64:CA:54:26:AC:7A:55:0B:DA:10:53:A0:12:83:14:4E:2D:CD:2B:D7
Certificate issuer:       /CN=A916CAE6/serialNumber=64CA5426AC7A550BDA1053A01283144E2DCD2BD7
Certificate serial:       CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMpUJqx6VQvaEFOgEoMUTi3NK9c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916CAE6/65D044C4941811EA940FB530C4F9AE02/ZMpUJqx6VQvaEFOgEoMUTi3NK9c.mft
Manifest number:          0B34
Signing time:             Sat 10 Oct 2026 19:41:43 +0000
Manifest this update:     Sat 10 Oct 2026 19:41:42 +0000
Manifest next update:     Sat 17 Oct 2026 19:41:42 +0000
Files and hashes:         1: ZMpUJqx6VQvaEFOgEoMUTi3NK9c.crl (hash: fXno1gLNWw0XHrhfivCOpvsW46ggoEG7pTzRBJX3MvQ=)
                          2: 8D3F53F6A15F11F09B632177C4F9AE02.roa (hash: CP+QsdoDrOnuqR8CFeZWi0RVe73nga/HrDSMYjQFtTw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916CAE6/65D044C4941811EA940FB530C4F9AE02/ZMpUJqx6VQvaEFOgEoMUTi3NK9c.crl
                          rsync://rpki.apnic.net/member_repository/A916CAE6/65D044C4941811EA940FB530C4F9AE02/ZMpUJqx6VQvaEFOgEoMUTi3NK9c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMpUJqx6VQvaEFOgEoMUTi3NK9c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Oct 2026 19:41:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 203 (0xcb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916CAE6, serialNumber=64CA5426AC7A550BDA1053A01283144E2DCD2BD7
        Validity
            Not Before: Oct 10 19:41:42 2026 GMT
            Not After : Oct 17 19:41:42 2026 GMT
        Subject: CN=6aca94f7-91cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:6f:d8:11:ad:b4:45:cf:52:e0:fe:0d:25:20:
                    dd:aa:0a:f9:ed:02:06:db:bb:8e:25:b3:cd:5a:f7:
                    c0:89:7c:9c:fc:61:4e:8b:fa:8a:e6:d5:f8:6f:26:
                    70:c7:f2:8d:8e:8c:2f:f3:53:92:91:39:a8:aa:e8:
                    cb:ce:45:d9:e3:ba:c9:96:fa:5f:f0:35:29:a3:ab:
                    e7:ff:2f:de:45:cc:c5:12:af:f0:2f:7c:7b:5c:45:
                    1b:fc:95:a5:7b:3d:2c:3d:c4:30:b5:51:2d:29:9e:
                    b5:76:d1:bd:b8:bf:30:86:1c:b6:3c:a2:22:c6:ec:
                    c3:41:86:f7:88:49:ee:32:c8:78:b4:16:b4:5f:23:
                    7e:ab:a7:fc:1b:60:2a:98:16:b1:f9:83:f2:9a:04:
                    c1:d0:53:81:37:34:ef:19:d1:60:0d:88:c4:df:2e:
                    d1:d2:61:17:0c:51:81:df:db:25:3b:d6:ec:30:01:
                    07:e3:81:9b:c9:7d:b8:05:36:95:32:40:4a:34:7f:
                    bc:d3:9f:e7:07:8b:24:6f:86:1e:a2:78:35:3f:ab:
                    8d:90:3a:72:b1:a0:ae:fb:79:84:82:31:86:2a:3d:
                    14:d5:cb:f2:1f:96:05:60:a4:67:00:78:fb:b5:62:
                    fb:cd:67:c0:ec:fa:60:83:ba:83:7d:fd:d3:1a:a7:
                    71:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:30:FD:0F:9E:54:C6:E7:81:69:E1:85:D5:AD:10:90:29:B8:DD:6B
            X509v3 Authority Key Identifier:
                keyid:64:CA:54:26:AC:7A:55:0B:DA:10:53:A0:12:83:14:4E:2D:CD:2B:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916CAE6/65D044C4941811EA940FB530C4F9AE02/ZMpUJqx6VQvaEFOgEoMUTi3NK9c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMpUJqx6VQvaEFOgEoMUTi3NK9c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CAE6/65D044C4941811EA940FB530C4F9AE02/ZMpUJqx6VQvaEFOgEoMUTi3NK9c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:0c:dc:82:65:8d:e5:ea:01:1a:6d:69:cb:bc:3d:ce:3f:34:
         72:61:45:07:a4:b5:89:b5:27:05:34:7c:0d:20:88:67:4c:ea:
         91:36:19:db:1e:35:31:c7:11:1b:a1:6a:eb:35:f6:d6:df:22:
         64:7a:5e:e9:e0:c0:0a:45:c5:5c:42:1f:38:6a:c0:be:60:b9:
         f0:c0:64:0f:f0:c4:28:5c:20:8a:ed:b2:ae:57:12:f0:50:da:
         e3:0c:cb:19:9b:f6:9a:56:01:b8:fa:e1:e8:55:d0:20:99:09:
         a9:e5:d1:50:29:06:bb:05:8b:30:d0:ab:01:82:51:f7:98:a8:
         88:70:d0:3a:0b:5c:13:8c:9e:0d:ef:54:9b:26:a7:77:b1:d7:
         fe:74:f4:68:a3:12:20:f0:a0:ea:98:98:0c:12:13:23:30:a3:
         df:00:41:a2:b2:0c:fe:01:d4:bb:0a:c9:f5:53:6a:94:a9:cf:
         42:bc:f6:93:6f:ee:3b:26:2a:bd:18:8b:45:eb:3b:8a:ea:6f:
         ff:db:64:60:9b:f1:34:31:7d:00:d3:2a:09:36:d9:12:92:df:
         9a:03:30:e1:62:3c:8d:e7:57:55:5d:9e:7b:cc:d1:a6:06:8b:
         fa:9d:47:ad:24:4b:c7:9d:8e:b1:8e:4b:12:64:b8:35:0d:d6:
         ac:86:07:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 10:34:38 2026 by rpki-client