Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/ZYFAKi2uxT7NZf18HcgA-m51c_o.mft
File:                     ZYFAKi2uxT7NZf18HcgA-m51c_o.mft (raw, json)
Hash identifier:          MzFZ8ptt5eGyUBVuB4dp/1wo0qC76EnoY7EWdFAC91I=
Subject key identifier:   D6:2E:87:73:7D:C4:B7:83:EB:59:C0:2E:93:BC:00:CE:A8:B6:9C:EA
Authority key identifier: 65:81:40:2A:2D:AE:C5:3E:CD:65:FD:7C:1D:C8:00:FA:6E:75:73:FA
Certificate issuer:       /CN=A9178424/serialNumber=6581402A2DAEC53ECD65FD7C1DC800FA6E7573FA
Certificate serial:       01BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYFAKi2uxT7NZf18HcgA-m51c_o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/ZYFAKi2uxT7NZf18HcgA-m51c_o.mft
Manifest number:          01B5
Signing time:             Sun 25 Oct 2026 04:25:08 +0000
Manifest this update:     Sun 25 Oct 2026 04:25:08 +0000
Manifest next update:     Sun 01 Nov 2026 04:25:08 +0000
Files and hashes:         1: ZYFAKi2uxT7NZf18HcgA-m51c_o.crl (hash: 9oueH4mh535Ra3+beY+smFzPg5vkPoLpl40334U1YYY=)
                          2: 9166F61638E511EF803AF660C4F9AE02.roa (hash: KxQFpzpoosNuGePL0OCDu0Wnx4bnznIe59MLAgWCeJc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/ZYFAKi2uxT7NZf18HcgA-m51c_o.crl
                          rsync://rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/ZYFAKi2uxT7NZf18HcgA-m51c_o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYFAKi2uxT7NZf18HcgA-m51c_o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Nov 2026 04:25:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 444 (0x1bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178424, serialNumber=6581402A2DAEC53ECD65FD7C1DC800FA6E7573FA
        Validity
            Not Before: Oct 25 04:25:08 2026 GMT
            Not After : Nov  1 04:25:08 2026 GMT
        Subject: CN=6add84a4-2d5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:e8:b4:d5:51:21:93:e3:06:22:35:ac:08:29:
                    8a:da:00:31:90:5f:8e:7f:27:ed:7d:ff:60:36:5e:
                    fa:53:c5:dd:cf:79:2a:a3:03:0f:56:02:24:d5:41:
                    a5:0d:15:ed:f9:00:55:05:36:98:23:bb:20:9c:a5:
                    97:8a:74:44:03:74:b5:f1:3c:20:af:c0:4c:02:93:
                    bb:75:4a:7c:20:6c:04:de:6a:83:17:49:b9:ef:ea:
                    2c:e0:53:b0:7d:87:ce:25:e3:b6:59:9b:58:31:2a:
                    30:3c:9f:a3:00:19:83:f9:6a:2f:48:1b:dd:09:de:
                    e0:a2:fe:ee:02:cb:82:50:dc:b9:d8:d1:2b:28:6d:
                    a4:d9:4a:cd:d4:b3:9b:ab:ee:e6:5a:76:2f:8c:95:
                    9f:2b:a2:da:7a:a7:08:47:a9:10:b8:cb:d8:a9:62:
                    21:ce:b8:cc:c4:41:3d:25:ce:a6:95:bd:98:1b:da:
                    00:32:c4:05:7d:8d:d6:8a:8c:40:c0:8f:94:39:af:
                    ec:c4:76:9f:44:56:1b:ee:38:ba:a7:56:af:fc:41:
                    0b:a7:1a:f1:9e:ad:2c:40:92:ea:95:1d:44:4c:24:
                    29:10:0a:74:4f:4c:e0:50:ed:a9:6e:3a:2b:c1:7d:
                    b3:1e:14:06:22:8c:ae:2e:d2:ca:37:83:00:e8:4c:
                    c8:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:2E:87:73:7D:C4:B7:83:EB:59:C0:2E:93:BC:00:CE:A8:B6:9C:EA
            X509v3 Authority Key Identifier:
                keyid:65:81:40:2A:2D:AE:C5:3E:CD:65:FD:7C:1D:C8:00:FA:6E:75:73:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/ZYFAKi2uxT7NZf18HcgA-m51c_o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYFAKi2uxT7NZf18HcgA-m51c_o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/ZYFAKi2uxT7NZf18HcgA-m51c_o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:6f:49:85:cf:95:1a:bd:72:04:f2:d3:e2:82:09:1c:be:78:
         c1:fd:dd:e0:04:02:99:98:a6:96:3b:42:d6:63:e1:e3:40:08:
         3e:7e:db:61:2c:1b:3a:56:a6:0f:71:74:64:8c:49:1d:0b:79:
         f7:c3:67:8e:21:5e:68:77:0f:6d:87:77:7a:d6:3c:75:a2:b5:
         18:2a:4a:11:37:96:e8:60:90:8e:64:b5:72:20:17:7a:d2:03:
         ee:a5:34:47:26:2f:74:aa:14:22:f0:32:19:b8:e8:78:e0:d2:
         2c:89:8a:f6:8b:a1:8c:17:55:3f:31:5e:86:cf:b3:83:4a:52:
         71:6d:f5:f3:b8:b4:17:9b:31:b3:9a:b2:08:3e:b7:62:49:ed:
         03:56:52:34:3d:82:d4:08:c8:11:f9:e4:a1:77:d0:44:be:97:
         88:0a:30:78:09:12:54:96:b1:f9:8c:76:b3:98:89:a1:b9:b0:
         9a:1d:cd:02:d9:ce:54:de:48:a6:f6:13:ca:31:73:3a:76:0f:
         3f:1c:9b:be:8b:6f:d0:e9:05:2a:a3:76:69:bf:90:71:39:cb:
         43:41:d8:41:fe:56:b3:b8:00:71:11:d7:4f:1e:a9:1a:71:b3:
         68:63:d8:f9:4d:58:e0:cd:4f:e9:81:50:50:74:67:e4:f7:b0:
         20:c9:55:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:39:29 2026 by rpki-client