Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9186214/390BD8F4A16311F1B4FF675E95EE528E/zocIfXqupqBsZhkKz9EzuiNRJnc.mft
File:                     zocIfXqupqBsZhkKz9EzuiNRJnc.mft (raw, json)
Hash identifier:          UNe3WJLqCEX40RT8aZidvs1iakZlWwsZyPsJ9jbdu4Y=
Subject key identifier:   4B:42:C2:5F:E9:03:C4:86:30:D4:8E:1E:1E:39:2A:71:B1:07:0B:09
Authority key identifier: CE:87:08:7D:7A:AE:A6:A0:6C:66:19:0A:CF:D1:33:BA:23:51:26:77
Certificate issuer:       /CN=A9186214/serialNumber=CE87087D7AAEA6A06C66190ACFD133BA23512677
Certificate serial:       01
Authority info access:    rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/zocIfXqupqBsZhkKz9EzuiNRJnc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186214/390BD8F4A16311F1B4FF675E95EE528E/zocIfXqupqBsZhkKz9EzuiNRJnc.mft
Manifest number:          01
Signing time:             Wed 26 Aug 2026 15:32:30 +0000
Manifest this update:     Wed 26 Aug 2026 15:32:30 +0000
Manifest next update:     Wed 02 Sep 2026 15:32:30 +0000
Files and hashes:         1: zocIfXqupqBsZhkKz9EzuiNRJnc.crl (hash: nsuxAA7sAYhoZmoHCgFCVb591CifJn9gywpLYqJn3PM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186214/390BD8F4A16311F1B4FF675E95EE528E/zocIfXqupqBsZhkKz9EzuiNRJnc.crl
                          rsync://rpki.apnic.net/member_repository/A9186214/390BD8F4A16311F1B4FF675E95EE528E/zocIfXqupqBsZhkKz9EzuiNRJnc.mft
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/zocIfXqupqBsZhkKz9EzuiNRJnc.cer
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Sep 2026 15:31:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1 (0x1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186214, serialNumber=CE87087D7AAEA6A06C66190ACFD133BA23512677
        Validity
            Not Before: Aug 26 15:32:30 2026 GMT
            Not After : Sep  2 15:32:30 2026 GMT
        Subject: CN=6a8f070e-669a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f6:4c:ce:6f:1a:42:24:77:d0:50:de:83:4e:
                    34:9c:a3:21:16:d3:4a:85:7b:7b:74:7a:85:d3:13:
                    80:9b:85:69:bf:c0:9c:7b:92:59:a6:7b:ad:2a:dc:
                    d7:52:65:26:c7:16:1f:d6:b5:c3:2d:e1:7c:57:68:
                    28:2e:5e:24:c2:ba:74:69:96:42:e5:5d:1a:3f:9e:
                    a3:0a:71:70:e7:1f:4c:ec:6e:6e:ea:7c:a1:7c:0e:
                    6c:48:f2:7f:55:a4:75:b3:13:29:64:9b:ba:af:9d:
                    a0:06:29:f8:2f:e9:ba:4e:46:33:ff:fa:97:29:df:
                    08:f5:c2:b2:91:e1:8e:fd:b6:2c:b7:e8:5f:16:f5:
                    7d:ec:55:5b:02:eb:ab:82:bd:b8:ee:a7:a9:39:49:
                    9a:ad:13:c5:a3:e5:8d:f2:2f:1e:fa:29:40:39:01:
                    6f:56:73:d9:b3:66:d2:84:79:ec:2a:77:dc:f3:5f:
                    b9:e7:b6:a3:d9:0c:14:c5:b8:a0:84:0f:2a:8e:58:
                    38:ad:36:b2:f3:b0:9a:90:9b:f4:d5:8d:59:1e:38:
                    6c:05:99:e6:c7:ce:0a:92:39:e9:c4:08:7a:6e:8d:
                    4a:3b:37:5b:0c:6e:84:c2:f9:de:04:6b:d3:10:f4:
                    dd:92:f9:25:c3:ac:d3:9f:df:d7:6d:2e:d1:ac:ac:
                    48:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:42:C2:5F:E9:03:C4:86:30:D4:8E:1E:1E:39:2A:71:B1:07:0B:09
            X509v3 Authority Key Identifier:
                keyid:CE:87:08:7D:7A:AE:A6:A0:6C:66:19:0A:CF:D1:33:BA:23:51:26:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186214/390BD8F4A16311F1B4FF675E95EE528E/zocIfXqupqBsZhkKz9EzuiNRJnc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/zocIfXqupqBsZhkKz9EzuiNRJnc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/390BD8F4A16311F1B4FF675E95EE528E/zocIfXqupqBsZhkKz9EzuiNRJnc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:95:c7:b4:91:58:5c:65:e4:76:e3:94:99:49:22:02:78:e0:
         44:3f:93:f4:b7:2f:43:08:5f:18:d6:65:fc:17:30:40:3a:47:
         83:c9:9f:e3:76:5d:c6:19:12:0f:51:37:bf:36:16:8f:bc:1d:
         43:af:16:70:6f:bd:76:f4:07:20:15:26:41:83:61:5e:da:aa:
         de:de:f7:43:81:79:f3:26:5e:d5:2d:e7:9f:31:85:ac:71:87:
         21:d7:ab:56:1a:7c:56:01:ea:65:9f:d2:43:39:c7:9e:f8:97:
         6a:fc:29:ff:5a:5c:0e:ec:91:86:d5:0f:16:ae:c0:84:95:94:
         29:97:05:ec:7a:ae:9c:4b:9b:d3:41:c5:1f:c4:a2:77:bd:3d:
         05:e9:68:83:76:53:8f:56:45:c4:df:c7:e1:f2:4a:d9:ec:bb:
         52:5e:82:bc:20:da:1c:7e:bd:19:60:78:2e:02:bc:02:e0:cb:
         07:9e:f4:e2:40:a5:1f:16:87:42:d7:2c:81:e8:8e:f2:42:d4:
         f1:1d:fe:17:1c:76:16:12:54:6c:e3:05:8d:5d:37:31:e7:18:
         e8:5e:fa:66:8b:8b:7f:66:4e:7c:e2:6a:5f:2d:dd:0e:b0:70:
         b0:22:78:cd:05:60:1f:35:36:0e:87:1a:09:c7:f0:7c:46:1a:
         a9:df:22:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 02:05:00 2026 by rpki-client