Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft
File:                     ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft (raw, json)
Hash identifier:          b7sASvp/C4h2/jqM5sN01be/3/LAgyXlII8hNmc89XQ=
Subject key identifier:   20:CE:94:3B:3A:9C:79:98:64:6C:C6:69:82:71:C6:4A:1C:AB:DA:FC
Authority key identifier: 66:91:AB:EC:1A:46:FD:BC:D2:60:7C:4D:F1:7A:54:CE:33:34:C2:12
Certificate issuer:       /CN=A9199E3F/serialNumber=6691ABEC1A46FDBCD2607C4DF17A54CE3334C212
Certificate serial:       10BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpGr7BpG_bzSYHxN8XpUzjM0whI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft
Manifest number:          10A9
Signing time:             Thu 08 Oct 2026 17:26:46 +0000
Manifest this update:     Thu 08 Oct 2026 17:26:45 +0000
Manifest next update:     Thu 15 Oct 2026 17:26:45 +0000
Files and hashes:         1: ZpGr7BpG_bzSYHxN8XpUzjM0whI.crl (hash: 4eRC98ftxlctRB0tMtg0uoEhhb5LWn7KOOT5QAI9aVM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.crl
                          rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpGr7BpG_bzSYHxN8XpUzjM0whI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Oct 2026 17:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4286 (0x10be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199E3F, serialNumber=6691ABEC1A46FDBCD2607C4DF17A54CE3334C212
        Validity
            Not Before: Oct  8 17:26:45 2026 GMT
            Not After : Oct 15 17:26:45 2026 GMT
        Subject: CN=6ac7d256-f409
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:63:23:30:67:42:d2:4d:c7:b3:14:01:1d:a1:
                    c1:4f:aa:ce:7a:27:a9:e9:fd:57:8c:4d:ca:c2:46:
                    de:b4:13:90:ea:d8:54:02:91:31:8d:85:12:72:d3:
                    d1:75:09:9f:cc:ce:6e:71:65:7f:0e:70:bd:4d:bc:
                    fb:69:6d:d5:fd:51:7d:f5:45:a3:eb:67:53:a7:9a:
                    fc:0a:71:f5:82:13:24:f1:a7:a2:e2:f9:92:b4:1a:
                    9e:47:5f:99:33:e2:4a:2c:14:f9:e6:ae:ba:5e:19:
                    2e:20:45:f5:a7:32:25:53:13:89:68:81:48:ab:4d:
                    c2:7d:63:eb:63:61:f6:65:7f:f5:c4:0c:8a:81:49:
                    78:b8:d0:f0:b5:eb:4c:83:a0:55:22:c6:5f:be:8e:
                    84:45:ad:3b:94:22:eb:3f:f5:0d:84:69:b8:d6:97:
                    4c:3a:96:78:f4:8b:27:62:94:43:34:42:9c:d1:6a:
                    0c:de:14:1c:cf:f1:f0:13:a6:77:c2:43:c2:36:09:
                    f2:3e:74:8a:56:d4:60:e3:89:fd:30:7a:08:1f:39:
                    b7:1b:15:6e:95:a7:2f:0d:4e:90:39:53:71:2e:a2:
                    00:68:11:a1:68:5d:7f:9f:12:6f:83:80:cc:be:34:
                    2d:78:cf:72:11:b0:b2:33:06:7a:54:68:0e:b6:12:
                    1e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:CE:94:3B:3A:9C:79:98:64:6C:C6:69:82:71:C6:4A:1C:AB:DA:FC
            X509v3 Authority Key Identifier:
                keyid:66:91:AB:EC:1A:46:FD:BC:D2:60:7C:4D:F1:7A:54:CE:33:34:C2:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpGr7BpG_bzSYHxN8XpUzjM0whI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:03:d1:ed:f2:fd:1c:e3:5b:2f:0d:88:05:a2:cc:1c:d7:7a:
         05:5f:43:36:30:6b:76:c8:c2:27:fe:14:9b:ab:a3:cf:3a:39:
         4f:c4:07:d4:be:d2:7f:08:99:f8:5b:f6:06:9c:e8:75:e6:69:
         b9:c7:c5:8d:e6:bc:a7:dc:a0:d5:38:be:b0:76:b6:34:72:1d:
         71:98:a5:9c:e5:08:d0:3c:f3:e3:88:14:5c:7a:61:2c:af:b3:
         88:94:d4:d7:df:fb:4e:02:f7:3f:5a:2f:eb:80:4a:45:54:04:
         cf:86:70:5d:db:80:fe:36:bb:0e:20:5c:05:52:8c:6c:a1:0b:
         fc:bd:37:30:96:a3:8e:9d:71:78:ad:c3:03:4b:b7:de:0c:2f:
         45:e4:d7:85:78:53:b3:9c:66:28:f4:dc:ef:8f:50:a2:fa:f3:
         d5:d5:e0:30:33:ee:ac:07:0c:37:a5:b1:a3:6a:50:68:21:4f:
         ad:6d:5d:d6:e4:60:88:77:e9:9a:6c:df:5f:06:4b:2f:df:fb:
         c8:32:57:2e:63:c2:6e:72:d8:57:e0:df:8e:df:a6:ef:8f:bc:
         b8:1c:12:dd:eb:71:0d:cb:ad:66:bd:58:a8:29:25:41:38:a4:
         53:8c:d3:d6:c2:be:19:f7:b0:97:b1:57:6c:f5:54:97:63:2f:
         a7:2e:b0:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 18:30:03 2026 by rpki-client