Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D493B/DBAD37A0CAAE11EC8241280DC4F9AE02/zIO7bQqhd53qFp7bpKQCKN4hvXs.mft
File:                     zIO7bQqhd53qFp7bpKQCKN4hvXs.mft (raw, json)
Hash identifier:          v0KiP3OQ40x+Cj2sXyLEqQu+vFbkd3d26XCT2p6jDQo=
Subject key identifier:   99:C2:1D:C8:5C:13:64:1C:3C:36:68:9B:EE:9C:BB:05:5F:DC:3A:48
Authority key identifier: CC:83:BB:6D:0A:A1:77:9D:EA:16:9E:DB:A4:A4:02:28:DE:21:BD:7B
Certificate issuer:       /CN=A91D493B/serialNumber=CC83BB6D0AA1779DEA169EDBA4A40228DE21BD7B
Certificate serial:       0412
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zIO7bQqhd53qFp7bpKQCKN4hvXs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D493B/DBAD37A0CAAE11EC8241280DC4F9AE02/zIO7bQqhd53qFp7bpKQCKN4hvXs.mft
Manifest number:          040B
Signing time:             Wed 19 Aug 2026 00:45:15 +0000
Manifest this update:     Wed 19 Aug 2026 00:45:14 +0000
Manifest next update:     Wed 26 Aug 2026 00:45:14 +0000
Files and hashes:         1: zIO7bQqhd53qFp7bpKQCKN4hvXs.crl (hash: lQKFJKwT6JdqLe0cmMjKA8x0qmfsX0RG/3wgJpyevGQ=)
                          2: 684DDD32CAB311ECBBCE9843C4F9AE02.roa (hash: 9Qc71tRXjbo6SI5tLjNMPaseC4lt8mw3nTisxYF0bHw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D493B/DBAD37A0CAAE11EC8241280DC4F9AE02/zIO7bQqhd53qFp7bpKQCKN4hvXs.crl
                          rsync://rpki.apnic.net/member_repository/A91D493B/DBAD37A0CAAE11EC8241280DC4F9AE02/zIO7bQqhd53qFp7bpKQCKN4hvXs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zIO7bQqhd53qFp7bpKQCKN4hvXs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 00:45:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1042 (0x412)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D493B, serialNumber=CC83BB6D0AA1779DEA169EDBA4A40228DE21BD7B
        Validity
            Not Before: Aug 19 00:45:14 2026 GMT
            Not After : Aug 26 00:45:14 2026 GMT
        Subject: CN=6a84fc9b-a157
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ba:2b:62:19:3c:4f:84:23:92:78:b1:e3:fb:
                    6c:25:f7:7e:fc:43:85:7d:84:7f:e8:3d:e7:f6:d3:
                    41:67:17:f2:b7:2e:dd:8c:e1:19:35:71:9e:5e:a0:
                    2b:86:53:c9:f5:d2:c1:8a:f5:0d:87:4a:f9:0f:5f:
                    28:e0:a4:e6:4b:9b:66:11:37:4e:1a:85:43:91:db:
                    dc:d4:d9:d6:75:b5:78:70:48:5c:08:78:96:7c:00:
                    a3:1b:2c:d7:8a:f3:69:8d:e4:a0:9c:d5:8c:54:9b:
                    25:8d:6c:19:96:28:12:de:c1:50:6e:56:64:8b:a2:
                    c8:f9:08:ae:5f:0a:31:da:25:c9:ca:d2:1e:e6:19:
                    ba:a9:e1:db:58:29:40:df:38:4d:91:c6:f8:75:7c:
                    dc:cd:44:4e:20:ff:1f:43:df:e1:e0:c3:c9:4f:d4:
                    44:12:aa:3a:be:00:86:78:ab:49:6c:17:31:8e:00:
                    76:17:59:4e:12:c7:1e:7d:6c:18:c7:32:d6:30:19:
                    20:79:20:d6:78:a2:99:b1:a6:a0:47:b9:32:93:18:
                    46:25:87:eb:43:20:b8:cf:21:fd:c7:f5:cd:88:95:
                    40:e9:5a:f5:38:b2:a1:e7:2b:93:ef:77:b6:b2:e6:
                    9b:eb:73:b3:0d:f1:98:cd:fa:07:10:eb:01:7f:e3:
                    02:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:C2:1D:C8:5C:13:64:1C:3C:36:68:9B:EE:9C:BB:05:5F:DC:3A:48
            X509v3 Authority Key Identifier:
                keyid:CC:83:BB:6D:0A:A1:77:9D:EA:16:9E:DB:A4:A4:02:28:DE:21:BD:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D493B/DBAD37A0CAAE11EC8241280DC4F9AE02/zIO7bQqhd53qFp7bpKQCKN4hvXs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zIO7bQqhd53qFp7bpKQCKN4hvXs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D493B/DBAD37A0CAAE11EC8241280DC4F9AE02/zIO7bQqhd53qFp7bpKQCKN4hvXs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:b2:ad:a2:b1:7d:f2:6a:5a:e9:b0:80:59:bf:ca:56:0e:27:
         70:a2:55:d2:35:e8:c2:91:7c:10:ce:2b:bf:14:a2:83:a6:2e:
         03:8a:c9:fc:7f:c8:6e:7e:4b:19:b0:84:30:40:cf:3f:c8:67:
         f3:24:45:e2:4f:f4:8b:b4:58:14:f6:b8:f2:a4:6e:4e:91:b0:
         0f:f7:82:6d:37:fa:87:3e:91:17:17:ae:49:c5:c9:d0:10:66:
         65:bc:2c:5f:f0:5e:a5:44:5d:6d:ce:da:25:4c:f5:0e:ee:49:
         96:f8:79:50:ee:a0:51:69:f8:88:26:9a:dc:87:0f:66:bb:45:
         b2:48:b0:03:5d:b9:e5:31:14:6c:b0:a2:98:69:79:27:ca:69:
         fa:a7:ee:1c:8c:bb:76:c6:24:17:21:a5:70:d1:17:0e:67:6a:
         ca:69:c7:05:c5:eb:a2:7a:0e:be:8e:36:f3:16:3a:b5:40:16:
         f2:8a:62:c6:c5:55:39:07:ac:1f:6c:51:af:0f:c6:4b:8c:a0:
         3c:a3:77:61:e4:ba:84:c0:ac:26:a7:51:99:59:a8:89:64:fe:
         0e:a2:bb:13:d6:ed:38:ad:20:ea:f3:14:4a:c1:d1:0b:43:d0:
         02:41:a1:dd:09:38:24:64:b9:97:76:d1:61:9e:79:b0:fa:9c:
         92:69:ab:70
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBBIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDQ5M0IxMTAvBgNVBAUTKENDODNCQjZEMEFBMTc3OURFQTE2OUVEQkE0QTQwMjI4
REUyMUJEN0IwHhcNMjYwODE5MDA0NTE0WhcNMjYwODI2MDA0NTE0WjAYMRYwFAYD
VQQDEw02YTg0ZmM5Yi1hMTU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqborYhk8T4Qjknix4/tsJfd+/EOFfYR/6D3n9tNBZxfyty7djOEZNXGeXqAr
hlPJ9dLBivUNh0r5D18o4KTmS5tmETdOGoVDkdvc1NnWdbV4cEhcCHiWfACjGyzX
ivNpjeSgnNWMVJsljWwZligS3sFQblZki6LI+QiuXwox2iXJytIe5hm6qeHbWClA
3zhNkcb4dXzczUROIP8fQ9/h4MPJT9REEqo6vgCGeKtJbBcxjgB2F1lOEscefWwY
xzLWMBkgeSDWeKKZsaagR7kykxhGJYfrQyC4zyH9x/XNiJVA6Vr1OLKh5yuT73e2
suab63OzDfGYzfoHEOsBf+MChwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJnCHchc
E2QcPDZom+6cuwVf3DpIMB8GA1UdIwQYMBaAFMyDu20KoXed6hae26SkAijeIb17
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDkzQi9EQkFEMzdBMENB
QUUxMUVDODI0MTI4MERDNEY5QUUwMi96SU83YlFxaGQ1M3FGcDdicEtRQ0tONGh2
WHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3pJTzdiUXFoZDUzcUZwN2JwS1FDS040aHZYcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NDkzQi9EQkFEMzdBMENBQUUxMUVDODI0MTI4MERDNEY5QUUwMi96SU83YlFxaGQ1
M3FGcDdicEtRQ0tONGh2WHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA0rKtorF98mpa6bCAWb/KVg4ncKJV0jXowpF8EM4rvxSig6YuA4rJ/H/Ibn5L
GbCEMEDPP8hn8yRF4k/0i7RYFPa48qRuTpGwD/eCbTf6hz6RFxeuScXJ0BBmZbws
X/BepURdbc7aJUz1Du5Jlvh5UO6gUWn4iCaa3IcPZrtFskiwA1255TEUbLCimGl5
J8pp+qfuHIy7dsYkFyGlcNEXDmdqymnHBcXronoOvo428xY6tUAW8opixsVVOQes
H2xRrw/GS4ygPKN3YeS6hMCsJqdRmVmoiWT+DqK7E9btOK0g6vMUSsHRC0PQAkGh
3Qk4JGS5l3bRYZ55sPqckmmrcA==
-----END CERTIFICATE-----
Generated at Wed Aug 19 12:53:39 2026 by rpki-client