Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.mft
File:                     ZRFLF0P9YN13KN7h6FtJ7qG_Da0.mft (raw, json)
Hash identifier:          Hoyw+eMBVZz/gHdxnmcn5zM70HNnE1nc23jYUbWwfXU=
Subject key identifier:   3D:48:BE:3E:E2:61:5C:1C:8A:E6:07:BF:AB:41:FB:11:0B:96:F4:D5
Authority key identifier: 65:11:4B:17:43:FD:60:DD:77:28:DE:E1:E8:5B:49:EE:A1:BF:0D:AD
Certificate issuer:       /CN=A91E77F3/serialNumber=65114B1743FD60DD7728DEE1E85B49EEA1BF0DAD
Certificate serial:       019D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.mft
Manifest number:          0197
Signing time:             Mon 05 Oct 2026 04:44:27 +0000
Manifest this update:     Mon 05 Oct 2026 04:44:27 +0000
Manifest next update:     Mon 12 Oct 2026 04:44:27 +0000
Files and hashes:         1: ZRFLF0P9YN13KN7h6FtJ7qG_Da0.crl (hash: Yxc7DSjq9Y48kAc4fIKEEgunGoryu3Tmos/2gWsI02w=)
                          2: 92EBC90CABD111F0B4462F16C4F9AE02.roa (hash: Y/OOSY60AbWXfzo+A9kK6oMwS+RTIvrW3ZiwtXUzU20=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.crl
                          rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 04:44:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 413 (0x19d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E77F3, serialNumber=65114B1743FD60DD7728DEE1E85B49EEA1BF0DAD
        Validity
            Not Before: Oct  5 04:44:27 2026 GMT
            Not After : Oct 12 04:44:27 2026 GMT
        Subject: CN=6ac32b2b-8237
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b7:ff:5f:94:48:67:ee:61:2a:cd:59:7f:73:
                    a7:e9:5a:d4:df:c2:7e:9a:a3:fd:cb:83:13:9a:b0:
                    79:13:dc:f7:ff:d0:e2:be:00:35:e7:61:e6:70:ee:
                    df:c6:12:9b:25:5f:d1:57:ac:17:71:b6:9b:78:87:
                    85:5d:23:fd:32:9f:c8:42:9c:d4:28:36:c0:69:a1:
                    69:1a:79:05:b6:67:4f:b7:8e:0f:27:b9:57:f0:dc:
                    44:f1:33:23:15:bf:4d:08:5d:b9:fc:cf:ef:9c:2d:
                    d2:e8:f8:67:05:53:cd:a3:0c:5a:98:58:ad:cc:55:
                    d1:5f:dc:e8:0f:e8:42:90:4d:fc:04:a1:85:ca:15:
                    b8:3b:00:47:eb:ef:61:3f:15:c8:0e:68:5c:b3:9c:
                    27:83:14:26:2f:b0:45:c8:07:52:b3:b8:a7:4f:77:
                    c3:43:31:d9:01:61:79:d7:64:8b:56:5a:bd:c3:d8:
                    58:3a:f4:89:d7:ef:cd:fc:df:a2:ad:c3:37:d0:26:
                    05:58:e2:ca:43:8f:c7:26:52:49:f9:36:62:c9:74:
                    d2:16:1a:28:51:1d:59:7a:91:cb:f3:0a:89:fe:4f:
                    41:39:4e:86:18:f9:9f:25:da:cc:1f:da:e1:59:a7:
                    bd:c5:09:32:e9:77:8f:22:d9:c3:87:6d:43:8b:1b:
                    c8:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:48:BE:3E:E2:61:5C:1C:8A:E6:07:BF:AB:41:FB:11:0B:96:F4:D5
            X509v3 Authority Key Identifier:
                keyid:65:11:4B:17:43:FD:60:DD:77:28:DE:E1:E8:5B:49:EE:A1:BF:0D:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:73:d4:dd:bf:21:0a:17:23:62:39:44:01:81:97:e2:79:69:
         aa:60:98:51:73:db:2b:0d:b8:5a:46:07:41:f4:92:af:4d:aa:
         6e:86:9b:2a:3a:40:b6:f8:1e:75:16:e4:55:40:e0:29:19:61:
         56:ff:75:69:95:ed:86:70:f1:14:9d:48:70:a2:49:64:2a:34:
         f1:2b:58:ce:d3:63:54:01:4b:f2:29:7e:f6:e2:01:a1:68:4b:
         09:3d:b2:69:1d:cd:23:91:92:a6:b3:0f:8c:10:40:fe:a3:6d:
         4b:80:c2:45:4e:2d:8d:5d:ed:9d:12:e9:d6:3d:62:7a:ea:e4:
         fc:4e:92:90:eb:41:2d:58:6c:2a:23:00:bf:07:1d:f7:38:b6:
         55:68:c9:c8:36:d1:74:1d:18:18:30:27:96:5f:ce:0d:79:14:
         94:73:f3:85:5c:5e:c6:e9:a2:6b:1e:57:9a:73:9a:c4:dc:46:
         7d:06:6a:8e:c6:c9:bf:42:38:a7:98:80:b2:d2:36:96:2a:ab:
         e3:d9:32:80:36:d0:57:40:ee:14:61:f8:51:5b:ca:d2:ad:f6:
         a0:8d:d1:e8:90:9d:c4:5d:76:71:23:5a:21:02:33:b8:6c:66:
         9b:fd:5a:82:40:47:9d:6a:76:63:a2:b2:fb:2c:02:d7:04:fe:
         6c:cc:85:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 18:10:18 2026 by rpki-client