Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F2F18/09504348FB6511EFB45A8966C4F9AE02/zupmODV1Y6xVdo8A2E0nezpjxEk.mft
File:                     zupmODV1Y6xVdo8A2E0nezpjxEk.mft (raw, json)
Hash identifier:          VxszlC9Q5S47paEAKEOqX2xdGg35iP5moShxcPu0QYI=
Subject key identifier:   36:55:A3:46:B1:FA:44:29:F2:32:41:0D:F2:F2:51:2A:01:E8:09:65
Authority key identifier: CE:EA:66:38:35:75:63:AC:55:76:8F:00:D8:4D:27:7B:3A:63:C4:49
Certificate issuer:       /CN=A91F2F18/serialNumber=CEEA6638357563AC55768F00D84D277B3A63C449
Certificate serial:       0131
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zupmODV1Y6xVdo8A2E0nezpjxEk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F2F18/09504348FB6511EFB45A8966C4F9AE02/zupmODV1Y6xVdo8A2E0nezpjxEk.mft
Manifest number:          0129
Signing time:             Sat 03 Oct 2026 06:26:36 +0000
Manifest this update:     Sat 03 Oct 2026 06:26:35 +0000
Manifest next update:     Sat 10 Oct 2026 06:26:35 +0000
Files and hashes:         1: zupmODV1Y6xVdo8A2E0nezpjxEk.crl (hash: ZOayZSQW9E3eY7FxTDTADOLG1c26DQn8AX/Q2cwBrbM=)
                          2: 65FCC030FB6511EF88F1AD24C4F9AE02.roa (hash: R0DPi+gCEM4E0p+D/Qj5W33hKErsLZCVNvWPk/SawTo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F2F18/09504348FB6511EFB45A8966C4F9AE02/zupmODV1Y6xVdo8A2E0nezpjxEk.crl
                          rsync://rpki.apnic.net/member_repository/A91F2F18/09504348FB6511EFB45A8966C4F9AE02/zupmODV1Y6xVdo8A2E0nezpjxEk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zupmODV1Y6xVdo8A2E0nezpjxEk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 06:26:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 305 (0x131)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F2F18, serialNumber=CEEA6638357563AC55768F00D84D277B3A63C449
        Validity
            Not Before: Oct  3 06:26:35 2026 GMT
            Not After : Oct 10 06:26:35 2026 GMT
        Subject: CN=6ac0a01c-c911
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:8d:6f:6a:66:cd:fc:e3:8d:15:82:d6:1b:06:
                    91:ae:90:2c:08:50:59:b4:3f:52:87:a4:2c:b7:54:
                    6f:ae:72:a0:8d:e8:a8:a4:ec:72:29:1f:00:29:df:
                    7e:32:c5:25:77:7d:7d:9e:0c:eb:df:fc:2f:a0:dd:
                    a9:c3:95:1c:00:2a:46:55:8e:8c:b3:4d:b6:a2:2e:
                    6c:b0:14:f6:b5:19:d4:4b:0b:2b:c6:02:5b:b3:ee:
                    4f:ed:50:1d:a2:72:60:e2:28:0d:ea:31:ba:b9:00:
                    08:52:3f:0b:45:03:cc:0d:ee:d8:78:7e:64:31:29:
                    03:c7:0c:ce:1c:d2:30:89:31:4e:54:52:c6:33:d8:
                    d5:4b:95:74:2a:ff:e5:40:91:e8:f8:68:08:c0:63:
                    94:30:36:5e:6c:57:d3:d5:d5:c0:a8:64:aa:8d:f9:
                    a0:60:40:e6:91:81:ec:61:03:63:0d:70:f6:d2:61:
                    ec:39:ca:84:48:d6:e6:81:c5:7d:31:7e:a3:04:97:
                    e3:c7:ca:e6:1c:7a:b9:c2:e0:99:95:86:08:39:01:
                    6c:d8:1f:7d:de:69:2d:7b:d6:c7:02:d3:9b:8a:a0:
                    f8:5b:42:aa:96:27:7d:d6:a8:5a:20:b7:3f:45:fd:
                    83:77:99:80:8b:6a:e4:ba:92:cf:84:1d:2e:1f:79:
                    8b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:55:A3:46:B1:FA:44:29:F2:32:41:0D:F2:F2:51:2A:01:E8:09:65
            X509v3 Authority Key Identifier:
                keyid:CE:EA:66:38:35:75:63:AC:55:76:8F:00:D8:4D:27:7B:3A:63:C4:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F2F18/09504348FB6511EFB45A8966C4F9AE02/zupmODV1Y6xVdo8A2E0nezpjxEk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zupmODV1Y6xVdo8A2E0nezpjxEk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2F18/09504348FB6511EFB45A8966C4F9AE02/zupmODV1Y6xVdo8A2E0nezpjxEk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:b1:32:50:a5:a4:22:81:ed:f2:82:52:5a:aa:0d:13:0f:99:
         17:71:5e:81:98:f1:55:1d:12:1e:70:7c:b0:d0:17:00:32:e4:
         ac:9c:b5:97:de:15:9d:7e:58:bc:82:d1:4d:2f:76:2b:ae:25:
         67:a2:29:35:fe:9d:fb:20:5a:63:b1:33:d7:60:c4:8f:f0:b8:
         9e:29:a7:2b:12:40:24:68:ce:55:64:2a:ac:73:16:68:38:14:
         b7:dd:2d:5e:32:9d:b4:bb:65:07:67:1a:0d:29:07:7b:c5:cc:
         27:05:98:41:3a:67:58:9c:81:46:5b:d9:50:96:0e:13:cf:61:
         03:f4:c1:ba:fd:06:b6:78:1e:0b:ea:f3:27:7b:cf:ce:37:6e:
         22:79:0f:85:1c:9a:eb:54:ab:2f:9d:75:16:d8:97:36:25:c9:
         17:cf:c0:c7:db:d6:5a:fe:d6:90:7a:7b:64:41:9b:6d:27:20:
         56:96:76:a9:18:9c:12:cb:99:c0:65:70:c8:da:bc:0e:f2:86:
         48:7b:ef:ec:92:2a:68:67:d3:6e:f4:c0:6a:2e:af:a6:aa:57:
         3e:02:fd:5c:81:99:f3:69:ef:08:41:b8:fe:64:97:38:8f:e9:
         9f:33:16:fd:1f:59:f8:84:40:ee:34:ae:f8:e4:38:61:18:45:
         f1:6a:95:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 19:08:35 2026 by rpki-client