Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.mft
File:                     zFfgNkMaXqPBcqpyg0Aa88StXFk.mft (raw, json)
Hash identifier:          94PFOeRnZGA23itC4jVlhi5F+X4i0mmBOqpBNX+vQQQ=
Subject key identifier:   97:1F:01:20:4F:33:B3:D5:54:83:D5:CF:22:9B:D3:01:F5:1D:1A:B6
Authority key identifier: CC:57:E0:36:43:1A:5E:A3:C1:72:AA:72:83:40:1A:F3:C4:AD:5C:59
Certificate issuer:       /CN=A91FDC78/serialNumber=CC57E036431A5EA3C172AA7283401AF3C4AD5C59
Certificate serial:       09ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFfgNkMaXqPBcqpyg0Aa88StXFk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.mft
Manifest number:          09D9
Signing time:             Tue 18 Aug 2026 20:12:52 +0000
Manifest this update:     Tue 18 Aug 2026 20:12:51 +0000
Manifest next update:     Tue 25 Aug 2026 20:12:51 +0000
Files and hashes:         1: zFfgNkMaXqPBcqpyg0Aa88StXFk.crl (hash: ROY3pwJ89apXAboc5L4WP0P1qwdEx2QUoEaYHdrGy9Y=)
                          2: DA0B639E89E711F08DD17A55C4F9AE02.roa (hash: WShAID2RQGXvLt6YUD1Hwx0ZMGyvGXCWr68bcuwRc4Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.crl
                          rsync://rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFfgNkMaXqPBcqpyg0Aa88StXFk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 20:12:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2541 (0x9ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FDC78, serialNumber=CC57E036431A5EA3C172AA7283401AF3C4AD5C59
        Validity
            Not Before: Aug 18 20:12:51 2026 GMT
            Not After : Aug 25 20:12:51 2026 GMT
        Subject: CN=6a84bcc3-22ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:86:68:82:6e:9d:bd:35:6d:f7:7f:9c:48:23:
                    cd:cb:db:82:76:68:d7:6f:f8:cf:6e:95:dd:f7:fc:
                    6c:03:a6:65:3e:76:9c:0e:c5:b6:01:90:d1:07:9a:
                    19:98:b0:93:b3:42:5e:f6:41:9c:bb:d7:67:05:6b:
                    aa:75:f6:ef:8d:bc:6f:71:15:1d:64:e5:b6:60:6c:
                    d8:6b:f1:19:48:ef:3b:f8:03:14:cb:4f:54:a7:93:
                    d4:56:94:98:b4:09:bf:5c:fc:f7:02:81:34:f4:f8:
                    c2:cd:dc:2a:c5:46:f2:ae:ec:d4:2b:5f:db:e2:84:
                    9d:e2:67:26:db:e6:a8:0c:20:04:65:4f:2b:10:89:
                    24:99:51:07:ba:b7:e4:6a:e8:e6:d8:8a:6c:c0:61:
                    8c:ae:d4:9d:0e:f9:ac:2c:73:f6:d3:96:cb:70:64:
                    b2:cb:53:d4:5c:5f:e8:ff:7a:c3:bb:6e:5c:88:23:
                    cf:9b:26:c3:fb:4d:44:be:63:e4:cc:c0:89:29:45:
                    d5:4f:1d:42:82:14:52:ca:cf:d5:3b:2f:c7:1f:43:
                    f6:ec:ee:3a:ab:e9:f3:5a:05:96:46:21:3c:d6:19:
                    0b:32:1d:3b:fa:d2:31:9c:c1:c1:61:0b:f6:84:6f:
                    71:42:e9:f2:4e:ce:ef:67:8b:16:1a:58:d1:e0:9e:
                    6d:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:1F:01:20:4F:33:B3:D5:54:83:D5:CF:22:9B:D3:01:F5:1D:1A:B6
            X509v3 Authority Key Identifier:
                keyid:CC:57:E0:36:43:1A:5E:A3:C1:72:AA:72:83:40:1A:F3:C4:AD:5C:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFfgNkMaXqPBcqpyg0Aa88StXFk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:15:3b:14:9e:25:d8:22:9d:06:0c:20:de:5c:a2:8b:3f:25:
         c7:f2:7a:3b:58:cb:01:21:96:32:c6:48:f1:cb:f8:61:20:df:
         d0:5e:81:9b:0d:5f:70:51:6f:a4:b2:6f:5a:c8:41:9b:b6:44:
         8a:17:56:64:5a:a1:59:9f:f2:f3:ad:03:0f:49:da:ab:50:33:
         dd:88:f3:82:1a:d1:f7:08:e2:64:20:8b:d6:bf:1b:f2:09:10:
         cd:de:46:7a:8f:ec:a6:e8:1b:be:11:59:05:35:50:10:ff:c6:
         43:62:3b:3a:35:1d:5b:13:e8:25:ac:04:32:94:6c:fb:db:de:
         6c:93:83:6c:e1:8a:9d:78:a0:f2:3d:18:2f:e1:43:9e:52:57:
         22:8d:79:f9:3a:c6:35:f7:62:2b:1a:f5:3f:8d:e8:6f:73:77:
         a4:be:d1:6c:82:d2:43:87:3a:ed:a8:1b:67:73:6e:e4:02:a2:
         e3:be:61:ef:52:bd:1d:33:b4:94:ed:ac:ac:99:19:eb:89:28:
         e6:5a:45:81:b1:7f:52:3d:42:dd:95:cd:3d:6d:5c:d0:d3:58:
         84:f3:70:7c:bf:52:8b:3e:29:63:bd:6a:26:10:df:ea:48:41:
         10:5b:a1:05:af:c8:a2:0c:47:aa:25:3c:03:51:aa:91:3a:a5:
         85:11:f3:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:03:24 2026 by rpki-client