Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/zq0j_kiI4YaHN4QBinb5TuiJdVE.mft
File:                     zq0j_kiI4YaHN4QBinb5TuiJdVE.mft (raw, json)
Hash identifier:          cab9sMA7sUOnKWXStFC3oaO9OLS+lLNRu9skQeqiAVw=
Subject key identifier:   6A:57:4A:A9:5A:4C:EF:67:9E:B7:27:F2:16:21:75:41:DE:98:65:84
Authority key identifier: CE:AD:23:FE:48:88:E1:86:87:37:84:01:8A:76:F9:4E:E8:89:75:51
Certificate issuer:       /CN=A9113585/serialNumber=CEAD23FE4888E186873784018A76F94EE8897551
Certificate serial:       07D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zq0j_kiI4YaHN4QBinb5TuiJdVE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/zq0j_kiI4YaHN4QBinb5TuiJdVE.mft
Manifest number:          07CF
Signing time:             Tue 28 Jul 2026 21:50:25 +0000
Manifest this update:     Tue 28 Jul 2026 21:50:25 +0000
Manifest next update:     Tue 04 Aug 2026 21:50:25 +0000
Files and hashes:         1: zq0j_kiI4YaHN4QBinb5TuiJdVE.crl (hash: NYrEdzaMQyj+iN7BKF5EmwN/kwh6+PhNOfGPElQGPls=)
                          2: DFF01B484A2B11EB8609481FC4F9AE02.roa (hash: zBDrIrM5ZNmyGZZJoQehnFsEZgI4D/QOvG+mRLYkJ1Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/zq0j_kiI4YaHN4QBinb5TuiJdVE.crl
                          rsync://rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/zq0j_kiI4YaHN4QBinb5TuiJdVE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zq0j_kiI4YaHN4QBinb5TuiJdVE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 21:50:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2008 (0x7d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9113585, serialNumber=CEAD23FE4888E186873784018A76F94EE8897551
        Validity
            Not Before: Jul 28 21:50:25 2026 GMT
            Not After : Aug  4 21:50:25 2026 GMT
        Subject: CN=6a692421-ba77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:cc:3c:36:1e:dd:0f:43:12:af:a8:36:38:a8:
                    b5:42:91:76:a7:40:c1:da:f2:ca:c7:c7:4d:a5:0d:
                    02:be:b5:71:08:6c:3c:9d:23:7b:e9:0f:a0:ce:ae:
                    20:89:52:31:03:11:74:da:af:64:9e:29:22:57:3f:
                    ea:11:6d:90:73:d9:2a:e1:5b:7c:55:8a:93:89:53:
                    fd:1a:00:31:ec:51:3b:50:e0:19:e5:35:14:1c:e0:
                    12:9f:62:af:bd:26:7e:fb:13:29:f8:17:83:6e:9e:
                    ab:dd:54:11:b2:d5:f2:59:cf:9f:04:b7:49:cb:e4:
                    c9:05:a7:25:4f:3c:bc:6b:51:60:e1:0a:cf:bc:61:
                    da:1b:b0:76:63:ed:01:00:9a:c6:c6:82:52:28:e1:
                    cf:82:70:9b:df:b4:3c:38:77:75:94:5d:d3:90:46:
                    84:07:84:73:fc:78:c6:2d:77:a1:0e:f1:71:46:63:
                    64:aa:84:71:5f:f4:75:b2:0f:4c:8a:9a:32:00:a1:
                    b0:4b:49:2c:c6:f7:20:10:ef:33:59:43:43:18:43:
                    5d:09:03:64:44:4d:1a:6f:18:d9:eb:f5:7e:6e:52:
                    b0:a1:9e:0a:bf:65:fa:b6:a1:94:64:52:55:56:a8:
                    da:2e:97:44:60:95:3f:db:02:c3:22:a4:6a:27:76:
                    76:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:57:4A:A9:5A:4C:EF:67:9E:B7:27:F2:16:21:75:41:DE:98:65:84
            X509v3 Authority Key Identifier:
                keyid:CE:AD:23:FE:48:88:E1:86:87:37:84:01:8A:76:F9:4E:E8:89:75:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/zq0j_kiI4YaHN4QBinb5TuiJdVE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zq0j_kiI4YaHN4QBinb5TuiJdVE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/zq0j_kiI4YaHN4QBinb5TuiJdVE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:96:8c:0c:1a:31:cb:07:9a:c8:0c:62:c7:3c:14:55:fd:ea:
         a4:34:97:87:ee:64:57:94:3d:77:04:ab:10:a3:a7:7e:d8:af:
         9e:12:e6:c4:81:8f:1f:72:c0:f6:c9:6a:53:3b:6e:e5:f6:83:
         a7:88:fc:e6:86:36:50:af:69:e5:18:e1:79:f3:5c:65:58:42:
         13:e4:e6:e4:34:42:97:45:37:a8:64:63:ff:dd:cd:91:e1:3e:
         48:02:c6:38:5d:8c:b3:4c:42:37:be:39:04:91:95:3c:89:5f:
         19:21:78:84:27:de:c4:ff:c3:a3:81:46:7d:8c:fa:b7:fd:b8:
         da:1f:e2:5a:a5:45:5a:b7:8e:5d:9b:dd:3f:b9:ce:78:9a:d9:
         70:cb:a8:af:5a:6a:98:7b:7a:e6:09:b9:f4:7e:35:02:78:d5:
         56:1e:e7:5c:32:cb:0a:07:30:26:79:c3:33:fa:ef:f3:5a:bc:
         cb:5e:5e:d0:d0:59:ce:3b:0a:0b:c6:e7:dd:58:7f:8f:31:93:
         86:e5:32:57:5a:a2:2f:72:f8:d6:3b:09:d3:03:d9:d3:eb:e6:
         7d:6e:f4:a4:97:f1:ec:24:3c:99:a4:c1:52:6f:06:b5:40:a5:
         f7:19:d5:ee:63:70:09:99:3c:a9:2f:74:83:2b:31:62:99:d7:
         74:9a:b7:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:38:31 2026 by rpki-client