Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft
File:                     ZkQFG-HhBw1XItJPzBplu2plk6o.mft (raw, json)
Hash identifier:          kvZTLbW1VExqIwx1pgU750rNUxWq/icJAYPr9WB1aZg=
Subject key identifier:   C4:B9:D4:D1:CE:91:42:9F:9D:86:48:C8:EE:DF:EB:93:50:93:ED:42
Authority key identifier: 66:44:05:1B:E1:E1:07:0D:57:22:D2:4F:CC:1A:65:BB:6A:65:93:AA
Certificate issuer:       /CN=A911F2DF/serialNumber=6644051BE1E1070D5722D24FCC1A65BB6A6593AA
Certificate serial:       01A0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZkQFG-HhBw1XItJPzBplu2plk6o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft
Manifest number:          0197
Signing time:             Wed 29 Jul 2026 05:34:26 +0000
Manifest this update:     Wed 29 Jul 2026 05:34:25 +0000
Manifest next update:     Wed 05 Aug 2026 05:34:25 +0000
Files and hashes:         1: ZkQFG-HhBw1XItJPzBplu2plk6o.crl (hash: D8zf71IzZ0eYlGp7Re/FwwZFyZt1nVtphsKsPPUMsmA=)
                          2: 9052A59870AF11EF87B5DA0DC4F9AE02.roa (hash: Xp2kZwTI/Ulm1FSMvB8uIy/q/Twdd9bs92yBpmukUiI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.crl
                          rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZkQFG-HhBw1XItJPzBplu2plk6o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 05:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 416 (0x1a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911F2DF, serialNumber=6644051BE1E1070D5722D24FCC1A65BB6A6593AA
        Validity
            Not Before: Jul 29 05:34:25 2026 GMT
            Not After : Aug  5 05:34:25 2026 GMT
        Subject: CN=6a6990e1-ec98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:10:13:2d:69:e5:78:b3:9a:f5:c9:cc:de:f5:
                    ac:02:02:5b:5f:49:25:31:b0:de:5e:46:a5:06:c1:
                    38:0d:e7:6e:fd:4a:90:51:8a:6e:41:6a:d6:84:d4:
                    b3:b3:da:ea:11:6f:8f:c5:b4:6e:aa:74:9e:c8:99:
                    e4:c2:64:2d:bf:49:fb:cc:9c:ed:89:d8:26:c4:cf:
                    14:f9:54:8d:73:17:01:d8:18:f9:9d:29:a3:6a:27:
                    15:37:c1:bc:f2:13:ab:60:6d:1e:e3:bf:0d:a1:5f:
                    2e:55:87:b3:76:02:56:30:34:3e:da:45:c5:52:13:
                    72:e8:3a:62:a7:cd:52:70:fb:36:80:6e:a9:67:f8:
                    28:0a:f5:05:77:cc:7e:4f:96:92:2a:23:39:79:47:
                    01:31:5c:84:f9:2b:5d:1f:46:36:dd:88:8b:e3:3a:
                    8b:80:4f:17:1d:c8:ce:b1:3c:4b:f1:e6:e2:88:5f:
                    3c:7d:dd:11:f4:73:59:c6:30:32:ce:48:75:52:ac:
                    be:57:9e:f6:ff:f5:0e:b8:38:c5:70:47:55:3e:ba:
                    7d:2b:f9:36:93:8b:e4:dd:77:55:15:2b:ed:20:c5:
                    f9:3c:f2:ef:d1:88:ab:43:78:70:5b:db:43:0e:57:
                    e7:6f:2f:51:eb:94:45:85:77:d3:a2:88:c7:c9:cb:
                    57:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:B9:D4:D1:CE:91:42:9F:9D:86:48:C8:EE:DF:EB:93:50:93:ED:42
            X509v3 Authority Key Identifier:
                keyid:66:44:05:1B:E1:E1:07:0D:57:22:D2:4F:CC:1A:65:BB:6A:65:93:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZkQFG-HhBw1XItJPzBplu2plk6o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:70:4e:3a:1d:b6:7c:1b:4f:b4:99:a4:3d:61:3e:35:bc:86:
         97:64:d2:a1:60:be:3b:42:b9:09:9c:93:82:fb:df:30:32:83:
         bc:18:d3:e0:a6:f9:80:a5:98:ed:a4:61:36:fa:ed:87:72:43:
         17:14:f7:fa:66:73:4f:52:10:5e:23:8a:6f:0e:b0:61:6d:cd:
         c9:c4:f9:d5:5c:ec:18:b0:0b:c4:94:d2:95:d8:41:d8:94:16:
         fe:20:4c:a4:94:01:62:00:5e:a8:45:7c:8f:35:16:90:ae:31:
         47:cc:c0:25:e4:ce:55:21:99:5f:7a:0b:f1:26:3b:f8:cb:14:
         b7:f0:d1:be:63:98:14:e4:19:23:1c:a8:68:5d:3a:56:e1:4f:
         63:ff:72:6c:87:dd:69:cc:b7:ff:51:82:03:6c:ea:a6:98:6a:
         d2:0c:50:3c:20:de:36:8d:a5:15:f4:a6:5f:c8:49:da:30:5d:
         95:32:18:62:8a:d6:0e:4c:a2:4b:77:02:ec:fe:96:ad:83:92:
         43:fc:c7:64:d0:64:5c:75:69:80:dd:32:e0:78:ce:0b:6e:da:
         87:1a:04:0f:37:f2:9d:3b:58:ca:30:fe:98:09:08:ba:86:e7:
         4e:d2:42:59:c1:06:8e:33:24:cd:8e:f2:9f:af:0c:61:6a:ec:
         fc:73:85:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:53:39 2026 by rpki-client