Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912519D/B8280664C75A11EB81E99E19C4F9AE02/ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.mft
File:                     ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.mft (raw, json)
Hash identifier:          wzaUN0QGNOfuMGxurE0MSp1FYYFsAspwezywg6DXLfE=
Subject key identifier:   70:E5:50:E4:D7:E9:B9:14:FD:C3:15:21:73:7D:73:98:95:64:41:E0
Authority key identifier: 66:B9:D8:4F:43:36:A8:9D:84:D1:E0:2E:82:0A:79:68:6E:1E:52:C4
Certificate issuer:       /CN=A912519D/serialNumber=66B9D84F4336A89D84D1E02E820A79686E1E52C4
Certificate serial:       0697
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912519D/B8280664C75A11EB81E99E19C4F9AE02/ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.mft
Manifest number:          0690
Signing time:             Tue 28 Jul 2026 23:04:55 +0000
Manifest this update:     Tue 28 Jul 2026 23:04:55 +0000
Manifest next update:     Tue 04 Aug 2026 23:04:55 +0000
Files and hashes:         1: ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.crl (hash: HQ8+P+NdSsn1cf65IictwmgIkpPCyJ0rakqQySAo1qw=)
                          2: 10581DEAC75D11EBB00EBD1AC4F9AE02.roa (hash: 5sKr5Je6hbpFf2Q5JDk7nrFaAZ90rKYQRnu0lj3etl0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912519D/B8280664C75A11EB81E99E19C4F9AE02/ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.crl
                          rsync://rpki.apnic.net/member_repository/A912519D/B8280664C75A11EB81E99E19C4F9AE02/ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 22:36:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1687 (0x697)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912519D, serialNumber=66B9D84F4336A89D84D1E02E820A79686E1E52C4
        Validity
            Not Before: Jul 28 23:04:55 2026 GMT
            Not After : Aug  4 23:04:55 2026 GMT
        Subject: CN=6a693597-4562
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e4:55:b5:77:ed:a6:4d:af:6c:5d:ab:76:71:
                    ec:0b:5a:56:b9:d6:2d:db:9b:e8:c6:87:a3:7e:b3:
                    31:e0:41:7e:31:4f:0c:0d:f6:d8:b3:c7:68:d1:b3:
                    19:54:b2:28:ba:a6:43:59:31:0d:01:3d:91:15:5c:
                    17:34:0b:b0:e6:47:dd:8f:42:ae:1a:98:c5:27:77:
                    7b:d1:2b:d9:d7:7f:a1:6e:f0:b5:9d:5c:6c:89:d3:
                    cd:de:fe:e8:ca:f6:a6:8d:02:85:5f:09:bd:4f:4f:
                    2e:87:e4:5f:b1:e2:f4:a8:60:e8:2c:55:36:34:02:
                    66:74:4b:7f:1e:2a:ce:6a:e7:e5:a1:2d:32:6e:05:
                    45:2b:11:15:87:6c:2e:b7:02:f6:35:2f:19:4c:e9:
                    36:9e:92:9e:7d:4f:f1:79:8e:21:a2:1a:82:2b:f4:
                    48:97:b0:bd:24:fe:82:1b:6b:5e:fc:3f:7c:3a:a8:
                    26:4e:f7:ce:0b:93:34:82:97:b6:48:9d:08:9f:17:
                    47:48:7b:1f:ad:3e:8c:6a:84:9b:1e:ee:5c:45:dc:
                    98:22:4c:4e:b8:92:b4:fa:b0:f9:71:eb:37:f5:f7:
                    b6:87:6d:85:bb:6e:04:fb:1c:da:cc:be:72:b2:58:
                    53:41:80:d7:f0:02:55:9f:6d:a6:89:10:07:8e:14:
                    36:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:E5:50:E4:D7:E9:B9:14:FD:C3:15:21:73:7D:73:98:95:64:41:E0
            X509v3 Authority Key Identifier:
                keyid:66:B9:D8:4F:43:36:A8:9D:84:D1:E0:2E:82:0A:79:68:6E:1E:52:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912519D/B8280664C75A11EB81E99E19C4F9AE02/ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912519D/B8280664C75A11EB81E99E19C4F9AE02/ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:c5:92:d3:20:74:db:8f:1d:4e:31:1f:cb:1b:4b:1c:93:d0:
         32:b6:3a:7b:65:f6:7c:cc:10:18:3d:5b:18:d9:1f:e1:aa:0e:
         2f:1d:c6:55:9f:be:cf:2a:9b:bd:99:27:ff:28:70:ba:96:97:
         ed:db:44:4e:c3:e5:99:24:4f:33:82:c7:26:aa:83:dc:fb:fe:
         c0:da:06:8f:a8:cb:11:ae:ee:67:cc:6c:c1:47:11:47:3d:ee:
         d0:2d:d8:1c:aa:7f:2a:69:49:44:1c:19:c3:ed:2f:c4:cd:ec:
         5c:96:db:4a:83:aa:6b:5d:b5:ea:6c:d4:f3:e2:35:b1:e4:98:
         78:87:22:22:63:3a:11:36:23:4b:0c:f4:f0:5a:8b:56:03:ab:
         d6:93:11:8c:dd:2d:12:e8:ef:4f:ee:0f:69:6c:12:d3:f0:55:
         2a:89:f3:4e:45:5b:9d:af:45:29:10:7f:c4:ec:8e:60:34:b6:
         b5:9c:aa:11:3c:33:82:ee:62:54:dc:97:42:f0:68:0e:b6:ac:
         6b:b7:53:7c:4c:c0:d2:70:f9:87:6d:d5:0c:da:e3:4c:bc:ab:
         9d:c6:6d:b2:34:af:a4:15:0c:2d:44:20:3f:16:9d:8f:31:ac:
         3c:f9:51:8a:c1:15:fe:53:01:d3:b1:b2:75:ae:e6:e3:69:88:
         bf:18:ca:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:12:46 2026 by rpki-client