Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft
File:                     Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft (raw, json)
Hash identifier:          mi2gJJl4cQpshzQ4s52qpLDQIOlxzDRZjGoBJMObIbQ=
Subject key identifier:   AA:11:EC:FF:DB:F5:2E:A3:0D:3C:45:C2:0E:73:8B:49:30:8E:E3:48
Authority key identifier: 67:9C:DB:25:5B:5B:77:58:09:10:5E:90:E0:02:34:49:F7:1C:6B:6F
Certificate issuer:       /CN=A912A6CB/serialNumber=679CDB255B5B775809105E90E0023449F71C6B6F
Certificate serial:       0D35
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft
Manifest number:          0D26
Signing time:             Tue 28 Jul 2026 18:18:20 +0000
Manifest this update:     Tue 28 Jul 2026 18:18:20 +0000
Manifest next update:     Tue 04 Aug 2026 18:18:20 +0000
Files and hashes:         1: Z5zbJVtbd1gJEF6Q4AI0Sfcca28.crl (hash: yIiDv2NXW+fTc2r9wrOFblnr7WSevKgBXeZOfes904g=)
                          2: 5BF38D62058E11EA96051368C4F9AE02.roa (hash: mfe6dh8HV+B3Izq2cj3w4opPN3aJ9/HVDtDRjSUh3Hs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.crl
                          rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 18:18:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3381 (0xd35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A6CB, serialNumber=679CDB255B5B775809105E90E0023449F71C6B6F
        Validity
            Not Before: Jul 28 18:18:20 2026 GMT
            Not After : Aug  4 18:18:20 2026 GMT
        Subject: CN=6a68f26c-dfe0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:0a:76:9f:23:36:f4:fc:20:f9:41:93:0e:89:
                    9b:d2:a8:e7:e2:84:33:d8:4e:c8:8f:7a:c7:26:73:
                    46:21:4d:09:49:90:21:82:4e:84:20:2c:a0:ef:72:
                    35:20:7e:19:a3:96:8a:6c:4f:96:81:72:f1:17:e2:
                    48:ad:19:13:16:2b:89:0e:ea:ab:c0:0c:e7:5f:dc:
                    03:98:31:d5:1a:86:b3:27:f8:08:a8:92:c4:14:39:
                    e5:49:70:c2:2b:c3:9e:b3:55:cc:e3:84:4f:e3:c5:
                    85:96:f7:5c:23:c3:64:fa:47:fe:92:0d:a1:c9:04:
                    fe:28:aa:f1:8c:75:d0:c0:8c:2c:1e:59:8c:36:e5:
                    79:36:6b:82:b5:1c:44:03:b2:97:1b:fb:94:e1:a2:
                    5e:16:89:07:b1:de:81:66:f4:f3:60:f8:59:df:ed:
                    c5:75:f1:65:a4:c4:46:4f:8c:37:06:51:2b:d3:a2:
                    32:88:f8:40:37:c0:ed:6d:d8:b8:1c:65:1f:4f:34:
                    a1:70:6c:fc:ac:db:78:a8:7f:e6:b9:e6:ee:81:d7:
                    4c:0e:ab:42:1c:47:49:5a:27:b2:a2:ee:60:5c:bd:
                    b6:ce:be:12:4e:01:b8:9d:99:37:4a:0b:e6:9d:fb:
                    14:42:d1:9e:09:69:e4:09:cf:cb:58:64:06:1e:a1:
                    d6:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:11:EC:FF:DB:F5:2E:A3:0D:3C:45:C2:0E:73:8B:49:30:8E:E3:48
            X509v3 Authority Key Identifier:
                keyid:67:9C:DB:25:5B:5B:77:58:09:10:5E:90:E0:02:34:49:F7:1C:6B:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:82:95:2e:fa:31:55:70:e0:bd:53:0d:8e:92:02:fc:6f:d8:
         dd:53:0b:47:e8:0b:4f:67:69:98:a9:0e:38:4a:1d:2e:ac:4c:
         86:d0:de:13:e3:d4:af:15:2c:cf:ce:80:71:6e:b7:ec:de:30:
         60:85:bf:59:3f:b0:d5:ba:c2:44:68:34:97:26:f1:78:ba:0e:
         56:15:a7:5d:35:41:1b:c8:27:f4:72:c9:c9:cd:ae:3b:be:7e:
         7a:3e:94:f5:df:51:7b:38:7f:89:bd:03:45:f6:87:89:c3:bc:
         aa:00:a6:d8:63:38:ea:25:5e:ef:7a:b7:ec:d8:e3:d5:cb:56:
         ea:9b:33:18:e4:6b:c9:f2:b4:c1:60:86:d9:0e:6b:e2:18:f8:
         aa:d9:a0:e8:ec:3a:ce:d9:80:82:b1:9b:55:64:9e:67:18:98:
         2c:8f:d0:10:5a:25:3e:04:b7:e4:b2:0a:f3:99:43:ff:a2:2f:
         60:23:df:f6:d0:4c:e5:be:d7:64:83:6b:c6:c1:3c:d3:2b:cb:
         df:3d:2d:90:94:de:2b:b5:4a:df:12:89:32:5c:64:40:39:b3:
         b9:4e:fb:eb:ad:26:e1:21:a1:87:1a:eb:af:69:18:f9:ac:63:
         6f:73:80:6b:40:a6:70:1c:a0:ac:ec:27:67:23:8d:f4:4b:1d:
         fe:6a:10:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:20:17 2026 by rpki-client