Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.mft
File:                     ZajQiy7I9C1Duap6QjUXK7ftFmU.mft (raw, json)
Hash identifier:          SU/ygFY5GYxGbS4NjSU2PYORNXjge7LurgdOu7O7l4c=
Subject key identifier:   AA:5C:51:6C:53:E3:C8:5D:BD:D1:F9:BC:53:9E:DF:0A:CF:A1:00:EB
Authority key identifier: 65:A8:D0:8B:2E:C8:F4:2D:43:B9:AA:7A:42:35:17:2B:B7:ED:16:65
Certificate issuer:       /CN=A912C7DC/serialNumber=65A8D08B2EC8F42D43B9AA7A4235172BB7ED1665
Certificate serial:       011E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZajQiy7I9C1Duap6QjUXK7ftFmU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.mft
Manifest number:          0116
Signing time:             Sat 13 Jun 2026 06:01:48 +0000
Manifest this update:     Sat 13 Jun 2026 06:01:48 +0000
Manifest next update:     Sat 20 Jun 2026 06:01:48 +0000
Files and hashes:         1: ZajQiy7I9C1Duap6QjUXK7ftFmU.crl (hash: PiB9ulF6peEEP+960ELUiTIqKTS7XUcBIVK4CWoONWE=)
                          2: E29CD82EC58B11EFBA44DE34C4F9AE02.roa (hash: gk55dQC8eTI12/UHwkyE0xAYw726BD8sevAqReEeCXo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.crl
                          rsync://rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZajQiy7I9C1Duap6QjUXK7ftFmU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 06:01:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 286 (0x11e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C7DC, serialNumber=65A8D08B2EC8F42D43B9AA7A4235172BB7ED1665
        Validity
            Not Before: Jun 13 06:01:48 2026 GMT
            Not After : Jun 20 06:01:48 2026 GMT
        Subject: CN=6a2cf24c-84d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:81:de:23:57:76:4b:2b:e1:6f:81:2c:79:03:
                    41:f2:cc:40:f2:a7:ee:10:9a:dc:a7:3b:f1:34:e9:
                    9a:82:77:69:47:89:a7:6f:a4:1a:4b:cf:e3:33:1e:
                    f0:dd:4f:dc:04:85:6b:65:be:bc:f2:f1:dd:fa:ea:
                    dc:1c:a7:bd:38:d6:d8:ce:42:45:72:d7:0c:65:9f:
                    6f:26:86:9e:75:95:4d:80:a3:90:e1:d2:e7:0c:5b:
                    04:bb:71:c5:0d:fa:94:e2:ad:e3:0f:59:79:f4:c7:
                    53:23:b0:9b:13:6f:12:21:d9:f2:19:54:94:73:c2:
                    f3:62:e5:76:81:f5:49:b1:c0:5f:3b:8a:be:60:c8:
                    9b:e7:c1:01:58:2f:ae:63:1d:10:e6:19:9b:ee:38:
                    e0:ed:63:87:74:44:d1:7c:e2:d4:84:ea:34:6c:7b:
                    8a:51:8e:8f:b8:4e:87:8d:e8:7d:78:c5:3b:d3:ee:
                    d5:7a:f5:7d:84:be:69:16:5e:f0:b3:6a:49:df:5d:
                    5d:cd:f4:cb:5c:7e:db:f4:39:f7:0e:c8:fa:ba:b7:
                    fe:6f:c2:34:ed:76:f0:28:4e:ff:72:c8:bc:96:ec:
                    ea:6c:12:d4:c4:35:a5:f9:d0:99:e8:ab:b0:5d:e4:
                    a7:b4:02:cc:ec:72:09:87:0d:dc:91:c1:be:de:47:
                    c3:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:5C:51:6C:53:E3:C8:5D:BD:D1:F9:BC:53:9E:DF:0A:CF:A1:00:EB
            X509v3 Authority Key Identifier:
                keyid:65:A8:D0:8B:2E:C8:F4:2D:43:B9:AA:7A:42:35:17:2B:B7:ED:16:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZajQiy7I9C1Duap6QjUXK7ftFmU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:52:b5:62:8f:78:8e:8c:55:22:8d:14:e0:e8:32:6f:c8:62:
         8b:de:35:e1:81:9c:0a:f8:5d:4a:f0:e4:f8:17:e6:31:b0:5f:
         8d:bd:55:74:43:05:15:a8:35:a3:e9:3a:35:65:14:03:c9:1d:
         94:b4:b8:6f:5a:95:7c:5d:f5:86:20:31:20:56:d4:a4:89:6e:
         2b:da:5e:b8:24:ed:fb:63:6a:3d:eb:d8:6a:18:b8:cd:3d:39:
         fa:8f:ee:49:07:85:9c:9c:22:2f:91:6f:f3:53:c4:6c:04:f7:
         af:54:4b:47:e7:48:1b:31:20:b9:b0:25:b3:6b:cf:8c:78:3f:
         31:17:31:70:0f:f6:5b:b2:bf:e1:af:31:b4:0f:57:9d:05:8b:
         51:8e:65:d6:41:39:20:e9:51:4e:c3:04:92:7e:7e:3f:64:eb:
         62:92:2c:1f:9d:dc:8f:84:2b:27:ea:06:10:c3:26:c2:dd:82:
         a6:2e:e7:fd:9d:ea:19:9e:8d:4d:b7:41:03:d7:ed:e9:a1:3e:
         63:b0:97:6a:1e:e2:1e:95:c4:3d:c1:3a:c4:7c:a9:3c:06:e9:
         1e:51:e9:41:0b:39:9f:a6:60:18:68:1e:88:13:a4:9d:44:86:
         fa:f1:10:47:60:7f:2b:38:96:95:fc:71:4e:30:b6:54:6b:64:
         30:a0:54:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:31:56 2026 by rpki-client