Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft
File:                     ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft (raw, json)
Hash identifier:          PC7H4Z9J67wHYdr4MRFyy64HWm3OP0p6STkTnC8VyVw=
Subject key identifier:   EF:CC:81:1F:D3:96:23:7F:A5:0A:36:1F:6D:5F:AC:05:08:EF:8B:97
Authority key identifier: 65:3F:AD:A5:38:A9:E3:41:2E:7E:FD:D8:FB:63:9F:22:7F:5A:3E:E2
Certificate issuer:       /CN=A915FE77/serialNumber=653FADA538A9E3412E7EFDD8FB639F227F5A3EE2
Certificate serial:       0D74
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT-tpTip40Eufv3Y-2OfIn9aPuI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft
Manifest number:          0D6C
Signing time:             Tue 22 Sep 2026 17:53:19 +0000
Manifest this update:     Tue 22 Sep 2026 17:53:19 +0000
Manifest next update:     Tue 29 Sep 2026 17:53:19 +0000
Files and hashes:         1: ZT-tpTip40Eufv3Y-2OfIn9aPuI.crl (hash: 21Tbq81uohuGxMxJc+cNArQe8WvDekTXYqUHpMNZx3o=)
                          2: 357D722C67D911EEA787145FC4F9AE02.roa (hash: ggJ5ieK6u9Bx4lh1H2SAIUHjGvpUwoHUksb1s6thrAE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.crl
                          rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT-tpTip40Eufv3Y-2OfIn9aPuI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 17:53:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3444 (0xd74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915FE77, serialNumber=653FADA538A9E3412E7EFDD8FB639F227F5A3EE2
        Validity
            Not Before: Sep 22 17:53:19 2026 GMT
            Not After : Sep 29 17:53:19 2026 GMT
        Subject: CN=6ab2c08f-8427
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:89:b6:f4:a3:e2:36:c7:00:c5:48:53:68:34:
                    fa:77:e3:4e:6a:4c:42:c1:69:13:96:d9:5c:c1:ef:
                    01:fd:ae:9d:b9:ac:ab:7f:f4:0e:86:0c:28:a8:b6:
                    c5:a0:e2:f3:07:76:30:9e:1f:f0:a3:e2:29:48:d2:
                    c3:2d:b1:85:2b:08:5b:10:bc:26:b3:46:b1:71:cb:
                    8d:3b:bb:ab:c7:a1:8a:f6:c7:7e:86:ca:99:90:b8:
                    34:49:49:65:d2:e2:7e:9f:cb:9c:58:0a:1f:2b:6d:
                    25:a1:f5:b4:45:71:12:2b:18:99:cc:01:6a:4e:53:
                    3f:db:e5:66:9d:6a:ea:f6:f4:66:33:0c:01:39:bb:
                    8d:82:91:7d:88:70:d6:51:12:86:af:1c:be:49:7e:
                    fd:13:7b:23:4c:43:b6:f8:4d:b1:b4:a0:c8:2b:a0:
                    86:f1:d2:61:61:cb:14:0c:e7:79:7c:8a:c9:5c:89:
                    2b:44:6f:45:9c:b5:55:b0:8f:1d:80:fa:04:86:e1:
                    53:2d:6a:22:8a:a4:fa:e1:ee:b8:f7:8a:b3:9d:3a:
                    85:04:ef:32:89:15:f0:17:ed:09:f2:2c:e6:a2:c6:
                    b0:2c:d8:88:6c:91:08:5c:ca:cb:d4:db:1f:bc:e6:
                    c9:4f:c4:f7:9c:be:70:2f:6e:78:84:25:b3:c7:06:
                    5e:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:CC:81:1F:D3:96:23:7F:A5:0A:36:1F:6D:5F:AC:05:08:EF:8B:97
            X509v3 Authority Key Identifier:
                keyid:65:3F:AD:A5:38:A9:E3:41:2E:7E:FD:D8:FB:63:9F:22:7F:5A:3E:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT-tpTip40Eufv3Y-2OfIn9aPuI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:97:1a:72:82:5f:02:e5:55:f6:9a:e5:cd:9b:0c:1a:78:63:
         e6:1d:06:b9:1c:12:f0:8d:84:9e:67:26:de:96:9c:46:60:cb:
         73:9b:d8:79:17:a6:43:75:b7:67:25:ee:55:92:2d:9c:55:24:
         7e:20:40:dc:93:0b:11:04:36:37:4f:2d:d4:21:43:72:13:61:
         a3:84:01:d3:1e:2b:3d:8b:d6:36:69:05:04:3e:74:1a:f0:8d:
         be:57:e7:a1:aa:e8:e9:ab:e8:25:0c:e0:72:ed:8c:42:dc:8c:
         0f:ff:4c:c7:e0:36:70:b6:02:e8:14:04:1e:18:bc:a0:3f:f3:
         39:9a:aa:1c:0f:e6:92:50:e1:bf:58:1f:ad:3f:35:74:f0:72:
         90:b0:e4:31:05:bb:f9:b0:0e:be:6a:e9:37:05:ad:8f:eb:82:
         eb:c1:49:01:53:85:0b:d1:c2:c5:2c:8a:03:53:8f:1b:ed:d2:
         e5:78:a6:27:d3:55:28:12:fa:f3:11:6b:87:dc:45:b3:a4:cf:
         09:3f:d1:97:1f:de:ae:ab:4c:b4:ab:60:58:19:43:45:99:d3:
         1c:6c:04:c4:60:43:2d:c8:c9:0e:e6:ef:4d:b2:4f:1c:21:8b:
         d7:29:19:06:cb:a6:49:57:73:3d:d0:f5:f5:fc:2f:ed:eb:70:
         ae:a4:56:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:33:27 2026 by rpki-client