Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft
File:                     ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft (raw, json)
Hash identifier:          gcHD/TujlBW762gH1xKTv8uHejWVJ7rRyJAQ9MEyvDA=
Subject key identifier:   14:0A:73:6C:AB:E5:84:E0:25:D2:93:B0:55:11:40:74:AC:B3:B8:19
Authority key identifier: 65:3F:AD:A5:38:A9:E3:41:2E:7E:FD:D8:FB:63:9F:22:7F:5A:3E:E2
Certificate issuer:       /CN=A915FE77/serialNumber=653FADA538A9E3412E7EFDD8FB639F227F5A3EE2
Certificate serial:       0D57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT-tpTip40Eufv3Y-2OfIn9aPuI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft
Manifest number:          0D4F
Signing time:             Tue 28 Jul 2026 18:10:15 +0000
Manifest this update:     Tue 28 Jul 2026 18:10:14 +0000
Manifest next update:     Tue 04 Aug 2026 18:10:14 +0000
Files and hashes:         1: ZT-tpTip40Eufv3Y-2OfIn9aPuI.crl (hash: rnBQT3YeIEjzgn5qroc3/XuLlGtb74q9nJHwPhwDQuc=)
                          2: 357D722C67D911EEA787145FC4F9AE02.roa (hash: ggJ5ieK6u9Bx4lh1H2SAIUHjGvpUwoHUksb1s6thrAE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.crl
                          rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT-tpTip40Eufv3Y-2OfIn9aPuI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 18:10:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3415 (0xd57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915FE77, serialNumber=653FADA538A9E3412E7EFDD8FB639F227F5A3EE2
        Validity
            Not Before: Jul 28 18:10:14 2026 GMT
            Not After : Aug  4 18:10:14 2026 GMT
        Subject: CN=6a68f087-10ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:85:bf:e6:22:e5:5b:e3:6c:fb:53:67:ff:c8:
                    68:c4:5e:dd:04:b1:6d:51:53:3c:6e:b6:e3:81:38:
                    44:03:65:93:1c:c5:e5:13:af:8e:4e:6d:69:93:55:
                    53:be:da:61:06:d1:b2:66:e0:9a:47:26:ee:bc:5b:
                    4a:65:6f:5e:06:ee:37:68:88:1b:0d:01:2d:3d:2f:
                    8e:3e:38:92:11:95:8e:48:17:60:a1:c8:64:07:f2:
                    56:1f:30:51:c0:57:62:bf:e6:5e:71:ac:dc:57:90:
                    50:68:06:f2:7a:47:be:1d:fb:d3:1f:75:7f:0b:2f:
                    de:56:e3:f7:c5:15:20:e5:3c:ec:3e:b9:eb:9f:d7:
                    75:f4:92:c8:8e:95:19:a6:bb:a7:6d:5b:7e:d3:4e:
                    72:1b:28:d6:99:a1:d5:1a:aa:ec:30:72:3b:a7:c1:
                    09:f5:0b:39:0b:0f:76:15:21:33:24:11:db:17:8c:
                    cb:6a:a0:02:45:98:a9:75:35:ad:6a:62:6f:b8:81:
                    5e:4f:d0:61:77:13:53:eb:f8:0f:cc:ca:63:eb:0f:
                    69:a8:8b:c2:eb:7e:ec:74:17:1f:6d:d4:6d:00:52:
                    9d:51:b6:0e:4c:94:6b:32:73:47:e4:9d:13:c5:71:
                    86:31:e6:bd:a2:fb:ee:87:59:55:d6:92:30:55:fa:
                    34:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:0A:73:6C:AB:E5:84:E0:25:D2:93:B0:55:11:40:74:AC:B3:B8:19
            X509v3 Authority Key Identifier:
                keyid:65:3F:AD:A5:38:A9:E3:41:2E:7E:FD:D8:FB:63:9F:22:7F:5A:3E:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT-tpTip40Eufv3Y-2OfIn9aPuI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:d1:87:3b:b2:c4:bc:f0:af:c5:4a:c1:4f:12:75:54:24:b0:
         ef:bc:64:3a:6d:c8:e4:b0:bd:e9:6a:c4:d3:4e:6d:1d:58:8a:
         d9:ff:cc:ee:d5:c0:01:f2:23:01:5a:e9:a1:ea:f5:9c:07:ee:
         3c:a9:c5:b6:0b:8e:11:4d:84:7d:c8:25:c6:40:89:e1:4f:0b:
         f0:a1:d4:35:4d:8b:cd:ce:84:cd:c1:30:35:2f:ff:8f:12:ff:
         ee:d6:56:ae:e0:0f:d5:6a:28:46:f5:c5:36:5f:ba:19:85:13:
         73:7a:07:0b:9c:58:2e:a8:43:7a:15:83:d2:04:f7:10:d0:57:
         a5:3f:5f:14:0f:f0:37:82:25:af:e2:98:76:23:56:7b:30:9f:
         62:96:97:ec:72:b3:0d:f4:ae:8d:a7:6c:06:6f:26:a7:fa:ce:
         4e:55:3d:f1:92:9b:58:b7:7c:bd:f4:42:4c:18:43:bd:77:ba:
         71:7d:4a:c5:ec:87:4f:21:8b:f2:5b:d5:c0:ac:67:93:57:e9:
         b5:e9:f3:8e:7a:b4:9e:0d:5f:4f:30:27:14:89:be:b8:60:e7:
         96:ad:be:b7:7e:28:c7:a4:10:4d:54:75:22:bc:25:4c:ab:aa:
         b4:fe:57:10:0c:82:9f:56:f6:6d:d4:35:3f:73:a9:24:21:24:
         c6:14:45:6e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDVcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUZFNzcxMTAvBgNVBAUTKDY1M0ZBREE1MzhBOUUzNDEyRTdFRkREOEZCNjM5RjIy
N0Y1QTNFRTIwHhcNMjYwNzI4MTgxMDE0WhcNMjYwODA0MTgxMDE0WjAYMRYwFAYD
VQQDEw02YTY4ZjA4Ny0xMGVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA64W/5iLlW+Ns+1Nn/8hoxF7dBLFtUVM8brbjgThEA2WTHMXlE6+OTm1pk1VT
vtphBtGyZuCaRybuvFtKZW9eBu43aIgbDQEtPS+OPjiSEZWOSBdgochkB/JWHzBR
wFdiv+ZecazcV5BQaAbyeke+HfvTH3V/Cy/eVuP3xRUg5TzsPrnrn9d19JLIjpUZ
prunbVt+005yGyjWmaHVGqrsMHI7p8EJ9Qs5Cw92FSEzJBHbF4zLaqACRZipdTWt
amJvuIFeT9BhdxNT6/gPzMpj6w9pqIvC637sdBcfbdRtAFKdUbYOTJRrMnNH5J0T
xXGGMea9ovvuh1lV1pIwVfo0VwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBQKc2yr
5YTgJdKTsFURQHSss7gZMB8GA1UdIwQYMBaAFGU/raU4qeNBLn792PtjnyJ/Wj7i
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkU3Ny83QjkwOTU1NEZC
QUExMUU5ODlBRDgxNDBDNEY5QUUwMi9aVC10cFRpcDQwRXVmdjNZLTJPZkluOWFQ
dUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pULXRwVGlwNDBFdWZ2M1ktMk9mSW45YVB1SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
RkU3Ny83QjkwOTU1NEZCQUExMUU5ODlBRDgxNDBDNEY5QUUwMi9aVC10cFRpcDQw
RXVmdjNZLTJPZkluOWFQdUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABtGHO7LEvPCvxUrBTxJ1VCSw77xkOm3I5LC96WrE005tHViK2f/M7tXAAfIj
AVrpoer1nAfuPKnFtguOEU2EfcglxkCJ4U8L8KHUNU2Lzc6EzcEwNS//jxL/7tZW
ruAP1WooRvXFNl+6GYUTc3oHC5xYLqhDehWD0gT3ENBXpT9fFA/wN4Ilr+KYdiNW
ezCfYpaX7HKzDfSujadsBm8mp/rOTlU98ZKbWLd8vfRCTBhDvXe6cX1KxeyHTyGL
8lvVwKxnk1fptenzjnq0ng1fTzAnFIm+uGDnlq2+t34ox6QQTVR1IrwlTKuqtP5X
EAyCn1b2bdQ1P3OpJCEkxhRFbg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:37:49 2026 by rpki-client