Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916CAE6/65D044C4941811EA940FB530C4F9AE02/ZMpUJqx6VQvaEFOgEoMUTi3NK9c.mft
File:                     ZMpUJqx6VQvaEFOgEoMUTi3NK9c.mft (raw, json)
Hash identifier:          BQHO9p21K9fkHrSeWcdWMOEtNi/OmvbWn4ckeeiuWlk=
Subject key identifier:   61:98:18:C9:CA:9F:6F:81:55:8A:38:2E:1A:B3:0B:0A:17:A9:3E:DC
Authority key identifier: 64:CA:54:26:AC:7A:55:0B:DA:10:53:A0:12:83:14:4E:2D:CD:2B:D7
Certificate issuer:       /CN=A916CAE6/serialNumber=64CA5426AC7A550BDA1053A01283144E2DCD2BD7
Certificate serial:       A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMpUJqx6VQvaEFOgEoMUTi3NK9c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916CAE6/65D044C4941811EA940FB530C4F9AE02/ZMpUJqx6VQvaEFOgEoMUTi3NK9c.mft
Manifest number:          0AE8
Signing time:             Tue 28 Jul 2026 20:01:30 +0000
Manifest this update:     Tue 28 Jul 2026 20:01:30 +0000
Manifest next update:     Tue 04 Aug 2026 20:01:30 +0000
Files and hashes:         1: ZMpUJqx6VQvaEFOgEoMUTi3NK9c.crl (hash: uI9BkfQJ5x0PwzHYGipPX0GcMJBFSdc7P2RkGNR0L0Q=)
                          2: 8D3F53F6A15F11F09B632177C4F9AE02.roa (hash: CP+QsdoDrOnuqR8CFeZWi0RVe73nga/HrDSMYjQFtTw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916CAE6/65D044C4941811EA940FB530C4F9AE02/ZMpUJqx6VQvaEFOgEoMUTi3NK9c.crl
                          rsync://rpki.apnic.net/member_repository/A916CAE6/65D044C4941811EA940FB530C4F9AE02/ZMpUJqx6VQvaEFOgEoMUTi3NK9c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMpUJqx6VQvaEFOgEoMUTi3NK9c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 20:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 165 (0xa5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916CAE6, serialNumber=64CA5426AC7A550BDA1053A01283144E2DCD2BD7
        Validity
            Not Before: Jul 28 20:01:30 2026 GMT
            Not After : Aug  4 20:01:30 2026 GMT
        Subject: CN=6a690a9a-d443
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:19:f8:b9:3a:3e:4b:27:e4:bf:57:c8:48:b3:
                    1a:df:7e:6e:ea:d6:d2:d1:c5:5e:b8:94:83:ce:2a:
                    d1:05:c0:d0:c6:2a:36:e9:f0:8d:c5:5f:da:bf:24:
                    d6:7e:74:75:b7:47:f6:67:0d:4d:30:15:9b:42:88:
                    f9:68:74:17:29:35:8a:1e:26:5c:92:45:a2:d5:8b:
                    1a:a8:8b:82:50:d3:83:90:40:a4:64:39:92:94:d0:
                    93:3f:39:75:ec:88:a1:fe:6f:2c:67:1f:f6:d4:bc:
                    b7:1f:0c:6b:d5:97:7d:94:d5:f3:d6:f3:36:d6:8a:
                    dd:68:31:fa:97:8f:e6:00:99:61:3a:0f:0f:51:c1:
                    26:0b:d4:cc:10:38:be:70:ce:ca:1a:4b:89:5e:27:
                    85:6b:85:c5:36:17:fe:cb:f3:ea:ee:04:ff:80:b1:
                    02:92:37:36:ee:27:8c:b5:f4:e2:d4:16:f9:7a:21:
                    56:ff:fa:1d:9b:39:20:38:6e:80:44:b0:71:51:ed:
                    a0:f8:8a:92:bb:3e:8d:c5:60:3c:25:eb:be:63:09:
                    7d:1a:c6:5e:d3:54:ca:1f:10:76:ff:ee:b1:f5:23:
                    14:60:c7:05:08:30:b5:4f:68:7c:b7:7e:d3:9c:65:
                    98:9e:c4:56:51:4e:10:d8:d1:69:51:06:be:9b:c2:
                    4e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:98:18:C9:CA:9F:6F:81:55:8A:38:2E:1A:B3:0B:0A:17:A9:3E:DC
            X509v3 Authority Key Identifier:
                keyid:64:CA:54:26:AC:7A:55:0B:DA:10:53:A0:12:83:14:4E:2D:CD:2B:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916CAE6/65D044C4941811EA940FB530C4F9AE02/ZMpUJqx6VQvaEFOgEoMUTi3NK9c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMpUJqx6VQvaEFOgEoMUTi3NK9c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CAE6/65D044C4941811EA940FB530C4F9AE02/ZMpUJqx6VQvaEFOgEoMUTi3NK9c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:53:08:84:9e:95:74:d6:d7:68:b8:ce:50:af:7a:7c:84:92:
         8d:a3:4d:ea:63:93:89:87:68:99:da:06:76:a3:12:81:73:b4:
         75:63:99:b1:9a:54:84:40:77:22:8c:65:4e:8e:99:13:f1:01:
         1b:6b:cf:50:61:52:bb:b1:10:13:2b:e1:52:d3:10:21:c8:05:
         c4:8c:83:33:7b:9a:c8:bc:0f:67:d8:db:ce:7e:4c:f2:f0:2e:
         d6:f4:89:15:11:ac:ff:8e:2a:a2:19:a7:c2:04:55:1b:a2:b2:
         e5:94:f0:36:18:e2:5a:94:39:48:ff:99:f2:b1:18:11:e9:07:
         8a:46:2f:e8:27:02:15:08:dd:45:3e:9b:72:23:db:3a:4c:82:
         4e:be:a0:53:fe:76:60:9a:30:e7:99:19:af:86:7f:87:f9:f1:
         fb:95:38:f7:f3:0f:38:62:ba:e1:cb:87:26:a2:eb:c2:4b:c6:
         b5:63:02:76:87:91:29:4c:c2:85:90:28:a7:b6:7d:c8:a0:bd:
         59:e6:f8:b0:7f:20:45:d5:f5:49:7c:78:2f:60:02:60:41:f4:
         a4:2f:43:7e:28:e0:53:42:99:23:2a:93:93:d2:67:93:7b:2b:
         bb:65:1b:b6:02:2c:a9:1b:5a:89:6d:5a:4a:70:2e:7a:5d:e4:
         6c:79:23:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:03:41 2026 by rpki-client