Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.mft
File:                     ZEfjYbGkSWugEo32lWV0SOleK5U.mft (raw, json)
Hash identifier:          7JMZm2WBSd1Ny/k1FQhdJ/yHmS6gi4+19BesDsgrrAM=
Subject key identifier:   35:9B:30:F8:0A:D0:9B:57:8A:5A:DC:5C:69:D6:34:AA:22:CC:1A:03
Authority key identifier: 64:47:E3:61:B1:A4:49:6B:A0:12:8D:F6:95:65:74:48:E9:5E:2B:95
Certificate issuer:       /CN=A917F879/serialNumber=6447E361B1A4496BA0128DF695657448E95E2B95
Certificate serial:       0A8F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEfjYbGkSWugEo32lWV0SOleK5U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.mft
Manifest number:          0A7F
Signing time:             Fri 12 Jun 2026 19:35:53 +0000
Manifest this update:     Fri 12 Jun 2026 19:35:53 +0000
Manifest next update:     Fri 19 Jun 2026 19:35:53 +0000
Files and hashes:         1: ZEfjYbGkSWugEo32lWV0SOleK5U.crl (hash: V4Isa0i3Bqgky7TpnP2A5BMtv2vIF3PBgEcI952f1+0=)
                          2: 894FFF40556111EDB7E45424C4F9AE02.roa (hash: bQj5mxklQD19F906ONQY4Ae0sdx03lDa6OD6mt+hkGU=)
                          3: 8A6AA178556111EDB7E45424C4F9AE02.roa (hash: EASpkdXObrJ8H1sWrr81zx66bGecEu9OLYPesUTFCoA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.crl
                          rsync://rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEfjYbGkSWugEo32lWV0SOleK5U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 19:35:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2703 (0xa8f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917F879, serialNumber=6447E361B1A4496BA0128DF695657448E95E2B95
        Validity
            Not Before: Jun 12 19:35:53 2026 GMT
            Not After : Jun 19 19:35:53 2026 GMT
        Subject: CN=6a2c5f99-d893
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:06:59:71:b0:af:65:c0:4e:1b:b6:74:36:5d:
                    fa:70:bb:cf:1f:07:7f:3d:f5:c2:45:31:2f:45:15:
                    1b:0d:62:d3:87:3a:90:19:8d:fd:b1:65:0a:75:66:
                    ce:46:1a:2c:32:39:f1:26:55:60:7f:6d:1a:88:17:
                    56:59:a8:64:39:d1:b9:0a:fa:a6:7f:95:64:99:a6:
                    6f:10:57:12:d3:a4:31:64:86:b3:cc:9b:4e:09:0b:
                    0f:02:06:7c:f0:2b:57:9a:3b:3b:1e:8d:8d:3a:97:
                    c1:05:f5:fb:e5:49:fe:05:3a:93:36:cb:a3:1b:3d:
                    cb:8d:6b:5a:be:f0:f3:5b:58:96:f3:7a:0b:65:e3:
                    73:ce:f7:5d:24:38:d3:e8:2e:d4:1f:e3:93:5f:a3:
                    f9:2d:32:4f:07:65:da:34:c4:ad:7f:b4:12:10:23:
                    92:9c:6d:76:8f:15:5f:ac:a0:fc:6e:1d:85:09:d1:
                    f7:47:e6:5c:1a:77:5d:70:71:db:50:14:e9:92:2e:
                    0c:9d:b3:63:0f:00:85:57:e7:dc:6a:80:12:b9:3a:
                    cf:bf:01:7e:bb:04:27:83:58:f9:87:c8:9f:a5:fb:
                    32:9e:89:72:ff:e5:ac:c7:34:f9:b5:48:a7:a7:a3:
                    e7:f3:c7:c2:bc:80:17:a6:3d:e6:cf:03:06:af:fe:
                    35:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:9B:30:F8:0A:D0:9B:57:8A:5A:DC:5C:69:D6:34:AA:22:CC:1A:03
            X509v3 Authority Key Identifier:
                keyid:64:47:E3:61:B1:A4:49:6B:A0:12:8D:F6:95:65:74:48:E9:5E:2B:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEfjYbGkSWugEo32lWV0SOleK5U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:da:f9:f1:2a:82:ba:be:1e:d4:f6:7f:5e:89:6f:b8:bc:00:
         18:31:ff:02:4a:1f:11:a0:aa:99:d3:0c:23:66:ee:92:fb:7f:
         df:e7:bf:61:03:56:95:4e:bd:d8:1f:32:07:38:bb:c1:8d:e1:
         ff:4e:83:cb:51:f4:e1:b2:06:29:ec:74:79:02:7d:08:b3:af:
         5b:7b:3f:cb:52:fc:1c:69:16:b5:88:4d:48:59:d4:8e:de:d6:
         9c:5a:d9:e2:2d:30:87:ed:11:cb:12:4c:5b:b1:21:1a:30:a9:
         b6:89:f6:44:45:bc:34:13:4f:6f:9d:6e:b0:02:8f:f0:45:4f:
         89:6e:33:62:c6:60:c1:a1:dc:99:0a:b2:e3:c3:a3:a6:d3:a3:
         f3:03:55:50:c5:d0:9d:3b:72:a4:ec:bc:e2:0d:ac:4a:1d:09:
         b5:56:63:92:4c:63:96:ef:87:ef:95:de:3a:00:4c:36:76:19:
         95:13:c9:29:87:99:9a:25:ef:f3:81:b2:76:e4:4d:dc:18:23:
         ef:a7:32:ca:4e:f5:59:77:c7:d6:46:20:59:5f:cc:e3:f7:24:
         f5:fc:ee:9a:1b:81:9d:e4:59:a7:f7:0a:93:bc:d9:e9:f3:7c:
         ea:00:6a:63:82:97:d5:85:66:c4:53:f1:15:d2:fb:68:eb:48:
         2d:66:e8:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:36:05 2026 by rpki-client