Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/Zohy6HmXtzuXX-Pa1NrKjr7I66M.mft
File:                     Zohy6HmXtzuXX-Pa1NrKjr7I66M.mft (raw, json)
Hash identifier:          a8PEt8RxFlywbxyJSffH4ZtcxsLdA/p1yb3MOQiEhtA=
Subject key identifier:   72:3D:D0:CB:40:3C:F0:42:FE:9A:03:51:5B:B2:1A:5F:8D:41:A3:F7
Authority key identifier: 66:88:72:E8:79:97:B7:3B:97:5F:E3:DA:D4:DA:CA:8E:BE:C8:EB:A3
Certificate issuer:       /CN=A918ED57/serialNumber=668872E87997B73B975FE3DAD4DACA8EBEC8EBA3
Certificate serial:       0861
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zohy6HmXtzuXX-Pa1NrKjr7I66M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/Zohy6HmXtzuXX-Pa1NrKjr7I66M.mft
Manifest number:          0851
Signing time:             Tue 28 Jul 2026 21:22:35 +0000
Manifest this update:     Tue 28 Jul 2026 21:22:35 +0000
Manifest next update:     Tue 04 Aug 2026 21:22:35 +0000
Files and hashes:         1: Zohy6HmXtzuXX-Pa1NrKjr7I66M.crl (hash: d6tIPX+Upx4YV1EFXlSmY3nNzXNxtY5uhWi0mLEPL7o=)
                          2: B4B34DA4D2C611ECBF3B3E53C4F9AE02.roa (hash: c2NbvzRPb3OX8yUH2vwhzYHB05TOx09RU6yJUt7vO/Q=)
                          3: 7ED42CD6F35111EF8BF19562C4F9AE02.roa (hash: U1wbDqDunlaKuYqjqIcFyq/5UG7Pub5IpvN+buNY/uw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/Zohy6HmXtzuXX-Pa1NrKjr7I66M.crl
                          rsync://rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/Zohy6HmXtzuXX-Pa1NrKjr7I66M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zohy6HmXtzuXX-Pa1NrKjr7I66M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 21:22:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2145 (0x861)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918ED57, serialNumber=668872E87997B73B975FE3DAD4DACA8EBEC8EBA3
        Validity
            Not Before: Jul 28 21:22:35 2026 GMT
            Not After : Aug  4 21:22:35 2026 GMT
        Subject: CN=6a691d9b-6a1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:df:dd:e6:bc:62:b4:ce:e6:a1:9e:08:bb:33:
                    39:7d:15:ce:bd:9e:99:6e:dc:4f:2a:f7:0e:f8:b1:
                    54:46:b3:33:bd:20:30:84:d9:6d:b2:ee:c1:6d:5d:
                    a0:20:0e:57:c9:da:69:45:ee:e7:04:05:52:c7:59:
                    d5:5a:e2:4e:6b:8f:b9:cb:01:b0:75:58:55:bc:7d:
                    cb:48:7b:7b:e2:44:27:2e:24:14:94:ae:26:63:9e:
                    18:09:3c:ab:73:62:9d:5f:33:3e:cd:ff:40:5d:03:
                    2c:dd:47:ad:b2:1b:29:af:45:a9:c2:54:c4:ed:f5:
                    64:af:c7:a8:81:fc:73:e3:f1:3b:11:98:fd:a7:b9:
                    8b:89:2d:87:bf:c6:d9:26:8c:a6:b2:93:b9:df:e2:
                    ef:6c:9a:e1:ce:d0:0e:04:3c:01:1b:f6:08:72:74:
                    39:a3:84:8f:69:96:6f:0e:ab:b6:14:e1:a3:52:74:
                    9e:3a:d9:e1:34:e6:06:71:3f:8d:e2:c7:02:74:9e:
                    c8:22:37:13:ed:21:c7:2a:21:dd:b6:cc:dc:5b:c4:
                    14:77:de:d3:83:01:fd:a9:77:72:75:e7:5b:da:4e:
                    82:86:0c:36:17:85:46:fd:da:dd:37:a8:89:0b:2b:
                    59:8d:c2:ce:00:43:64:f0:c1:08:a1:e5:c7:73:9a:
                    68:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:3D:D0:CB:40:3C:F0:42:FE:9A:03:51:5B:B2:1A:5F:8D:41:A3:F7
            X509v3 Authority Key Identifier:
                keyid:66:88:72:E8:79:97:B7:3B:97:5F:E3:DA:D4:DA:CA:8E:BE:C8:EB:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/Zohy6HmXtzuXX-Pa1NrKjr7I66M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zohy6HmXtzuXX-Pa1NrKjr7I66M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/Zohy6HmXtzuXX-Pa1NrKjr7I66M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:c0:87:b3:9e:b0:6c:28:95:14:40:0c:b5:9e:b4:58:1d:1a:
         8c:69:89:a4:0a:58:59:a3:c2:13:6e:5e:2e:24:1d:e7:bf:03:
         2d:c3:ce:c8:55:8b:d8:a4:92:9b:3e:66:83:6f:b8:85:0e:90:
         9d:ac:5d:e5:1a:b3:71:5a:91:d8:f4:96:84:45:d8:62:4c:1a:
         79:16:93:48:64:4a:16:14:39:61:63:a1:6e:2f:4b:7c:75:13:
         92:e9:79:4d:e4:44:6b:5b:3a:77:20:0a:ff:ae:0b:24:26:83:
         e3:a8:27:f6:5a:04:e1:f2:fa:38:94:43:89:17:bf:6a:1e:73:
         0a:8e:f6:52:fd:b5:b0:4b:51:72:d0:76:d4:21:cc:4e:d3:0e:
         c5:b4:4a:a4:4f:48:87:90:5c:ae:70:b8:61:25:fe:c3:fd:01:
         51:02:54:fc:03:4b:02:2b:e8:fd:c2:e1:63:2b:be:8d:2f:70:
         ce:bd:2e:d7:d4:f6:b2:77:af:af:05:1f:ec:26:f4:b1:d0:25:
         a6:8f:f9:ee:55:50:40:1f:04:45:32:7f:b4:34:a0:ea:e2:05:
         83:e9:66:cf:bb:48:4f:43:ee:2b:8e:21:cb:34:a8:7b:83:c4:
         00:d1:f6:a1:d0:5e:2d:38:96:c1:a7:b9:70:d4:94:2b:a4:ca:
         c5:8b:44:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:17:07 2026 by rpki-client