Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft
File:                     ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft (raw, json)
Hash identifier:          Mquelpk7MPBct6xt03Zg2b/+eIXdZL0aJbYp9I7xUK8=
Subject key identifier:   CC:9E:E8:37:D5:FF:D0:7A:5E:40:65:40:C9:D6:19:3D:1C:E9:81:94
Authority key identifier: 64:7D:09:27:DB:3B:17:8E:2F:65:4A:32:68:55:7F:E5:B5:D6:72:9C
Certificate issuer:       /CN=A919A777/serialNumber=647D0927DB3B178E2F654A3268557FE5B5D6729C
Certificate serial:       0210
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft
Manifest number:          01DE
Signing time:             Mon 27 Jul 2026 05:42:15 +0000
Manifest this update:     Mon 27 Jul 2026 05:42:15 +0000
Manifest next update:     Mon 03 Aug 2026 05:42:15 +0000
Files and hashes:         1: ZH0JJ9s7F44vZUoyaFV_5bXWcpw.crl (hash: 8zplCH8tT6jdc08xfq6SpeJK1u4eIRvAJHMvmHtlDfI=)
                          2: BDECB94CEC4F11EEB0B9B467C4F9AE02.roa (hash: fSlbtUc39UCW3k1Yy6pAqJg048Gxa2v6PcevURxg5Zs=)
                          3: 5B4D02987E5B11F09260CE56C4F9AE02.roa (hash: YSqNnOxJ+Xkes9UNemwulrLNoP9a1fzLC+DIw2bAtgY=)
                          4: 7BDC977E0AF011EF87265E12C4F9AE02.roa (hash: L+Pr2GihRWoedBardrydLcushDGXI9FYHRtqemwZ37o=)
                          5: E7F77E5E42E711EF8B9EF861C4F9AE02.roa (hash: Rk3j/x7/aK9tyzGNZkRW4uYz1dTdbytFeBnr/OmzBX8=)
                          6: DD0545F6324A11EFA615F80FC4F9AE02.roa (hash: Uj11T+QW0pwuoYmi/Tug3FzEFRy1nbJISrOyCvJDnIQ=)
                          7: BC26B7548CAB11F0BDAA8B67C4F9AE02.roa (hash: 1xbmeKrtdkfMeaYJXV3nxlxzWBfNoeXUz9/FaAvLRY4=)
                          8: D43F20C6C70F11F0BEE61E6CC4F9AE02.roa (hash: lU5HELzK1HgvUgy9a8UOHW1aya85BnCwdaSrvas6AAk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.crl
                          rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 05:42:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 528 (0x210)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919A777, serialNumber=647D0927DB3B178E2F654A3268557FE5B5D6729C
        Validity
            Not Before: Jul 27 05:42:15 2026 GMT
            Not After : Aug  3 05:42:15 2026 GMT
        Subject: CN=6a66efb7-261e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:a9:f0:95:a5:fc:18:a9:87:60:8b:97:d3:fb:
                    23:b0:f2:fd:4a:17:13:14:ab:f7:83:a2:6c:6c:80:
                    d1:a7:3c:2c:ee:10:3a:ef:14:b8:74:85:4d:16:f0:
                    6b:a7:d2:34:49:38:53:27:c2:2c:b0:80:93:85:b1:
                    0c:23:fa:15:d7:5a:00:73:07:e4:0d:a2:72:76:96:
                    d2:50:ef:ee:4a:67:5f:b6:52:7f:2e:3d:04:b4:d4:
                    69:3a:6b:28:2f:55:30:9d:77:7a:0a:23:74:9b:ea:
                    06:4c:e3:f1:65:f5:b2:ca:71:e6:ca:11:72:4a:80:
                    a8:06:47:c4:2b:02:a7:8f:31:c0:81:cc:d9:aa:d9:
                    3b:98:45:05:88:f8:e1:92:42:8b:4d:9a:43:16:b4:
                    e1:8d:92:4b:c5:b2:24:bb:eb:63:54:fc:b6:45:27:
                    06:e4:4a:c4:24:a5:91:67:02:49:05:80:d0:23:6e:
                    67:99:ad:df:64:ce:b4:f7:48:7c:5d:a2:de:ef:13:
                    f1:24:de:e4:92:dd:4c:c0:7c:d9:43:a1:b2:49:04:
                    82:ab:54:36:03:39:f3:60:b3:2e:26:5b:a6:60:8c:
                    c2:18:90:72:84:2f:46:59:5f:6e:03:b2:18:86:d2:
                    57:a7:da:37:d6:47:03:26:07:56:ef:4e:fe:14:7c:
                    67:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:9E:E8:37:D5:FF:D0:7A:5E:40:65:40:C9:D6:19:3D:1C:E9:81:94
            X509v3 Authority Key Identifier:
                keyid:64:7D:09:27:DB:3B:17:8E:2F:65:4A:32:68:55:7F:E5:B5:D6:72:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:b2:a4:1f:c9:e6:40:a3:88:06:e2:64:06:6f:ef:7b:f6:fb:
         11:4f:a8:f9:40:2e:41:64:53:cf:b9:31:61:fa:67:81:29:1d:
         2c:d7:be:1f:4f:b1:ff:42:b3:3f:49:0f:3f:9c:d1:d9:c2:56:
         c7:a8:09:75:2d:81:4d:de:99:97:ff:6f:72:58:10:95:5e:da:
         e8:46:9e:e0:af:c5:0f:54:f2:51:92:e5:cc:35:d1:76:ab:55:
         0d:4f:08:34:03:09:92:36:a4:e0:68:a2:b9:5c:91:7d:f1:d0:
         6e:75:be:0a:c1:23:d5:fb:09:8b:e2:9f:10:3b:eb:b8:0b:63:
         56:7b:8c:7e:ca:b2:6e:c6:30:74:db:f3:42:af:d9:f0:06:1a:
         66:32:f6:81:77:e2:d4:d7:3b:10:51:93:e2:5f:a1:c8:77:47:
         69:60:a1:25:6a:fd:c1:dc:7a:f3:74:36:da:7f:73:88:56:26:
         f0:ff:f6:0c:4d:8e:05:44:f1:49:5c:d9:bd:c9:03:6d:56:df:
         94:31:9b:84:77:fa:97:92:3a:2f:05:fb:c3:27:cd:90:81:8a:
         54:4f:7b:99:84:28:e7:c2:85:e6:00:d5:4e:be:4c:72:d8:36:
         23:b9:65:19:f7:7e:5d:9c:57:28:61:e8:91:68:3b:c8:c4:65:
         3d:5e:e2:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:52:21 2026 by rpki-client