Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.mft
File:                     ZVG5vqh4GBz-lkJhV_SxIcDF1aw.mft (raw, json)
Hash identifier:          oSMNS1xjDL8pKnLXIh+QheIwuLyKy6AYUyGhvkydSHc=
Subject key identifier:   A2:15:66:51:8B:08:C8:BE:7D:B2:A9:FA:D4:D6:FE:68:02:0B:C5:0B
Authority key identifier: 65:51:B9:BE:A8:78:18:1C:FE:96:42:61:57:F4:B1:21:C0:C5:D5:AC
Certificate issuer:       /CN=A91B005C/serialNumber=6551B9BEA878181CFE96426157F4B121C0C5D5AC
Certificate serial:       066D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.mft
Manifest number:          065E
Signing time:             Sun 26 Jul 2026 23:31:01 +0000
Manifest this update:     Sun 26 Jul 2026 23:31:00 +0000
Manifest next update:     Sun 02 Aug 2026 23:31:00 +0000
Files and hashes:         1: ZVG5vqh4GBz-lkJhV_SxIcDF1aw.crl (hash: lFQ3yOzcMUbPee49k5vTWLpQRSuub8tAANGch1X8h4s=)
                          2: FC28C1AE9BE011EC8EE90745C4F9AE02.roa (hash: N8Z5+djN5CjXBtCFKd+fBabCsOPTDCpY/BSexlhMsOA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.crl
                          rsync://rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 23:30:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1645 (0x66d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B005C, serialNumber=6551B9BEA878181CFE96426157F4B121C0C5D5AC
        Validity
            Not Before: Jul 26 23:31:00 2026 GMT
            Not After : Aug  2 23:31:00 2026 GMT
        Subject: CN=6a6698b5-c9fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:de:02:73:77:f6:10:d8:44:58:83:11:b2:c7:
                    fb:f9:be:8b:38:62:ef:11:fa:59:57:3a:55:20:e5:
                    47:12:ef:c4:48:36:fc:b7:f7:d1:ea:6d:2e:cc:b5:
                    ab:7f:38:51:17:20:83:00:27:9e:37:a5:f8:ea:a5:
                    13:8f:05:17:55:8a:dd:8a:d8:de:54:9d:ad:b4:72:
                    0e:ea:e3:45:f2:94:c6:16:15:b7:59:67:a4:9f:93:
                    5e:31:16:31:a2:1e:23:db:c9:d7:b3:bf:ae:e2:3d:
                    57:53:6a:49:5a:1c:66:d6:1e:1a:e6:d0:d0:f9:0f:
                    f7:ff:af:cb:04:0a:ed:de:1e:7b:b7:a5:13:fe:50:
                    7a:74:a8:67:54:29:59:78:5a:7c:df:f4:ab:40:28:
                    47:69:ab:e5:99:8a:a2:3e:0b:f3:6a:5c:c2:d2:f7:
                    c4:7c:c5:af:83:d7:b5:d7:e2:6a:fc:c5:e9:18:1d:
                    10:31:1e:f7:75:c9:e1:6b:58:3d:d3:e4:c2:65:87:
                    14:01:85:d1:2e:74:77:ec:c0:ee:6f:67:24:fc:64:
                    4e:6c:12:b9:e6:ee:fc:a7:6d:7a:ef:ce:2e:d9:0b:
                    43:62:bb:55:01:46:a3:ad:bc:99:4b:60:f6:92:10:
                    3a:ec:4c:aa:71:17:b4:9f:a6:93:b5:c5:e8:25:cf:
                    45:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:15:66:51:8B:08:C8:BE:7D:B2:A9:FA:D4:D6:FE:68:02:0B:C5:0B
            X509v3 Authority Key Identifier:
                keyid:65:51:B9:BE:A8:78:18:1C:FE:96:42:61:57:F4:B1:21:C0:C5:D5:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:ea:e2:be:d5:3d:85:cf:28:62:ae:92:59:11:b0:b4:78:3d:
         3b:e1:78:e7:59:05:3b:bb:28:c1:d2:73:99:ae:4c:8d:d5:b9:
         7b:1d:84:86:d7:44:d0:a1:02:d7:46:33:37:29:03:4d:b2:f0:
         e4:86:7f:be:a6:7d:48:3e:e8:8f:be:4e:23:c1:b5:6b:fd:ea:
         0d:a0:c0:53:99:8c:12:a8:a7:24:9c:eb:85:b6:e2:11:d6:77:
         0a:f5:8d:cc:7a:31:c7:ad:13:34:da:65:30:1e:45:93:a1:a2:
         7b:8f:44:71:40:88:59:97:35:5c:c8:00:b9:5d:19:dd:a8:8c:
         91:3d:b1:78:81:e6:01:c3:d4:ba:05:ee:80:93:1c:a8:1f:3e:
         8b:ce:f3:65:4d:b1:e8:6f:bc:3d:14:69:d8:2b:53:85:c6:63:
         2a:df:79:de:c6:e0:d4:9e:53:dd:65:a5:65:a5:6a:f9:40:fb:
         ba:c0:0a:b3:8b:14:7d:2c:c8:1e:43:ce:9c:bd:ac:2e:3f:fe:
         ac:57:e9:2e:47:49:7f:2b:7d:ca:e0:bc:e1:bc:81:be:bf:3f:
         fe:3d:6d:8e:91:cb:7d:53:93:84:9f:8c:01:eb:bf:2c:db:eb:
         90:3d:3e:66:b4:6e:12:36:4b:ec:7f:aa:f9:ba:09:f7:af:bc:
         aa:da:90:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:15:46 2026 by rpki-client