Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.mft
File:                     ZgNNITbEOxQ4IVfhK7dLLLqdl6M.mft (raw, json)
Hash identifier:          8aJ0DHBdBgblykqc03dZ7J4vNzZyb1ARjcuPRYTJBCA=
Subject key identifier:   2C:77:E9:10:7A:C4:28:6F:88:86:09:AD:CB:A4:8C:8B:9A:F1:69:5F
Authority key identifier: 66:03:4D:21:36:C4:3B:14:38:21:57:E1:2B:B7:4B:2C:BA:9D:97:A3
Certificate issuer:       /CN=A91EB7BD/serialNumber=66034D2136C43B14382157E12BB74B2CBA9D97A3
Certificate serial:       1265
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.mft
Manifest number:          125A
Signing time:             Tue 28 Jul 2026 17:12:20 +0000
Manifest this update:     Tue 28 Jul 2026 17:12:20 +0000
Manifest next update:     Tue 04 Aug 2026 17:12:20 +0000
Files and hashes:         1: ZgNNITbEOxQ4IVfhK7dLLLqdl6M.crl (hash: DpaV8LkFKbOMKOuNsLeh1/TedPYGTGvhgEKPAd504Og=)
                          2: 84121C245CE111E9824BCF76C4F9AE02.roa (hash: 6P0QZul7deP/5azgpjbHdDKzo/8UCrH1J+Uoz59/kWw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.crl
                          rsync://rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 17:12:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4709 (0x1265)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EB7BD, serialNumber=66034D2136C43B14382157E12BB74B2CBA9D97A3
        Validity
            Not Before: Jul 28 17:12:20 2026 GMT
            Not After : Aug  4 17:12:20 2026 GMT
        Subject: CN=6a68e2f4-4bfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6f:50:a6:41:5d:30:69:ed:e5:43:2a:67:ca:
                    a9:54:6b:1c:03:b2:38:ba:a9:42:a1:25:e1:8e:ce:
                    cc:a6:02:cc:21:16:25:30:d0:6d:1e:e4:be:c3:62:
                    b3:a0:74:7f:72:5c:9e:89:f1:55:9a:e3:9a:39:c2:
                    d5:63:5e:f2:e7:de:13:d8:b7:bf:6a:0b:d1:73:e0:
                    36:ed:f8:1a:0a:e5:d6:6e:48:b9:77:dd:ce:dd:00:
                    b7:79:1d:40:d5:bb:80:04:f0:2f:9f:0a:bf:d2:a8:
                    3d:8d:50:76:85:bc:90:9f:38:2f:cd:5e:50:db:c4:
                    cf:10:2b:2e:ea:2e:5f:26:ec:e4:5f:c5:76:86:6d:
                    70:28:70:aa:49:d5:25:7b:8d:6e:57:91:e2:ee:e9:
                    e2:81:fe:fd:9b:ce:a6:1b:2a:59:d4:de:b5:14:13:
                    a8:dd:7d:b7:67:f5:33:49:10:94:c3:00:85:f1:32:
                    ed:74:67:67:68:8e:22:02:26:b7:da:53:61:1e:d4:
                    1f:71:14:bc:f4:4f:66:f9:c8:8a:be:30:e7:f7:96:
                    b4:51:43:c4:fd:11:2e:bb:e4:92:74:4e:3c:19:14:
                    d9:ef:12:03:7a:8d:bd:3d:eb:0b:a0:45:8f:b2:45:
                    c4:2a:de:f8:90:c9:a8:32:2e:c4:61:cd:06:bc:10:
                    6b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:77:E9:10:7A:C4:28:6F:88:86:09:AD:CB:A4:8C:8B:9A:F1:69:5F
            X509v3 Authority Key Identifier:
                keyid:66:03:4D:21:36:C4:3B:14:38:21:57:E1:2B:B7:4B:2C:BA:9D:97:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:dd:16:05:4d:47:0f:af:1f:8c:d7:00:e8:d4:ea:b7:cc:21:
         a8:4a:a6:39:0a:73:85:36:be:bc:f2:dc:f9:c9:62:d2:8e:6b:
         65:b2:e9:04:44:9d:12:5b:f3:5c:55:9f:49:34:5e:eb:2e:30:
         72:a1:1e:92:40:10:32:1e:7f:96:56:12:22:ce:77:d9:96:03:
         b4:fb:c2:e6:15:1d:5f:5b:35:c1:94:e9:35:5a:d8:25:85:0a:
         cd:77:f3:21:38:df:a8:34:d6:c9:10:99:17:92:ab:b9:c5:ec:
         75:2e:ae:44:8c:2c:d6:f3:8b:1f:c0:f7:80:70:bf:3b:19:0e:
         e1:e6:f7:c3:10:c0:42:c7:0f:10:35:bb:80:0f:85:12:80:17:
         c9:28:9e:7b:fc:e3:40:94:a7:35:95:c1:8a:1a:63:3b:08:e5:
         94:d4:ff:42:db:d6:75:01:62:5d:37:e3:a1:94:40:63:6a:f0:
         d3:9f:85:9c:02:56:8d:81:0d:ce:91:2f:6d:f5:40:bc:31:a6:
         b5:74:21:31:cb:d1:14:cf:eb:b1:87:dd:29:9d:b6:03:ca:a8:
         f4:0f:60:f7:0a:f3:e4:bf:c1:78:6e:3c:85:8a:bd:68:44:6e:
         21:74:7e:27:b1:8e:75:8f:1b:88:1b:da:d9:aa:42:b9:1a:2f:
         c4:56:9e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:38:18 2026 by rpki-client