Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft
File:                     ZkQFG-HhBw1XItJPzBplu2plk6o.mft (raw, json)
Hash identifier:          hMtyO10A4Gebqyu3Agr5B26jTxJv2+s8XPJM1N2l9rg=
Subject key identifier:   82:ED:2D:64:1E:6A:57:28:C9:98:73:FD:65:B9:C6:57:EC:A7:05:AA
Authority key identifier: 66:44:05:1B:E1:E1:07:0D:57:22:D2:4F:CC:1A:65:BB:6A:65:93:AA
Certificate issuer:       /CN=A911F2DF/serialNumber=6644051BE1E1070D5722D24FCC1A65BB6A6593AA
Certificate serial:       019D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZkQFG-HhBw1XItJPzBplu2plk6o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft
Manifest number:          0194
Signing time:             Thu 23 Jul 2026 05:48:43 +0000
Manifest this update:     Thu 23 Jul 2026 05:48:42 +0000
Manifest next update:     Thu 30 Jul 2026 05:48:42 +0000
Files and hashes:         1: ZkQFG-HhBw1XItJPzBplu2plk6o.crl (hash: pcorK08NZ8YfNJsPsMbV2BRngKObgll5ThX5csrKWwE=)
                          2: 9052A59870AF11EF87B5DA0DC4F9AE02.roa (hash: Xp2kZwTI/Ulm1FSMvB8uIy/q/Twdd9bs92yBpmukUiI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.crl
                          rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZkQFG-HhBw1XItJPzBplu2plk6o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 05:48:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 413 (0x19d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911F2DF, serialNumber=6644051BE1E1070D5722D24FCC1A65BB6A6593AA
        Validity
            Not Before: Jul 23 05:48:42 2026 GMT
            Not After : Jul 30 05:48:42 2026 GMT
        Subject: CN=6a61ab3a-60bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:16:11:fe:9c:5c:36:27:ea:01:2d:b5:32:4e:
                    b6:7e:7b:49:d6:cf:36:fa:31:24:8d:49:90:91:45:
                    9a:6f:ea:63:d0:bc:4f:65:28:3f:1d:41:df:7a:5a:
                    48:d9:b4:f3:32:8d:57:9e:97:0f:22:f5:a5:bc:ed:
                    94:6e:7f:9a:08:16:9e:3a:73:21:7d:81:f7:b2:7f:
                    1f:a9:5b:65:91:39:72:a0:2a:f6:dd:51:43:44:24:
                    f0:f2:bb:90:b2:f0:d6:98:41:29:5c:b0:a8:bd:ed:
                    7d:50:4a:b0:b0:1f:a6:39:1b:aa:91:23:5e:5f:6d:
                    03:5b:19:be:3f:b4:c0:01:bc:ae:1a:7b:b1:80:5d:
                    10:46:13:53:0d:bc:93:dc:6b:2d:57:a7:76:65:87:
                    b0:bc:0b:e7:84:7f:21:81:84:b9:a5:46:a3:0a:2c:
                    a3:df:55:89:ca:f7:f2:86:a3:92:1f:60:f4:03:1a:
                    d7:51:86:60:7d:5b:0d:36:e2:59:2b:a4:f9:7e:3d:
                    59:28:2d:aa:55:e2:c4:09:11:c0:55:b6:28:6d:53:
                    d0:40:5a:d2:8b:86:01:a9:cf:1a:3c:c3:0c:77:a5:
                    81:22:b0:11:d0:03:8b:c3:b0:3d:85:67:6f:bf:3c:
                    57:bf:35:81:74:64:f2:9f:d2:f9:0b:85:2a:3f:4b:
                    a1:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:ED:2D:64:1E:6A:57:28:C9:98:73:FD:65:B9:C6:57:EC:A7:05:AA
            X509v3 Authority Key Identifier:
                keyid:66:44:05:1B:E1:E1:07:0D:57:22:D2:4F:CC:1A:65:BB:6A:65:93:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZkQFG-HhBw1XItJPzBplu2plk6o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:5e:3e:c4:89:27:c7:3d:d6:71:75:61:b0:e1:c4:47:79:a8:
         43:4f:7f:f8:ba:a7:f1:6e:e4:56:04:6e:44:c7:3e:c2:39:55:
         0d:0d:b4:f8:53:fc:52:18:21:3d:59:7a:a8:80:19:64:59:9f:
         22:c8:3b:ff:80:f0:ab:f7:25:cd:1a:5d:0f:84:c7:b8:13:bd:
         3d:7d:96:1d:bf:d8:8f:8f:ad:68:23:95:d4:ce:f8:55:79:23:
         c1:6a:ff:a4:d4:f3:aa:9a:c1:cb:f2:29:ea:d5:ab:14:52:33:
         28:6a:d8:4e:c8:85:2a:b7:33:72:76:b1:aa:bb:d8:22:1e:03:
         90:a0:fe:65:1b:11:52:41:2a:d9:82:92:cd:1f:fb:ad:39:b9:
         b1:a7:07:c5:56:19:78:75:98:b5:c0:c6:01:67:70:17:6d:13:
         bc:1f:7a:a5:55:e6:43:81:2e:81:18:0d:0b:62:69:64:cd:fe:
         3d:d5:2d:38:1c:b5:95:dc:61:f4:ee:b0:dc:7e:cc:10:ba:d2:
         1a:fd:0a:5c:98:21:f0:f9:bb:5f:c9:05:da:a7:51:f8:48:50:
         b0:7e:ef:a5:85:4a:0c:b9:c2:2e:bb:f5:c0:7e:7c:62:59:0c:
         3a:a4:8b:bc:db:d5:92:db:66:05:7f:35:64:ce:7e:8e:f5:01:
         13:16:cb:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:17:00 2026 by rpki-client