Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft
File:                     zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft (raw, json)
Hash identifier:          ncRgU+i9odD4C/sZU3Frba3b5xLO6N+WxVFzEJk+lC8=
Subject key identifier:   3C:C9:52:65:BB:E8:80:AB:89:47:C5:20:A2:52:EB:57:FC:A1:74:BC
Authority key identifier: CD:C1:87:A6:42:B4:D7:EC:50:DC:AE:59:A0:06:6F:14:8D:51:08:01
Certificate issuer:       /CN=A912672E/serialNumber=CDC187A642B4D7EC50DCAE59A0066F148D510801
Certificate serial:       02F8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft
Manifest number:          02F1
Signing time:             Thu 23 Jul 2026 02:11:06 +0000
Manifest this update:     Thu 23 Jul 2026 02:11:06 +0000
Manifest next update:     Thu 30 Jul 2026 02:11:06 +0000
Files and hashes:         1: zcGHpkK01-xQ3K5ZoAZvFI1RCAE.crl (hash: hpyc5JnFWowLLYMW1BIz4PPRh7VY3IgquXbbr9eUG1Y=)
                          2: 71CE3962337511EDAE4C4121C4F9AE02.roa (hash: qH4NxxqpOA2c5T+RIxBIM6trIh5aFuyiHzxc/Np3eOs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.crl
                          rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 02:11:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 760 (0x2f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912672E, serialNumber=CDC187A642B4D7EC50DCAE59A0066F148D510801
        Validity
            Not Before: Jul 23 02:11:06 2026 GMT
            Not After : Jul 30 02:11:06 2026 GMT
        Subject: CN=6a61783a-3d77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:81:52:43:a4:88:02:fb:35:5d:0a:75:ae:ab:
                    24:cf:21:bf:ef:c6:74:c5:ef:c0:33:8c:8d:e0:20:
                    72:27:d2:72:04:17:5a:dd:ef:e5:83:b2:fd:83:d0:
                    87:28:ce:e0:b8:e9:74:b3:2e:a8:c9:ed:47:e2:89:
                    6b:2a:51:7f:04:d8:9d:0f:be:70:dd:7e:73:5f:96:
                    c7:4b:59:09:84:35:54:78:d4:43:ef:22:9a:ef:93:
                    5e:83:3c:01:94:a8:3c:d0:4e:01:d3:a1:ce:c9:9d:
                    cb:89:b3:7a:59:c3:6b:cf:9f:91:83:ea:be:97:5e:
                    b1:1f:4e:97:71:b7:76:8e:4e:57:8b:46:12:da:2a:
                    ab:60:4b:16:d9:33:b2:bb:c4:c9:33:76:fb:26:fc:
                    e8:ee:e1:73:87:2c:32:61:f1:b7:cc:2c:19:b7:39:
                    fb:3a:6d:8e:0d:6f:b8:63:55:19:4a:0d:e2:cf:eb:
                    4e:d3:2d:8c:6f:39:51:9d:72:ad:e7:1c:84:43:20:
                    cc:c4:85:78:a2:70:ce:26:4f:8a:63:7b:e8:12:1d:
                    03:47:c8:a4:d6:f5:57:f9:10:ca:97:dc:14:46:98:
                    91:de:ba:bb:b2:7e:56:22:7e:3b:77:27:11:f7:0e:
                    49:87:78:13:80:cd:11:fc:d8:9b:83:0f:78:0e:7b:
                    2d:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:C9:52:65:BB:E8:80:AB:89:47:C5:20:A2:52:EB:57:FC:A1:74:BC
            X509v3 Authority Key Identifier:
                keyid:CD:C1:87:A6:42:B4:D7:EC:50:DC:AE:59:A0:06:6F:14:8D:51:08:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:67:71:66:b1:be:93:e7:dc:95:22:41:0b:12:61:6e:c7:6c:
         f8:a8:49:8f:f6:d7:46:ce:3b:2b:6e:fe:db:32:e0:56:dc:b5:
         72:ea:c5:6e:68:2a:99:f9:01:9d:e4:5d:0f:3d:8b:63:80:de:
         a9:7f:be:a6:7a:6d:87:db:e6:d7:61:89:61:a7:1b:31:71:ca:
         f4:ac:66:9a:83:14:81:10:57:96:81:31:cc:29:c7:c0:58:3a:
         76:70:c7:16:9c:88:30:2a:9e:7b:44:1c:54:42:90:c8:e7:57:
         b3:95:0d:1e:54:a0:20:c0:db:dd:ff:30:f6:c8:ea:41:bb:0e:
         0f:26:96:ab:bb:db:75:f3:b6:2b:b0:92:04:60:6c:9a:5c:4d:
         67:e6:75:6d:3a:3b:fe:dd:96:3d:14:ff:48:54:f0:87:30:0c:
         83:0d:9b:70:2d:97:2e:89:f8:43:b3:c3:d5:b0:f3:91:86:45:
         ba:ec:7f:db:45:a9:f5:a9:ba:13:80:1c:81:56:c8:53:cc:78:
         f0:7f:99:22:72:fb:e4:22:e9:4c:37:3e:71:17:2d:a8:81:4c:
         27:0d:ad:d9:4a:3e:b9:55:aa:24:26:5b:b0:85:20:bf:1b:68:
         40:3b:54:12:94:4a:0c:0e:86:10:8d:7e:b8:ae:a3:f9:1a:24:
         c0:1c:7b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:39:08 2026 by rpki-client