Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.mft
File:                     ZhNNob_trAyRnSax9_nhaK-dK04.mft (raw, json)
Hash identifier:          BrL+HKbgM7o4iDOUShjM6T44femDKYbU+OQiWqqbZJM=
Subject key identifier:   A1:F1:56:0D:25:DF:5A:EB:5B:AF:03:C6:86:97:66:0D:2B:00:86:1C
Authority key identifier: 66:13:4D:A1:BF:ED:AC:0C:91:9D:26:B1:F7:F9:E1:68:AF:9D:2B:4E
Certificate issuer:       /CN=A912A5D4/serialNumber=66134DA1BFEDAC0C919D26B1F7F9E168AF9D2B4E
Certificate serial:       012B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZhNNob_trAyRnSax9_nhaK-dK04.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.mft
Manifest number:          0115
Signing time:             Thu 23 Jul 2026 07:47:11 +0000
Manifest this update:     Thu 23 Jul 2026 07:47:10 +0000
Manifest next update:     Thu 30 Jul 2026 07:47:10 +0000
Files and hashes:         1: ZhNNob_trAyRnSax9_nhaK-dK04.crl (hash: +cUR8w/JFcwWbuDA+hsfDkrEzeCoKaauCeq2Z+3xxEU=)
                          2: 015250F6309311F084231321C4F9AE02.roa (hash: BeulAEPDoFLGO9UYVAx1+bgz0obUOcmmrn0Kzh9wNG8=)
                          3: B8104C9E531511F189594BAEBE833773.roa (hash: lrI09dlEBCTooAeOU2Wr6Z8X0DDGHdt7h2TqH79QhUw=)
                          4: 25922C44F3CF11EFBCC75246C4F9AE02.roa (hash: SFDboHNXYkxFP4C1ts24MrwCHP6KpG7hvpdePdBynPw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.crl
                          rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZhNNob_trAyRnSax9_nhaK-dK04.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 07:47:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 299 (0x12b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A5D4, serialNumber=66134DA1BFEDAC0C919D26B1F7F9E168AF9D2B4E
        Validity
            Not Before: Jul 23 07:47:10 2026 GMT
            Not After : Jul 30 07:47:10 2026 GMT
        Subject: CN=6a61c6ff-989b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:06:8f:5f:28:e5:68:1a:ea:4d:4b:1a:b5:e4:
                    38:d0:5f:33:0d:79:b8:e0:b4:bd:97:1a:bd:38:bd:
                    25:fb:24:bd:27:7e:df:35:7b:17:cc:75:a2:4b:89:
                    06:91:72:e0:3a:b8:5d:a0:15:04:11:df:98:8d:26:
                    6f:05:e0:bc:5b:5e:08:a7:73:ad:be:0f:56:5d:91:
                    32:74:53:a4:9e:79:5c:75:c2:be:fb:cf:7f:73:05:
                    f7:e7:be:8d:b3:56:25:3e:28:04:a3:0a:2e:27:80:
                    34:3b:09:e7:4e:93:30:bf:92:6f:60:97:93:1b:a8:
                    29:02:25:ed:3b:f1:b8:1c:df:77:f2:39:a4:1b:0c:
                    d2:c5:ec:87:86:b8:0a:59:80:94:3d:79:c1:54:a8:
                    64:51:a8:e0:f0:44:6b:01:5a:51:2e:b2:8e:95:75:
                    bf:d4:05:d5:7b:7a:e6:59:cb:86:c3:f0:43:92:d7:
                    e2:85:cb:1b:43:d4:7c:6f:4e:3e:99:20:f2:01:2c:
                    1f:ae:c7:2e:95:82:de:d5:9f:03:6a:25:6a:cf:62:
                    3d:5d:2f:b6:74:0f:1c:ee:13:38:71:66:13:65:b2:
                    d5:34:77:8c:d2:af:a1:3d:78:48:52:7a:cf:63:0e:
                    3c:c1:b2:ae:e4:37:eb:ae:a5:d2:ed:f2:31:29:c6:
                    5d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:F1:56:0D:25:DF:5A:EB:5B:AF:03:C6:86:97:66:0D:2B:00:86:1C
            X509v3 Authority Key Identifier:
                keyid:66:13:4D:A1:BF:ED:AC:0C:91:9D:26:B1:F7:F9:E1:68:AF:9D:2B:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZhNNob_trAyRnSax9_nhaK-dK04.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         f2:07:c3:ca:1d:16:a4:09:73:59:8b:58:b2:b1:15:3f:7f:85:
         41:63:77:75:5b:c5:d1:1b:16:45:42:4b:fc:5e:b4:a1:a1:ca:
         ca:9f:f3:4b:ed:8e:98:0e:bc:11:bd:12:3e:31:28:d3:db:d2:
         d3:a6:18:b0:f9:fb:c5:c5:f3:ad:30:66:9b:aa:15:f3:9c:24:
         91:4c:0b:06:e2:f0:8f:0a:fa:dd:6a:fc:b3:1d:5e:71:1f:cc:
         53:3a:fc:c0:47:4d:e9:e2:53:16:af:26:ca:5b:b4:6b:db:aa:
         24:0e:64:09:c8:69:08:78:84:81:21:96:fc:b1:7c:8a:5e:6c:
         e3:60:ba:ae:1c:2a:69:21:f3:c5:d1:e0:af:7c:6a:57:87:5c:
         66:03:47:d0:9a:87:56:68:d5:ae:b5:f9:ac:8b:15:7d:d2:a2:
         88:1b:50:25:a4:5c:4e:ea:02:68:3a:29:98:df:fb:1b:20:7a:
         d3:ca:77:36:54:9b:25:9e:99:c4:dc:7c:bc:8c:d2:e3:8d:b9:
         4c:73:40:4a:1a:11:53:94:77:4c:23:83:be:40:ba:6b:06:87:
         da:43:c7:2e:d7:f5:19:bd:85:3f:d1:00:6c:83:66:05:90:2f:
         b6:51:e6:43:22:d9:b0:a6:d3:d3:b8:33:0f:f9:07:3d:59:c3:
         e0:eb:6b:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:52:41 2026 by rpki-client