Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.mft
File:                     ZajQiy7I9C1Duap6QjUXK7ftFmU.mft (raw, json)
Hash identifier:          h1bx6TXVxmpkRx0tIKNJrnDpkJHvGg1mDkGQkwcdmM8=
Subject key identifier:   C9:0D:4E:D2:7D:40:D2:E9:BE:6D:16:D4:81:22:5D:2F:28:A1:40:73
Authority key identifier: 65:A8:D0:8B:2E:C8:F4:2D:43:B9:AA:7A:42:35:17:2B:B7:ED:16:65
Certificate issuer:       /CN=A912C7DC/serialNumber=65A8D08B2EC8F42D43B9AA7A4235172BB7ED1665
Certificate serial:       0132
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZajQiy7I9C1Duap6QjUXK7ftFmU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.mft
Manifest number:          012A
Signing time:             Thu 23 Jul 2026 07:21:32 +0000
Manifest this update:     Thu 23 Jul 2026 07:21:32 +0000
Manifest next update:     Thu 30 Jul 2026 07:21:32 +0000
Files and hashes:         1: ZajQiy7I9C1Duap6QjUXK7ftFmU.crl (hash: jfwMZMD5B9vrZlRgT528H2x+75Uil5GPeD5aODU0B8E=)
                          2: E29CD82EC58B11EFBA44DE34C4F9AE02.roa (hash: gk55dQC8eTI12/UHwkyE0xAYw726BD8sevAqReEeCXo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.crl
                          rsync://rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZajQiy7I9C1Duap6QjUXK7ftFmU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 07:21:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 306 (0x132)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C7DC, serialNumber=65A8D08B2EC8F42D43B9AA7A4235172BB7ED1665
        Validity
            Not Before: Jul 23 07:21:32 2026 GMT
            Not After : Jul 30 07:21:32 2026 GMT
        Subject: CN=6a61c0fc-106f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:99:3b:2a:a1:da:c5:60:c4:82:41:b0:07:82:
                    47:3b:92:65:28:62:01:e8:ca:aa:e3:43:5c:d6:b8:
                    9f:04:1e:cb:23:f9:e8:71:64:44:31:c9:b8:8f:9d:
                    d1:0e:29:c4:e4:df:05:d0:dc:7e:5c:a4:29:21:df:
                    76:34:d1:78:ae:46:36:99:0d:e6:20:ad:10:bf:2c:
                    66:ff:f1:3d:69:6e:ba:83:7a:4d:4b:31:b5:63:4f:
                    79:6e:28:7d:bb:c2:af:01:f0:b3:e3:a1:89:2f:26:
                    b3:78:06:02:50:19:18:46:c1:af:d6:b4:98:64:e1:
                    ef:c0:33:82:76:32:0f:d8:aa:c2:02:d3:7a:6c:e8:
                    1c:88:3b:e8:16:4b:ff:1c:65:5f:3c:ce:3a:78:6a:
                    ba:fc:cb:8a:df:5d:ef:67:e1:3c:52:38:a0:a2:0d:
                    17:a9:79:ab:00:0f:37:93:23:9b:31:f9:ef:68:86:
                    56:70:09:af:19:05:e0:73:0b:18:ed:ab:7d:14:7b:
                    ec:9a:cd:eb:65:f6:79:b5:c9:3b:10:40:b0:0b:45:
                    0b:12:9e:9b:b6:f3:6f:8d:1d:d6:7f:32:c8:82:e7:
                    7d:88:6d:3a:50:07:98:21:d4:b4:95:00:2c:d3:ca:
                    86:39:14:a3:f0:56:cc:c9:d6:e3:46:81:d0:37:a0:
                    19:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:0D:4E:D2:7D:40:D2:E9:BE:6D:16:D4:81:22:5D:2F:28:A1:40:73
            X509v3 Authority Key Identifier:
                keyid:65:A8:D0:8B:2E:C8:F4:2D:43:B9:AA:7A:42:35:17:2B:B7:ED:16:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZajQiy7I9C1Duap6QjUXK7ftFmU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:d4:4c:20:d6:eb:4c:78:4c:41:12:cb:cb:58:ea:3c:c8:6c:
         43:23:c7:80:c4:31:77:7b:2e:93:79:de:1a:ba:78:5a:d6:88:
         90:11:2c:bb:aa:06:ad:c6:61:dd:85:8c:ab:bb:08:6b:9a:c3:
         9d:2e:71:8b:1a:66:fe:8e:a9:44:7a:08:31:a4:c0:3f:f9:37:
         50:79:f1:0f:2b:22:7e:e1:fe:9b:95:36:36:2a:6a:c0:d7:b2:
         4a:81:b7:f9:3a:88:73:30:1a:9b:3d:86:a3:b6:0b:79:30:7c:
         79:3a:d7:b4:20:99:f4:19:df:ad:58:a0:d9:38:d6:03:d2:98:
         fb:18:16:59:34:f6:06:74:1b:a3:65:50:9b:93:5b:8c:ea:7a:
         45:2e:96:bb:b1:50:34:cc:7f:4d:48:ea:4c:41:5b:3a:3b:f0:
         e7:c0:85:17:8d:73:94:d4:04:eb:51:85:04:dc:0a:e3:9d:ee:
         a5:b9:42:61:c8:2a:24:18:a9:36:2c:8f:2a:95:22:54:84:d5:
         05:8d:dc:03:fb:29:a4:be:b5:e8:f5:19:ea:f7:f5:a4:44:1c:
         39:ae:1d:e0:b6:43:ca:be:93:e8:86:c4:69:bd:77:a0:97:e2:
         d6:79:46:6c:06:89:9d:1d:40:56:21:09:a4:b2:4b:3f:2f:86:
         e4:59:63:d0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICATIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkM3REMxMTAvBgNVBAUTKDY1QThEMDhCMkVDOEY0MkQ0M0I5QUE3QTQyMzUxNzJC
QjdFRDE2NjUwHhcNMjYwNzIzMDcyMTMyWhcNMjYwNzMwMDcyMTMyWjAYMRYwFAYD
VQQDEw02YTYxYzBmYy0xMDZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6pk7KqHaxWDEgkGwB4JHO5JlKGIB6Mqq40Nc1rifBB7LI/nocWREMcm4j53R
DinE5N8F0Nx+XKQpId92NNF4rkY2mQ3mIK0Qvyxm//E9aW66g3pNSzG1Y095bih9
u8KvAfCz46GJLyazeAYCUBkYRsGv1rSYZOHvwDOCdjIP2KrCAtN6bOgciDvoFkv/
HGVfPM46eGq6/MuK313vZ+E8Ujigog0XqXmrAA83kyObMfnvaIZWcAmvGQXgcwsY
7at9FHvsms3rZfZ5tck7EECwC0ULEp6btvNvjR3WfzLIgud9iG06UAeYIdS0lQAs
08qGORSj8FbMydbjRoHQN6AZlQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMkNTtJ9
QNLpvm0W1IEiXS8ooUBzMB8GA1UdIwQYMBaAFGWo0IsuyPQtQ7mqekI1Fyu37RZl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzdEQy82NEJBNEJBOEM1
OEIxMUVGQjg3RTVGMzNDNEY5QUUwMi9aYWpRaXk3STlDMUR1YXA2UWpVWEs3ZnRG
bVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1phalFpeTdJOUMxRHVhcDZRalVYSzdmdEZtVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QzdEQy82NEJBNEJBOEM1OEIxMUVGQjg3RTVGMzNDNEY5QUUwMi9aYWpRaXk3STlD
MUR1YXA2UWpVWEs3ZnRGbVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANNRMINbrTHhMQRLLy1jqPMhsQyPHgMQxd3suk3neGrp4WtaIkBEsu6oGrcZh
3YWMq7sIa5rDnS5xixpm/o6pRHoIMaTAP/k3UHnxDysifuH+m5U2NipqwNeySoG3
+TqIczAamz2Go7YLeTB8eTrXtCCZ9BnfrVig2TjWA9KY+xgWWTT2BnQbo2VQm5Nb
jOp6RS6Wu7FQNMx/TUjqTEFbOjvw58CFF41zlNQE61GFBNwK453upblCYcgqJBip
NiyPKpUiVITVBY3cA/sppL616PUZ6vf1pEQcOa4d4LZDyr6T6IbEab13oJfi1nlG
bAaJnR1AViEJpLJLPy+G5Flj0A==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:25:28 2026 by rpki-client