Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.mft
File:                     ZDqJ6ggKrIb4potVEI53sQahQco.mft (raw, json)
Hash identifier:          m/vn5wr5nPjRM0rfW47sn8NPsRpF6gLKBCdhDbrOf+8=
Subject key identifier:   5C:69:F3:EB:A9:5A:51:0F:44:39:52:D8:D7:42:FF:A5:7F:DD:C3:05
Authority key identifier: 64:3A:89:EA:08:0A:AC:86:F8:A6:8B:55:10:8E:77:B1:06:A1:41:CA
Certificate issuer:       /CN=A914237B/serialNumber=643A89EA080AAC86F8A68B55108E77B106A141CA
Certificate serial:       0251
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDqJ6ggKrIb4potVEI53sQahQco.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.mft
Manifest number:          0243
Signing time:             Thu 23 Jul 2026 03:53:20 +0000
Manifest this update:     Thu 23 Jul 2026 03:53:20 +0000
Manifest next update:     Thu 30 Jul 2026 03:53:20 +0000
Files and hashes:         1: ZDqJ6ggKrIb4potVEI53sQahQco.crl (hash: 4N90BFuxQjY66QCFEkcX3m1/VmYro1eC/X9q41sXdyI=)
                          2: 133A934C693111F0A51E5767C4F9AE02.roa (hash: nSQXNi2ZjVcTfBYdL/JBUUsl+LZUNi12cbTDHTeZACg=)
                          3: 47620F428FBB11EF8DDB8746C4F9AE02.roa (hash: ttjS00c2KG8TfhOWjt/eFcp3eeq+USxoD6ESfymiud8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.crl
                          rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDqJ6ggKrIb4potVEI53sQahQco.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 03:53:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 593 (0x251)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914237B, serialNumber=643A89EA080AAC86F8A68B55108E77B106A141CA
        Validity
            Not Before: Jul 23 03:53:20 2026 GMT
            Not After : Jul 30 03:53:20 2026 GMT
        Subject: CN=6a619030-ffbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:6c:2e:e7:5d:ee:84:98:ad:d2:12:b9:9b:6c:
                    d8:24:8d:65:5e:de:e0:53:61:ef:c7:b2:3c:b6:8d:
                    a7:7d:48:ce:d8:dd:09:1d:47:f9:14:39:44:09:60:
                    cc:b0:c2:12:7a:81:23:5e:fd:53:3d:0b:36:1b:70:
                    ea:1d:84:25:d7:10:54:f4:e2:f2:da:37:97:3b:8f:
                    f4:6b:47:3b:a6:68:4e:07:25:94:e3:97:ae:5e:01:
                    91:a1:31:41:2a:16:d7:96:51:73:1f:ec:2b:73:b8:
                    27:67:24:85:31:eb:15:98:64:ed:dc:e8:1e:5a:1e:
                    15:b0:2d:97:92:9a:9c:db:1b:16:12:e8:29:60:29:
                    65:4b:71:60:4b:53:9b:f1:e0:5f:d7:c0:3c:18:d0:
                    0c:6b:99:e6:0e:49:ff:77:84:c5:9d:b3:bc:4e:6b:
                    cc:ce:55:e1:58:4c:ce:57:77:00:8e:cc:5d:33:aa:
                    7d:aa:9c:f5:56:50:9d:24:69:e7:93:1d:d4:b0:12:
                    0e:e5:ff:fd:a0:1c:67:31:14:12:71:26:3c:41:73:
                    bf:38:8a:1c:88:cb:01:5a:d5:3f:5c:a7:d6:3a:03:
                    e1:27:33:b4:cc:01:f8:0b:89:02:13:8d:46:87:e4:
                    ca:24:f9:c8:c3:5b:2c:e3:b8:79:76:54:bf:c4:b1:
                    b9:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:69:F3:EB:A9:5A:51:0F:44:39:52:D8:D7:42:FF:A5:7F:DD:C3:05
            X509v3 Authority Key Identifier:
                keyid:64:3A:89:EA:08:0A:AC:86:F8:A6:8B:55:10:8E:77:B1:06:A1:41:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDqJ6ggKrIb4potVEI53sQahQco.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:59:d6:19:4d:98:b9:68:d0:b5:ec:b9:f9:4e:d2:1b:66:14:
         a8:27:de:c8:d2:5c:03:b7:9d:ed:38:ea:0e:97:5d:94:e8:b5:
         4d:68:1b:ff:4c:e5:0d:df:ca:1a:98:4e:c1:75:68:f2:63:63:
         37:2b:8a:50:82:31:af:0d:d2:0b:f0:04:94:92:10:b9:7b:89:
         ae:2b:a6:6c:20:90:b0:8a:84:73:61:c3:07:f2:60:53:04:25:
         39:3d:2a:a8:41:7a:95:d4:86:18:6c:cc:3e:06:50:f7:59:f5:
         e8:e2:ca:f8:a1:28:ae:94:83:41:93:50:c7:b4:de:e3:b4:b9:
         83:b6:5a:9b:d0:4e:96:eb:67:0a:cf:ed:ad:1a:2d:42:88:65:
         88:45:b8:2a:e5:6b:ae:71:91:e6:b5:b4:bf:7a:90:22:03:da:
         d1:d7:f4:4e:e9:16:db:2b:04:c2:1b:d1:c1:d2:17:4e:49:9a:
         23:15:c7:20:ad:d3:a6:a7:6e:ce:ff:ab:c9:47:fb:4c:4a:a1:
         30:b3:e0:d7:1b:e2:4f:f5:cf:f9:d7:32:c9:ef:5a:17:d3:2b:
         02:fc:dd:52:37:37:74:7d:c2:90:1f:4d:d7:29:ef:40:34:14:
         44:e4:44:10:b6:1c:6e:c8:f3:0c:59:5f:43:79:d3:4d:17:d2:
         49:73:c4:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:13:46 2026 by rpki-client