Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft
File:                     ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft (raw, json)
Hash identifier:          7sWUDEbRsfSvbFHJIb1aXlv510Vty9xOerMDfKngoEQ=
Subject key identifier:   D7:8A:D0:BA:C6:6F:93:4C:1A:E6:A2:3A:85:D4:E1:1B:E3:23:21:B8
Authority key identifier: 65:3F:AD:A5:38:A9:E3:41:2E:7E:FD:D8:FB:63:9F:22:7F:5A:3E:E2
Certificate issuer:       /CN=A915FE77/serialNumber=653FADA538A9E3412E7EFDD8FB639F227F5A3EE2
Certificate serial:       0D75
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT-tpTip40Eufv3Y-2OfIn9aPuI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft
Manifest number:          0D6D
Signing time:             Thu 24 Sep 2026 17:57:17 +0000
Manifest this update:     Thu 24 Sep 2026 17:57:17 +0000
Manifest next update:     Thu 01 Oct 2026 17:57:17 +0000
Files and hashes:         1: ZT-tpTip40Eufv3Y-2OfIn9aPuI.crl (hash: K2mRkHMj6BTfeQ8GUveuFbR3Px6dSn1EK+zqNTqw+pA=)
                          2: 357D722C67D911EEA787145FC4F9AE02.roa (hash: ggJ5ieK6u9Bx4lh1H2SAIUHjGvpUwoHUksb1s6thrAE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.crl
                          rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT-tpTip40Eufv3Y-2OfIn9aPuI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 17:57:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3445 (0xd75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915FE77, serialNumber=653FADA538A9E3412E7EFDD8FB639F227F5A3EE2
        Validity
            Not Before: Sep 24 17:57:17 2026 GMT
            Not After : Oct  1 17:57:17 2026 GMT
        Subject: CN=6ab5647d-3f05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:5d:50:b6:63:18:9d:5c:82:10:61:5b:b7:69:
                    cf:98:da:63:8b:53:7e:e2:fa:bb:ec:c3:69:30:fd:
                    7b:b9:5c:db:ff:87:d5:42:e9:7c:67:6b:8a:23:68:
                    30:fa:0d:96:d5:73:0c:f7:5d:c6:7c:db:6a:ae:f6:
                    8a:78:04:2b:20:c2:a2:1a:71:63:8f:b4:cc:d1:42:
                    72:7f:82:94:c8:7a:67:56:4a:db:ed:81:02:97:7f:
                    d3:86:48:bc:66:2d:75:36:fe:4c:4e:99:1d:a2:0a:
                    5b:40:4d:f7:d7:3b:7b:a7:a5:09:27:7d:eb:8e:d0:
                    a7:34:aa:9d:24:32:83:c5:40:fa:e3:b1:5c:e9:b0:
                    60:75:5a:47:e5:3e:4d:a7:73:8a:85:27:54:83:52:
                    5a:d7:09:97:ae:66:b9:f9:84:db:24:ea:3a:cc:61:
                    a8:59:f5:55:4a:fe:72:28:e6:57:52:6c:17:67:65:
                    26:bc:5a:7f:7e:d7:10:7a:87:88:1d:ba:73:f3:82:
                    56:84:31:a0:79:93:fd:9d:05:64:52:df:4e:9a:00:
                    2f:c8:98:81:4b:c2:4e:32:11:3c:d6:3b:32:28:13:
                    c8:db:bb:62:3a:5a:0f:bc:ec:35:0d:4f:45:7b:e0:
                    d9:ea:71:bb:4d:ce:93:1f:ab:11:98:0c:fd:a5:bc:
                    b7:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:8A:D0:BA:C6:6F:93:4C:1A:E6:A2:3A:85:D4:E1:1B:E3:23:21:B8
            X509v3 Authority Key Identifier:
                keyid:65:3F:AD:A5:38:A9:E3:41:2E:7E:FD:D8:FB:63:9F:22:7F:5A:3E:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT-tpTip40Eufv3Y-2OfIn9aPuI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:c1:82:b0:2b:d6:78:e0:af:cd:8c:69:f1:10:25:54:db:89:
         42:e8:6f:10:a6:47:63:16:01:8d:c4:3f:b1:28:41:89:2d:3d:
         95:cd:37:9b:40:e8:de:16:be:0d:90:46:ac:d1:97:2c:2c:1b:
         27:1d:7f:e9:bb:46:d5:c7:15:4d:d1:a2:e6:25:86:d7:b6:0a:
         3b:de:21:d6:8a:07:c4:42:53:b4:05:c1:2a:79:ad:72:8e:5c:
         b2:98:65:35:5b:3f:d3:47:6e:14:7a:e5:08:01:22:c7:d4:f0:
         7b:94:b1:d5:13:1f:a0:a2:77:ca:d5:7a:3b:27:e0:df:ac:aa:
         3e:13:87:98:53:35:db:bc:21:4d:e0:51:bb:de:a7:c0:9c:f4:
         b9:b1:06:bd:30:89:a7:3e:cb:ec:cb:96:65:d4:5d:94:bb:b6:
         d0:2e:1e:60:61:22:b9:b6:eb:44:57:ce:b1:5e:59:a2:bb:04:
         36:79:2b:1a:5c:96:6b:16:60:37:54:9f:07:14:60:ff:ba:93:
         cf:70:1c:40:d0:32:fb:d9:bb:71:d1:4b:7c:67:5a:59:bb:fe:
         b5:62:90:ac:c9:8a:f8:33:86:47:6c:30:d9:d3:d4:06:c1:9d:
         63:9f:7f:c1:32:25:c2:cf:2c:fb:0e:d4:5f:d9:1d:8a:3e:03:
         0c:7c:b1:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:24:45 2026 by rpki-client