Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft
File:                     ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft (raw, json)
Hash identifier:          Idc09mq6pdmXX6L3/169d/RX5SYlZmQF6jtEXueOi/E=
Subject key identifier:   C8:C8:82:E0:46:78:8E:D9:31:ED:9F:04:28:AB:55:02:26:66:8E:32
Authority key identifier: 65:3F:AD:A5:38:A9:E3:41:2E:7E:FD:D8:FB:63:9F:22:7F:5A:3E:E2
Certificate issuer:       /CN=A915FE77/serialNumber=653FADA538A9E3412E7EFDD8FB639F227F5A3EE2
Certificate serial:       0D54
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT-tpTip40Eufv3Y-2OfIn9aPuI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft
Manifest number:          0D4C
Signing time:             Wed 22 Jul 2026 18:15:42 +0000
Manifest this update:     Wed 22 Jul 2026 18:15:42 +0000
Manifest next update:     Wed 29 Jul 2026 18:15:42 +0000
Files and hashes:         1: ZT-tpTip40Eufv3Y-2OfIn9aPuI.crl (hash: jFvR+05qvEc7KNltsovGJeQmJkdjL5X+r7sf/OntCak=)
                          2: 357D722C67D911EEA787145FC4F9AE02.roa (hash: ggJ5ieK6u9Bx4lh1H2SAIUHjGvpUwoHUksb1s6thrAE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.crl
                          rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT-tpTip40Eufv3Y-2OfIn9aPuI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 18:15:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3412 (0xd54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915FE77, serialNumber=653FADA538A9E3412E7EFDD8FB639F227F5A3EE2
        Validity
            Not Before: Jul 22 18:15:42 2026 GMT
            Not After : Jul 29 18:15:42 2026 GMT
        Subject: CN=6a6108ce-b28a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:23:a4:fc:68:0e:3c:1e:19:3d:31:ac:d3:33:
                    ce:91:44:e0:4a:bd:93:44:f3:35:e3:32:6d:84:10:
                    bf:10:80:fb:bc:ff:8b:fb:69:ce:17:89:eb:da:ef:
                    da:24:35:f7:7f:f5:ea:73:af:63:40:88:dc:bc:12:
                    48:aa:ae:2c:87:d5:10:e4:73:2b:b7:43:c4:37:67:
                    4b:85:aa:4c:b1:38:02:34:52:38:c3:77:7e:50:80:
                    d0:96:fe:20:06:51:66:93:52:18:4a:34:aa:c8:eb:
                    de:c0:c7:bc:5d:ca:53:1b:82:42:68:46:5e:7c:c9:
                    9d:91:9b:f0:7b:1e:65:a8:3a:5c:29:ae:1e:4b:eb:
                    2b:ba:d8:6e:ce:b2:37:84:c5:2a:eb:0a:47:00:da:
                    a9:73:06:d1:a8:8e:fd:51:72:dc:3e:57:63:8f:de:
                    78:c4:0a:16:6b:20:ad:17:41:0b:9b:e1:a9:11:3a:
                    5d:89:05:7f:7f:75:fc:8e:ca:60:71:ea:8f:31:96:
                    39:6b:53:c2:8c:44:96:04:ab:0d:77:fc:3e:0f:a1:
                    f6:c7:75:07:72:e9:33:1e:6d:22:31:28:66:3d:1e:
                    e0:3d:e4:28:bd:a2:a7:99:40:83:df:2a:00:ec:2d:
                    36:52:f9:2b:75:d2:90:db:19:cc:b5:bd:4b:03:bd:
                    38:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:C8:82:E0:46:78:8E:D9:31:ED:9F:04:28:AB:55:02:26:66:8E:32
            X509v3 Authority Key Identifier:
                keyid:65:3F:AD:A5:38:A9:E3:41:2E:7E:FD:D8:FB:63:9F:22:7F:5A:3E:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT-tpTip40Eufv3Y-2OfIn9aPuI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:07:4f:72:a9:58:14:99:3c:db:8e:18:43:6e:b3:aa:a2:0f:
         c1:ee:7c:48:c0:72:46:af:90:7a:6d:39:69:8b:20:93:53:ac:
         b4:a5:08:ff:24:a9:1e:68:36:89:f7:1f:a8:14:d0:bb:4b:b0:
         47:6d:19:22:ec:7f:8f:84:f9:a6:16:cc:c5:c0:eb:f3:0c:08:
         0d:00:fe:8a:a2:46:f0:89:d9:1b:8e:a9:b8:18:70:0c:d1:44:
         aa:35:bf:fd:9b:ba:e5:06:85:a0:13:7c:4c:9f:a9:7e:98:89:
         11:bb:98:05:f0:41:39:57:1b:93:20:bd:9a:d1:02:3b:0e:36:
         f0:6d:a8:ad:59:5f:6f:6f:2a:57:5d:44:e4:27:40:e2:a5:6d:
         db:80:cf:02:e0:4f:33:28:b9:56:a5:4f:95:8d:9a:f2:69:3e:
         72:d7:2b:c1:75:0e:6c:28:83:16:e2:e6:ce:ac:80:0f:f2:ed:
         50:40:02:7d:80:33:d3:f6:36:1f:7e:0c:fc:2c:0c:58:6f:b0:
         1c:5d:4a:96:a4:71:01:39:70:43:81:e2:88:6c:3d:a7:e0:e8:
         45:2a:42:5a:ed:d6:96:05:28:cf:68:c0:c8:e6:ad:c3:8a:b2:
         1b:dd:e1:12:82:2d:59:6e:c6:a6:01:13:61:b3:37:12:e2:f1:
         27:81:69:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:45:42 2026 by rpki-client