Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft
File:                     Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft (raw, json)
Hash identifier:          E+9W69/4vqVGNeuOkNK+NJ6oxWKOos2IitXtdjw+w6s=
Subject key identifier:   E1:EF:B1:1F:04:B9:4C:47:DB:46:A2:32:DB:6A:18:54:34:82:63:EE
Authority key identifier: 67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8
Certificate issuer:       /CN=A9165568/serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8
Certificate serial:       1DF4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft
Manifest number:          3FC2
Signing time:             Wed 22 Jul 2026 14:30:06 +0000
Manifest this update:     Wed 22 Jul 2026 14:30:05 +0000
Manifest next update:     Wed 29 Jul 2026 14:30:05 +0000
Files and hashes:         1: Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl (hash: J5nSP0igTwzijoULb9lmZ3UBzlsoovz74MdcNLJ3nak=)
                          2: 095798588ABA11EAB5EDDE54C4F9AE02.roa (hash: lf1ISH9QTtgl8L9L0ANGqCGTHFwv9Hzc9bbQJTH1hEk=)
                          3: E206DF40E79011E699B81D0FC4F9AE02.roa (hash: HgJ0n+v739OZ1tLGuS29SCSO5u9C8UIQn4oKvIqQoV8=)
                          4: E1B073B689F011EABAEDCE2FC4F9AE02.roa (hash: Q016Kd6E9/hY+r6FwdJ1SCSeGt/Pfio83Euj8bOzMRo=)
                          5: 084044FC19AC11EB8759456DC4F9AE02.roa (hash: iVpOoJBlOyG/3zE1oA25hpkQYIqJe26GyQVWdLF9Bv4=)
                          6: A310F2FC8AB811EA9F89B54EC4F9AE02.roa (hash: fGEvfx/uQTHZ/v0AMbNptNU7LfD/gnvxRSl+eXIuibU=)
                          7: FDC7AB404C4711F0BDC34276C4F9AE02.roa (hash: 6P+1AW6+9CaIAdPsa+shyJsM8Exj94kKsPKnss2Jr94=)
                          8: 195AEC4287CF11F09EDBA229C4F9AE02.roa (hash: 9d7+U0GsZDY6ZehuYxySqXSfRY3e2dmU9OZ6IPMqzmU=)
                          9: 777F5CEE8AA611EA94BC0D13C4F9AE02.roa (hash: jKKRIP8Mze98sL1n15uOF95N4d5VeEeQhVHQTOvGEoE=)
                          10: 671FF9F6943011EA8988B883C4F9AE02.roa (hash: E0gVDm9kfoK0rIa6TEKpQcI3iviwBeS9QjJmURqDGcc=)
                          11: A75964A28E4B11EA8A347A3EC4F9AE02.roa (hash: w7c5NBEb8TY/ZmVexUmHMzZSB1L6WF2aygP/ojjQOss=)
                          12: 9894B43E80DA11F1AF01F71A5DA30FBC.roa (hash: 746pRPtMH1SGiVoQbklMO4Qp6QGnZ4g3CyOw0Szk53A=)
                          13: 66891B80943011EA8988B883C4F9AE02.roa (hash: BqNOTLVBBC+AVn5T33rtKNkNE5KVCZAI+BxeO2sKXyk=)
                          14: 5D24529CAB0C11EA8D5ADE09C4F9AE02.roa (hash: SUdVIcZkUhygJe2xIbtJt7uwqKCG9Ii1WDhJ2Iav9eM=)
                          15: 711F090E8AB411EA89D83541C4F9AE02.roa (hash: sLIpOudm+eiKR94GEfQZoeV78WGpsM7jzLSAv9i5/tM=)
                          16: D2EF531219AE11EB8D3BC20EC4F9AE02.roa (hash: XXo8cy9oUnqDsEuTHCCDf3i4rQnpL2CkAP7dtIYhL4s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl
                          rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 14:30:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7668 (0x1df4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165568, serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8
        Validity
            Not Before: Jul 22 14:30:05 2026 GMT
            Not After : Jul 29 14:30:05 2026 GMT
        Subject: CN=6a60d3ee-5b8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:70:af:e1:88:a2:1d:01:39:d8:fd:22:eb:5b:
                    70:16:4d:69:96:49:df:34:6a:bd:34:51:15:55:3d:
                    65:5d:2f:a4:b7:0c:52:6f:e4:df:4e:f2:88:82:c9:
                    1c:f9:9f:27:5c:b6:6b:e3:16:8e:fb:56:7d:a0:37:
                    9c:c0:4c:aa:53:83:8e:94:52:e8:ff:96:5a:27:6e:
                    92:f9:6d:85:7c:dd:fb:33:6b:69:14:e4:f8:c6:93:
                    1f:19:a3:b7:82:11:fe:3e:df:96:dc:b4:57:fd:f5:
                    27:b9:a2:e5:6a:ca:aa:34:df:8e:6e:a1:f9:d7:9e:
                    8b:84:12:5f:84:43:61:1d:f7:f9:6f:ca:30:51:e7:
                    9c:15:20:e3:07:91:6c:91:38:f6:6b:d5:2f:bc:b3:
                    17:77:74:43:25:58:10:a8:e5:8f:11:5a:e5:d7:d6:
                    f0:11:c0:f0:4c:20:d7:e9:89:57:25:d1:3a:b8:90:
                    aa:e3:44:6e:ef:74:c7:c2:33:57:49:ec:60:5b:2c:
                    25:5e:68:71:37:a7:5f:4c:b6:13:3b:1f:8c:52:82:
                    bc:5f:b0:c7:75:db:45:69:a7:c1:a5:aa:2c:03:fc:
                    7d:b3:73:90:97:0c:4d:cf:b4:70:04:b5:9a:9b:47:
                    de:74:8f:fc:d8:1b:eb:7b:3a:f7:0a:29:0c:15:92:
                    d3:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:EF:B1:1F:04:B9:4C:47:DB:46:A2:32:DB:6A:18:54:34:82:63:EE
            X509v3 Authority Key Identifier:
                keyid:67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:15:6e:61:83:9f:49:c5:41:2b:92:8a:8a:6d:7c:47:5c:1b:
         88:b8:7b:62:4f:68:3b:b1:a0:55:f2:a9:a0:af:8b:48:d8:a7:
         c9:b7:da:ea:0a:8c:0b:08:5a:da:64:6c:b7:07:e4:d6:80:53:
         2a:a0:66:d8:30:7d:8c:b8:6e:43:21:2f:83:18:1b:35:52:15:
         94:4f:20:c9:d1:3a:c3:8e:25:a1:d5:6a:6b:a7:75:f1:0e:9e:
         29:0f:88:eb:6e:f9:d4:d4:8a:e1:ee:1a:79:84:57:6f:6f:45:
         6f:94:c4:49:f7:cb:6b:f5:41:83:5b:64:84:fd:b3:7d:a1:83:
         69:75:45:52:bd:0f:62:b2:fd:9c:8e:0b:04:d1:2a:e1:5b:ab:
         85:c0:4f:eb:75:ec:ce:0a:1d:a0:af:6e:14:98:15:67:25:f3:
         13:68:e9:88:ab:a2:92:24:3d:d0:8a:29:b9:7a:fd:7f:78:54:
         29:25:56:c0:44:99:95:31:32:74:e8:e2:2a:43:ce:07:9e:15:
         18:91:3d:ad:76:d3:ef:6d:e6:f8:d5:b9:43:a5:d0:9a:d9:f8:
         79:ff:51:3b:21:06:80:d5:9e:92:76:fc:4b:f2:cf:3f:63:90:
         a1:bc:2d:ff:8c:84:6e:0a:ea:db:ed:7e:16:4b:1f:da:fa:45:
         94:74:1e:26
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICHfQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjU1NjgxMTAvBgNVBAUTKDY3MDk3RTQ5MkY3M0Q2REJEMzFGQTAxNkEyRDVCNUI4
NkE5QjNGRDgwHhcNMjYwNzIyMTQzMDA1WhcNMjYwNzI5MTQzMDA1WjAYMRYwFAYD
VQQDEw02YTYwZDNlZS01YjhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmHCv4YiiHQE52P0i61twFk1plknfNGq9NFEVVT1lXS+ktwxSb+TfTvKIgskc
+Z8nXLZr4xaO+1Z9oDecwEyqU4OOlFLo/5ZaJ26S+W2FfN37M2tpFOT4xpMfGaO3
ghH+Pt+W3LRX/fUnuaLlasqqNN+ObqH5156LhBJfhENhHff5b8owUeecFSDjB5Fs
kTj2a9UvvLMXd3RDJVgQqOWPEVrl19bwEcDwTCDX6YlXJdE6uJCq40Ru73THwjNX
SexgWywlXmhxN6dfTLYTOx+MUoK8X7DHddtFaafBpaosA/x9s3OQlwxNz7RwBLWa
m0fedI/82Bvrezr3CikMFZLT8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOHvsR8E
uUxH20aiMttqGFQ0gmPuMB8GA1UdIwQYMBaAFGcJfkkvc9bb0x+gFqLVtbhqmz/Y
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTU2OC9CRDFBOTVEMjFE
ODcxMUUyOUJFM0U2REYwOEIwMkNEMi9ad2wtU1M5ejF0dlRINkFXb3RXMXVHcWJQ
OWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1p3bC1TUzl6MXR2VEg2QVdvdFcxdUdxYlA5Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NTU2OC9CRDFBOTVEMjFEODcxMUUyOUJFM0U2REYwOEIwMkNEMi9ad2wtU1M5ejF0
dlRINkFXb3RXMXVHcWJQOWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAaxVuYYOfScVBK5KKim18R1wbiLh7Yk9oO7GgVfKpoK+LSNinybfa6gqMCwha
2mRstwfk1oBTKqBm2DB9jLhuQyEvgxgbNVIVlE8gydE6w44lodVqa6d18Q6eKQ+I
62751NSK4e4aeYRXb29Fb5TESffLa/VBg1tkhP2zfaGDaXVFUr0PYrL9nI4LBNEq
4VurhcBP63XszgodoK9uFJgVZyXzE2jpiKuikiQ90IopuXr9f3hUKSVWwESZlTEy
dOjiKkPOB54VGJE9rXbT723m+NW5Q6XQmtn4ef9ROyEGgNWeknb8S/LPP2OQobwt
/4yEbgrq2+1+Fksf2vpFlHQeJg==
-----END CERTIFICATE-----
Generated at Thu Jul 23 20:26:38 2026 by rpki-client