Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169E72/072FA8863EC811F189ABCFB6AC833773/Z8sRRaic2LZ67Z5OUocD9VwVIbM.mft
File:                     Z8sRRaic2LZ67Z5OUocD9VwVIbM.mft (raw, json)
Hash identifier:          7vjS7/o9ziiadP/GOKSRc7Bx4af1vbU/dytxCRHYWzs=
Subject key identifier:   2E:F1:60:92:65:53:DD:A8:E2:9F:0C:05:AA:92:13:D5:96:9B:6B:81
Authority key identifier: 67:CB:11:45:A8:9C:D8:B6:7A:ED:9E:4E:52:87:03:F5:5C:15:21:B3
Certificate issuer:       /CN=A9169E72/serialNumber=67CB1145A89CD8B67AED9E4E528703F55C1521B3
Certificate serial:       2F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z8sRRaic2LZ67Z5OUocD9VwVIbM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169E72/072FA8863EC811F189ABCFB6AC833773/Z8sRRaic2LZ67Z5OUocD9VwVIbM.mft
Manifest number:          2E
Signing time:             Thu 23 Jul 2026 10:44:35 +0000
Manifest this update:     Thu 23 Jul 2026 10:44:34 +0000
Manifest next update:     Thu 30 Jul 2026 10:44:34 +0000
Files and hashes:         1: Z8sRRaic2LZ67Z5OUocD9VwVIbM.crl (hash: ilFwZvYRZrVoOS+i+Q7uHNkuFB5O9UgmeqkcoOkjWQU=)
                          2: 2EC97C2C3EC911F18D9C5FE1AC833773.roa (hash: EvUSWLNIQOqqmidD5PHrkwd8fAUpWrCITwdT6HKeSIE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9169E72/072FA8863EC811F189ABCFB6AC833773/Z8sRRaic2LZ67Z5OUocD9VwVIbM.crl
                          rsync://rpki.apnic.net/member_repository/A9169E72/072FA8863EC811F189ABCFB6AC833773/Z8sRRaic2LZ67Z5OUocD9VwVIbM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z8sRRaic2LZ67Z5OUocD9VwVIbM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 10:44:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47 (0x2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169E72, serialNumber=67CB1145A89CD8B67AED9E4E528703F55C1521B3
        Validity
            Not Before: Jul 23 10:44:34 2026 GMT
            Not After : Jul 30 10:44:34 2026 GMT
        Subject: CN=6a61f092-6463
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:d6:0a:3c:b5:d1:c6:a3:70:68:9b:82:31:54:
                    1a:d0:44:48:1d:d4:a6:65:d9:bb:9b:e3:23:9c:54:
                    8e:b8:99:16:ce:67:42:07:09:18:4c:69:44:80:a4:
                    6e:60:f5:73:99:45:36:8a:11:c5:1e:11:54:38:2a:
                    b8:4a:76:76:81:80:63:8f:4c:e9:b7:90:00:0b:15:
                    d7:85:1e:15:60:6d:7b:1a:64:3a:d9:ce:42:2b:5e:
                    5f:b8:40:3d:11:43:13:e2:90:45:a7:9b:0a:6b:5d:
                    95:ba:06:6f:88:f1:0d:75:54:68:a0:ff:f5:01:fc:
                    07:f1:3d:78:3c:a9:50:95:14:19:3d:75:82:c4:0d:
                    d6:bd:83:85:1c:e2:ae:74:2e:26:4d:2d:98:9f:07:
                    e0:19:7c:7c:1e:39:56:91:2e:f0:fe:85:18:51:6d:
                    af:0e:cc:ee:a8:d3:52:2c:f5:2c:a2:e3:dc:16:80:
                    43:d3:c7:7d:05:c4:82:b9:d6:f9:84:c4:a6:a5:c3:
                    94:32:af:83:4f:c9:0d:fe:77:a1:b4:a0:82:95:0d:
                    dd:9f:20:68:ed:e0:92:2d:e6:c7:f4:e7:89:b8:21:
                    63:51:83:e0:c2:70:f3:09:95:0a:7e:ef:f9:2f:65:
                    15:41:ae:a4:b3:67:49:37:cd:ca:d0:d2:9c:1e:ee:
                    c2:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:F1:60:92:65:53:DD:A8:E2:9F:0C:05:AA:92:13:D5:96:9B:6B:81
            X509v3 Authority Key Identifier:
                keyid:67:CB:11:45:A8:9C:D8:B6:7A:ED:9E:4E:52:87:03:F5:5C:15:21:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169E72/072FA8863EC811F189ABCFB6AC833773/Z8sRRaic2LZ67Z5OUocD9VwVIbM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z8sRRaic2LZ67Z5OUocD9VwVIbM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169E72/072FA8863EC811F189ABCFB6AC833773/Z8sRRaic2LZ67Z5OUocD9VwVIbM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:2b:4d:a7:11:e5:96:ce:a4:81:23:7a:d7:7d:21:d8:a6:01:
         bf:60:06:a0:59:c4:04:1d:40:13:51:fd:a8:de:7a:cf:c1:84:
         87:5a:be:aa:4f:20:88:b5:7a:ea:29:15:2c:db:22:3a:39:cd:
         fb:3d:3e:5c:e2:b1:6f:11:1d:03:e4:82:49:72:b8:79:64:8a:
         4b:9c:c4:a6:3d:66:da:b5:06:5a:e2:2d:64:77:41:95:f3:64:
         31:9a:f8:ff:e8:5f:46:e7:06:96:7b:ce:25:a3:dc:85:8e:ae:
         cd:af:23:e3:26:4e:e5:f1:28:6c:f6:27:25:8f:3f:57:15:31:
         4a:40:82:e0:48:86:76:8b:da:e7:ef:51:a4:32:82:89:e8:0c:
         bc:91:69:c1:81:67:8f:04:3c:a1:07:c0:b3:e5:a8:0a:b2:75:
         32:c4:2f:71:31:00:ed:c6:f8:f4:fd:57:e9:4b:cc:97:bc:3d:
         cd:74:fd:83:e0:8b:c1:d7:fb:c3:aa:3f:7a:b5:61:94:ed:a7:
         76:de:0b:57:fe:36:a0:04:54:11:09:34:96:fb:f8:a7:ad:d8:
         49:45:5b:df:34:30:d3:ce:b8:52:9a:a2:fb:26:03:0f:37:ab:
         03:04:56:7c:95:95:a8:46:36:07:c8:fc:9c:9e:d5:c4:bf:7c:
         79:16:9d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:28:00 2026 by rpki-client