Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916CAE6/65D044C4941811EA940FB530C4F9AE02/ZMpUJqx6VQvaEFOgEoMUTi3NK9c.mft
File:                     ZMpUJqx6VQvaEFOgEoMUTi3NK9c.mft (raw, json)
Hash identifier:          EUehWSAfQJhe2JNIcov2jXgY76lEov3XNZzezVwswCk=
Subject key identifier:   FF:EA:55:5B:87:A5:8F:BD:CE:39:B3:1C:E3:79:E7:20:9B:9B:FA:69
Authority key identifier: 64:CA:54:26:AC:7A:55:0B:DA:10:53:A0:12:83:14:4E:2D:CD:2B:D7
Certificate issuer:       /CN=A916CAE6/serialNumber=64CA5426AC7A550BDA1053A01283144E2DCD2BD7
Certificate serial:       A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMpUJqx6VQvaEFOgEoMUTi3NK9c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916CAE6/65D044C4941811EA940FB530C4F9AE02/ZMpUJqx6VQvaEFOgEoMUTi3NK9c.mft
Manifest number:          0AE2
Signing time:             Wed 22 Jul 2026 20:07:06 +0000
Manifest this update:     Wed 22 Jul 2026 20:07:05 +0000
Manifest next update:     Wed 29 Jul 2026 20:07:05 +0000
Files and hashes:         1: ZMpUJqx6VQvaEFOgEoMUTi3NK9c.crl (hash: tqTOEJO5aOwqNCoL45eP0uqexHHsfQuWoYfNoLQzR3c=)
                          2: 8D3F53F6A15F11F09B632177C4F9AE02.roa (hash: CP+QsdoDrOnuqR8CFeZWi0RVe73nga/HrDSMYjQFtTw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916CAE6/65D044C4941811EA940FB530C4F9AE02/ZMpUJqx6VQvaEFOgEoMUTi3NK9c.crl
                          rsync://rpki.apnic.net/member_repository/A916CAE6/65D044C4941811EA940FB530C4F9AE02/ZMpUJqx6VQvaEFOgEoMUTi3NK9c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMpUJqx6VQvaEFOgEoMUTi3NK9c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 20:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 162 (0xa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916CAE6, serialNumber=64CA5426AC7A550BDA1053A01283144E2DCD2BD7
        Validity
            Not Before: Jul 22 20:07:05 2026 GMT
            Not After : Jul 29 20:07:05 2026 GMT
        Subject: CN=6a6122ea-700a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e4:85:b8:12:94:eb:4a:46:3f:63:d0:37:67:
                    5f:0e:b7:0b:81:7d:ef:8a:bd:bd:be:1b:cc:4f:95:
                    ba:45:05:8d:70:2f:8f:2c:b9:55:39:04:48:a5:25:
                    24:d0:ce:e9:9a:8d:8b:db:0c:7e:de:4d:0d:96:7d:
                    c2:ab:0b:aa:16:bf:e1:ea:89:c5:e3:b6:b3:01:9b:
                    47:99:a8:40:d7:fd:96:de:1c:4f:01:8f:17:47:de:
                    3e:91:aa:da:72:16:7b:a9:5c:6a:b0:fd:0e:a7:3d:
                    02:d3:9e:d9:c0:6c:14:aa:de:28:41:d2:dc:01:9b:
                    1e:65:b1:8e:87:94:44:67:4c:70:34:60:fb:05:a3:
                    ba:2e:44:a1:e3:22:f4:d2:15:ed:63:ef:c4:dd:e1:
                    81:e2:dd:10:18:3e:e2:5d:f6:01:76:6e:01:ca:5d:
                    08:7c:d9:4e:f6:17:e1:f0:f7:a7:dc:8c:d4:bc:42:
                    99:6f:60:f3:6a:27:89:26:25:5d:dc:45:3c:61:35:
                    2d:c3:d5:d0:6c:0d:0d:85:f2:2d:e2:75:83:fd:ab:
                    21:dd:96:27:cc:36:2a:0f:86:84:f5:fd:38:c9:3e:
                    92:25:79:27:72:c6:11:b3:7a:b5:d4:f4:33:31:de:
                    17:3c:ba:95:08:02:d0:04:95:f0:e6:9b:4a:f3:d5:
                    17:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:EA:55:5B:87:A5:8F:BD:CE:39:B3:1C:E3:79:E7:20:9B:9B:FA:69
            X509v3 Authority Key Identifier:
                keyid:64:CA:54:26:AC:7A:55:0B:DA:10:53:A0:12:83:14:4E:2D:CD:2B:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916CAE6/65D044C4941811EA940FB530C4F9AE02/ZMpUJqx6VQvaEFOgEoMUTi3NK9c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMpUJqx6VQvaEFOgEoMUTi3NK9c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CAE6/65D044C4941811EA940FB530C4F9AE02/ZMpUJqx6VQvaEFOgEoMUTi3NK9c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:4b:58:d6:23:4a:8c:30:3a:72:bd:17:c1:69:2d:15:3e:32:
         24:38:98:8f:ed:b2:dd:91:7e:f4:f2:60:b0:9f:ec:25:bd:db:
         3d:bc:ba:97:80:cd:67:f8:09:25:fb:94:a5:47:6f:36:5e:e3:
         23:f7:69:e3:dc:fb:e5:a2:a7:45:d3:f7:35:b6:ab:99:9f:ee:
         ee:51:e9:6c:fe:e9:c5:9b:a3:c9:42:d2:be:8d:1a:f4:c7:9c:
         f2:e7:db:27:3b:c5:8c:6b:30:94:5e:2a:cb:ac:9a:2a:25:bf:
         0a:c4:1b:90:c3:3d:b8:cc:73:b6:5a:93:dd:03:66:25:e2:11:
         e6:a5:f8:2f:17:c8:cc:c6:3c:8f:f4:30:df:aa:16:4e:4f:5c:
         08:7e:1a:e2:54:45:fa:21:ef:7a:e4:04:03:93:c3:2c:f4:3c:
         80:27:ba:7b:5c:d9:0d:6a:86:36:52:f4:19:9a:36:25:2e:6b:
         3d:df:4e:18:cb:4e:be:7c:1e:a4:5e:34:30:63:94:cd:59:4b:
         7c:05:65:96:05:6c:a1:6d:87:01:6c:92:05:c4:10:aa:af:b8:
         9a:0a:76:82:45:ca:d8:f9:b5:81:7b:f6:b0:2b:c5:78:37:46:
         ef:2a:c0:11:a0:0c:4e:2e:86:22:ba:3a:21:60:9e:81:d5:0b:
         ac:1b:8a:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:45:44 2026 by rpki-client