Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft
File:                     ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft (raw, json)
Hash identifier:          y/s8RQynBKNMyQ+qqA9plUnIi7ASOyHagaVpw8LL3yE=
Subject key identifier:   59:27:9D:36:D3:10:55:B6:28:E5:60:68:8A:39:B9:AF:DC:61:40:BD
Authority key identifier: 64:7D:09:27:DB:3B:17:8E:2F:65:4A:32:68:55:7F:E5:B5:D6:72:9C
Certificate issuer:       /CN=A919A777/serialNumber=647D0927DB3B178E2F654A3268557FE5B5D6729C
Certificate serial:       020E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft
Manifest number:          01DC
Signing time:             Thu 23 Jul 2026 05:24:07 +0000
Manifest this update:     Thu 23 Jul 2026 05:24:07 +0000
Manifest next update:     Thu 30 Jul 2026 05:24:07 +0000
Files and hashes:         1: ZH0JJ9s7F44vZUoyaFV_5bXWcpw.crl (hash: LgOL+gwE6h8DZn6DUAD2QNYB88MGTSrRMRZD3rhbKjU=)
                          2: 5B4D02987E5B11F09260CE56C4F9AE02.roa (hash: YSqNnOxJ+Xkes9UNemwulrLNoP9a1fzLC+DIw2bAtgY=)
                          3: BC26B7548CAB11F0BDAA8B67C4F9AE02.roa (hash: 1xbmeKrtdkfMeaYJXV3nxlxzWBfNoeXUz9/FaAvLRY4=)
                          4: BDECB94CEC4F11EEB0B9B467C4F9AE02.roa (hash: fSlbtUc39UCW3k1Yy6pAqJg048Gxa2v6PcevURxg5Zs=)
                          5: E7F77E5E42E711EF8B9EF861C4F9AE02.roa (hash: Rk3j/x7/aK9tyzGNZkRW4uYz1dTdbytFeBnr/OmzBX8=)
                          6: 7BDC977E0AF011EF87265E12C4F9AE02.roa (hash: L+Pr2GihRWoedBardrydLcushDGXI9FYHRtqemwZ37o=)
                          7: D43F20C6C70F11F0BEE61E6CC4F9AE02.roa (hash: lU5HELzK1HgvUgy9a8UOHW1aya85BnCwdaSrvas6AAk=)
                          8: DD0545F6324A11EFA615F80FC4F9AE02.roa (hash: Uj11T+QW0pwuoYmi/Tug3FzEFRy1nbJISrOyCvJDnIQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.crl
                          rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 05:24:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 526 (0x20e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919A777, serialNumber=647D0927DB3B178E2F654A3268557FE5B5D6729C
        Validity
            Not Before: Jul 23 05:24:07 2026 GMT
            Not After : Jul 30 05:24:07 2026 GMT
        Subject: CN=6a61a577-2a4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:0e:37:97:11:c5:2a:b8:0c:fc:66:dd:e2:17:
                    59:df:00:5c:cf:c7:b8:a3:08:dd:5e:ae:27:10:f2:
                    d3:05:d9:95:20:4b:1e:f0:48:cc:99:06:a5:1b:21:
                    d3:07:ce:86:98:fc:72:e5:37:7f:3a:9a:b5:45:ad:
                    26:e5:e1:ab:ba:54:d9:f4:25:67:ba:cc:07:45:43:
                    96:5a:b7:86:b6:a3:3c:a4:41:b6:1d:6b:b0:b8:5f:
                    cb:73:04:9f:86:fe:73:cf:c4:43:eb:8c:67:89:4a:
                    09:b0:cc:a0:4d:4a:49:17:03:1d:4a:70:f2:87:0d:
                    82:03:45:95:44:1e:fa:00:00:e6:d5:a0:83:3e:fa:
                    52:c2:b9:c6:96:fe:89:15:c5:15:2d:e0:09:40:cb:
                    f2:ee:2e:8a:6e:9e:46:62:7a:e3:09:98:56:96:74:
                    de:50:4d:db:5d:17:68:c8:f1:8e:fe:d5:ff:6a:ff:
                    ad:ef:95:02:67:af:57:e1:88:1b:29:bc:1d:1c:f8:
                    4b:ad:aa:75:0b:d3:c6:f5:c3:a4:e0:36:54:82:b6:
                    09:31:41:21:41:38:e1:44:8a:87:07:b8:41:46:d5:
                    43:82:78:22:38:2f:b1:7a:6e:2c:43:f3:bb:5d:57:
                    1d:af:32:d5:82:58:62:42:fa:9b:65:5b:d1:bf:50:
                    cf:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:27:9D:36:D3:10:55:B6:28:E5:60:68:8A:39:B9:AF:DC:61:40:BD
            X509v3 Authority Key Identifier:
                keyid:64:7D:09:27:DB:3B:17:8E:2F:65:4A:32:68:55:7F:E5:B5:D6:72:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:10:5b:c7:25:2b:ae:21:eb:8c:78:d7:78:a4:a4:1a:b1:a3:
         6f:b3:68:c4:ff:de:1d:78:04:b3:9b:aa:ff:13:eb:82:9c:b6:
         c2:c6:da:b0:2e:7c:3c:a0:1e:88:bb:93:3a:01:60:49:af:44:
         d8:56:62:cf:bb:8c:89:6d:cf:3e:12:46:de:0b:fa:aa:c3:4a:
         52:e1:30:2c:f5:ff:03:5c:1a:da:35:6c:e6:31:da:99:dc:65:
         1f:5b:60:54:b2:d4:0d:f3:a5:41:cf:c3:72:04:59:ff:b2:b5:
         4a:9c:ce:8d:ad:df:13:d7:9f:74:a0:a5:19:b7:13:d4:76:59:
         09:0b:dd:f6:dc:02:8d:c7:05:b5:9b:d6:56:c6:26:02:47:59:
         d3:fd:0f:7d:0e:5d:8e:0c:ae:e7:3a:a1:b6:ae:c4:80:65:a6:
         01:61:ff:e9:21:8f:56:77:11:cc:19:08:34:66:88:bb:46:38:
         21:ec:fa:51:56:01:ce:52:09:f2:56:e5:3d:f7:52:1d:c5:a5:
         ee:d7:31:8f:85:66:e5:4d:51:88:3d:67:4b:23:6a:d1:23:97:
         5c:e2:b4:17:aa:d0:dc:5e:79:8b:a1:95:45:6f:4e:a8:31:1b:
         4e:f9:d5:c0:65:01:35:28:89:0c:de:7c:78:66:8c:b9:65:e1:
         fe:9e:90:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:44:24 2026 by rpki-client