Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8A94/6CD00DD298CB11F082C3F05FC4F9AE02/ZMDB2WFQEQYlE-9HuO44iYHT6A8.mft
File:                     ZMDB2WFQEQYlE-9HuO44iYHT6A8.mft (raw, json)
Hash identifier:          +HnhhTQRvB0BA+zjFwkwgcEMTskYRGW8yvzfp2nvA/U=
Subject key identifier:   57:3B:B3:0D:47:78:57:8E:7D:1F:42:C9:43:B5:F9:81:CE:35:96:A9
Authority key identifier: 64:C0:C1:D9:61:50:11:06:25:13:EF:47:B8:EE:38:89:81:D3:E8:0F
Certificate issuer:       /CN=A91D8A94/serialNumber=64C0C1D9615011062513EF47B8EE388981D3E80F
Certificate serial:       A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMDB2WFQEQYlE-9HuO44iYHT6A8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D8A94/6CD00DD298CB11F082C3F05FC4F9AE02/ZMDB2WFQEQYlE-9HuO44iYHT6A8.mft
Manifest number:          9E
Signing time:             Thu 23 Jul 2026 09:11:27 +0000
Manifest this update:     Thu 23 Jul 2026 09:11:26 +0000
Manifest next update:     Thu 30 Jul 2026 09:11:26 +0000
Files and hashes:         1: ZMDB2WFQEQYlE-9HuO44iYHT6A8.crl (hash: 944mh31DtrcpwiP6WFsI9h2WLRGcAR9kBkubx7yUlIo=)
                          2: B57E9D8C98D511F0912EFD62C4F9AE02.roa (hash: b4Mprh3FY9jiajkTpj7Ymhe1pwhQkrAyxJif5RXr/pI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D8A94/6CD00DD298CB11F082C3F05FC4F9AE02/ZMDB2WFQEQYlE-9HuO44iYHT6A8.crl
                          rsync://rpki.apnic.net/member_repository/A91D8A94/6CD00DD298CB11F082C3F05FC4F9AE02/ZMDB2WFQEQYlE-9HuO44iYHT6A8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMDB2WFQEQYlE-9HuO44iYHT6A8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 09:11:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 162 (0xa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D8A94, serialNumber=64C0C1D9615011062513EF47B8EE388981D3E80F
        Validity
            Not Before: Jul 23 09:11:26 2026 GMT
            Not After : Jul 30 09:11:26 2026 GMT
        Subject: CN=6a61dabe-07ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:9e:d2:03:1d:c4:4e:bf:cc:31:4f:b5:54:1a:
                    43:7d:58:79:4b:94:38:9b:5c:c6:18:5b:10:cb:70:
                    e5:db:8b:93:a3:85:aa:2d:f3:d5:85:cf:d6:ac:c1:
                    a7:cc:f6:9c:e3:ed:5f:35:e4:53:28:5e:d8:dd:d2:
                    61:9e:cf:9d:65:2f:92:6a:8b:b3:3d:40:dc:bb:ec:
                    6f:0f:25:d8:5e:55:78:ff:be:d8:3b:55:6c:e8:1c:
                    b4:1a:55:27:cb:45:b4:03:ac:0c:fd:78:ca:60:44:
                    30:ee:c2:7b:22:39:8e:f4:98:a2:22:3c:79:ee:72:
                    86:81:3f:22:ec:07:3b:fe:6c:c5:88:5d:1c:de:a9:
                    14:e0:97:85:f8:09:a8:5d:be:e7:47:7e:e9:23:4b:
                    c4:aa:17:44:f5:5c:11:3c:c0:1e:75:90:98:d3:5c:
                    5f:72:6e:18:d9:03:18:3f:86:36:f1:00:65:6a:b5:
                    6b:a5:73:ed:41:ff:81:b3:f0:34:57:03:67:fe:26:
                    7d:61:b8:36:82:79:b6:f1:ff:1f:0c:50:2a:da:d7:
                    6d:3a:6b:0e:fb:68:f2:09:3a:5d:9e:23:9e:bf:0a:
                    4f:b7:ef:f5:29:52:10:f1:33:61:69:5a:a2:ec:6e:
                    30:91:b5:3d:3c:f4:1d:63:17:67:ff:d0:11:96:ef:
                    c5:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:3B:B3:0D:47:78:57:8E:7D:1F:42:C9:43:B5:F9:81:CE:35:96:A9
            X509v3 Authority Key Identifier:
                keyid:64:C0:C1:D9:61:50:11:06:25:13:EF:47:B8:EE:38:89:81:D3:E8:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D8A94/6CD00DD298CB11F082C3F05FC4F9AE02/ZMDB2WFQEQYlE-9HuO44iYHT6A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMDB2WFQEQYlE-9HuO44iYHT6A8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8A94/6CD00DD298CB11F082C3F05FC4F9AE02/ZMDB2WFQEQYlE-9HuO44iYHT6A8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:b6:75:d9:3c:f4:be:c4:af:5b:32:9d:87:53:d0:f5:bc:1e:
         ff:51:51:2d:bd:1d:b9:32:b0:71:d4:05:29:32:e2:b8:27:6f:
         df:fe:19:a1:00:3d:1b:43:e4:97:31:86:69:0e:7c:67:36:fa:
         92:61:51:43:42:49:e0:87:ac:e6:81:87:77:a9:85:99:d7:ce:
         a9:f1:52:8f:50:f3:fa:83:76:ef:d6:71:b9:10:ba:2f:6a:93:
         b6:39:5a:fd:93:c1:6c:af:06:1e:59:2c:57:7a:07:9c:6a:c6:
         4a:17:c6:b0:a3:99:42:ef:f9:8e:2d:91:6b:9e:f5:b6:06:ab:
         be:62:c1:25:7a:21:ec:4e:7b:35:c3:2c:52:81:e3:e6:c5:89:
         93:33:c0:43:89:b7:c5:33:20:5d:28:4a:f2:07:3a:60:4b:03:
         69:b9:01:5e:71:4c:58:09:9e:f2:d7:d9:2b:41:ae:36:34:85:
         08:98:9e:a8:3e:73:57:06:74:8b:bb:82:c2:de:00:f1:bc:f3:
         97:5c:9f:68:99:5f:87:6b:d8:a1:d3:de:74:8a:1e:5c:2f:f5:
         c9:57:a4:7f:78:4e:54:36:ae:a3:63:28:3f:64:22:7c:88:fb:
         81:3f:2c:b3:fa:c0:14:f7:4a:a8:79:19:ed:9d:c0:e6:c9:9d:
         38:4f:6b:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:55:04 2026 by rpki-client