Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD11A/A23F23B8D0C011F0815AF064C4F9AE02/ZKte21ESYrc2r4F0HU1zFBTTSlc.mft
File:                     ZKte21ESYrc2r4F0HU1zFBTTSlc.mft (raw, json)
Hash identifier:          /A2wc2uniW6w2y79uv+d95csygWd76WlbXmFXp8HVa4=
Subject key identifier:   84:BB:FC:47:F9:A7:F2:70:CC:8C:F5:4E:F0:D0:0D:1B:9F:44:C8:61
Authority key identifier: 64:AB:5E:DB:51:12:62:B7:36:AF:81:74:1D:4D:73:14:14:D3:4A:57
Certificate issuer:       /CN=A91DD11A/serialNumber=64AB5EDB511262B736AF81741D4D731414D34A57
Certificate serial:       89
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKte21ESYrc2r4F0HU1zFBTTSlc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DD11A/A23F23B8D0C011F0815AF064C4F9AE02/ZKte21ESYrc2r4F0HU1zFBTTSlc.mft
Manifest number:          82
Signing time:             Thu 23 Jul 2026 09:43:05 +0000
Manifest this update:     Thu 23 Jul 2026 09:43:04 +0000
Manifest next update:     Thu 30 Jul 2026 09:43:04 +0000
Files and hashes:         1: ZKte21ESYrc2r4F0HU1zFBTTSlc.crl (hash: TzcLHYSlrEmci1uwH5YC7vDb7CRPUseHQVED13f5ZoU=)
                          2: E4DCE562284911F19931E6E894833773.roa (hash: 0yKy3aBVwlRdNI3lMwh0VFIrVrZK1Q3eetgCew0uics=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DD11A/A23F23B8D0C011F0815AF064C4F9AE02/ZKte21ESYrc2r4F0HU1zFBTTSlc.crl
                          rsync://rpki.apnic.net/member_repository/A91DD11A/A23F23B8D0C011F0815AF064C4F9AE02/ZKte21ESYrc2r4F0HU1zFBTTSlc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKte21ESYrc2r4F0HU1zFBTTSlc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 09:43:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 137 (0x89)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DD11A, serialNumber=64AB5EDB511262B736AF81741D4D731414D34A57
        Validity
            Not Before: Jul 23 09:43:04 2026 GMT
            Not After : Jul 30 09:43:04 2026 GMT
        Subject: CN=6a61e229-f114
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:45:eb:ab:f3:83:09:36:65:22:da:22:ac:da:
                    5e:4c:49:18:ad:e4:a0:2f:8b:e8:41:80:00:89:4a:
                    0f:50:e0:3e:37:73:de:d0:29:6b:fa:f1:0c:76:66:
                    42:6d:3c:ea:a5:c2:d3:33:ea:a2:2c:32:e3:76:36:
                    8e:af:20:be:52:5e:07:72:c6:63:40:9d:c4:73:1f:
                    d6:74:50:3e:94:37:4b:a7:bd:b9:e7:99:d2:2b:32:
                    9a:ad:af:12:2d:a9:bf:31:09:01:27:6d:a5:4d:af:
                    fd:b9:83:f9:a7:c5:29:63:8d:3f:86:6c:63:a7:ac:
                    18:a2:5d:b9:b5:6d:a8:26:b7:55:3d:68:69:d4:a4:
                    9e:41:1c:b6:2c:fa:d4:8c:58:c8:ef:7f:15:ac:c4:
                    76:71:fd:55:4a:b6:61:61:4f:c5:14:ad:62:bd:4d:
                    39:e0:40:7b:e0:a0:4e:ad:53:11:4f:7c:e9:d7:a8:
                    da:37:e2:45:ec:eb:78:b5:06:3e:ff:1c:11:42:d0:
                    40:54:36:b1:db:a2:b9:f4:e1:21:99:ca:78:21:0b:
                    e9:e6:e8:a2:ff:d6:db:07:7e:8c:5a:26:a4:41:23:
                    b9:0d:09:c3:50:f4:08:6c:f2:a5:aa:a1:b6:fb:ab:
                    f3:96:7f:09:31:b9:8e:b8:9f:a6:f2:2d:c0:9c:61:
                    45:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:BB:FC:47:F9:A7:F2:70:CC:8C:F5:4E:F0:D0:0D:1B:9F:44:C8:61
            X509v3 Authority Key Identifier:
                keyid:64:AB:5E:DB:51:12:62:B7:36:AF:81:74:1D:4D:73:14:14:D3:4A:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DD11A/A23F23B8D0C011F0815AF064C4F9AE02/ZKte21ESYrc2r4F0HU1zFBTTSlc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKte21ESYrc2r4F0HU1zFBTTSlc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD11A/A23F23B8D0C011F0815AF064C4F9AE02/ZKte21ESYrc2r4F0HU1zFBTTSlc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:66:ba:b7:d4:34:48:47:7e:7e:c5:03:33:30:4f:c4:2d:32:
         56:11:50:50:1c:db:9d:f8:36:dd:07:8a:a3:31:50:c6:87:e9:
         55:81:92:f9:a8:c8:57:b8:ab:c4:66:55:44:d5:7c:a3:7a:e9:
         5e:8f:2f:db:5c:82:b9:5c:67:cf:b1:71:f9:87:87:46:9b:90:
         86:39:54:a5:5e:e8:c9:ec:ab:c9:68:e2:b1:39:0e:56:63:fb:
         e7:10:e6:a8:09:1a:b1:46:0b:55:27:f6:ef:62:3b:47:b3:d3:
         3a:af:8c:da:db:08:b9:8f:4c:29:03:57:d9:df:7b:f9:93:80:
         51:6e:34:c9:73:13:ee:87:28:b5:eb:c3:8b:0b:d2:4a:e3:08:
         c5:18:fc:c0:34:ad:97:a8:18:61:ba:af:73:18:af:8e:d4:ff:
         b5:93:89:68:16:07:11:b1:65:9a:7f:11:d9:f2:9d:5b:fe:dc:
         61:93:b3:73:01:7a:d2:02:49:db:91:f9:73:52:46:1a:54:34:
         cd:4d:3c:ef:0f:db:c9:0e:a0:02:0f:be:c4:09:c6:a0:83:b8:
         04:54:65:65:76:fd:12:27:71:3a:9d:f7:24:28:89:b6:2c:09:
         14:08:24:41:3b:3b:b2:f4:6b:07:8f:9c:f3:13:0a:ab:cd:52:
         b1:64:58:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:40:02 2026 by rpki-client