Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.mft
File:                     zlgHMAQJCIdOtirydgUp51w9XGg.mft (raw, json)
Hash identifier:          tcbS5VYHGVqDP03AAAD0UT0dLLYGoaBXltyDqjoDBzE=
Subject key identifier:   22:A9:73:AF:1B:2B:ED:81:1B:FF:28:14:AD:49:01:15:2A:A6:7C:B3
Authority key identifier: CE:58:07:30:04:09:08:87:4E:B6:2A:F2:76:05:29:E7:5C:3D:5C:68
Certificate issuer:       /CN=A91E89CD/serialNumber=CE580730040908874EB62AF2760529E75C3D5C68
Certificate serial:       09CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlgHMAQJCIdOtirydgUp51w9XGg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.mft
Manifest number:          09B5
Signing time:             Wed 22 Jul 2026 20:22:40 +0000
Manifest this update:     Wed 22 Jul 2026 20:22:39 +0000
Manifest next update:     Wed 29 Jul 2026 20:22:39 +0000
Files and hashes:         1: zlgHMAQJCIdOtirydgUp51w9XGg.crl (hash: AhDNEJXem5FvgpaDtKudy0ek0GiR00QdbaMf9rMtn+I=)
                          2: D3ECF4B8E61D11EBB92C167BC4F9AE02.roa (hash: JpJW44EKjdDGS9i2UbNxoq47VGQn3OM7oBb7lk+F9fo=)
                          3: 8698CD28A42211EB91621734C4F9AE02.roa (hash: QYOZ1apbmHEgFA/KTyiwZS4fSNem6E5RLUuLMFBIYIM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.crl
                          rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlgHMAQJCIdOtirydgUp51w9XGg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 20:22:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2506 (0x9ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E89CD, serialNumber=CE580730040908874EB62AF2760529E75C3D5C68
        Validity
            Not Before: Jul 22 20:22:39 2026 GMT
            Not After : Jul 29 20:22:39 2026 GMT
        Subject: CN=6a612690-9efe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f5:af:b6:16:85:12:f2:8f:a4:49:b3:f0:3e:
                    08:58:d2:fb:47:b5:ac:62:4a:7d:36:4c:ed:fd:92:
                    0f:3c:ee:27:c7:71:00:5f:79:74:48:9a:b8:06:36:
                    30:70:f0:b5:63:ae:08:a2:b6:45:19:68:f9:3c:95:
                    0b:26:20:74:51:7c:d9:ee:78:ec:67:17:1e:7a:41:
                    5e:87:cd:3e:a7:2b:61:99:78:e5:59:2e:02:61:fa:
                    0c:41:5e:d8:08:de:01:46:dd:19:fe:5a:5a:5f:db:
                    a3:f1:b3:a1:06:c1:ae:ee:6d:c4:fc:73:64:2d:0d:
                    cd:ab:29:dc:73:67:da:b3:7a:c7:27:53:8e:40:21:
                    ae:99:dc:e4:68:e1:92:bb:63:9d:79:0d:01:9e:2d:
                    51:c1:f1:95:4f:ee:73:2a:d0:b5:9c:22:d2:d0:39:
                    34:ba:8b:11:4f:40:d7:e1:1e:e3:21:a7:25:a5:81:
                    3a:74:cf:45:a3:28:53:76:5c:d8:41:e3:20:4e:9d:
                    98:bb:ea:2b:0b:e8:a0:bb:16:79:8f:8a:d4:69:a0:
                    bf:cd:94:93:31:10:4e:23:2f:97:4d:b8:d6:27:0c:
                    61:c6:5f:52:b4:0d:de:f8:a7:e1:85:fc:bb:86:2f:
                    a2:82:5b:78:10:d3:c6:ce:97:75:a1:a4:d4:c2:43:
                    46:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:A9:73:AF:1B:2B:ED:81:1B:FF:28:14:AD:49:01:15:2A:A6:7C:B3
            X509v3 Authority Key Identifier:
                keyid:CE:58:07:30:04:09:08:87:4E:B6:2A:F2:76:05:29:E7:5C:3D:5C:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlgHMAQJCIdOtirydgUp51w9XGg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:5b:32:ed:95:2e:44:76:65:36:e2:33:d3:03:61:86:8d:3d:
         92:19:a9:93:6c:4d:94:bb:69:4c:21:f4:ec:a7:05:3e:62:55:
         86:42:ee:de:7b:05:0d:6b:3e:7d:41:79:a3:1f:8e:d2:92:3d:
         ed:5d:70:ae:55:65:5e:61:fb:bd:b9:42:7d:86:56:cd:e8:41:
         7a:03:95:f7:5c:98:57:49:3e:a3:b6:de:96:fb:59:78:24:b8:
         1a:40:5c:fe:ff:b9:70:29:f5:a2:7f:54:0c:8a:94:06:18:54:
         f2:17:93:19:3c:1b:1b:7b:aa:06:ce:b1:87:a4:02:96:57:6c:
         13:68:03:31:bd:aa:13:2c:5e:7d:e3:76:88:8d:88:c7:a1:fd:
         47:67:8c:59:1c:54:ae:68:91:c9:a0:6f:e5:62:a7:af:2f:fa:
         b0:d1:af:00:63:35:ff:96:58:07:1a:5f:0f:49:83:f7:78:df:
         4b:5d:ed:7b:3d:1f:46:e5:eb:ae:81:79:22:44:3a:71:c6:0a:
         46:49:82:f7:79:23:94:4a:e5:58:c8:3c:21:0d:74:96:3a:9d:
         08:2a:2c:57:a9:4b:2b:42:ad:59:de:81:66:84:17:93:0a:46:
         ff:cf:ee:0e:5c:be:e8:58:28:ae:af:92:12:e0:26:59:2c:83:
         d3:ca:57:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:54:32 2026 by rpki-client