Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft
File:                     ZkQFG-HhBw1XItJPzBplu2plk6o.mft (raw, json)
Hash identifier:          rJRN/mMutfyN9HTILsMScBkNLDbuDZN5CCVFFluC/q8=
Subject key identifier:   D5:C1:95:B2:42:6F:F5:A2:9D:79:F1:EE:96:D3:44:67:9F:98:E2:61
Authority key identifier: 66:44:05:1B:E1:E1:07:0D:57:22:D2:4F:CC:1A:65:BB:6A:65:93:AA
Certificate issuer:       /CN=A911F2DF/serialNumber=6644051BE1E1070D5722D24FCC1A65BB6A6593AA
Certificate serial:       01B7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZkQFG-HhBw1XItJPzBplu2plk6o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft
Manifest number:          01AE
Signing time:             Fri 11 Sep 2026 04:08:53 +0000
Manifest this update:     Fri 11 Sep 2026 04:08:52 +0000
Manifest next update:     Fri 18 Sep 2026 04:08:52 +0000
Files and hashes:         1: ZkQFG-HhBw1XItJPzBplu2plk6o.crl (hash: bsZFVuNYK5QHNmyfuuqRCUPcUw5BahLP/72K4hQlGfY=)
                          2: 9052A59870AF11EF87B5DA0DC4F9AE02.roa (hash: Xp2kZwTI/Ulm1FSMvB8uIy/q/Twdd9bs92yBpmukUiI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.crl
                          rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZkQFG-HhBw1XItJPzBplu2plk6o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Sep 2026 04:08:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 439 (0x1b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911F2DF, serialNumber=6644051BE1E1070D5722D24FCC1A65BB6A6593AA
        Validity
            Not Before: Sep 11 04:08:52 2026 GMT
            Not After : Sep 18 04:08:52 2026 GMT
        Subject: CN=6aa37ed5-0bd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d9:f5:b2:12:1e:5f:3a:12:ab:08:e5:ef:19:
                    c9:1b:63:70:a0:61:e1:bb:ee:79:ec:db:d9:b1:7b:
                    d6:27:10:cb:90:45:c6:58:31:94:c0:32:b6:92:f6:
                    07:4c:24:f2:94:38:7c:49:e9:30:04:9b:d9:4c:1e:
                    f1:8d:95:fb:07:c0:1b:f6:75:bd:40:2e:98:44:e7:
                    a3:3b:8f:a1:99:8d:7b:ee:d4:3b:b1:3d:44:b0:05:
                    6e:71:ff:2e:15:40:9d:52:6d:23:2c:0a:a5:ae:8b:
                    3e:b0:eb:40:07:fe:62:64:d0:73:c2:cf:db:25:89:
                    98:c5:22:81:e2:13:c5:0c:de:c6:56:01:11:87:db:
                    51:53:48:d0:02:20:e1:69:45:09:36:28:fa:0a:1f:
                    53:65:d4:18:55:34:93:a6:9c:7a:b5:64:c1:3a:25:
                    4c:37:03:39:5e:e5:9e:5a:4c:75:7c:6a:e3:f9:39:
                    96:32:2a:59:d4:2b:e1:a8:6c:1f:71:6c:07:5f:41:
                    c7:82:85:7b:a0:52:37:94:f4:54:be:6a:20:85:f5:
                    10:1b:36:90:bb:9b:46:01:74:53:33:94:ee:58:ed:
                    94:37:46:fc:08:fa:f3:6f:7f:6f:36:d5:9c:bb:04:
                    de:2c:04:90:20:52:93:3c:56:7a:b4:ee:63:96:ae:
                    f2:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:C1:95:B2:42:6F:F5:A2:9D:79:F1:EE:96:D3:44:67:9F:98:E2:61
            X509v3 Authority Key Identifier:
                keyid:66:44:05:1B:E1:E1:07:0D:57:22:D2:4F:CC:1A:65:BB:6A:65:93:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZkQFG-HhBw1XItJPzBplu2plk6o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:70:1a:aa:70:b7:a0:10:32:30:df:31:8c:68:e8:58:cc:32:
         2b:99:f1:b9:c7:8b:4f:00:3a:d3:30:ff:2f:8f:37:c8:c0:91:
         b4:00:1a:c2:78:6e:0f:ae:c5:39:a8:06:26:53:4f:2c:54:07:
         55:fe:01:ca:41:af:bc:ca:00:65:e4:1c:de:35:f5:8c:c4:77:
         ef:d4:32:b4:b7:18:24:a3:07:eb:05:3c:37:7e:97:b0:3b:6f:
         2a:fb:50:fc:a6:40:2d:c0:29:1a:80:19:bf:e1:8a:29:02:ec:
         5a:f5:45:4f:95:78:44:b5:64:57:e1:4d:c7:a8:3f:84:b5:47:
         ae:17:35:bf:ef:f1:4f:37:4c:b2:ef:ee:7b:dc:51:78:63:f9:
         7e:2e:89:01:7b:b3:3f:3e:61:88:88:6e:e5:6a:35:23:5a:c0:
         8a:e1:f9:43:6f:23:8a:57:66:63:84:87:4f:27:fa:ca:78:be:
         f2:fa:8a:92:c9:d7:dc:4a:65:39:b2:54:aa:cc:9e:a6:63:9e:
         9f:6c:df:c8:d9:87:ab:d7:6b:95:74:51:c2:f9:c2:38:72:f8:
         87:2f:29:9b:39:99:a1:69:be:1a:cb:6a:be:9e:dd:ef:2f:3f:
         4d:3d:52:5e:32:f4:0c:06:59:d6:20:fb:c9:a1:02:28:74:57:
         48:1d:05:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 14:27:05 2026 by rpki-client