Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.mft
File:                     ZfzR8nTT59WOTQyihVjTS2sVLWc.mft (raw, json)
Hash identifier:          +/AbHSmk0C90QmSy9iCLomj4AaH1zCGaDoiMG+JlmPE=
Subject key identifier:   63:57:9F:CE:07:AF:34:9E:C6:9D:78:A2:34:87:49:2D:8E:05:BE:B5
Authority key identifier: 65:FC:D1:F2:74:D3:E7:D5:8E:4D:0C:A2:85:58:D3:4B:6B:15:2D:67
Certificate issuer:       /CN=A911F7D0/serialNumber=65FCD1F274D3E7D58E4D0CA28558D34B6B152D67
Certificate serial:       1207
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZfzR8nTT59WOTQyihVjTS2sVLWc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.mft
Manifest number:          11FC
Signing time:             Tue 18 Aug 2026 17:20:23 +0000
Manifest this update:     Tue 18 Aug 2026 17:20:22 +0000
Manifest next update:     Tue 25 Aug 2026 17:20:22 +0000
Files and hashes:         1: ZfzR8nTT59WOTQyihVjTS2sVLWc.crl (hash: YafT/IU9HwtAdE9slSrXYRc+JqU/PrVam/K+z+ikNqI=)
                          2: 1BFF84B0131611E991379440C4F9AE02.roa (hash: pP9sfTlQFZwgEZOIynMioM1x60lYpa7dMZDxjqtV5Ts=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.crl
                          rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZfzR8nTT59WOTQyihVjTS2sVLWc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 17:20:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4615 (0x1207)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911F7D0, serialNumber=65FCD1F274D3E7D58E4D0CA28558D34B6B152D67
        Validity
            Not Before: Aug 18 17:20:22 2026 GMT
            Not After : Aug 25 17:20:22 2026 GMT
        Subject: CN=6a849456-7bbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:51:c6:76:01:b5:3e:3f:76:95:fe:53:9c:a7:
                    82:9d:55:f4:a2:15:de:8a:a7:77:d6:cd:24:2f:e0:
                    0c:4f:7a:ac:27:13:4d:ee:9f:52:4c:7e:a5:db:0c:
                    e4:af:47:a7:b4:bf:f7:79:13:cb:b5:0a:32:3a:0a:
                    7c:91:2f:3e:e4:fb:80:8d:7f:3c:e9:ec:25:fb:17:
                    22:8e:20:68:d6:68:bb:53:ee:67:e5:56:1f:5e:b6:
                    8e:0c:9d:cb:47:dc:e8:92:d4:73:a8:71:1b:bf:43:
                    54:28:2e:9c:53:d0:92:28:b1:82:dc:00:b4:04:74:
                    e3:85:6d:21:bd:ce:11:bb:6f:bd:60:43:c4:58:52:
                    7d:de:86:a2:f7:41:f0:ca:34:f6:22:ee:90:c3:0d:
                    47:bf:76:2a:45:7a:04:32:47:97:7a:5e:88:18:a8:
                    12:f7:9f:30:11:ec:01:77:0a:02:0d:9b:22:16:b4:
                    45:99:7b:31:00:43:74:cf:56:8a:db:26:52:84:98:
                    1f:27:b8:f5:c6:9a:da:70:84:cd:a5:9a:2f:c4:6a:
                    d8:96:8f:dd:ea:23:3a:02:b7:cc:3c:5d:6b:a7:62:
                    e2:8a:47:c9:c8:b5:21:05:94:0e:d0:3f:fc:6c:4c:
                    a4:4c:1a:4c:9e:2b:db:a2:d6:a4:8b:68:2b:25:3d:
                    80:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:57:9F:CE:07:AF:34:9E:C6:9D:78:A2:34:87:49:2D:8E:05:BE:B5
            X509v3 Authority Key Identifier:
                keyid:65:FC:D1:F2:74:D3:E7:D5:8E:4D:0C:A2:85:58:D3:4B:6B:15:2D:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZfzR8nTT59WOTQyihVjTS2sVLWc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:1b:19:d3:d2:39:8a:cc:39:58:15:6d:1f:e6:74:c0:9f:ec:
         d2:a5:3d:f9:d7:34:52:e2:ce:a8:49:66:56:32:b5:47:3a:2a:
         c8:8a:ac:f3:ba:d7:e2:9e:ea:2c:3c:2a:c1:d5:e3:8e:16:15:
         ab:19:88:1e:c4:29:dc:f9:cc:ab:60:d1:09:20:bb:4a:ea:9a:
         1c:83:94:71:40:0c:50:88:dc:91:fa:ba:7f:b1:12:e4:a0:91:
         83:77:1c:96:46:67:a6:f6:6b:49:d3:1c:69:55:8b:5b:78:92:
         32:75:cf:98:6c:9e:45:c6:f4:ff:db:2c:94:18:df:8f:09:a9:
         90:d6:5d:77:0d:55:10:61:12:39:6c:af:de:be:50:63:5c:45:
         69:26:e6:57:55:06:9d:0d:3f:db:de:ab:ba:58:f0:44:37:fc:
         fd:f7:36:34:28:97:fb:27:cb:57:53:a2:71:a6:7e:ee:9a:8a:
         38:24:a5:d3:5a:5f:0f:36:44:b9:37:67:3d:87:c5:47:e3:0b:
         33:3c:f3:e9:49:61:e5:9b:ca:e3:41:91:5e:c2:f9:80:53:52:
         af:a5:12:6d:78:7c:4e:2b:a5:d7:ff:a0:f1:c8:88:a7:26:87:
         17:56:a4:2a:19:7b:2e:f7:09:e4:69:59:d7:6a:63:38:a9:bf:
         6e:df:80:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:46:10 2026 by rpki-client