Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912519D/B8280664C75A11EB81E99E19C4F9AE02/ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.mft
File:                     ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.mft (raw, json)
Hash identifier:          BVqTWfNTNjXlK2hslWvCwte8SzxQP0iIyjNmzTmosmU=
Subject key identifier:   7B:51:DF:27:F1:46:93:D3:0C:73:4A:15:DD:92:1A:5F:8D:66:23:1C
Authority key identifier: 66:B9:D8:4F:43:36:A8:9D:84:D1:E0:2E:82:0A:79:68:6E:1E:52:C4
Certificate issuer:       /CN=A912519D/serialNumber=66B9D84F4336A89D84D1E02E820A79686E1E52C4
Certificate serial:       06A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912519D/B8280664C75A11EB81E99E19C4F9AE02/ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.mft
Manifest number:          069B
Signing time:             Tue 18 Aug 2026 22:48:10 +0000
Manifest this update:     Tue 18 Aug 2026 22:48:10 +0000
Manifest next update:     Tue 25 Aug 2026 22:48:10 +0000
Files and hashes:         1: ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.crl (hash: w+cOljd2F8qlIzDbyBtvnLwPUiKPF/J0eyqpmkogDFE=)
                          2: 10581DEAC75D11EBB00EBD1AC4F9AE02.roa (hash: 5sKr5Je6hbpFf2Q5JDk7nrFaAZ90rKYQRnu0lj3etl0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912519D/B8280664C75A11EB81E99E19C4F9AE02/ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.crl
                          rsync://rpki.apnic.net/member_repository/A912519D/B8280664C75A11EB81E99E19C4F9AE02/ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 22:48:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1698 (0x6a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912519D, serialNumber=66B9D84F4336A89D84D1E02E820A79686E1E52C4
        Validity
            Not Before: Aug 18 22:48:10 2026 GMT
            Not After : Aug 25 22:48:10 2026 GMT
        Subject: CN=6a84e12a-c7e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:28:cb:86:b2:37:b5:ab:91:d2:77:5b:c3:44:
                    c5:a8:99:b0:8c:e4:83:09:7a:30:2a:55:4c:41:99:
                    7e:d4:66:9c:ce:f1:e0:2d:fd:18:6f:81:4f:91:be:
                    62:f2:3d:1c:44:85:69:aa:9c:d5:07:c1:ba:12:0b:
                    94:2a:3d:7b:dd:b5:bb:7e:1c:a8:f7:00:5e:35:c6:
                    ca:58:d7:7f:31:7e:d1:2a:d1:1e:75:f4:90:0f:fc:
                    7d:9b:2a:b6:67:67:47:43:b1:19:d4:c8:03:38:fa:
                    e8:c7:46:a7:5c:16:3e:4d:cd:c6:87:c7:48:e8:28:
                    75:ae:92:5c:b5:c4:a0:0a:b9:a5:2c:02:57:bf:1e:
                    a8:0c:57:bf:5d:6d:bc:19:e8:dd:f8:6b:e4:07:c6:
                    70:f1:f8:0d:77:fd:93:7a:6f:78:f2:34:b6:0d:2d:
                    f1:fc:da:27:cd:f0:94:35:e4:4a:bd:ff:c5:3a:1c:
                    73:aa:68:dd:cc:b4:de:67:73:0b:9e:3c:e3:6e:a4:
                    b5:60:f2:e8:1b:9f:25:36:8b:02:66:9e:59:6a:ce:
                    6c:5c:e8:fc:6e:8c:d3:01:da:64:1b:ff:52:e0:ad:
                    28:9f:1a:17:f8:b2:0a:68:4a:e7:4b:ad:77:00:1b:
                    08:54:5e:13:f6:69:a0:d3:fe:54:05:be:44:f1:57:
                    71:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:51:DF:27:F1:46:93:D3:0C:73:4A:15:DD:92:1A:5F:8D:66:23:1C
            X509v3 Authority Key Identifier:
                keyid:66:B9:D8:4F:43:36:A8:9D:84:D1:E0:2E:82:0A:79:68:6E:1E:52:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912519D/B8280664C75A11EB81E99E19C4F9AE02/ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912519D/B8280664C75A11EB81E99E19C4F9AE02/ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:f0:96:1c:07:7d:ca:7e:c1:2d:b2:9f:f7:f1:2e:99:5c:3a:
         72:6f:2e:0c:53:66:ee:30:ac:95:61:af:e5:1a:08:7e:03:3a:
         fc:ef:5e:58:f9:f4:8b:aa:57:58:5d:bb:85:f4:0a:a2:86:1b:
         0b:ac:ff:02:f2:39:e4:ae:10:f7:16:d5:9d:67:1f:8b:97:27:
         ba:b3:9e:ec:7b:54:cb:78:39:cb:ea:be:1e:76:62:c8:17:77:
         1e:c5:44:dd:2b:63:71:39:bb:3f:53:8d:e1:0a:a5:67:ce:73:
         75:5a:ca:43:47:74:94:b5:ce:7a:13:19:2c:55:c3:b6:11:c1:
         aa:9f:00:8a:f6:93:a4:40:f0:69:e7:64:a2:f7:94:87:fa:ef:
         50:b7:24:ac:d7:7e:6c:23:3d:52:4b:ac:02:20:f6:73:6b:9d:
         a9:44:47:01:31:63:72:08:3f:a7:83:ed:0c:e7:f5:4d:f3:c3:
         c4:63:c4:79:7f:80:3f:2f:ae:3c:ce:a0:41:b4:57:b9:09:f9:
         3b:b7:b5:98:7b:5b:16:47:88:bb:ec:aa:93:ef:69:f2:d6:90:
         d7:0a:aa:ae:97:aa:ee:8f:51:7f:ee:c4:42:ec:34:85:2b:c0:
         71:21:5d:6f:25:00:08:75:c1:be:89:62:bd:cc:4f:40:42:65:
         79:4e:cc:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:51:11 2026 by rpki-client