Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft
File:                     zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft (raw, json)
Hash identifier:          D5E4XP+Yt6lmFHDtkqWUp6VbZ7RFVBP5v58hffcVu9U=
Subject key identifier:   4A:9A:2C:12:6F:B6:1D:CE:0F:F3:26:99:43:9C:9E:35:EC:F1:07:2B
Authority key identifier: CD:C1:87:A6:42:B4:D7:EC:50:DC:AE:59:A0:06:6F:14:8D:51:08:01
Certificate issuer:       /CN=A912672E/serialNumber=CDC187A642B4D7EC50DCAE59A0066F148D510801
Certificate serial:       0309
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft
Manifest number:          0301
Signing time:             Wed 19 Aug 2026 01:32:26 +0000
Manifest this update:     Wed 19 Aug 2026 01:32:26 +0000
Manifest next update:     Wed 26 Aug 2026 01:32:26 +0000
Files and hashes:         1: zcGHpkK01-xQ3K5ZoAZvFI1RCAE.crl (hash: HiCDfysr1QJ2sa1T8M5JApEBzRutbayXSQzwmcMhw5o=)
                          2: 71CE3962337511EDAE4C4121C4F9AE02.roa (hash: SrZFCYfwkgEZN+fxU55BuSix1/7qyq8HmlWELE9+odk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.crl
                          rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 01:32:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 777 (0x309)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912672E, serialNumber=CDC187A642B4D7EC50DCAE59A0066F148D510801
        Validity
            Not Before: Aug 19 01:32:26 2026 GMT
            Not After : Aug 26 01:32:26 2026 GMT
        Subject: CN=6a8507aa-633d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:8e:2a:fd:a8:5b:32:37:da:71:f4:32:5c:ed:
                    dd:cd:6f:b7:78:67:ad:7e:a5:5a:01:4f:d1:83:6a:
                    0a:35:1a:b5:9d:13:cf:7f:69:53:55:78:cb:75:23:
                    07:1b:be:80:e4:a4:e3:0e:21:59:24:3d:b6:ef:00:
                    53:c0:71:a4:59:40:56:24:6a:2a:49:b9:86:5b:16:
                    c4:91:7d:07:12:58:33:fa:bd:a7:d3:9a:8e:64:45:
                    70:0b:db:4a:9e:32:67:14:a8:35:37:5e:7b:ae:0f:
                    2d:6c:a4:4d:a5:9a:6d:dc:5b:52:b4:8d:51:28:46:
                    b4:3d:42:fd:32:8c:ee:c1:54:de:8a:27:5f:a5:7c:
                    f9:5d:3f:13:ee:a6:6c:7c:5c:f9:84:08:d0:b3:56:
                    b0:50:40:aa:aa:be:1e:f6:a7:f9:e9:49:01:bd:74:
                    a8:48:00:dc:06:55:c1:ba:36:de:e5:5b:4f:ee:27:
                    f6:21:c6:ff:3d:de:19:fd:0a:dc:1a:ef:1a:f4:47:
                    e0:67:25:35:c9:73:76:dd:a4:e0:f2:5d:6a:7b:55:
                    f0:fe:46:72:cc:27:a2:b6:8b:66:7a:cc:b3:0a:f6:
                    03:4d:77:ea:2e:10:65:8e:1c:a9:07:87:11:0e:50:
                    e7:05:36:1b:8f:5e:24:2c:54:98:4a:a7:d4:43:09:
                    dc:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:9A:2C:12:6F:B6:1D:CE:0F:F3:26:99:43:9C:9E:35:EC:F1:07:2B
            X509v3 Authority Key Identifier:
                keyid:CD:C1:87:A6:42:B4:D7:EC:50:DC:AE:59:A0:06:6F:14:8D:51:08:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:fb:41:b2:23:1a:f9:22:a3:a6:55:c5:88:c5:0a:75:58:ef:
         28:4d:b6:21:c7:e6:54:3e:26:9b:57:9d:9e:62:65:45:21:9f:
         40:17:0a:73:1a:d3:a9:4b:86:13:aa:35:a3:a9:13:c1:63:b9:
         68:2f:40:7d:89:01:8d:df:75:dc:32:0d:b1:f2:70:da:fa:a0:
         08:8b:9f:23:bb:55:9e:05:10:4d:66:2d:0b:79:11:c2:cd:c7:
         71:81:99:3b:d9:2a:d9:a6:55:6d:c3:f6:d0:c6:fa:22:91:4e:
         5a:78:92:ef:a0:e8:8e:f5:36:0d:40:e0:af:6b:83:a4:fd:a2:
         cc:73:87:49:59:e4:eb:39:1f:6b:63:34:6a:07:b1:d9:13:0f:
         f8:40:76:1d:c2:60:56:af:61:4a:95:19:ee:76:ed:ef:44:4e:
         3b:af:73:aa:ee:b1:84:b6:d2:68:c4:26:bd:22:51:3c:f5:91:
         38:72:8a:c8:9f:33:a0:7b:cc:cb:47:b2:44:b1:e1:63:d9:26:
         2a:91:bf:1d:0c:7a:df:a0:1f:60:16:6c:fa:bf:f0:ab:1a:ec:
         87:6c:c0:cd:80:fc:5c:52:2f:46:89:d8:bc:49:85:56:95:5b:
         3d:51:fb:e4:56:5f:99:b6:b7:96:34:a9:d8:b6:06:3c:a5:b5:
         5d:85:64:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 13:40:44 2026 by rpki-client