Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.mft
File:                     ZhNNob_trAyRnSax9_nhaK-dK04.mft (raw, json)
Hash identifier:          oOg+jb9vqk/7ou6xz2r/mVrIv6msNyzyQRoPA/yWewU=
Subject key identifier:   CD:37:40:B1:54:4E:00:D8:1B:19:3B:E6:5E:95:BF:98:41:42:72:BF
Authority key identifier: 66:13:4D:A1:BF:ED:AC:0C:91:9D:26:B1:F7:F9:E1:68:AF:9D:2B:4E
Certificate issuer:       /CN=A912A5D4/serialNumber=66134DA1BFEDAC0C919D26B1F7F9E168AF9D2B4E
Certificate serial:       0122
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZhNNob_trAyRnSax9_nhaK-dK04.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.mft
Manifest number:          010C
Signing time:             Sun 05 Jul 2026 06:51:14 +0000
Manifest this update:     Sun 05 Jul 2026 06:51:13 +0000
Manifest next update:     Sun 12 Jul 2026 06:51:13 +0000
Files and hashes:         1: ZhNNob_trAyRnSax9_nhaK-dK04.crl (hash: LKOUUPyv3rAEInaIe8+qZPmKY3WAFKlD5NeXhkl3Pec=)
                          2: 015250F6309311F084231321C4F9AE02.roa (hash: BeulAEPDoFLGO9UYVAx1+bgz0obUOcmmrn0Kzh9wNG8=)
                          3: B8104C9E531511F189594BAEBE833773.roa (hash: lrI09dlEBCTooAeOU2Wr6Z8X0DDGHdt7h2TqH79QhUw=)
                          4: 25922C44F3CF11EFBCC75246C4F9AE02.roa (hash: SFDboHNXYkxFP4C1ts24MrwCHP6KpG7hvpdePdBynPw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.crl
                          rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZhNNob_trAyRnSax9_nhaK-dK04.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Jul 2026 06:51:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 290 (0x122)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A5D4, serialNumber=66134DA1BFEDAC0C919D26B1F7F9E168AF9D2B4E
        Validity
            Not Before: Jul  5 06:51:13 2026 GMT
            Not After : Jul 12 06:51:13 2026 GMT
        Subject: CN=6a49fee1-185b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:52:c9:1c:f6:ca:94:7a:fb:27:6d:54:d6:7a:
                    7c:1b:53:0d:04:4f:f3:7e:72:c2:23:91:2d:fb:c7:
                    82:13:44:26:d5:f4:ac:7d:0c:35:8b:34:b0:82:46:
                    d1:02:ab:fb:c5:f9:22:bc:5d:28:38:c7:fb:36:c6:
                    cd:65:9c:b0:95:ed:35:fb:31:cf:a6:6c:e2:e8:42:
                    57:2d:b4:7f:a9:70:7f:73:60:db:a7:85:7e:97:ed:
                    e3:ae:2d:b6:29:eb:63:0b:f7:28:9f:8f:f1:d4:e6:
                    ae:29:07:77:cb:74:a6:a8:ff:57:4b:4f:56:3f:47:
                    47:b9:5c:12:6f:4f:be:0e:cd:75:67:f0:ab:6f:52:
                    e7:b8:20:28:ba:de:0f:10:41:2f:1a:36:0c:49:6f:
                    7b:86:f6:e0:df:8b:5c:38:0d:d1:10:b9:b7:e8:a3:
                    10:57:29:61:9e:6a:f3:e0:37:b0:66:39:9c:57:8a:
                    85:8f:47:72:ad:31:59:f2:ef:c1:e9:11:1a:c3:b1:
                    d0:51:60:ff:98:88:89:46:d1:e3:4f:2a:bb:63:8a:
                    ae:39:19:e3:62:62:be:1d:71:2d:a4:67:a7:4b:28:
                    30:f9:91:38:ca:14:f8:d3:b0:12:34:fb:85:fa:34:
                    dc:f2:cf:9c:88:00:45:a0:c7:e8:8e:e5:0e:52:a8:
                    0f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:37:40:B1:54:4E:00:D8:1B:19:3B:E6:5E:95:BF:98:41:42:72:BF
            X509v3 Authority Key Identifier:
                keyid:66:13:4D:A1:BF:ED:AC:0C:91:9D:26:B1:F7:F9:E1:68:AF:9D:2B:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZhNNob_trAyRnSax9_nhaK-dK04.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:d6:9f:a2:53:67:d7:4f:02:9e:32:50:82:ee:63:41:54:50:
         79:10:1d:c0:c5:ff:2b:8f:16:37:03:ec:66:47:58:87:07:82:
         32:86:1f:77:6a:5a:cd:10:0a:58:4c:25:f7:3f:e3:23:f1:4c:
         e3:b3:61:f7:7b:f7:c1:3e:3a:8b:71:07:bf:97:15:4f:0f:57:
         3c:f5:ed:a3:f8:19:a9:5c:c6:d0:60:fe:74:bf:f5:7e:d6:23:
         6e:01:3c:75:94:94:79:90:02:52:d8:8d:a5:46:36:79:bb:35:
         59:b3:20:11:12:4e:be:0f:2b:89:e4:a0:95:d1:4d:a8:39:09:
         cf:14:e8:9a:bb:dc:02:4d:27:2d:58:0a:7d:08:42:7b:bc:bf:
         ee:d3:61:03:1b:6c:ac:28:8a:9d:64:50:a2:63:d0:c5:65:9e:
         f9:74:2a:8e:ac:21:95:e1:02:38:74:17:57:59:e0:2f:cc:4f:
         d8:b1:aa:d8:e9:7e:bc:ab:4c:dc:e3:19:fa:9f:67:f3:89:0e:
         57:b4:3c:d9:bf:e8:16:da:57:f5:f2:3e:5f:ba:3a:d6:6e:02:
         04:02:55:68:f3:30:c6:60:df:85:1b:7e:a9:8f:e0:0f:73:43:
         8a:4f:bd:9b:16:7c:d5:89:4a:89:68:9f:07:41:48:cc:31:e7:
         7b:83:a4:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 00:09:09 2026 by rpki-client