Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9133065/DB3514B0823311F0939BFF3FC4F9AE02/ZUvP1wq8YLVBOShTBe_Q4xXDNo4.mft
File:                     ZUvP1wq8YLVBOShTBe_Q4xXDNo4.mft (raw, json)
Hash identifier:          WpwkGvs4VvBOJ30xMsblkBNop97RpTSKTTD8ddXY7/A=
Subject key identifier:   00:70:C5:4D:5F:45:6E:86:E5:23:5B:37:F4:2B:29:08:A4:C3:14:F6
Authority key identifier: 65:4B:CF:D7:0A:BC:60:B5:41:39:28:53:05:EF:D0:E3:15:C3:36:8E
Certificate issuer:       /CN=A9133065/serialNumber=654BCFD70ABC60B54139285305EFD0E315C3368E
Certificate serial:       E4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUvP1wq8YLVBOShTBe_Q4xXDNo4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9133065/DB3514B0823311F0939BFF3FC4F9AE02/ZUvP1wq8YLVBOShTBe_Q4xXDNo4.mft
Manifest number:          D2
Signing time:             Mon 31 Aug 2026 07:21:01 +0000
Manifest this update:     Mon 31 Aug 2026 07:21:00 +0000
Manifest next update:     Mon 07 Sep 2026 07:21:00 +0000
Files and hashes:         1: ZUvP1wq8YLVBOShTBe_Q4xXDNo4.crl (hash: eXOWkErWpKIQmwPsHzLJuVzZYkWyg252qz2sEASITXo=)
                          2: 9D2C024A96AC11F0AFADA123C4F9AE02.roa (hash: Jr+uvL5Lzwj0xIH/fgWXn5OBXagya0JsBhe+PUP4Sn8=)
                          3: CB09977AFB0D11F08355CD12746F56BC.roa (hash: YImw3kG2tsoSq5Jg/QGVhgoG+IwwHtEUZCL22XeeZOo=)
                          4: BA3B98B2FB0D11F098EF6A0C746F56BC.roa (hash: 34c/Kc0Bwls+6oOOKNDceH3aYMTH4DTkUaqgCKVVab4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9133065/DB3514B0823311F0939BFF3FC4F9AE02/ZUvP1wq8YLVBOShTBe_Q4xXDNo4.crl
                          rsync://rpki.apnic.net/member_repository/A9133065/DB3514B0823311F0939BFF3FC4F9AE02/ZUvP1wq8YLVBOShTBe_Q4xXDNo4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUvP1wq8YLVBOShTBe_Q4xXDNo4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Sep 2026 07:20:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 228 (0xe4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9133065, serialNumber=654BCFD70ABC60B54139285305EFD0E315C3368E
        Validity
            Not Before: Aug 31 07:21:00 2026 GMT
            Not After : Sep  7 07:21:00 2026 GMT
        Subject: CN=6a952b5c-67c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:7a:7a:18:0a:3e:49:23:fb:2f:90:e3:c7:03:
                    19:b0:9d:65:d1:bb:2e:e1:d7:ab:34:75:01:97:4a:
                    19:81:cd:3d:1a:83:12:2f:80:86:bd:c0:91:fe:3f:
                    32:ae:0b:d7:99:6e:d2:c1:e9:5b:dc:d8:53:7b:56:
                    2d:a9:27:50:c2:ac:e5:64:d6:92:d5:35:30:f1:d1:
                    0b:b6:2c:9e:93:7a:60:d1:7a:97:4f:8d:92:8d:9f:
                    03:a9:49:ae:f0:3d:21:73:29:64:70:ac:1c:63:fa:
                    92:3d:9f:dd:f7:01:8f:d6:a3:36:4f:39:40:ef:a9:
                    d1:5d:23:57:55:70:25:79:71:65:cc:88:f0:b4:c1:
                    0d:1e:52:6e:d1:c7:11:39:ce:67:5d:64:75:5e:a9:
                    85:05:ee:09:e9:97:c9:be:4e:62:f0:53:d3:8f:80:
                    8c:61:98:20:49:c3:fd:70:82:3d:b8:26:80:50:e9:
                    da:3a:e3:96:95:7c:e8:50:85:73:76:17:df:5c:07:
                    5d:31:58:c2:da:b9:68:1f:5f:a1:5f:ed:b0:71:a6:
                    d7:79:e5:26:9e:bb:23:93:09:a6:f2:79:0a:ac:c7:
                    32:37:79:dc:8d:c7:9b:67:53:d2:06:fa:a4:45:18:
                    c4:2c:ba:4c:cb:90:dd:fc:8f:fb:18:ef:37:b9:50:
                    c4:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:70:C5:4D:5F:45:6E:86:E5:23:5B:37:F4:2B:29:08:A4:C3:14:F6
            X509v3 Authority Key Identifier:
                keyid:65:4B:CF:D7:0A:BC:60:B5:41:39:28:53:05:EF:D0:E3:15:C3:36:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9133065/DB3514B0823311F0939BFF3FC4F9AE02/ZUvP1wq8YLVBOShTBe_Q4xXDNo4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUvP1wq8YLVBOShTBe_Q4xXDNo4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133065/DB3514B0823311F0939BFF3FC4F9AE02/ZUvP1wq8YLVBOShTBe_Q4xXDNo4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:51:94:35:6c:fe:5d:7f:d2:63:6f:b9:ef:51:59:67:8b:ff:
         29:f0:d9:e3:1a:02:69:43:54:3e:69:b4:cd:c0:2d:fb:ad:ef:
         56:99:0a:92:04:d3:8b:0a:39:9c:12:3c:a1:8f:77:95:f3:4f:
         f7:2f:d0:82:44:02:23:69:8a:0c:39:60:2b:b4:0f:b3:06:a7:
         32:bf:7c:55:a2:22:58:25:af:fa:30:6f:25:56:3b:02:6d:a6:
         de:48:cd:32:1b:85:0e:a8:7a:dc:9a:51:8e:a8:92:b1:16:48:
         7e:a6:3c:b2:f8:c5:e6:d5:1e:ac:62:e0:be:dd:f5:02:f1:5d:
         bc:d3:0b:97:e5:88:f9:7d:65:76:2c:72:d2:a3:32:cc:77:3b:
         1b:53:ae:c2:45:65:80:55:c4:e7:24:60:82:cb:15:08:e4:37:
         34:fe:c6:a1:12:a0:6a:39:65:67:a6:ad:6f:e9:fd:c7:56:5a:
         12:d0:01:06:00:fa:ec:6c:24:43:03:32:64:44:5d:d0:a1:f1:
         61:8d:43:d2:30:fa:81:03:07:2a:e3:ed:06:e9:91:9d:a7:79:
         85:dd:06:62:31:78:f8:86:2a:de:f2:08:f4:38:74:3b:80:e4:
         54:7d:05:e4:e6:0f:e3:ac:98:2c:57:01:5c:0e:e8:d8:29:a9:
         7f:91:f7:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 03:32:06 2026 by rpki-client