Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.mft
File:                     ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.mft (raw, json)
Hash identifier:          r+dy7JsbQqwJpF99ByN9LJFZG7/rqCb/o/ED6YcCwQE=
Subject key identifier:   A7:20:BA:4C:79:F3:B4:07:A3:B2:A7:1F:99:81:E3:7C:C7:87:C6:FD
Authority key identifier: 64:F2:1C:DE:64:8B:39:B5:28:2B:8C:B1:27:92:8E:23:32:48:82:94
Certificate issuer:       /CN=A91336DF/serialNumber=64F21CDE648B39B5282B8CB127928E2332488294
Certificate serial:       0159
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.mft
Manifest number:          0151
Signing time:             Fri 17 Jul 2026 06:15:41 +0000
Manifest this update:     Fri 17 Jul 2026 06:15:41 +0000
Manifest next update:     Fri 24 Jul 2026 06:15:41 +0000
Files and hashes:         1: ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.crl (hash: GYWL/ldTwSmoQKZcVPuEobIN5Mq9BQ37vcsV6XPK6Dg=)
                          2: F51067B4C65D11EF84CD2E17C4F9AE02.roa (hash: 0/KER6jtg26LthiMhAoQFVwFGIJvGgJoOvUmyRDRsmM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.crl
                          rsync://rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 06:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 345 (0x159)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91336DF, serialNumber=64F21CDE648B39B5282B8CB127928E2332488294
        Validity
            Not Before: Jul 17 06:15:41 2026 GMT
            Not After : Jul 24 06:15:41 2026 GMT
        Subject: CN=6a59c88d-8dbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:23:96:76:c2:b3:9d:9b:bb:55:52:d1:85:79:
                    48:7e:11:06:06:f3:88:5c:98:19:b2:63:d2:fd:5b:
                    83:97:33:20:87:d9:32:de:31:94:92:d4:c6:b1:f9:
                    7a:0a:7f:48:1b:d0:c0:7a:96:9c:15:d2:a2:b4:3e:
                    60:c3:65:05:57:98:a6:70:3a:16:0f:a7:77:ae:47:
                    7d:fb:95:d5:59:fe:85:1b:dd:a2:6d:17:eb:a9:ae:
                    36:88:0a:c8:42:f3:20:a4:00:49:a9:97:92:c2:e2:
                    35:94:7c:03:4f:f4:a5:a5:a3:5e:aa:50:02:2c:6b:
                    42:0c:ec:28:b3:18:79:6c:a5:34:ba:3b:e5:07:9d:
                    40:de:42:19:d5:ec:84:53:96:0f:c5:07:15:83:9e:
                    86:b6:8a:83:65:50:02:c3:11:f6:fa:3d:84:e3:d2:
                    09:ad:9b:f8:c7:4a:d8:6a:7e:f8:84:7f:9d:1f:16:
                    df:4c:0c:01:3b:4e:ff:8f:9c:96:d0:38:4c:47:d0:
                    75:dd:7c:29:00:d0:16:2c:7a:69:29:d2:e7:18:e7:
                    3b:ce:1e:09:4c:24:17:46:7a:b2:35:d6:78:be:81:
                    4c:39:01:3f:5b:d7:d0:86:98:7e:af:14:82:c4:97:
                    c7:90:ed:7f:86:1e:c1:4c:4e:32:d7:1c:b6:61:d6:
                    1b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:20:BA:4C:79:F3:B4:07:A3:B2:A7:1F:99:81:E3:7C:C7:87:C6:FD
            X509v3 Authority Key Identifier:
                keyid:64:F2:1C:DE:64:8B:39:B5:28:2B:8C:B1:27:92:8E:23:32:48:82:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:20:15:30:cb:93:20:5a:61:9a:17:a9:54:69:7b:8a:64:66:
         43:18:ed:ef:69:bc:93:29:5b:83:d2:1c:88:8d:1a:0d:e0:0c:
         03:91:74:db:49:ad:3d:ca:33:96:e5:11:07:3a:7b:f7:86:ac:
         7d:7c:67:b0:77:2b:36:f7:1c:a2:18:cc:98:4e:d6:e6:06:84:
         18:2c:6e:52:16:a8:c7:7e:51:0e:eb:a2:cb:94:88:f6:67:fa:
         9e:d6:9c:c8:33:72:83:b0:7c:30:cf:a0:14:ed:ad:e4:35:e6:
         b5:b3:ec:69:32:86:51:d5:22:8b:d0:54:2c:61:75:1c:5d:8b:
         1c:71:ec:97:a2:eb:6a:74:a8:4a:e3:84:cc:f8:b4:67:64:f5:
         3f:e5:86:d2:c3:ee:3c:ba:1c:50:3d:dc:4a:67:40:06:8e:21:
         36:03:99:6b:19:83:cd:e8:da:5a:98:09:d5:ec:8a:b1:f4:d7:
         0e:88:f8:6f:4c:f0:11:d0:ac:12:cf:3c:87:f5:67:b1:d2:8f:
         02:bf:c4:96:c8:45:b1:32:dc:8c:0b:cd:a4:b5:c4:5e:62:64:
         0b:59:fe:91:a5:d7:e0:58:70:06:1a:22:75:c2:be:d6:ec:ce:
         cd:55:bb:68:44:73:55:62:31:b1:24:a5:37:17:d2:4c:46:74:
         9e:a6:29:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 10:09:52 2026 by rpki-client