Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913EECE/612E3FB249E211F1BB80C78FB0833773/ZVgfndzt1kYkkalmT_KWJlal-FQ.mft
File:                     ZVgfndzt1kYkkalmT_KWJlal-FQ.mft (raw, json)
Hash identifier:          SdgNFz5/O/QRZtkUaXv5jFm6xoIlYM/FMYFPHniynk8=
Subject key identifier:   7B:FF:27:D7:26:4A:B7:BB:F9:9B:12:3E:4F:29:F6:67:B6:E5:2D:DD
Authority key identifier: 65:58:1F:9D:DC:ED:D6:46:24:91:A9:66:4F:F2:96:26:56:A5:F8:54
Certificate issuer:       /CN=A913EECE/serialNumber=65581F9DDCEDD6462491A9664FF2962656A5F854
Certificate serial:       3C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVgfndzt1kYkkalmT_KWJlal-FQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913EECE/612E3FB249E211F1BB80C78FB0833773/ZVgfndzt1kYkkalmT_KWJlal-FQ.mft
Manifest number:          39
Signing time:             Sun 23 Aug 2026 08:12:58 +0000
Manifest this update:     Sun 23 Aug 2026 08:12:58 +0000
Manifest next update:     Sun 30 Aug 2026 08:12:58 +0000
Files and hashes:         1: ZVgfndzt1kYkkalmT_KWJlal-FQ.crl (hash: SddVgn8tWe5VTORiMcCqi2UAvDUNvYu2Ym7+kRWbIPI=)
                          2: 4D03668449E711F1BCBB7A79B5833773.roa (hash: LGCooesPA4j4gXzOKKJURalYXy31FTNPJfPPUMRN1nE=)
                          3: y_gp4LNOTzJ7X2SOJLw8ypIAsDo.asa (hash: S9Bc8mXLb9sh0aNUGQrKudMwGjEjDbETo3LwaIAst0c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913EECE/612E3FB249E211F1BB80C78FB0833773/ZVgfndzt1kYkkalmT_KWJlal-FQ.crl
                          rsync://rpki.apnic.net/member_repository/A913EECE/612E3FB249E211F1BB80C78FB0833773/ZVgfndzt1kYkkalmT_KWJlal-FQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVgfndzt1kYkkalmT_KWJlal-FQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60 (0x3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913EECE, serialNumber=65581F9DDCEDD6462491A9664FF2962656A5F854
        Validity
            Not Before: Aug 23 08:12:58 2026 GMT
            Not After : Aug 30 08:12:58 2026 GMT
        Subject: CN=6a8aab8a-2b5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b3:17:d8:ab:69:db:cc:4b:58:e2:ad:d7:1c:
                    ee:ec:13:69:b8:b3:2c:74:1d:fa:2d:ae:de:4a:45:
                    63:b9:0b:e4:88:d6:6c:c1:26:f7:13:ba:ec:f3:2a:
                    e7:37:b1:10:a2:46:1f:e9:95:76:93:45:c2:1c:9d:
                    d2:5b:c8:88:93:7e:76:99:c3:ef:66:e3:e8:5b:cc:
                    b5:0e:a7:a0:ee:16:84:90:e2:6c:30:ad:b3:84:95:
                    72:de:d2:45:75:10:c8:c6:43:52:83:9d:25:db:56:
                    d5:8d:96:60:c3:a3:8e:c1:12:d6:10:86:da:e2:56:
                    cb:86:54:29:ac:e3:fd:d6:50:1b:cf:55:8a:35:c9:
                    33:8b:e3:25:01:bb:d1:29:87:67:6e:67:20:34:c3:
                    1f:09:1d:43:82:7d:bc:99:f1:33:64:53:24:62:7e:
                    b0:e8:c1:80:23:f0:42:8e:f1:6f:29:51:8b:76:a8:
                    43:74:d9:9f:73:f8:ea:5a:b9:5b:42:5b:f2:8b:4a:
                    90:31:2d:71:a8:7a:74:81:fd:bc:65:54:6d:a9:02:
                    bc:cb:cf:e6:25:64:74:97:ef:38:91:af:00:57:0c:
                    46:5e:9c:4e:42:1b:59:ec:02:34:13:01:8c:9c:09:
                    37:96:b8:b0:f1:98:2a:b9:e8:a9:16:c7:36:9b:70:
                    54:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:FF:27:D7:26:4A:B7:BB:F9:9B:12:3E:4F:29:F6:67:B6:E5:2D:DD
            X509v3 Authority Key Identifier:
                keyid:65:58:1F:9D:DC:ED:D6:46:24:91:A9:66:4F:F2:96:26:56:A5:F8:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913EECE/612E3FB249E211F1BB80C78FB0833773/ZVgfndzt1kYkkalmT_KWJlal-FQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVgfndzt1kYkkalmT_KWJlal-FQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EECE/612E3FB249E211F1BB80C78FB0833773/ZVgfndzt1kYkkalmT_KWJlal-FQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:a2:ba:4b:a7:0f:62:07:1a:64:19:cf:70:b1:02:50:f3:a7:
         91:62:db:e3:a8:97:e1:fa:8d:82:33:35:f8:38:ff:f9:36:28:
         31:d1:b6:09:41:8d:af:49:a5:9a:5c:3a:69:17:04:d2:fb:dd:
         ac:4f:7f:64:17:4d:30:c7:ea:0f:7e:28:94:b8:a3:80:1f:fa:
         2e:41:c6:c4:87:9e:3c:7d:81:93:f3:0e:0d:95:20:c4:a0:bf:
         82:5e:0b:2d:ea:6d:cc:2e:b2:14:96:58:52:de:7c:ed:c1:8a:
         46:83:dc:d5:34:9f:63:1a:b6:32:90:31:5c:a0:c1:05:85:71:
         93:fa:4c:36:4a:ce:cb:12:cb:b6:91:1f:d7:1b:e9:1b:9a:b1:
         84:00:d3:ee:0b:a1:c1:69:65:f6:f2:58:2b:07:72:de:5b:72:
         de:7d:e4:04:4c:20:d9:34:7f:36:3a:c4:42:52:8f:0b:de:13:
         54:d4:b5:f1:56:47:49:12:4e:15:79:e5:8f:1c:d4:76:e7:76:
         21:b1:fc:90:25:18:e4:07:18:0e:7a:38:96:f5:34:37:d5:96:
         2b:63:5a:34:d2:4b:74:cf:7c:36:ae:cd:6d:34:4a:47:13:de:
         97:ea:2a:db:d5:d6:f8:27:2c:ae:61:3c:ac:87:ba:f3:28:48:
         bc:ef:5e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 08:25:08 2026 by rpki-client