Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.mft
File:                     ZDqJ6ggKrIb4potVEI53sQahQco.mft (raw, json)
Hash identifier:          FYKWGKmkj6Wr28aR3kocusjfwySwYEaNodJ4DfOgxpw=
Subject key identifier:   B7:03:65:67:E3:9C:1F:65:CE:F0:35:C9:5D:EE:8B:88:A5:51:06:FB
Authority key identifier: 64:3A:89:EA:08:0A:AC:86:F8:A6:8B:55:10:8E:77:B1:06:A1:41:CA
Certificate issuer:       /CN=A914237B/serialNumber=643A89EA080AAC86F8A68B55108E77B106A141CA
Certificate serial:       024E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDqJ6ggKrIb4potVEI53sQahQco.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.mft
Manifest number:          0240
Signing time:             Fri 17 Jul 2026 03:34:36 +0000
Manifest this update:     Fri 17 Jul 2026 03:34:36 +0000
Manifest next update:     Fri 24 Jul 2026 03:34:36 +0000
Files and hashes:         1: ZDqJ6ggKrIb4potVEI53sQahQco.crl (hash: Yt8zVX5EVhGXXoU/z9joOD2atXze+gBk3emihLmIQQI=)
                          2: 133A934C693111F0A51E5767C4F9AE02.roa (hash: nSQXNi2ZjVcTfBYdL/JBUUsl+LZUNi12cbTDHTeZACg=)
                          3: 47620F428FBB11EF8DDB8746C4F9AE02.roa (hash: ttjS00c2KG8TfhOWjt/eFcp3eeq+USxoD6ESfymiud8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.crl
                          rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDqJ6ggKrIb4potVEI53sQahQco.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 03:34:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 590 (0x24e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914237B, serialNumber=643A89EA080AAC86F8A68B55108E77B106A141CA
        Validity
            Not Before: Jul 17 03:34:36 2026 GMT
            Not After : Jul 24 03:34:36 2026 GMT
        Subject: CN=6a59a2cc-f548
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d7:ef:54:63:1b:ae:e3:21:a4:48:8e:19:27:
                    99:96:ef:8e:bc:04:d0:dd:cd:15:03:e1:b4:0a:f2:
                    c8:76:2b:3a:fc:2f:76:77:03:c4:6b:51:66:22:14:
                    e2:3f:b3:76:17:05:1d:e1:d6:00:78:34:72:42:d4:
                    24:d5:a0:f9:8d:a7:66:5b:f5:ef:87:38:01:0a:12:
                    70:4e:ab:c2:04:20:e1:c7:ce:6c:25:78:ba:9c:97:
                    e7:9b:02:86:fb:a4:80:d8:59:80:05:e4:3c:01:33:
                    27:e2:ab:88:ad:a3:b7:b6:4c:98:44:db:27:5a:70:
                    d3:bd:0e:c3:21:f3:96:78:aa:65:39:39:bc:cd:f2:
                    74:6b:71:db:a1:71:95:57:70:fe:e3:6f:4e:58:00:
                    a0:27:43:62:db:46:dd:52:8c:5a:08:2a:52:0c:22:
                    03:00:53:ed:ba:79:4f:a8:c5:bd:e8:d3:cb:3c:99:
                    1c:bd:be:d5:25:04:e1:28:e4:55:de:d7:e8:6e:0b:
                    9c:ec:c6:e0:5a:44:f3:31:74:d6:4a:4f:f1:88:55:
                    af:97:bc:8e:25:eb:9d:e1:66:44:50:db:5c:cd:54:
                    c3:a3:5a:65:26:50:a3:62:0c:55:0f:f3:2a:a4:b9:
                    09:76:73:f8:32:16:9e:42:bd:7d:38:71:8f:5e:f3:
                    58:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:03:65:67:E3:9C:1F:65:CE:F0:35:C9:5D:EE:8B:88:A5:51:06:FB
            X509v3 Authority Key Identifier:
                keyid:64:3A:89:EA:08:0A:AC:86:F8:A6:8B:55:10:8E:77:B1:06:A1:41:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDqJ6ggKrIb4potVEI53sQahQco.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:05:b1:1f:bd:1e:dd:9a:39:27:93:f1:75:0b:28:7c:60:5f:
         ea:11:a2:f6:e3:62:84:d1:8e:33:6f:c3:a9:25:c0:27:c4:cc:
         de:90:0f:65:ba:38:53:be:68:46:99:f6:d8:df:f8:e4:0a:49:
         b8:21:aa:2d:17:6f:a7:33:b2:82:c1:32:3e:d5:3f:2b:9f:a2:
         ce:36:4e:66:19:19:65:f0:34:6d:36:87:4f:f2:7f:32:2a:cd:
         70:eb:c9:09:d9:2d:d1:04:c8:c0:a8:b3:6a:d0:b5:42:b8:f5:
         6b:ee:c0:f0:73:58:ed:05:6e:72:1e:9a:72:ed:ce:ce:cc:24:
         dc:0d:de:83:95:2c:a2:bb:8c:cf:26:5c:7e:f6:0b:3a:1f:01:
         58:e0:d6:8b:0d:f9:20:9d:73:b9:06:8b:ed:2d:f6:a6:cd:d1:
         9a:8b:6d:23:57:c1:f5:0c:94:07:13:55:c6:ff:3c:ae:ad:ff:
         55:c7:ad:df:a4:f9:e2:91:2f:7a:43:70:e3:df:cb:e1:2b:f1:
         07:0f:e2:21:c2:f9:06:42:96:00:6d:8d:c9:61:fe:b1:79:e6:
         e7:e3:23:bd:c7:e0:91:c9:21:6e:66:f9:14:72:32:6b:da:50:
         40:68:97:47:52:51:f4:4c:03:03:01:26:da:5a:a7:35:5b:e1:
         75:7b:2b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 04:34:57 2026 by rpki-client