Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.mft
File:                     ZbetlnWzgJ7OBK8wHC63A3_wK7s.mft (raw, json)
Hash identifier:          5cphx/LZ7GN+R9vWo5DDl/ONHkQX/c/7TnL4fUEPf6Q=
Subject key identifier:   68:91:55:F0:EE:39:CC:09:8E:AF:E8:8B:68:47:24:73:75:48:68:D5
Authority key identifier: 65:B7:AD:96:75:B3:80:9E:CE:04:AF:30:1C:2E:B7:03:7F:F0:2B:BB
Certificate issuer:       /CN=A9157A68/serialNumber=65B7AD9675B3809ECE04AF301C2EB7037FF02BBB
Certificate serial:       090D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZbetlnWzgJ7OBK8wHC63A3_wK7s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.mft
Manifest number:          08F9
Signing time:             Tue 18 Aug 2026 20:38:44 +0000
Manifest this update:     Tue 18 Aug 2026 20:38:44 +0000
Manifest next update:     Tue 25 Aug 2026 20:38:44 +0000
Files and hashes:         1: ZbetlnWzgJ7OBK8wHC63A3_wK7s.crl (hash: EPcHbucAhYpAMTtAtwWHVH7Vt0szMWu0RJ9EZEBqvBY=)
                          2: CCB2690EED0B11F0949792B43C6F56BC.roa (hash: ZB/ULJRoBGb/gcATfxowXu3Mcvz58isc65+AiNaWIZA=)
                          3: 294CEBA68FDD11EDBC45E84DC4F9AE02.roa (hash: hJLpP/cI9jDZ/8DhHypoNSXnMVx/3+PYyqeD/Uo9Ujw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.crl
                          rsync://rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZbetlnWzgJ7OBK8wHC63A3_wK7s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 20:38:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2317 (0x90d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9157A68, serialNumber=65B7AD9675B3809ECE04AF301C2EB7037FF02BBB
        Validity
            Not Before: Aug 18 20:38:44 2026 GMT
            Not After : Aug 25 20:38:44 2026 GMT
        Subject: CN=6a84c2d4-94d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:06:90:ea:a3:ef:1b:f7:b9:ea:ba:6c:f2:1f:
                    63:b9:da:82:a3:3d:56:5a:22:de:2c:92:04:dd:ea:
                    74:dd:63:04:55:64:e2:0f:9d:d6:63:aa:67:a1:18:
                    0c:1a:ef:0b:d7:32:c5:e8:6e:35:aa:b1:53:aa:55:
                    dd:28:e6:1a:26:8c:34:12:c3:fb:02:39:15:a9:f6:
                    86:ac:54:dd:ef:45:59:05:d2:dd:18:f7:bd:40:c4:
                    2a:31:77:07:0f:5d:17:f6:0e:3e:b4:3f:39:9f:f0:
                    63:1e:b3:a6:02:4d:91:c2:ee:fb:23:a8:2e:ad:e9:
                    9d:58:b7:02:91:4e:86:a8:ea:1e:21:31:d0:20:f6:
                    1d:ac:cf:ea:4e:cc:a5:e4:66:83:a3:2f:ff:54:64:
                    54:7b:0a:8a:47:10:24:ff:c5:f1:a3:70:66:b9:21:
                    c4:94:21:2f:24:d9:83:c0:e4:c2:8d:0d:8f:56:41:
                    ca:3b:9e:52:62:8d:be:f4:76:88:9e:12:50:67:36:
                    90:85:a3:9a:9b:96:6e:05:c8:71:7f:cb:5b:05:7a:
                    9d:1a:06:7a:d7:ff:02:00:39:70:07:e9:e5:9b:d3:
                    c1:71:c6:1a:be:70:72:23:d1:e3:89:88:c1:ae:02:
                    05:c6:38:c6:03:bd:27:dc:8e:2a:e4:5f:7c:80:b6:
                    d3:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:91:55:F0:EE:39:CC:09:8E:AF:E8:8B:68:47:24:73:75:48:68:D5
            X509v3 Authority Key Identifier:
                keyid:65:B7:AD:96:75:B3:80:9E:CE:04:AF:30:1C:2E:B7:03:7F:F0:2B:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZbetlnWzgJ7OBK8wHC63A3_wK7s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:89:5b:b8:67:21:35:a6:38:21:1e:a7:86:76:84:6c:97:c5:
         39:96:cb:85:50:a6:de:8c:4b:44:b5:86:ea:88:b8:79:fe:b5:
         f8:33:39:ab:cb:3e:af:19:63:db:3f:57:3e:73:5f:51:66:20:
         67:c1:0a:11:ab:0a:dc:8a:29:c8:82:52:ab:50:2a:31:a4:94:
         67:10:d2:a3:55:23:c3:cf:fd:58:7d:86:73:69:4e:38:ef:6a:
         cd:4e:13:7e:37:55:35:4b:c8:e5:5f:a2:f4:70:a9:89:2c:9a:
         06:4e:47:4d:18:82:67:95:73:1a:dd:e3:61:1f:cc:7e:37:66:
         8c:8f:f3:d3:28:40:06:b8:6f:f6:3b:8a:e2:b2:85:aa:b2:f3:
         36:59:07:f3:38:a1:0a:ef:bf:c5:cb:f1:b3:0d:64:86:87:ec:
         fe:13:e4:bf:d4:8c:d5:87:fd:21:d1:ff:06:1c:dc:a3:b1:b8:
         bd:b1:3a:26:1d:2e:ac:c8:57:36:84:ef:78:e4:11:5d:1a:ca:
         0a:94:62:47:59:80:5d:63:c7:1c:84:2c:f7:78:9e:7d:ce:d9:
         da:61:10:18:67:55:32:76:f5:be:dc:f2:5d:c9:80:b4:62:7a:
         50:03:ef:34:eb:b0:3f:33:73:28:4e:99:8e:1c:c1:2f:c2:05:
         72:e8:95:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 21:00:00 2026 by rpki-client