Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B358/C8FD800438A211F186E88F207EEE528E/zcExhQol8Mzfybm5zI7mTDr6bQg.mft
File:                     zcExhQol8Mzfybm5zI7mTDr6bQg.mft (raw, json)
Hash identifier:          vhI3GKsdBGXn4vm0DxRAsccuTgQYoZRT+xtQ2y567Ug=
Subject key identifier:   F5:A6:1D:1C:54:D7:73:28:B9:86:94:A6:AD:AC:95:B2:56:EC:22:3A
Authority key identifier: CD:C1:31:85:0A:25:F0:CC:DF:C9:B9:B9:CC:8E:E6:4C:3A:FA:6D:08
Certificate issuer:       /CN=A915B358/serialNumber=CDC131850A25F0CCDFC9B9B9CC8EE64C3AFA6D08
Certificate serial:       3A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zcExhQol8Mzfybm5zI7mTDr6bQg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B358/C8FD800438A211F186E88F207EEE528E/zcExhQol8Mzfybm5zI7mTDr6bQg.mft
Manifest number:          37
Signing time:             Fri 17 Jul 2026 09:21:01 +0000
Manifest this update:     Fri 17 Jul 2026 09:21:01 +0000
Manifest next update:     Fri 24 Jul 2026 09:21:01 +0000
Files and hashes:         1: zcExhQol8Mzfybm5zI7mTDr6bQg.crl (hash: 4wkOXB4WfOGUw4Dg51VaULv9DOsaL1Jk3nmWakyLmyc=)
                          2: 93D240467ABE11F18A7AD4526AA30FBC.roa (hash: A5aC7Faz0VV3KV4p5Rsl3QCLtxJwuOgvpBty2jVbaFA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B358/C8FD800438A211F186E88F207EEE528E/zcExhQol8Mzfybm5zI7mTDr6bQg.crl
                          rsync://rpki.apnic.net/member_repository/A915B358/C8FD800438A211F186E88F207EEE528E/zcExhQol8Mzfybm5zI7mTDr6bQg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zcExhQol8Mzfybm5zI7mTDr6bQg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 09:21:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58 (0x3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B358, serialNumber=CDC131850A25F0CCDFC9B9B9CC8EE64C3AFA6D08
        Validity
            Not Before: Jul 17 09:21:01 2026 GMT
            Not After : Jul 24 09:21:01 2026 GMT
        Subject: CN=6a59f3fd-5bba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:1c:8d:1f:b1:32:bd:15:be:4e:94:24:bf:24:
                    91:d8:63:75:20:ff:ce:ae:53:18:97:13:bd:32:eb:
                    1c:2c:86:9b:27:a6:3c:af:1b:5d:b3:53:a3:5b:6f:
                    4e:69:67:3b:4f:b1:a1:ad:cc:7a:15:35:36:7d:50:
                    d1:e7:be:72:c5:55:16:1e:8c:37:36:9b:91:46:49:
                    ca:ab:d6:6d:0c:3b:e5:26:fc:4d:9d:55:6c:28:c6:
                    cb:74:74:dc:76:be:51:da:c7:c9:a6:6b:a7:4f:55:
                    52:a6:38:af:77:7c:53:ba:c2:e1:aa:41:f4:9f:a7:
                    06:da:5c:d7:12:a3:28:f8:88:a3:11:d4:b7:65:83:
                    95:48:9c:c9:97:19:00:f8:96:26:d8:9b:f5:f7:23:
                    f1:60:d6:f5:9d:f1:45:fd:00:6d:2d:20:46:cb:fc:
                    2a:64:13:14:ad:5d:79:16:62:c2:5b:ff:9f:25:73:
                    d6:5a:dd:38:40:88:0e:0d:25:80:4f:45:cf:b8:fd:
                    de:b8:19:6f:65:6e:fc:97:48:79:dc:c9:77:d3:1c:
                    51:1f:0f:dc:f9:7e:5b:3e:0f:d1:db:d0:98:cb:89:
                    ce:c5:9c:b9:50:44:14:d8:b6:32:6c:4f:ac:a8:6d:
                    f1:c9:b3:03:3a:80:48:8e:1b:5b:7c:d0:97:76:78:
                    4f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:A6:1D:1C:54:D7:73:28:B9:86:94:A6:AD:AC:95:B2:56:EC:22:3A
            X509v3 Authority Key Identifier:
                keyid:CD:C1:31:85:0A:25:F0:CC:DF:C9:B9:B9:CC:8E:E6:4C:3A:FA:6D:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B358/C8FD800438A211F186E88F207EEE528E/zcExhQol8Mzfybm5zI7mTDr6bQg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zcExhQol8Mzfybm5zI7mTDr6bQg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B358/C8FD800438A211F186E88F207EEE528E/zcExhQol8Mzfybm5zI7mTDr6bQg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:52:2d:45:b4:99:c7:ae:9f:25:40:10:3d:77:1d:76:9b:41:
         5c:7e:23:15:93:fe:07:39:6b:cd:31:6e:82:9f:b1:dd:6e:97:
         04:c8:84:ca:aa:50:5f:ff:85:70:34:86:15:79:ee:a0:87:8b:
         22:90:7e:60:68:46:bf:59:e4:d0:77:65:4d:0f:d8:b0:a4:03:
         b7:42:12:86:bd:99:9e:04:40:3a:f7:70:bf:59:c7:0c:f6:f3:
         ee:68:06:d1:06:e8:9e:7c:96:e3:00:85:47:37:44:cc:da:7f:
         cc:a5:7d:a1:65:40:c0:0f:b6:78:02:ca:bb:7e:95:c8:6c:bd:
         aa:be:8f:c2:b3:06:20:ce:73:fc:23:74:ec:aa:aa:1b:7f:9e:
         59:df:24:91:a9:5a:dd:49:53:14:13:aa:60:eb:47:ce:a0:21:
         22:fd:60:9e:a8:78:a0:d3:fa:6a:b0:e2:9e:e8:5d:09:29:9c:
         97:3a:65:a3:5d:93:1e:3d:12:10:bc:98:ce:66:7c:2d:4e:95:
         5b:99:8b:8f:bb:90:b9:44:3b:a7:15:f5:0e:ce:d1:4b:d9:3e:
         7b:94:d1:1b:bb:08:92:f5:df:d3:ed:b5:c2:64:f0:72:c6:45:
         3f:d3:60:5b:7e:d1:ca:bb:c4:a1:fd:56:5c:b8:bf:c6:0c:8a:
         90:c7:d4:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 04:34:49 2026 by rpki-client