Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.mft
File:                     zEJAcHQQNjc16_bvsZT7Zw80X0I.mft (raw, json)
Hash identifier:          8nMGPz1NFcU7iYObdKpfDCrfy9Er5n35tXJU9dK3Cd8=
Subject key identifier:   C9:A5:4C:FB:51:09:BD:68:FF:9F:40:15:EB:63:07:6E:17:C8:CA:03
Authority key identifier: CC:42:40:70:74:10:36:37:35:EB:F6:EF:B1:94:FB:67:0F:34:5F:42
Certificate issuer:       /CN=A9160AEE/serialNumber=CC4240707410363735EBF6EFB194FB670F345F42
Certificate serial:       B8
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zEJAcHQQNjc16_bvsZT7Zw80X0I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.mft
Manifest number:          A8
Signing time:             Fri 17 Jul 2026 08:39:17 +0000
Manifest this update:     Fri 17 Jul 2026 08:39:17 +0000
Manifest next update:     Fri 24 Jul 2026 08:39:17 +0000
Files and hashes:         1: zEJAcHQQNjc16_bvsZT7Zw80X0I.crl (hash: 1tX8FyP/abyMxv5H1q1KPQFggZdKKZxn8uXhHQGMr5w=)
                          2: 6FBBA45AFD2711F0B1802E18426F56BC.roa (hash: InU5YhYgQdECTfOQlDj5F02bMyaCjuUJFEGGYk6O1Jc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.crl
                          rsync://rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zEJAcHQQNjc16_bvsZT7Zw80X0I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 08:39:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 184 (0xb8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9160AEE, serialNumber=CC4240707410363735EBF6EFB194FB670F345F42
        Validity
            Not Before: Jul 17 08:39:17 2026 GMT
            Not After : Jul 24 08:39:17 2026 GMT
        Subject: CN=6a59ea35-a07f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:3d:ef:14:38:5a:e2:79:34:90:d0:8f:0a:1e:
                    ee:e0:64:64:1f:7f:46:f2:19:e9:10:fd:a1:75:71:
                    94:d7:e9:b1:94:11:07:3a:55:51:b8:aa:1d:aa:6a:
                    3a:95:c9:82:e5:94:0b:b3:9d:a6:46:35:d1:82:01:
                    c8:82:cb:0f:f8:ad:e7:60:d8:59:ca:9b:91:70:f7:
                    18:3b:17:7a:94:a2:3c:e1:d8:29:e7:79:f1:3a:0b:
                    74:05:bb:df:af:0c:e1:95:5a:c6:6c:3c:b5:1f:d1:
                    b6:a0:09:e2:00:2e:5f:c9:fd:21:62:7b:ee:02:0d:
                    ca:fb:94:4c:99:f5:8b:ec:d2:44:5c:b9:52:fd:cd:
                    d4:94:a8:35:32:2e:1b:66:3e:d9:b9:a9:21:b6:8d:
                    8e:9e:b0:68:6f:7b:04:88:bf:38:8f:f9:6e:b2:44:
                    14:58:98:2c:eb:9b:f0:e8:97:a4:b5:fe:c2:d1:33:
                    0b:8e:93:d1:68:ef:33:4b:91:29:9c:7f:4b:fe:ad:
                    b1:ca:6c:38:59:b8:6e:65:c9:d6:95:01:19:c2:22:
                    19:7c:8d:b1:e8:db:b4:07:69:9f:a7:9d:f4:2c:f1:
                    19:96:96:30:60:90:aa:67:4f:66:25:8f:3d:26:65:
                    cb:6d:07:d7:17:34:5e:ad:5e:77:f0:6e:0e:ce:b6:
                    02:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:A5:4C:FB:51:09:BD:68:FF:9F:40:15:EB:63:07:6E:17:C8:CA:03
            X509v3 Authority Key Identifier:
                keyid:CC:42:40:70:74:10:36:37:35:EB:F6:EF:B1:94:FB:67:0F:34:5F:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zEJAcHQQNjc16_bvsZT7Zw80X0I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:e8:18:84:8c:c7:30:e6:34:13:04:bb:e2:a7:aa:16:91:76:
         e7:a4:db:13:d4:9a:c4:24:f5:ac:32:c0:4c:87:45:e3:cc:7c:
         2c:a7:0f:8c:23:b8:37:70:e4:22:27:af:79:d1:d4:8b:66:2b:
         ff:6f:2e:78:b3:b2:87:31:31:28:08:7a:93:7a:92:ba:9a:01:
         fb:76:2e:e8:30:95:df:d1:f2:04:0e:c7:e2:47:37:4b:5c:40:
         11:a6:28:63:44:ed:40:19:3d:d4:7e:ea:8a:89:8b:08:f5:8b:
         80:8e:19:1a:49:2c:54:6b:12:84:df:85:78:79:5b:9f:3d:1b:
         8a:17:7b:9b:3d:ca:a5:42:11:11:71:29:d6:b2:fc:8e:ed:07:
         f8:0f:69:2c:6c:92:fb:41:c3:df:7b:a3:1b:ef:1d:d9:07:7c:
         4d:83:2d:ba:9b:bc:47:4c:20:b5:9d:b7:76:13:e0:7c:a3:30:
         fc:7a:13:35:2f:7b:a0:45:9e:0b:26:3b:b7:7e:c8:1d:8d:96:
         0d:36:10:eb:d6:17:b4:82:d5:cf:32:2e:7e:a8:24:5e:69:ad:
         8e:77:74:d2:87:11:54:5c:59:38:2f:73:3b:82:81:1b:ea:68:
         e8:06:b5:78:20:e4:80:af:e5:0f:f4:08:b1:84:bb:ef:b4:0e:
         32:2f:ad:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:29:43 2026 by rpki-client