Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916CAE6/65D044C4941811EA940FB530C4F9AE02/ZMpUJqx6VQvaEFOgEoMUTi3NK9c.mft
File:                     ZMpUJqx6VQvaEFOgEoMUTi3NK9c.mft (raw, json)
Hash identifier:          YxU8URkA42z4bpghS6sf+AiIpKH0c2MPTTuJkTnS5o0=
Subject key identifier:   EF:3C:CF:9F:AC:35:55:60:AA:9E:08:89:EC:9E:48:CF:77:48:7A:74
Authority key identifier: 64:CA:54:26:AC:7A:55:0B:DA:10:53:A0:12:83:14:4E:2D:CD:2B:D7
Certificate issuer:       /CN=A916CAE6/serialNumber=64CA5426AC7A550BDA1053A01283144E2DCD2BD7
Certificate serial:       B0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMpUJqx6VQvaEFOgEoMUTi3NK9c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916CAE6/65D044C4941811EA940FB530C4F9AE02/ZMpUJqx6VQvaEFOgEoMUTi3NK9c.mft
Manifest number:          0AFE
Signing time:             Tue 18 Aug 2026 19:58:34 +0000
Manifest this update:     Tue 18 Aug 2026 19:58:33 +0000
Manifest next update:     Tue 25 Aug 2026 19:58:33 +0000
Files and hashes:         1: ZMpUJqx6VQvaEFOgEoMUTi3NK9c.crl (hash: h7C+SjUUC8FfSf83D3vNKqqY9KamvLG+Jk+YD7dx5CU=)
                          2: 8D3F53F6A15F11F09B632177C4F9AE02.roa (hash: CP+QsdoDrOnuqR8CFeZWi0RVe73nga/HrDSMYjQFtTw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916CAE6/65D044C4941811EA940FB530C4F9AE02/ZMpUJqx6VQvaEFOgEoMUTi3NK9c.crl
                          rsync://rpki.apnic.net/member_repository/A916CAE6/65D044C4941811EA940FB530C4F9AE02/ZMpUJqx6VQvaEFOgEoMUTi3NK9c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMpUJqx6VQvaEFOgEoMUTi3NK9c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 19:58:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 176 (0xb0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916CAE6, serialNumber=64CA5426AC7A550BDA1053A01283144E2DCD2BD7
        Validity
            Not Before: Aug 18 19:58:33 2026 GMT
            Not After : Aug 25 19:58:33 2026 GMT
        Subject: CN=6a84b96a-26a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:13:59:8a:48:ab:8b:8c:91:b5:02:9b:b2:48:
                    ae:82:44:81:c1:2a:91:fe:54:cd:6f:02:fc:67:49:
                    5a:f3:52:ee:1c:f5:d5:e9:f5:87:ef:68:2a:f9:b1:
                    d8:3d:ce:5d:e6:13:7e:d2:99:59:e2:66:4e:dc:b2:
                    26:41:0a:d8:7b:5f:b6:a7:69:78:1e:a6:9a:08:fd:
                    65:a6:91:71:c2:68:11:91:2e:f5:d0:25:6a:12:10:
                    2a:d4:6d:7d:cf:25:56:3b:ec:e9:ad:91:f0:14:86:
                    7d:6a:3b:53:f4:25:07:e2:e7:05:cf:30:ce:e2:7d:
                    48:26:60:90:12:79:13:38:a0:93:2c:1d:27:6b:34:
                    38:20:11:df:d4:fe:90:4c:83:98:f2:56:9d:43:d4:
                    68:b2:fe:4f:8a:f8:f9:a9:33:0d:0e:42:6c:90:d2:
                    a1:0c:cb:e3:b5:4d:a8:33:1d:58:3e:ed:b3:64:c1:
                    25:fa:f2:37:93:06:cb:ac:c3:00:21:db:78:1c:33:
                    8d:0f:c9:aa:e3:d2:e9:6f:2a:5a:04:66:35:ec:c5:
                    f6:17:39:0f:ea:45:eb:60:07:f9:6d:4d:0c:40:59:
                    6e:0f:26:56:44:76:e1:14:a1:26:e8:77:cb:73:5a:
                    d1:51:96:73:c2:ff:da:9c:d6:48:a8:9b:02:64:4e:
                    d4:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:3C:CF:9F:AC:35:55:60:AA:9E:08:89:EC:9E:48:CF:77:48:7A:74
            X509v3 Authority Key Identifier:
                keyid:64:CA:54:26:AC:7A:55:0B:DA:10:53:A0:12:83:14:4E:2D:CD:2B:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916CAE6/65D044C4941811EA940FB530C4F9AE02/ZMpUJqx6VQvaEFOgEoMUTi3NK9c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMpUJqx6VQvaEFOgEoMUTi3NK9c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CAE6/65D044C4941811EA940FB530C4F9AE02/ZMpUJqx6VQvaEFOgEoMUTi3NK9c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:3f:45:e7:48:0c:bc:3c:cd:7d:0f:73:45:d6:dc:f3:a7:60:
         24:63:7c:94:bf:c2:a5:eb:0a:40:d3:4a:27:75:05:45:90:e3:
         09:23:6d:0e:58:fb:60:b8:c4:95:3b:5b:0b:b4:80:08:4e:f4:
         e1:05:8f:ed:d8:0b:12:96:ba:90:8d:b4:3f:a4:d4:82:e5:c6:
         63:3d:cc:09:e6:2e:45:6d:43:0c:02:a3:76:19:3e:df:20:c4:
         5b:2a:15:ab:c2:df:72:38:bd:a4:5c:28:ce:bc:95:d9:ed:52:
         9b:89:3d:36:53:07:4b:33:2c:dd:66:97:eb:59:39:02:ef:08:
         9c:fb:11:9a:3a:8f:7d:df:a6:62:af:8c:2c:21:8d:fa:ce:6a:
         5b:4d:51:11:ee:30:86:00:5d:0b:4c:67:2f:52:62:d5:6a:63:
         73:65:24:f1:bb:4e:d5:c5:ea:95:a1:6c:88:fc:30:6b:21:5b:
         05:77:d8:56:55:2d:e4:33:aa:cb:71:8d:4d:24:a0:1e:ed:6f:
         f3:cf:1a:a0:ff:9c:b9:fc:bb:0c:fe:63:26:09:bc:b2:60:77:
         f8:9e:0d:b0:d9:d6:10:ac:f0:a3:13:85:0b:4c:1f:97:3d:f7:
         98:e8:9e:90:4c:fd:7b:1c:d0:07:9a:0f:b1:d7:cb:df:d1:3a:
         d8:14:d9:2f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICALAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkNBRTYxMTAvBgNVBAUTKDY0Q0E1NDI2QUM3QTU1MEJEQTEwNTNBMDEyODMxNDRF
MkRDRDJCRDcwHhcNMjYwODE4MTk1ODMzWhcNMjYwODI1MTk1ODMzWjAYMRYwFAYD
VQQDEw02YTg0Yjk2YS0yNmE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqhNZikiri4yRtQKbskiugkSBwSqR/lTNbwL8Z0la81LuHPXV6fWH72gq+bHY
Pc5d5hN+0plZ4mZO3LImQQrYe1+2p2l4HqaaCP1lppFxwmgRkS710CVqEhAq1G19
zyVWO+zprZHwFIZ9ajtT9CUH4ucFzzDO4n1IJmCQEnkTOKCTLB0nazQ4IBHf1P6Q
TIOY8ladQ9Rosv5Pivj5qTMNDkJskNKhDMvjtU2oMx1YPu2zZMEl+vI3kwbLrMMA
Idt4HDOND8mq49LpbypaBGY17MX2FzkP6kXrYAf5bU0MQFluDyZWRHbhFKEm6HfL
c1rRUZZzwv/anNZIqJsCZE7UNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO88z5+s
NVVgqp4IieyeSM93SHp0MB8GA1UdIwQYMBaAFGTKVCaselUL2hBToBKDFE4tzSvX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Q0FFNi82NUQwNDRDNDk0
MTgxMUVBOTQwRkI1MzBDNEY5QUUwMi9aTXBVSnF4NlZRdmFFRk9nRW9NVVRpM05L
OWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pNcFVKcXg2VlF2YUVGT2dFb01VVGkzTks5Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
Q0FFNi82NUQwNDRDNDk0MTgxMUVBOTQwRkI1MzBDNEY5QUUwMi9aTXBVSnF4NlZR
dmFFRk9nRW9NVVRpM05LOWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMT9F50gMvDzNfQ9zRdbc86dgJGN8lL/CpesKQNNKJ3UFRZDjCSNtDlj7YLjE
lTtbC7SACE704QWP7dgLEpa6kI20P6TUguXGYz3MCeYuRW1DDAKjdhk+3yDEWyoV
q8Lfcji9pFwozryV2e1Sm4k9NlMHSzMs3WaX61k5Au8InPsRmjqPfd+mYq+MLCGN
+s5qW01REe4whgBdC0xnL1Ji1Wpjc2Uk8btO1cXqlaFsiPwwayFbBXfYVlUt5DOq
y3GNTSSgHu1v888aoP+cufy7DP5jJgm8smB3+J4NsNnWEKzwoxOFC0wflz33mOie
kEz9exzQB5oPsdfL39E62BTZLw==
-----END CERTIFICATE-----
Generated at Wed Aug 19 12:56:44 2026 by rpki-client