Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft
File:                     zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft (raw, json)
Hash identifier:          gLDMzWOYWby6+thgsxpHln3/SRMi75PRz0zK6k+l/NY=
Subject key identifier:   A7:E2:D9:AE:34:0C:6C:99:EF:98:B8:43:17:6F:22:2E:00:C5:DC:8E
Authority key identifier: CC:36:90:F8:96:EF:56:73:11:53:5B:C4:44:DF:1E:B7:41:FD:8B:B4
Certificate issuer:       /CN=A916EBCB/serialNumber=CC3690F896EF567311535BC444DF1EB741FD8BB4
Certificate serial:       0CCD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zDaQ-JbvVnMRU1vERN8et0H9i7Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft
Manifest number:          0CC2
Signing time:             Tue 18 Aug 2026 18:45:34 +0000
Manifest this update:     Tue 18 Aug 2026 18:45:34 +0000
Manifest next update:     Tue 25 Aug 2026 18:45:34 +0000
Files and hashes:         1: zDaQ-JbvVnMRU1vERN8et0H9i7Q.crl (hash: sB59QB2cLaaeUTcp9urHNmSqJhv4TBDUto63sjpOzEk=)
                          2: 81C5BFF8192811EA9B88D87DC4F9AE02.roa (hash: MlGQE6i/naYke0ZwsPc47N+NQobrGaPsNs00jN9E6oo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.crl
                          rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zDaQ-JbvVnMRU1vERN8et0H9i7Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 18:45:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3277 (0xccd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916EBCB, serialNumber=CC3690F896EF567311535BC444DF1EB741FD8BB4
        Validity
            Not Before: Aug 18 18:45:34 2026 GMT
            Not After : Aug 25 18:45:34 2026 GMT
        Subject: CN=6a84a84e-cc38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:bd:a9:ac:cd:7d:18:42:56:f8:cb:d6:9a:c5:
                    dd:f6:00:ae:82:77:b0:e4:66:f8:cd:74:7a:fc:87:
                    95:39:de:45:98:e6:ee:bc:c5:88:78:88:3e:d3:4f:
                    03:da:4d:07:d1:8b:b7:b2:bb:8c:b5:03:e0:8b:ce:
                    e6:44:15:6c:7d:63:57:68:09:73:d1:1b:f9:77:2b:
                    2e:e0:0e:b4:3c:0b:c5:22:bb:0d:9a:2c:e1:b7:b2:
                    ea:86:ef:05:0e:69:21:64:76:e3:a7:fd:97:7b:e7:
                    b4:5b:77:9b:8b:7c:18:31:e5:e5:bd:b5:f2:e0:cb:
                    08:0a:d3:e1:3d:4f:3e:0a:77:17:4f:97:69:a9:7f:
                    c8:d9:f0:e3:3d:1b:26:f5:44:9a:60:d2:9a:c2:a1:
                    b0:47:77:96:b8:56:cc:8d:fc:97:0f:18:56:39:73:
                    64:08:91:42:6c:f5:e5:b6:bf:43:48:1e:2b:c3:86:
                    8e:5a:d0:04:81:09:f4:ee:8e:9e:49:d6:a6:72:9e:
                    45:69:29:9e:35:43:99:19:e1:26:b0:f2:9a:45:ae:
                    6a:79:b0:39:8d:5d:8c:04:12:a6:eb:14:20:57:5d:
                    9b:18:8d:25:e5:0c:08:56:b6:dc:12:89:13:7e:36:
                    3a:2e:be:2e:61:c0:bc:0d:2f:60:cf:ef:0f:b0:66:
                    b0:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:E2:D9:AE:34:0C:6C:99:EF:98:B8:43:17:6F:22:2E:00:C5:DC:8E
            X509v3 Authority Key Identifier:
                keyid:CC:36:90:F8:96:EF:56:73:11:53:5B:C4:44:DF:1E:B7:41:FD:8B:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zDaQ-JbvVnMRU1vERN8et0H9i7Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:22:99:f0:c9:6f:42:21:37:8b:ca:58:92:bd:69:d4:ae:91:
         7a:e6:d4:9d:cc:6e:73:94:43:36:4c:22:ea:cc:ac:ba:59:98:
         63:3b:d7:85:e4:f4:f3:04:97:fa:d9:f2:2b:ba:c5:51:cf:ca:
         7f:46:bf:12:54:63:1f:a7:8e:41:b4:4d:14:a4:c3:f9:aa:03:
         73:7b:e7:6a:47:cb:68:8c:2a:3f:64:27:8c:8f:64:f8:dd:ae:
         b3:b1:69:5c:83:f5:ac:83:5c:d1:22:d2:3c:9b:27:6f:95:37:
         8e:a7:66:36:77:a2:9f:6d:a5:3c:37:42:fe:73:86:b7:75:3d:
         57:7e:b5:5e:1d:96:c7:fe:3e:77:5e:7c:7b:82:96:ed:d8:07:
         8f:3a:8f:23:b2:82:2b:85:78:86:eb:03:ab:06:39:2e:33:d3:
         28:96:6c:c4:dd:f7:67:68:c7:6c:d2:fb:10:85:8e:c7:d8:0d:
         e5:b3:ea:32:d6:34:39:4b:72:a9:9e:68:9a:f4:bf:3d:77:59:
         fd:1d:57:73:44:2d:af:87:39:c1:b5:26:ea:6f:11:aa:36:30:
         fa:70:37:40:39:8e:bf:78:28:15:30:09:76:a4:c9:b1:67:c0:
         d7:71:41:bf:2f:3b:de:af:b8:d9:2b:5f:95:24:ab:16:ed:32:
         d0:96:68:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:55:42 2026 by rpki-client