Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/ZjxOmba2sjKT-kK2ErJCKZKXJnE.mft
File:                     ZjxOmba2sjKT-kK2ErJCKZKXJnE.mft (raw, json)
Hash identifier:          /Ttdx6ML+lgzpG4maYtIRulk4Atmec98lTx8d77YxH8=
Subject key identifier:   F6:52:64:F2:BD:FE:33:AE:FF:D9:5F:4F:03:74:5F:86:68:90:8D:51
Authority key identifier: 66:3C:4E:99:B6:B6:B2:32:93:FA:42:B6:12:B2:42:29:92:97:26:71
Certificate issuer:       /CN=A9173F6C/serialNumber=663C4E99B6B6B23293FA42B612B2422992972671
Certificate serial:       01FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjxOmba2sjKT-kK2ErJCKZKXJnE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/ZjxOmba2sjKT-kK2ErJCKZKXJnE.mft
Manifest number:          01F7
Signing time:             Wed 19 Aug 2026 03:52:52 +0000
Manifest this update:     Wed 19 Aug 2026 03:52:52 +0000
Manifest next update:     Wed 26 Aug 2026 03:52:52 +0000
Files and hashes:         1: ZjxOmba2sjKT-kK2ErJCKZKXJnE.crl (hash: TVqz7SKWNo7PNZ0dlN/AZk4X3sdoq7LBRhqtegsggj0=)
                          2: 430FB1B69FC411EEBA6AB80AC4F9AE02.roa (hash: J9Q0fospq9ZatXjfck0bQd1+CpXH2kLag8vk4D7Q214=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/ZjxOmba2sjKT-kK2ErJCKZKXJnE.crl
                          rsync://rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/ZjxOmba2sjKT-kK2ErJCKZKXJnE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjxOmba2sjKT-kK2ErJCKZKXJnE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 03:52:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 508 (0x1fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173F6C, serialNumber=663C4E99B6B6B23293FA42B612B2422992972671
        Validity
            Not Before: Aug 19 03:52:52 2026 GMT
            Not After : Aug 26 03:52:52 2026 GMT
        Subject: CN=6a852894-238d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:27:f2:8d:7a:85:db:10:7e:ac:67:c5:1d:8a:
                    42:06:e9:70:5e:b7:8e:f3:f6:ee:ed:33:2a:aa:1f:
                    da:d3:ae:43:e6:22:9a:85:ef:1b:66:02:32:c7:7a:
                    d7:bc:2b:ab:f1:f8:73:05:74:c9:dc:b8:19:53:d9:
                    ee:f6:06:a8:4e:e1:54:c8:f8:a3:71:4f:b9:be:53:
                    48:7f:c1:e7:df:31:cd:e0:e4:b7:56:c0:bb:63:dd:
                    65:62:1b:30:d2:27:b1:8f:65:33:54:51:9f:d9:67:
                    8c:2a:c4:b2:81:d4:ac:e6:68:50:93:4a:9f:3f:d0:
                    00:9a:59:41:07:9d:24:78:a0:33:64:87:ad:e8:43:
                    9a:ec:a7:85:c2:d3:fe:64:54:d7:7c:8d:ad:4e:fa:
                    8c:db:ce:5b:d0:29:90:5f:8f:ca:bb:a8:69:1d:48:
                    a4:11:8a:ac:fb:4c:58:a1:b7:f5:0a:c7:01:8b:45:
                    bc:dd:4a:bd:bd:44:36:24:c8:3c:1b:a7:34:d6:a8:
                    88:07:48:23:e3:10:1e:71:8d:9d:e4:ad:2d:a6:d1:
                    89:30:70:80:cd:f1:5c:62:00:15:c5:a9:95:b9:a3:
                    ec:cb:31:d6:f6:dd:73:f3:a9:b2:62:23:7f:f3:5b:
                    a0:da:d8:e3:39:c2:14:a0:3d:fd:ff:19:c1:73:f4:
                    5c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:52:64:F2:BD:FE:33:AE:FF:D9:5F:4F:03:74:5F:86:68:90:8D:51
            X509v3 Authority Key Identifier:
                keyid:66:3C:4E:99:B6:B6:B2:32:93:FA:42:B6:12:B2:42:29:92:97:26:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/ZjxOmba2sjKT-kK2ErJCKZKXJnE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjxOmba2sjKT-kK2ErJCKZKXJnE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/ZjxOmba2sjKT-kK2ErJCKZKXJnE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:aa:78:bc:26:5e:f8:71:fe:6a:bd:ad:4d:0a:6d:83:73:b6:
         5f:71:1b:0b:23:75:ff:3c:8e:bc:84:aa:a7:8a:e8:6d:38:23:
         05:6e:6d:de:d8:0c:9e:05:e9:49:5b:a0:7b:f0:fd:56:81:df:
         80:76:c8:3d:50:48:f1:00:c7:7b:d4:19:74:87:67:4c:dc:9c:
         7a:c0:d7:40:c9:83:1e:be:a6:ec:01:ce:79:c4:8d:24:f4:44:
         cd:ab:11:f8:33:39:fa:28:20:da:b1:91:c3:2b:fd:82:b6:81:
         1c:0f:54:73:4d:ab:09:88:92:f6:57:cd:a7:b4:ae:6d:97:fe:
         a2:ee:1e:4e:3f:93:9b:1a:f9:49:61:0a:d3:b0:34:6e:80:0f:
         d2:9f:09:66:01:fa:c8:06:cd:c7:62:92:7b:1c:b0:96:7c:47:
         29:be:a0:1d:6e:5c:91:d1:cc:6a:8b:52:ae:34:96:2a:34:0c:
         04:bb:22:7f:45:ab:09:e5:c8:ce:6f:e3:44:9f:c5:25:88:4f:
         ee:06:e3:e1:f7:56:e5:40:bd:e6:44:23:87:cb:69:48:87:96:
         84:69:c3:69:12:10:49:cc:64:06:e2:79:61:0d:07:9a:24:1c:
         18:54:a5:5e:30:b9:03:8b:07:02:2b:a4:c6:d5:c9:de:50:67:
         75:54:0f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:55:04 2026 by rpki-client