Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.mft
File:                     zuaTD0jXdNZD1Vz_6YseY6TWNTQ.mft (raw, json)
Hash identifier:          NrlsEfHjZCKyGI4/1/H0fBAUlDED3B+F9rGWZGMp/dU=
Subject key identifier:   5B:F3:C8:78:02:FC:EF:4B:40:C1:C8:10:25:D2:CA:BF:3B:B5:35:84
Authority key identifier: CE:E6:93:0F:48:D7:74:D6:43:D5:5C:FF:E9:8B:1E:63:A4:D6:35:34
Certificate issuer:       /CN=A9175529/serialNumber=CEE6930F48D774D643D55CFFE98B1E63A4D63534
Certificate serial:       28BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.mft
Manifest number:          28AB
Signing time:             Tue 18 Aug 2026 15:39:59 +0000
Manifest this update:     Tue 18 Aug 2026 15:39:58 +0000
Manifest next update:     Tue 25 Aug 2026 15:39:58 +0000
Files and hashes:         1: zuaTD0jXdNZD1Vz_6YseY6TWNTQ.crl (hash: vcPZe+T1ZtLPuQUghK93YvGO9dCwIxegPvUtIc8d6a4=)
                          2: 14EC8116B10B11E58EB48F13C4F9AE02.roa (hash: VmiDWWZcXS/8NwiQU0Cj011GwuJY7i5hDmIVSX2ZEao=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.crl
                          rsync://rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 15:39:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10430 (0x28be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175529, serialNumber=CEE6930F48D774D643D55CFFE98B1E63A4D63534
        Validity
            Not Before: Aug 18 15:39:58 2026 GMT
            Not After : Aug 25 15:39:58 2026 GMT
        Subject: CN=6a847cce-e5e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:48:1e:13:3c:1d:38:49:6c:4a:fb:19:08:61:
                    2b:7c:75:14:c1:f6:b2:a6:6f:e2:07:f4:48:7d:8a:
                    87:fd:7c:01:1b:f4:4c:a5:f0:e6:b2:b6:d1:2f:2e:
                    8b:14:41:7e:80:08:4c:f3:c8:6f:72:51:3f:51:f7:
                    28:a8:62:0c:15:3b:11:f8:d7:7a:50:cc:02:c3:1a:
                    97:ce:bb:03:32:7b:24:0d:15:88:2d:ef:34:6b:8c:
                    c6:f5:dc:2b:34:7b:d8:b6:1c:27:a5:eb:89:25:68:
                    30:59:ab:63:69:2c:95:ec:25:e6:23:a6:8a:94:04:
                    65:ee:a6:e5:33:8e:d1:be:e6:a1:a1:9f:88:95:c8:
                    e5:18:43:f2:b1:e5:9a:00:fd:25:8c:a9:b8:35:6b:
                    ff:ca:cb:9f:0d:99:a2:46:db:8e:87:a9:e0:e2:41:
                    d4:7f:bd:a3:48:e4:21:95:c1:15:9b:a3:62:e9:a2:
                    90:7b:96:5f:db:c9:d2:c7:01:13:c9:f2:30:fd:24:
                    10:f1:cb:ba:ca:a4:5f:8b:86:2b:f5:a7:14:bc:04:
                    13:c2:04:63:a4:66:83:16:2a:dc:86:1c:ba:cf:7f:
                    41:ac:0a:f1:08:e7:ec:3f:51:f2:b4:94:63:c9:6d:
                    3c:34:68:60:85:48:df:4e:57:09:ac:c4:1d:c8:2d:
                    af:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:F3:C8:78:02:FC:EF:4B:40:C1:C8:10:25:D2:CA:BF:3B:B5:35:84
            X509v3 Authority Key Identifier:
                keyid:CE:E6:93:0F:48:D7:74:D6:43:D5:5C:FF:E9:8B:1E:63:A4:D6:35:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:a0:d5:60:ed:f5:13:a4:08:38:64:08:63:de:b5:bb:22:9b:
         4d:54:6b:98:ee:de:89:36:a6:61:17:55:34:d8:ba:4c:6c:22:
         9c:9a:a9:b8:87:40:b4:58:f7:e0:40:15:27:42:93:4e:41:15:
         76:d0:36:26:9e:e4:d8:cb:e6:38:b0:71:a4:7a:23:cf:c7:02:
         e7:0d:05:a7:cc:35:f0:3a:db:16:75:3a:1f:b0:a1:6b:0b:78:
         c0:8e:c9:1a:6c:81:29:45:38:76:fb:7a:17:aa:f5:8b:50:32:
         bf:0f:20:00:2b:2c:db:fc:af:35:23:c2:46:a5:cf:cd:0a:55:
         68:b8:0a:01:5f:37:e4:ee:c9:41:50:e4:d5:8b:77:1d:22:9f:
         a6:52:e2:e1:2b:87:ec:81:21:bd:9e:97:4f:40:ad:45:41:90:
         36:95:a6:e2:6a:9d:00:c5:e3:b2:82:f6:a1:39:93:8c:44:a1:
         08:fe:ae:5a:6a:53:66:47:b9:c9:5a:d2:1c:2d:38:f4:05:be:
         5c:a9:a0:4a:f1:7b:20:1a:a3:57:82:86:19:47:20:71:bf:7f:
         61:ef:27:b8:bf:91:be:7a:5c:2b:91:4e:18:1c:d8:6f:8a:54:
         05:28:5f:6e:89:7a:6d:49:dd:e2:6b:34:bc:94:5f:c7:c2:ed:
         8c:e8:14:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:56:44 2026 by rpki-client