Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.mft
File:                     ZEfjYbGkSWugEo32lWV0SOleK5U.mft (raw, json)
Hash identifier:          81AYLpmjqwxXU6A8xm25pYRRvUSkDpH7hhfUsGf02jY=
Subject key identifier:   E9:9E:7E:4F:B1:1E:D3:DB:40:04:85:E9:2E:BD:51:95:5A:BB:BA:A6
Authority key identifier: 64:47:E3:61:B1:A4:49:6B:A0:12:8D:F6:95:65:74:48:E9:5E:2B:95
Certificate issuer:       /CN=A917F879/serialNumber=6447E361B1A4496BA0128DF695657448E95E2B95
Certificate serial:       0AAA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEfjYbGkSWugEo32lWV0SOleK5U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.mft
Manifest number:          0A9A
Signing time:             Tue 04 Aug 2026 19:45:36 +0000
Manifest this update:     Tue 04 Aug 2026 19:45:35 +0000
Manifest next update:     Tue 11 Aug 2026 19:45:35 +0000
Files and hashes:         1: ZEfjYbGkSWugEo32lWV0SOleK5U.crl (hash: sNqNvyWh0HU3Iow8vPiyh+4vCkzhxdhD2DXJy32kHYM=)
                          2: 894FFF40556111EDB7E45424C4F9AE02.roa (hash: bQj5mxklQD19F906ONQY4Ae0sdx03lDa6OD6mt+hkGU=)
                          3: 8A6AA178556111EDB7E45424C4F9AE02.roa (hash: EASpkdXObrJ8H1sWrr81zx66bGecEu9OLYPesUTFCoA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.crl
                          rsync://rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEfjYbGkSWugEo32lWV0SOleK5U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Aug 2026 19:45:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2730 (0xaaa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917F879, serialNumber=6447E361B1A4496BA0128DF695657448E95E2B95
        Validity
            Not Before: Aug  4 19:45:35 2026 GMT
            Not After : Aug 11 19:45:35 2026 GMT
        Subject: CN=6a724160-9032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:38:43:44:e0:81:84:fc:a5:fc:3a:0c:9f:5b:
                    11:f9:5b:17:92:39:0c:36:4a:9d:1e:e3:c7:b8:f3:
                    99:50:75:56:1f:9b:fc:27:0f:40:51:ff:8d:ae:86:
                    ad:ed:cb:5e:c6:7f:42:71:ea:0f:e4:a4:2f:52:6f:
                    a5:0d:03:12:c1:01:26:96:4f:49:b6:e4:2a:96:09:
                    08:73:6e:60:60:fb:fc:e1:cd:c5:25:d4:55:c5:25:
                    2e:cd:7f:c6:df:a9:5b:5a:c4:ce:4d:13:99:b5:d3:
                    ea:85:c2:f1:86:75:a8:2b:ee:1e:a2:7f:06:f1:5e:
                    86:37:e6:08:28:db:ad:d3:dd:f5:c4:7b:c9:1e:eb:
                    bb:60:99:1a:64:71:12:be:7d:ef:d2:63:84:3a:00:
                    6b:77:21:1f:ef:86:07:5e:e6:5d:86:f2:94:55:10:
                    3e:fc:d4:b6:45:f4:de:65:a5:58:d3:78:fe:48:91:
                    9b:1a:1d:86:22:1a:5d:21:f0:0c:d4:b4:9f:58:7b:
                    81:a5:3f:0a:ef:b5:13:63:71:72:7d:bb:f3:e1:16:
                    52:bd:bc:9c:33:b9:f3:58:d5:d6:29:89:60:38:ee:
                    af:23:31:ef:e9:bb:3d:45:0a:93:eb:86:d8:9f:a0:
                    02:04:6a:3c:ea:82:90:22:31:7c:c3:35:57:44:42:
                    d7:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:9E:7E:4F:B1:1E:D3:DB:40:04:85:E9:2E:BD:51:95:5A:BB:BA:A6
            X509v3 Authority Key Identifier:
                keyid:64:47:E3:61:B1:A4:49:6B:A0:12:8D:F6:95:65:74:48:E9:5E:2B:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEfjYbGkSWugEo32lWV0SOleK5U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:70:f9:25:58:ce:fc:c2:0b:42:82:ec:6f:9d:78:0e:8c:8d:
         93:c9:1e:57:94:80:88:0b:c9:a7:7f:65:03:27:04:2f:5a:2d:
         ff:ee:0f:54:9a:47:44:8e:f9:cd:43:a9:b6:6b:f6:9f:86:5a:
         be:cd:c5:93:4d:da:4b:53:85:0a:d0:83:fc:47:d9:4f:41:71:
         bc:0f:ee:64:78:6f:51:00:d9:28:ad:e6:23:67:36:59:48:46:
         6b:c7:19:40:fd:e9:33:6b:12:ad:f3:d5:bd:dc:75:33:48:5b:
         d0:c9:5d:32:ae:20:16:32:08:4a:3a:c3:a1:67:ef:c0:76:56:
         21:df:b4:e9:10:34:d1:6e:a1:ae:15:00:98:62:7a:57:23:1d:
         80:ec:c6:af:e4:94:6f:39:f1:ab:3b:ba:0f:e4:a1:3d:67:68:
         04:e6:e8:a1:f3:18:26:78:be:f9:65:9b:8c:39:47:b9:88:01:
         98:6d:e9:fb:a8:92:56:08:b4:77:1e:c8:1f:18:b3:07:55:33:
         4c:73:25:a4:ef:01:da:41:0f:cd:4b:57:ae:7a:7f:18:4d:5f:
         d6:f1:4d:c9:8a:8f:ee:a0:24:61:4b:91:52:b0:88:0e:24:c9:
         5a:98:56:f8:b7:38:f2:b8:25:70:38:b4:05:0b:dd:a3:04:6c:
         2b:19:58:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 5 04:03:27 2026 by rpki-client