Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/ZQEq8FcQhrnqswNG9iS2MSpVHDg.mft
File:                     ZQEq8FcQhrnqswNG9iS2MSpVHDg.mft (raw, json)
Hash identifier:          kZnk6GCffpXbXfDNKjkcRm6Idh04Jl2UzY1fhuZqRXE=
Subject key identifier:   3C:D9:E0:60:2A:AE:64:36:01:07:2B:CE:3A:89:0E:BC:79:C1:B0:F5
Authority key identifier: 65:01:2A:F0:57:10:86:B9:EA:B3:03:46:F6:24:B6:31:2A:55:1C:38
Certificate issuer:       /CN=A9182047/serialNumber=65012AF0571086B9EAB30346F624B6312A551C38
Certificate serial:       051B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQEq8FcQhrnqswNG9iS2MSpVHDg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/ZQEq8FcQhrnqswNG9iS2MSpVHDg.mft
Manifest number:          0508
Signing time:             Wed 19 Aug 2026 00:03:42 +0000
Manifest this update:     Wed 19 Aug 2026 00:03:42 +0000
Manifest next update:     Wed 26 Aug 2026 00:03:42 +0000
Files and hashes:         1: ZQEq8FcQhrnqswNG9iS2MSpVHDg.crl (hash: 2dIMEAD4q1mU7LNaQ2/zV2AsBVDceKFdI70dAwUfHGo=)
                          2: AA9C9BB8C92C11EF86608311C4F9AE02.roa (hash: L0YUjWVE6ClQnbjkSz7YliWfDv2+LcOW4hK3DI2GwKg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/ZQEq8FcQhrnqswNG9iS2MSpVHDg.crl
                          rsync://rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/ZQEq8FcQhrnqswNG9iS2MSpVHDg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQEq8FcQhrnqswNG9iS2MSpVHDg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 00:03:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1307 (0x51b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9182047, serialNumber=65012AF0571086B9EAB30346F624B6312A551C38
        Validity
            Not Before: Aug 19 00:03:42 2026 GMT
            Not After : Aug 26 00:03:42 2026 GMT
        Subject: CN=6a84f2de-8b82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:1e:13:ee:11:ba:3c:b4:02:0f:5e:db:59:1a:
                    23:f9:fc:65:e9:98:83:0e:5a:21:c8:81:90:9b:21:
                    16:ee:a5:cb:4e:51:6f:74:d6:b5:e4:0f:b1:30:df:
                    6f:97:5e:a7:ff:73:e8:46:76:79:3f:9c:38:fd:21:
                    83:a9:75:02:d2:46:ad:11:2e:e7:c3:07:11:6d:c5:
                    2d:fa:b7:33:fa:46:7b:0e:ef:29:a2:f1:8e:03:67:
                    40:b7:e3:6c:ef:a2:f8:c9:06:68:af:86:1e:df:5e:
                    c7:65:93:7c:45:40:11:0b:1f:89:0e:0b:33:d8:54:
                    b1:b6:f1:26:a2:40:5f:b8:cf:b6:10:5f:77:17:73:
                    cb:16:96:09:00:6a:36:f2:42:48:e8:73:31:2f:c3:
                    d4:8c:25:b8:da:1f:f2:09:b2:30:ea:68:c8:a7:fb:
                    e7:ad:bc:41:22:1d:c4:11:8b:72:63:2d:31:fe:17:
                    4f:d6:de:ae:4f:c0:3c:1e:fa:63:fa:8c:86:07:5d:
                    0c:7b:68:e9:9e:5b:5c:b9:38:12:ab:aa:c6:c0:9b:
                    57:e4:26:61:69:10:f7:f6:99:75:21:36:4f:62:90:
                    2f:2b:07:ae:e2:43:7c:b0:2e:6e:ac:b0:c3:0d:16:
                    e9:af:95:81:06:09:1f:cc:dc:a5:a7:1d:ec:72:5d:
                    d5:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:D9:E0:60:2A:AE:64:36:01:07:2B:CE:3A:89:0E:BC:79:C1:B0:F5
            X509v3 Authority Key Identifier:
                keyid:65:01:2A:F0:57:10:86:B9:EA:B3:03:46:F6:24:B6:31:2A:55:1C:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/ZQEq8FcQhrnqswNG9iS2MSpVHDg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQEq8FcQhrnqswNG9iS2MSpVHDg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/ZQEq8FcQhrnqswNG9iS2MSpVHDg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:a2:76:67:85:4f:8f:b8:44:64:8a:5c:4f:ea:5a:1a:28:e4:
         a9:b2:b3:3b:da:59:be:aa:bf:92:18:07:e5:55:89:b6:4f:e9:
         d2:99:80:f3:94:50:71:12:1a:3c:c2:46:d1:28:4b:8e:90:5f:
         85:ea:8a:b4:7f:92:e4:41:94:ce:39:42:42:b6:7f:b2:4d:25:
         68:97:6e:2a:ed:fa:e0:98:cb:9e:b6:fe:00:f0:ca:99:40:a4:
         0c:84:02:44:e0:03:a9:dd:d7:32:d4:75:00:bc:04:f8:46:51:
         3f:17:e3:3e:ca:c3:24:c8:1a:4d:2e:18:d6:6e:4f:be:c9:dd:
         66:f6:e0:34:4e:2f:2f:e0:de:a5:25:b5:b4:33:96:45:34:16:
         84:91:97:25:92:20:55:32:03:a0:61:77:27:38:d2:4c:eb:0b:
         a4:bd:b1:2c:0b:90:15:0e:a4:ee:23:72:80:b8:ab:2c:07:4c:
         e0:e8:a6:28:8d:f0:aa:82:0c:d6:4f:e5:69:bd:25:a9:28:7a:
         40:78:bf:ff:ea:87:9a:40:21:fa:52:37:08:2c:b6:f2:2f:3e:
         32:c3:78:b1:5e:2d:8d:8e:43:8c:70:ea:c3:9a:0e:41:23:7a:
         13:4f:71:f9:95:6c:64:33:b3:de:ab:16:2f:0b:ef:32:19:2d:
         79:08:b1:05
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBRswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODIwNDcxMTAvBgNVBAUTKDY1MDEyQUYwNTcxMDg2QjlFQUIzMDM0NkY2MjRCNjMx
MkE1NTFDMzgwHhcNMjYwODE5MDAwMzQyWhcNMjYwODI2MDAwMzQyWjAYMRYwFAYD
VQQDEw02YTg0ZjJkZS04YjgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAox4T7hG6PLQCD17bWRoj+fxl6ZiDDlohyIGQmyEW7qXLTlFvdNa15A+xMN9v
l16n/3PoRnZ5P5w4/SGDqXUC0katES7nwwcRbcUt+rcz+kZ7Du8povGOA2dAt+Ns
76L4yQZor4Ye317HZZN8RUARCx+JDgsz2FSxtvEmokBfuM+2EF93F3PLFpYJAGo2
8kJI6HMxL8PUjCW42h/yCbIw6mjIp/vnrbxBIh3EEYtyYy0x/hdP1t6uT8A8Hvpj
+oyGB10Me2jpnltcuTgSq6rGwJtX5CZhaRD39pl1ITZPYpAvKweu4kN8sC5urLDD
DRbpr5WBBgkfzNylpx3scl3VLQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDzZ4GAq
rmQ2AQcrzjqJDrx5wbD1MB8GA1UdIwQYMBaAFGUBKvBXEIa56rMDRvYktjEqVRw4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjA0Ny8zM0FEQjNFNjZF
MDAxMUVDOUE2M0JENkFDNEY5QUUwMi9aUUVxOEZjUWhybnFzd05HOWlTMk1TcFZI
RGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pRRXE4RmNRaHJucXN3Tkc5aVMyTVNwVkhEZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MjA0Ny8zM0FEQjNFNjZFMDAxMUVDOUE2M0JENkFDNEY5QUUwMi9aUUVxOEZjUWhy
bnFzd05HOWlTMk1TcFZIRGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqaJ2Z4VPj7hEZIpcT+paGijkqbKzO9pZvqq/khgH5VWJtk/p0pmA85RQcRIa
PMJG0ShLjpBfheqKtH+S5EGUzjlCQrZ/sk0laJduKu364JjLnrb+APDKmUCkDIQC
ROADqd3XMtR1ALwE+EZRPxfjPsrDJMgaTS4Y1m5PvsndZvbgNE4vL+DepSW1tDOW
RTQWhJGXJZIgVTIDoGF3JzjSTOsLpL2xLAuQFQ6k7iNygLirLAdM4OimKI3wqoIM
1k/lab0lqSh6QHi//+qHmkAh+lI3CCy28i8+MsN4sV4tjY5DjHDqw5oOQSN6E09x
+ZVsZDOz3qsWLwvvMhkteQixBQ==
-----END CERTIFICATE-----
Generated at Wed Aug 19 21:42:19 2026 by rpki-client