Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/zq7A6H2VhStEwGE5VUa34MHRHFc.mft
File:                     zq7A6H2VhStEwGE5VUa34MHRHFc.mft (raw, json)
Hash identifier:          4MGqBAGw3hOj9G59dx9m/S2rl1g9X//BC16OQ+0nc04=
Subject key identifier:   B2:4F:C9:43:65:03:1A:0F:BD:03:99:AA:12:DA:E0:CC:80:E2:95:79
Authority key identifier: CE:AE:C0:E8:7D:95:85:2B:44:C0:61:39:55:46:B7:E0:C1:D1:1C:57
Certificate issuer:       /CN=A918B909/serialNumber=CEAEC0E87D95852B44C061395546B7E0C1D11C57
Certificate serial:       6C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zq7A6H2VhStEwGE5VUa34MHRHFc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/zq7A6H2VhStEwGE5VUa34MHRHFc.mft
Manifest number:          67
Signing time:             Fri 17 Jul 2026 09:17:13 +0000
Manifest this update:     Fri 17 Jul 2026 09:17:12 +0000
Manifest next update:     Fri 24 Jul 2026 09:17:12 +0000
Files and hashes:         1: zq7A6H2VhStEwGE5VUa34MHRHFc.crl (hash: lxqDfW8AV969AYR8MIYXqt41t1nj16H4P/LM1N1LjtY=)
                          2: 81B5D9F8440511F1AB7B95FDB3833773.roa (hash: vn//9j6htUmeMHzJ/Tep4NLTfUBbskiXsWzwXG8Uy9k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/zq7A6H2VhStEwGE5VUa34MHRHFc.crl
                          rsync://rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/zq7A6H2VhStEwGE5VUa34MHRHFc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zq7A6H2VhStEwGE5VUa34MHRHFc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 09:17:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108 (0x6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918B909, serialNumber=CEAEC0E87D95852B44C061395546B7E0C1D11C57
        Validity
            Not Before: Jul 17 09:17:12 2026 GMT
            Not After : Jul 24 09:17:12 2026 GMT
        Subject: CN=6a59f319-f305
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b8:87:53:74:d6:0f:2a:e5:91:46:bf:48:c8:
                    2b:ff:b4:12:8e:c7:f6:c7:fc:d6:9e:7a:00:c2:1c:
                    d7:47:ed:77:ce:a2:93:75:ad:2d:cb:54:17:d4:f6:
                    c1:ca:74:26:e5:a9:00:f4:c0:f6:28:0b:16:6e:27:
                    af:44:a8:e9:be:24:6c:46:73:51:07:43:e3:05:26:
                    a2:ff:3c:f6:f4:80:11:5f:e1:80:88:7f:11:db:cd:
                    34:6e:4d:5e:5c:2d:22:83:ef:d2:20:2a:48:93:ba:
                    a0:e1:94:2a:9a:84:e1:b1:e0:95:9b:94:77:52:f3:
                    ad:b2:fa:9e:a6:8f:54:eb:11:53:dc:fe:53:2e:f6:
                    0e:93:70:c6:19:37:9d:90:be:40:e3:3d:10:d9:9c:
                    43:14:8f:94:c6:e7:e5:4c:07:fb:da:62:d9:af:1c:
                    f0:54:a0:ee:7a:d9:be:81:4f:d0:a8:90:4f:14:e1:
                    5e:e0:2a:c0:87:0d:da:b5:8a:b1:77:33:14:23:91:
                    eb:bd:1f:ae:c2:d0:64:fe:ac:a8:ad:8f:b4:49:97:
                    88:45:99:bf:b3:b2:e8:e4:c7:19:f8:40:46:54:39:
                    9c:92:31:b8:eb:07:e1:d1:0b:36:d8:da:de:ab:dc:
                    a0:a3:93:09:5f:14:5a:a7:c1:ec:22:3b:b1:e2:ab:
                    34:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:4F:C9:43:65:03:1A:0F:BD:03:99:AA:12:DA:E0:CC:80:E2:95:79
            X509v3 Authority Key Identifier:
                keyid:CE:AE:C0:E8:7D:95:85:2B:44:C0:61:39:55:46:B7:E0:C1:D1:1C:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/zq7A6H2VhStEwGE5VUa34MHRHFc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zq7A6H2VhStEwGE5VUa34MHRHFc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/zq7A6H2VhStEwGE5VUa34MHRHFc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:75:cd:13:bc:4c:78:fe:5f:85:24:7b:c9:35:cf:85:e8:34:
         22:d6:76:78:ee:5c:cd:c8:17:53:3c:6d:2e:57:49:e3:0a:81:
         9f:73:67:f9:f8:94:ba:2e:6a:7f:ee:e1:0d:77:43:76:91:95:
         4c:2a:d9:2d:fd:e7:6f:6e:14:5d:47:50:05:71:f6:18:d6:bf:
         dd:80:59:b4:65:9d:5a:19:51:bd:b1:b1:88:1b:ad:9a:48:28:
         84:02:3a:48:2a:94:a5:0d:b0:83:97:d7:a1:92:e6:33:25:b2:
         90:42:03:4b:ec:61:fd:53:66:4c:f9:68:af:93:ab:79:ed:b2:
         c6:88:1c:e4:b1:49:99:a0:96:42:f1:c3:10:6a:16:f2:4d:95:
         35:98:fe:c4:1f:2b:24:df:37:f6:9e:ff:53:93:d4:92:1b:93:
         52:d8:f4:92:2c:a1:b0:62:57:0f:c0:cb:4f:d8:67:36:d0:4c:
         fe:8a:b6:4d:2f:4e:40:60:3c:29:4b:35:4d:ab:f1:86:f3:d6:
         12:90:90:1c:2a:b4:07:ba:68:6c:d1:08:bc:fe:40:a4:83:91:
         2b:04:26:86:71:59:d6:77:cd:49:ca:fb:fc:34:72:bf:c9:16:
         bb:4a:70:30:12:3a:27:9a:59:3e:b2:58:ec:14:d3:71:9e:6f:
         e9:3f:50:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:29:46 2026 by rpki-client