Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.mft
File:                     Cz66iPGtoaG1CJGyZTGj5wm_ZZo.mft (raw, json)
Hash identifier:          3XzeofQCFoIgQ8VEjp7hbV2D1zBEvFIx2AwgC+RnkUs=
Subject key identifier:   A9:B9:13:D8:29:B5:B1:A1:3D:9C:B9:D7:34:E2:DD:0A:F9:E8:5B:CF
Authority key identifier: 0B:3E:BA:88:F1:AD:A1:A1:B5:08:91:B2:65:31:A3:E7:09:BF:65:9A
Certificate issuer:       /CN=A918E0B2/serialNumber=0B3EBA88F1ADA1A1B50891B26531A3E709BF659A
Certificate serial:       063A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.mft
Manifest number:          062A
Signing time:             Sun 02 Aug 2026 23:17:43 +0000
Manifest this update:     Sun 02 Aug 2026 23:17:42 +0000
Manifest next update:     Sun 09 Aug 2026 23:17:42 +0000
Files and hashes:         1: Cz66iPGtoaG1CJGyZTGj5wm_ZZo.crl (hash: qVdKeqrydwvO+jc/deoasajciNDUDOxS/JH94gDZgDs=)
                          2: 63E3EB3EEF6611EB9A7EFE0EC4F9AE02.roa (hash: DwFRC5Q8naeDAzyAtmNxc5ykjCbZ/7NV7SU48cPZy64=)
                          3: 64720824EF6611EB9A7EFE0EC4F9AE02.roa (hash: LL0n4MdM8xP/nWYSFwrtL/Mk/fArB+tqMpKJaeazPNc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.crl
                          rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Aug 2026 23:17:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1594 (0x63a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E0B2, serialNumber=0B3EBA88F1ADA1A1B50891B26531A3E709BF659A
        Validity
            Not Before: Aug  2 23:17:42 2026 GMT
            Not After : Aug  9 23:17:42 2026 GMT
        Subject: CN=6a6fd016-98eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:11:99:89:ff:63:38:a9:24:ed:64:fe:2e:90:
                    f5:ec:3b:d3:25:f5:e6:bb:39:ac:01:a2:65:07:27:
                    f9:bb:82:e6:92:af:40:36:10:16:49:e4:33:9e:8f:
                    72:6c:d1:5f:2d:1d:30:32:f5:3e:b7:74:95:43:a3:
                    ad:5f:07:a4:9a:8b:50:32:b4:f9:fd:88:35:92:8e:
                    53:76:d3:81:f7:e4:86:0d:dc:57:08:cd:60:20:0d:
                    68:04:f9:63:d6:d9:0e:7a:24:59:79:41:78:56:3a:
                    d1:5f:f8:f5:de:3a:04:44:10:2d:1e:66:87:64:a1:
                    fc:d3:93:cf:80:9f:dc:a4:43:7e:54:44:2d:f7:87:
                    c1:4c:a9:49:74:f6:9f:c6:8f:f9:2a:72:0a:d2:e4:
                    07:88:41:ea:08:4d:a2:7f:fe:3f:a4:02:e3:ae:ae:
                    51:b4:35:2c:d4:2d:37:ca:cd:5f:b6:09:5d:ca:26:
                    bf:a8:a9:fb:20:71:a4:4d:b5:68:ce:e0:fb:81:1e:
                    2e:65:6b:f1:e6:6b:dd:eb:77:93:6c:a8:66:e2:a1:
                    9c:6f:e4:42:a8:00:5b:b4:5e:06:b3:7c:3e:f3:de:
                    84:fa:98:8d:5b:da:9f:e2:b1:2c:49:dc:30:5d:08:
                    d5:d8:62:2a:ee:d8:e2:71:54:55:66:e0:ad:d4:1a:
                    65:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:B9:13:D8:29:B5:B1:A1:3D:9C:B9:D7:34:E2:DD:0A:F9:E8:5B:CF
            X509v3 Authority Key Identifier:
                keyid:0B:3E:BA:88:F1:AD:A1:A1:B5:08:91:B2:65:31:A3:E7:09:BF:65:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:0c:2b:5a:1a:97:2d:85:38:7b:1b:e0:6f:b5:2e:ef:ea:1c:
         c3:e1:19:b0:93:9f:27:81:1b:fe:61:34:b9:90:f2:5b:d5:f5:
         b4:55:6e:3e:53:d7:c0:09:95:6d:31:99:78:a7:62:a3:e9:69:
         11:b6:2e:2b:7f:64:2d:9c:b3:f1:d3:b8:6d:e3:25:6d:9d:37:
         77:e0:37:d7:86:cb:1b:10:11:1b:3f:8b:d1:bb:e7:46:95:76:
         4b:88:c1:23:79:9f:7c:f7:5b:fd:cf:72:69:2d:d0:c1:8c:09:
         70:dd:29:6b:4e:74:a5:e7:78:ab:d6:da:2b:90:f3:cf:c7:a7:
         0c:03:c1:18:da:54:ab:44:1b:66:30:c6:b4:93:53:4f:be:9e:
         75:b5:7d:2f:c1:39:6b:52:a1:0d:45:d2:80:03:8f:8f:82:68:
         28:f9:df:ed:54:d3:40:f9:c6:07:20:2c:9c:52:4c:1d:68:43:
         5b:d7:15:e4:74:19:cf:54:14:3d:2d:65:f0:a2:41:e9:8c:10:
         22:c5:b2:63:87:d3:2b:16:f2:f7:6f:5b:a6:c7:0d:6d:f4:24:
         86:d4:56:47:0c:9f:91:cf:8d:f6:30:a7:cc:90:f5:85:98:fd:
         6d:51:66:8e:32:22:df:8f:6e:c0:7c:bf:3e:ae:9e:16:74:a7:
         d1:ed:f8:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 22:56:50 2026 by rpki-client