Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft
File:                     ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft (raw, json)
Hash identifier:          3TBoOsIIPEYTp613V6Co+L5ZIwhkjqGTZPRVwzXhwhM=
Subject key identifier:   F8:59:60:05:3A:F9:56:5F:85:D2:BC:CC:02:4D:51:3B:D0:78:F4:C3
Authority key identifier: 64:7D:09:27:DB:3B:17:8E:2F:65:4A:32:68:55:7F:E5:B5:D6:72:9C
Certificate issuer:       /CN=A919A777/serialNumber=647D0927DB3B178E2F654A3268557FE5B5D6729C
Certificate serial:       0208
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft
Manifest number:          01D6
Signing time:             Sat 11 Jul 2026 04:50:22 +0000
Manifest this update:     Sat 11 Jul 2026 04:50:21 +0000
Manifest next update:     Sat 18 Jul 2026 04:50:21 +0000
Files and hashes:         1: ZH0JJ9s7F44vZUoyaFV_5bXWcpw.crl (hash: AOIQdFfsYvnLewJlORG5tYSKT+mnqOi21hPqV61MLvg=)
                          2: BDECB94CEC4F11EEB0B9B467C4F9AE02.roa (hash: fSlbtUc39UCW3k1Yy6pAqJg048Gxa2v6PcevURxg5Zs=)
                          3: DD0545F6324A11EFA615F80FC4F9AE02.roa (hash: Uj11T+QW0pwuoYmi/Tug3FzEFRy1nbJISrOyCvJDnIQ=)
                          4: E7F77E5E42E711EF8B9EF861C4F9AE02.roa (hash: Rk3j/x7/aK9tyzGNZkRW4uYz1dTdbytFeBnr/OmzBX8=)
                          5: 7BDC977E0AF011EF87265E12C4F9AE02.roa (hash: L+Pr2GihRWoedBardrydLcushDGXI9FYHRtqemwZ37o=)
                          6: BC26B7548CAB11F0BDAA8B67C4F9AE02.roa (hash: 1xbmeKrtdkfMeaYJXV3nxlxzWBfNoeXUz9/FaAvLRY4=)
                          7: D43F20C6C70F11F0BEE61E6CC4F9AE02.roa (hash: lU5HELzK1HgvUgy9a8UOHW1aya85BnCwdaSrvas6AAk=)
                          8: 5B4D02987E5B11F09260CE56C4F9AE02.roa (hash: YSqNnOxJ+Xkes9UNemwulrLNoP9a1fzLC+DIw2bAtgY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.crl
                          rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Jul 2026 04:50:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 520 (0x208)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919A777, serialNumber=647D0927DB3B178E2F654A3268557FE5B5D6729C
        Validity
            Not Before: Jul 11 04:50:21 2026 GMT
            Not After : Jul 18 04:50:21 2026 GMT
        Subject: CN=6a51cb8e-5ee3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:dc:15:98:ed:f6:b7:f1:07:8c:40:46:57:b6:
                    77:f6:2c:2b:10:25:24:3c:91:e5:8a:8f:4d:d0:15:
                    65:7a:ea:5b:e9:a6:ef:2d:6f:19:ac:d7:8c:a9:b0:
                    47:57:af:84:12:45:e6:aa:27:28:9f:6f:c5:8d:f9:
                    2a:c7:5d:4f:f6:59:27:f3:07:0a:0f:51:bd:ed:12:
                    bf:59:6b:59:c5:17:13:de:e1:99:c6:94:99:18:35:
                    5d:1b:bd:e0:dd:6c:95:a5:43:46:45:72:f9:77:ae:
                    9d:f9:27:d3:1e:67:da:ab:b9:c3:64:f0:14:76:a0:
                    9a:9d:a0:8f:9b:12:b9:32:e5:20:2f:1e:b6:5d:22:
                    f2:fa:7f:1a:2f:5f:1f:50:d1:de:cb:c6:be:a8:c5:
                    58:6b:8e:5d:45:06:58:a8:49:f8:d4:02:3d:7e:98:
                    c7:c6:93:82:ae:61:9c:34:64:26:5b:51:9d:ca:14:
                    33:cd:39:30:a8:bf:2d:df:95:e4:e6:68:0f:d5:fa:
                    54:84:6b:66:9a:c2:2a:11:41:59:39:d4:09:91:21:
                    85:02:65:91:53:30:2d:dd:01:1a:5c:e3:cb:47:51:
                    fc:da:e9:19:fd:a3:1b:9a:c1:cc:fe:d9:97:b0:4b:
                    2e:fa:a6:92:50:3b:d4:87:8d:8c:b6:de:1f:5e:af:
                    16:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:59:60:05:3A:F9:56:5F:85:D2:BC:CC:02:4D:51:3B:D0:78:F4:C3
            X509v3 Authority Key Identifier:
                keyid:64:7D:09:27:DB:3B:17:8E:2F:65:4A:32:68:55:7F:E5:B5:D6:72:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:c5:c8:7e:f8:86:7c:c8:ff:88:a8:4c:99:e3:5a:5d:e8:1b:
         22:ba:a3:b1:88:a5:86:a5:31:25:d3:fc:9f:a2:65:d9:b9:17:
         a2:ba:06:6b:08:2c:75:50:d0:e5:c6:b5:41:37:d1:2b:7d:6b:
         ff:1c:72:cc:43:87:76:31:f1:cc:bd:22:31:ab:e8:49:13:3c:
         d3:9a:de:e6:5e:6a:46:82:4d:44:d1:82:d3:66:3e:44:fe:4d:
         f9:f5:19:24:34:64:21:73:bb:94:b9:5d:5e:c3:2b:7b:9b:24:
         1a:eb:32:6d:3a:fb:1f:10:e5:0e:c6:9d:e6:2c:d7:cd:38:29:
         b4:31:c3:66:84:ec:8d:a6:63:78:22:13:e6:0a:f6:28:d5:00:
         25:5a:ff:10:23:20:3b:2c:eb:a2:80:d6:cf:55:d3:96:fd:8c:
         5e:a6:09:60:1c:e2:38:0c:a4:e4:63:53:49:5d:32:0b:d5:d0:
         73:8c:51:57:15:12:75:4d:20:af:36:82:a2:3a:6a:ef:0b:a8:
         d6:81:c3:a1:e4:62:fe:58:3b:3f:8b:95:74:0e:27:63:c3:64:
         dc:2f:77:e1:a8:95:d1:50:95:d9:d9:df:30:c9:3e:6b:c6:37:
         77:6e:6e:96:5d:0c:24:58:af:1e:01:47:37:cf:3a:69:1a:10:
         c2:2f:88:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 10:13:53 2026 by rpki-client