Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.mft
File:                     ZVG5vqh4GBz-lkJhV_SxIcDF1aw.mft (raw, json)
Hash identifier:          YHAYt1JlPrHHcszTjXE9C1Iwx484OCWDh8OFp3NBdgQ=
Subject key identifier:   2A:22:5F:93:13:54:D4:7F:C9:3E:1D:15:98:C6:88:64:62:A7:92:2B
Authority key identifier: 65:51:B9:BE:A8:78:18:1C:FE:96:42:61:57:F4:B1:21:C0:C5:D5:AC
Certificate issuer:       /CN=A91B005C/serialNumber=6551B9BEA878181CFE96426157F4B121C0C5D5AC
Certificate serial:       067C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.mft
Manifest number:          066C
Signing time:             Tue 18 Aug 2026 22:58:54 +0000
Manifest this update:     Tue 18 Aug 2026 22:58:53 +0000
Manifest next update:     Tue 25 Aug 2026 22:58:53 +0000
Files and hashes:         1: ZVG5vqh4GBz-lkJhV_SxIcDF1aw.crl (hash: ocFeoKAlcDNoj2GaQcoT6XOOQvQFYuTd8434GuajRsE=)
                          2: FC28C1AE9BE011EC8EE90745C4F9AE02.roa (hash: bfmgQdb4mtKehaE5Ra/VuoIOQxpWwgFMk0NAgFY1g8w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.crl
                          rsync://rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 22:58:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1660 (0x67c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B005C, serialNumber=6551B9BEA878181CFE96426157F4B121C0C5D5AC
        Validity
            Not Before: Aug 18 22:58:53 2026 GMT
            Not After : Aug 25 22:58:53 2026 GMT
        Subject: CN=6a84e3ad-2278
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:59:8a:30:90:b4:c1:27:40:69:e1:a1:cb:23:
                    50:8c:b0:2b:ea:76:63:e3:be:f5:9a:72:10:08:15:
                    ac:84:8a:dd:8b:78:b3:6d:87:70:3e:0c:73:27:bb:
                    88:ca:ed:ec:62:c3:4d:3e:f7:77:ef:9c:ee:82:58:
                    fe:3a:47:e7:d2:8a:a4:fc:09:01:cd:2a:ef:9c:02:
                    9d:56:02:a4:3e:f9:82:d6:d1:80:d4:47:84:c2:ce:
                    91:63:4f:d6:c5:8b:4a:1c:c9:9b:29:88:3a:a1:66:
                    55:50:96:40:ff:c9:c5:79:b7:86:b7:42:b1:5e:26:
                    42:73:fa:95:a3:08:9b:84:ba:1b:45:17:c0:68:37:
                    5d:3c:51:63:86:7e:a7:06:e5:97:0a:12:c1:05:40:
                    c5:ce:55:f5:bb:52:07:ad:05:42:79:b7:f3:75:d4:
                    80:e5:41:40:80:6a:9c:c6:c4:24:08:8f:fe:0b:33:
                    f8:04:c8:48:d0:aa:dd:e9:0a:c4:5c:34:06:8c:2f:
                    c9:81:3e:eb:81:76:70:02:55:48:a1:c0:05:d6:11:
                    6d:10:e8:d1:21:75:8d:3e:6d:d1:59:43:e0:62:d2:
                    a5:c7:6b:c0:76:47:7e:a9:2d:1f:76:ea:9f:73:58:
                    29:aa:15:8c:11:11:6c:38:32:64:95:6c:10:3a:a8:
                    5c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:22:5F:93:13:54:D4:7F:C9:3E:1D:15:98:C6:88:64:62:A7:92:2B
            X509v3 Authority Key Identifier:
                keyid:65:51:B9:BE:A8:78:18:1C:FE:96:42:61:57:F4:B1:21:C0:C5:D5:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:70:91:09:07:ca:26:18:60:fc:87:82:2c:20:c8:e8:a0:17:
         60:a6:97:5f:a6:c4:a1:9d:42:81:c5:a4:88:68:57:83:94:57:
         63:88:41:27:97:12:31:86:fb:d6:ef:3f:f8:89:14:61:1f:48:
         84:ea:57:7b:cf:c2:cc:5a:84:86:92:4c:10:dc:52:51:c1:ab:
         67:b6:80:88:21:b3:71:3e:e3:31:9b:18:df:83:0f:27:e4:fd:
         90:fb:e6:1b:99:28:9a:e7:bd:c7:80:34:79:86:09:fa:36:47:
         a7:5e:ad:d2:07:0c:41:86:f3:20:a1:46:f9:84:5c:65:8b:c8:
         60:4f:ba:c9:da:50:fb:47:df:76:f0:ac:10:21:86:25:0c:3d:
         e3:3a:3e:e5:a6:f5:77:7b:c4:4d:53:ff:4b:09:af:99:37:93:
         52:6a:a4:e5:bf:39:33:d0:ea:23:e3:c7:e7:40:47:f7:a0:38:
         aa:9d:d0:c8:fa:08:30:3d:57:e3:e5:4c:a8:47:c8:d1:f9:82:
         ec:0f:ee:56:a4:eb:e8:94:9a:7f:8e:c7:6d:d4:ef:f1:8b:b7:
         b6:4b:48:1e:c3:19:35:60:80:aa:fd:cf:cd:9c:9b:a9:c3:9a:
         6b:6f:38:07:e4:c8:cc:52:2f:f2:3c:12:f9:dc:b7:70:b3:b9:
         bd:3c:d9:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 13:41:11 2026 by rpki-client