Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3869/75DA447C1F4D11EA90505762C4F9AE02/ZQWXw3xtTUdvSZVECzYEpnG7_bA.mft
File:                     ZQWXw3xtTUdvSZVECzYEpnG7_bA.mft (raw, json)
Hash identifier:          M72CvK99pXYYXll7jNfmOmnB3HqbAhawDXp79iekuUg=
Subject key identifier:   D9:AC:26:90:81:91:D2:50:CC:02:8C:A2:FB:F0:91:9F:C4:7E:CB:4B
Authority key identifier: 65:05:97:C3:7C:6D:4D:47:6F:49:95:44:0B:36:04:A6:71:BB:FD:B0
Certificate issuer:       /CN=A91C3869/serialNumber=650597C37C6D4D476F4995440B3604A671BBFDB0
Certificate serial:       0CC1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQWXw3xtTUdvSZVECzYEpnG7_bA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C3869/75DA447C1F4D11EA90505762C4F9AE02/ZQWXw3xtTUdvSZVECzYEpnG7_bA.mft
Manifest number:          0CB2
Signing time:             Tue 18 Aug 2026 18:50:39 +0000
Manifest this update:     Tue 18 Aug 2026 18:50:39 +0000
Manifest next update:     Tue 25 Aug 2026 18:50:39 +0000
Files and hashes:         1: ZQWXw3xtTUdvSZVECzYEpnG7_bA.crl (hash: 2V7raDFOpH5mN3F/dZOkY8/ctU/cu+kpB7iSsqnUjug=)
                          2: 9D8E0AF4E18C11ECB1697F55C4F9AE02.roa (hash: k/Dtkdo/ASwNUW0b7Vf+PXcxj0dpm2I2YrIKuMX9lpU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C3869/75DA447C1F4D11EA90505762C4F9AE02/ZQWXw3xtTUdvSZVECzYEpnG7_bA.crl
                          rsync://rpki.apnic.net/member_repository/A91C3869/75DA447C1F4D11EA90505762C4F9AE02/ZQWXw3xtTUdvSZVECzYEpnG7_bA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQWXw3xtTUdvSZVECzYEpnG7_bA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 18:50:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3265 (0xcc1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C3869, serialNumber=650597C37C6D4D476F4995440B3604A671BBFDB0
        Validity
            Not Before: Aug 18 18:50:39 2026 GMT
            Not After : Aug 25 18:50:39 2026 GMT
        Subject: CN=6a84a97f-a5b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:b4:0f:68:bd:dd:f0:cf:ae:8f:3e:44:b9:c3:
                    54:a0:07:58:a9:8a:cf:b5:18:6e:6d:3e:13:e1:1c:
                    01:be:b1:b2:6e:bc:0d:55:4b:70:8b:06:bd:95:77:
                    ba:d1:98:28:66:cc:b3:2c:f7:24:9c:a3:02:76:92:
                    33:b2:e2:43:46:41:75:84:9d:54:24:fa:a2:b5:c9:
                    62:50:a7:9f:b4:40:f6:2a:8d:b1:02:0b:fe:57:05:
                    a0:ac:f7:c1:8c:e4:62:aa:41:08:6c:0c:a4:18:aa:
                    d5:51:20:6f:a4:fb:e8:e2:86:60:30:75:e5:8e:c6:
                    f0:f1:3f:1e:ad:72:ca:40:ce:91:4b:b4:2c:b9:3a:
                    00:4b:f4:c6:f1:f7:68:eb:cd:53:3d:bd:4f:f6:6a:
                    c9:be:51:be:39:29:ac:10:12:1c:ae:aa:7e:67:bf:
                    51:0f:8f:a9:45:f7:8d:bf:e4:c2:cb:98:93:70:4b:
                    f7:42:aa:4a:12:34:5e:42:19:7d:7d:31:d1:12:fd:
                    3b:d4:f9:be:18:a8:71:3d:0c:b9:c9:48:dd:60:f3:
                    5d:e5:b4:0d:18:85:4a:a2:cb:25:04:ec:76:7f:e5:
                    76:52:2c:c8:c3:d1:17:03:1e:ed:d4:f3:d9:c6:cc:
                    d5:b1:54:5a:b7:e1:71:a6:35:dc:a2:9d:78:13:b4:
                    a5:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:AC:26:90:81:91:D2:50:CC:02:8C:A2:FB:F0:91:9F:C4:7E:CB:4B
            X509v3 Authority Key Identifier:
                keyid:65:05:97:C3:7C:6D:4D:47:6F:49:95:44:0B:36:04:A6:71:BB:FD:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C3869/75DA447C1F4D11EA90505762C4F9AE02/ZQWXw3xtTUdvSZVECzYEpnG7_bA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQWXw3xtTUdvSZVECzYEpnG7_bA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3869/75DA447C1F4D11EA90505762C4F9AE02/ZQWXw3xtTUdvSZVECzYEpnG7_bA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:63:00:b9:e5:4e:1a:c8:b7:bf:61:93:ba:ce:63:53:5f:07:
         ab:9e:5c:0b:61:a8:b6:ea:55:6c:6e:79:a2:35:13:9a:eb:2a:
         e0:74:7b:c5:b0:01:d0:8b:0e:67:78:26:49:ac:29:f5:6f:9a:
         68:2d:8d:24:49:88:87:29:76:e1:ef:d6:c9:5e:c6:de:40:2e:
         9f:54:a7:69:7a:e4:43:87:fe:f2:b1:ff:9f:27:d1:09:36:e3:
         a1:cc:19:a4:01:e4:d5:f4:88:13:fd:4d:30:10:80:f5:99:93:
         67:a5:f6:6b:fe:f7:57:fa:34:f6:b7:a6:73:dd:b4:eb:ae:3f:
         94:e7:9a:db:56:b9:e1:c9:df:39:0b:eb:3d:45:58:0c:7b:89:
         69:5d:f4:1e:b6:77:7e:8a:79:72:00:b1:07:3d:bc:71:27:73:
         af:1d:c7:78:fd:9b:87:47:d8:5a:88:91:19:84:20:4c:70:f7:
         38:80:91:28:dd:8a:91:9e:a1:5b:34:cc:b9:f1:a0:24:2e:4d:
         d3:93:65:a6:e6:d5:6b:0a:11:c8:2d:9a:57:56:46:ec:d6:52:
         ba:19:78:7c:18:97:c5:5c:22:f6:11:5b:63:5e:e2:09:59:19:
         a6:12:47:b7:44:68:24:bc:0f:38:cb:b6:18:c4:39:b6:93:24:
         7f:d7:2c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:45:26 2026 by rpki-client