Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.mft
File:                     ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.mft (raw, json)
Hash identifier:          GR6C76jdu+KzFrerOyLZ9EaXDZfUH8XXBpANJa67F3Y=
Subject key identifier:   2E:96:30:00:D1:4D:DD:52:94:01:C9:B5:68:A8:7B:4A:F0:35:BC:9E
Authority key identifier: 64:91:20:A7:75:E9:FE:9D:AF:48:E1:7C:97:5C:00:CE:05:C4:62:00
Certificate issuer:       /CN=A91C5ED0/serialNumber=649120A775E9FE9DAF48E17C975C00CE05C46200
Certificate serial:       0F25
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.mft
Manifest number:          2C6E
Signing time:             Tue 18 Aug 2026 17:02:31 +0000
Manifest this update:     Tue 18 Aug 2026 17:02:31 +0000
Manifest next update:     Tue 25 Aug 2026 17:02:31 +0000
Files and hashes:         1: ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.crl (hash: 9lex6QSJMe7BjPUoxZbKNrmvYbA7gLM3fs7rd6syD9c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.crl
                          rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 17:02:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3877 (0xf25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C5ED0, serialNumber=649120A775E9FE9DAF48E17C975C00CE05C46200
        Validity
            Not Before: Aug 18 17:02:31 2026 GMT
            Not After : Aug 25 17:02:31 2026 GMT
        Subject: CN=6a849027-901f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:4a:1a:77:9b:72:ba:ad:c5:dd:69:e1:cd:9a:
                    8e:b1:68:61:3a:2d:43:53:61:4a:c2:44:0c:a2:82:
                    0b:df:c9:b4:33:51:f9:2f:50:68:61:26:91:df:8f:
                    78:a3:47:22:e9:bf:18:6e:ad:45:ef:fe:ed:2e:83:
                    75:b0:2d:a4:af:81:34:83:a4:c8:1b:f6:d0:46:f3:
                    ed:4e:ce:53:eb:e6:cd:89:29:8a:b3:be:70:e6:81:
                    0d:b9:c7:7e:01:73:c8:fa:1b:c7:ea:b9:a1:11:11:
                    f6:92:f7:79:80:21:6b:6a:16:18:18:06:fa:c4:f3:
                    e1:99:2d:cd:b9:c2:44:60:81:fb:29:8f:3a:28:4a:
                    bd:71:c0:5f:13:86:60:3c:83:9a:16:c7:d0:15:18:
                    66:aa:60:09:bf:84:f2:d3:15:5f:2f:68:df:d1:0e:
                    59:b7:84:10:ad:e8:63:5c:86:3f:d9:5a:23:7d:98:
                    7e:af:dc:3a:a5:ba:3c:9d:02:c6:cf:e1:f3:c1:e9:
                    17:f4:4c:79:49:74:83:36:44:20:70:73:9b:15:ba:
                    ba:db:a2:38:41:3f:3d:1c:d0:c7:e8:f0:a1:6a:d5:
                    7a:b2:a2:20:23:18:07:9d:cf:86:ba:f8:19:98:2a:
                    c1:35:cd:50:23:08:9d:10:a4:6d:5e:63:a7:48:00:
                    a9:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:96:30:00:D1:4D:DD:52:94:01:C9:B5:68:A8:7B:4A:F0:35:BC:9E
            X509v3 Authority Key Identifier:
                keyid:64:91:20:A7:75:E9:FE:9D:AF:48:E1:7C:97:5C:00:CE:05:C4:62:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:ec:42:a8:30:dd:09:48:68:95:c1:1b:a4:e3:95:05:2c:f1:
         49:4b:cb:cb:29:d6:3b:6c:ab:24:73:ae:24:70:04:f8:13:f5:
         0b:a5:ff:82:83:be:49:45:14:0d:1e:b9:25:c8:ca:f7:39:87:
         21:eb:d9:03:f4:ac:98:0e:7f:fe:05:d3:91:a0:28:c6:b0:f1:
         38:ce:85:f3:f9:ad:ce:98:2c:60:60:0f:30:9b:a9:f0:a6:14:
         98:19:59:0b:3e:60:f2:83:b1:ce:99:9d:4e:e2:a1:4b:2d:a0:
         e4:ae:82:1c:a2:e7:04:4c:7c:bd:37:97:00:d6:dd:63:b4:a5:
         94:4e:b2:a5:0b:3c:79:bf:5a:a3:2f:c8:f9:b5:7f:18:44:5e:
         f3:6a:d5:54:cc:74:d9:28:86:6a:97:bf:ec:6a:7e:d7:a2:3e:
         f7:15:2e:12:50:b9:32:1f:1f:6e:ab:f0:3f:9a:b9:c0:3d:bb:
         93:f5:25:8e:84:06:18:66:21:cd:3d:33:24:c0:6d:17:ee:13:
         18:33:92:c0:de:25:33:ce:65:44:36:ad:60:4b:d0:59:d6:e4:
         79:a2:5e:cd:a1:67:a5:a4:3c:3c:40:d2:9c:69:7a:9b:c3:b4:
         3e:91:d9:35:9c:51:bc:ea:9e:0e:45:1d:4b:d0:4b:67:d5:1f:
         4e:74:ae:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 13:40:46 2026 by rpki-client