Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft
File:                     ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft (raw, json)
Hash identifier:          m/JnC4kDDUf/iSMQT5xlgVfM+zepRxj3T7N25dYGQlw=
Subject key identifier:   B5:61:49:0A:E4:1D:53:7D:F5:D7:F2:23:2F:FA:EE:31:1C:26:E2:B2
Authority key identifier: 66:94:1D:A7:EA:F3:0E:93:44:E0:32:1F:0B:75:4E:7A:EF:FC:35:29
Certificate issuer:       /CN=A91CCAF1/serialNumber=66941DA7EAF30E9344E0321F0B754E7AEFFC3529
Certificate serial:       0165
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft
Manifest number:          0155
Signing time:             Mon 03 Aug 2026 06:25:48 +0000
Manifest this update:     Mon 03 Aug 2026 06:25:47 +0000
Manifest next update:     Mon 10 Aug 2026 06:25:47 +0000
Files and hashes:         1: ZpQdp-rzDpNE4DIfC3VOeu_8NSk.crl (hash: tZSL+F8Z/UOTmkXBzwnLy8l8KQ4MWbEbBb8iPKtYbi4=)
                          2: CEF8F2768AAD11EF9133DE6EC4F9AE02.roa (hash: XAAQs6VvWW3MlpS05j2NWzqBVUmAKDnHpobUBOoE4/o=)
                          3: 52D518588AAF11EF9F5A6313C4F9AE02.roa (hash: A7rSSZVeM5zH7Lu6nq0wtI2MJAwPFWQR7zTSTecfo9k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.crl
                          rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Aug 2026 06:25:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 357 (0x165)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CCAF1, serialNumber=66941DA7EAF30E9344E0321F0B754E7AEFFC3529
        Validity
            Not Before: Aug  3 06:25:47 2026 GMT
            Not After : Aug 10 06:25:47 2026 GMT
        Subject: CN=6a70346c-b8f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:27:9b:bd:be:c5:de:10:82:52:78:81:27:ab:
                    ae:45:ca:bd:c1:08:c2:76:29:89:85:ae:22:3a:34:
                    40:f8:65:ba:b8:64:30:02:45:27:1f:d8:a0:c0:a3:
                    1e:4e:64:af:21:48:89:c8:be:50:30:96:98:7a:06:
                    f1:39:6a:b3:f6:49:3b:e6:6d:2d:db:8f:1a:dd:19:
                    93:94:17:c8:61:91:a4:07:1d:4f:fc:1b:25:b2:8d:
                    6d:46:5b:89:0b:ba:cd:b0:8c:9b:a4:a7:dc:99:77:
                    20:15:5d:61:4e:aa:d8:25:6a:4d:3d:cc:cc:05:e8:
                    85:7e:c5:5f:e5:ed:07:5c:29:88:7d:d3:a8:a8:b0:
                    0f:c4:c3:f4:6e:f9:0e:0a:86:95:03:b0:97:db:8c:
                    31:b1:69:ce:6c:08:26:e4:f9:72:37:ac:0a:a9:26:
                    7c:1e:c0:66:d5:0b:bc:19:44:46:9a:b2:e1:8a:ce:
                    51:4f:b0:7c:49:71:49:a2:56:0a:41:83:a9:65:55:
                    38:97:42:f9:18:0e:ce:32:cb:5c:22:0a:b5:4f:d6:
                    bf:bd:f9:c6:d0:1b:dc:d9:e7:a6:a2:f1:d4:9c:de:
                    0f:e6:54:d4:3d:c6:e2:8b:9a:03:7e:c7:1d:c4:b7:
                    b0:cb:59:16:12:1b:29:68:cc:99:e2:17:22:29:50:
                    b0:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:61:49:0A:E4:1D:53:7D:F5:D7:F2:23:2F:FA:EE:31:1C:26:E2:B2
            X509v3 Authority Key Identifier:
                keyid:66:94:1D:A7:EA:F3:0E:93:44:E0:32:1F:0B:75:4E:7A:EF:FC:35:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:10:7c:30:9c:ce:fe:33:38:b9:96:d1:30:1e:ba:6c:69:7e:
         7c:50:d0:ec:ce:55:20:e1:10:10:0a:9d:8a:fa:d6:af:47:7d:
         1f:f3:90:a5:e2:46:b6:20:12:0c:34:1c:d4:a4:f9:8c:15:a5:
         c3:df:40:f6:42:69:4f:03:a0:11:83:f0:51:b7:16:1f:7f:8e:
         e3:96:05:9a:e0:72:c1:54:4c:15:1c:ce:8f:09:67:2a:3f:5a:
         c4:27:a2:b6:05:40:c7:5e:aa:27:08:93:58:6c:19:b0:06:bb:
         23:d0:85:36:56:43:1e:67:d0:38:72:d0:81:4f:2c:89:d0:35:
         c6:9e:55:75:47:87:2e:5a:fa:20:c4:59:72:00:ff:d9:f0:fd:
         a4:fa:37:81:25:56:02:11:ed:c4:8f:76:1f:11:3a:29:de:72:
         27:22:50:01:25:d9:3f:81:08:9c:e1:07:4b:2a:ab:62:9e:5c:
         1b:84:9e:00:de:88:57:ba:d9:34:b0:5d:97:7d:7f:ea:81:1a:
         84:a5:05:53:a1:a5:26:ed:65:14:06:50:f0:1b:9f:69:11:ea:
         75:03:d7:f8:13:26:bb:62:f7:d2:59:db:2f:df:c7:14:ac:01:
         75:5a:82:c0:b8:f9:e8:1d:54:e6:60:20:8a:fd:32:9c:98:f3:
         be:3d:19:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 23:50:21 2026 by rpki-client