Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.mft
File:                     ZgNNITbEOxQ4IVfhK7dLLLqdl6M.mft (raw, json)
Hash identifier:          +pMexQ/o3XaOFlzUU20M0NL7znPqzt4joAvWKg5UZgI=
Subject key identifier:   96:BA:F8:50:8C:34:50:7F:83:DF:26:17:27:17:FF:2B:E4:BE:F3:33
Authority key identifier: 66:03:4D:21:36:C4:3B:14:38:21:57:E1:2B:B7:4B:2C:BA:9D:97:A3
Certificate issuer:       /CN=A91EB7BD/serialNumber=66034D2136C43B14382157E12BB74B2CBA9D97A3
Certificate serial:       1270
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.mft
Manifest number:          1265
Signing time:             Tue 18 Aug 2026 17:17:40 +0000
Manifest this update:     Tue 18 Aug 2026 17:17:39 +0000
Manifest next update:     Tue 25 Aug 2026 17:17:39 +0000
Files and hashes:         1: ZgNNITbEOxQ4IVfhK7dLLLqdl6M.crl (hash: topGbKD8AizLSZgRo8tA1/WdVnIEdmz0+DDc5jJKqq8=)
                          2: 84121C245CE111E9824BCF76C4F9AE02.roa (hash: 6P0QZul7deP/5azgpjbHdDKzo/8UCrH1J+Uoz59/kWw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.crl
                          rsync://rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 17:17:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4720 (0x1270)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EB7BD, serialNumber=66034D2136C43B14382157E12BB74B2CBA9D97A3
        Validity
            Not Before: Aug 18 17:17:39 2026 GMT
            Not After : Aug 25 17:17:39 2026 GMT
        Subject: CN=6a8493b3-cb05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:04:bf:a0:1c:e0:17:0b:48:6b:6d:e0:83:99:
                    90:66:8a:e1:95:0d:f7:e2:8e:4c:8a:56:ce:e8:e8:
                    d4:35:bd:c0:b0:3c:01:de:d2:5b:37:8e:81:7e:2e:
                    51:de:4f:02:25:08:6b:f9:ce:07:70:a6:06:10:d2:
                    89:f0:d5:2f:56:dc:af:1a:02:a9:4b:49:b3:b8:da:
                    c0:32:8b:ce:e3:03:09:08:75:89:56:3d:34:69:ec:
                    da:4a:5e:e8:9d:08:cc:4d:76:71:0b:1a:1a:c9:28:
                    bb:56:43:16:7a:70:64:2b:bf:80:3c:1c:3c:72:f1:
                    87:8c:0d:ae:bd:04:bf:6d:c7:1c:17:f7:75:74:c2:
                    84:e8:53:c5:27:5b:8e:0e:9d:e7:5d:c4:4f:ca:d3:
                    19:1d:ff:41:ff:c4:12:84:be:8a:f5:77:f8:ea:fa:
                    5b:fe:b1:0e:62:95:42:fb:1b:c1:6d:0d:1d:d3:e4:
                    24:67:08:8f:20:e2:a4:c3:81:23:4d:82:64:e7:c9:
                    d9:8a:71:18:e7:83:06:7d:fe:7c:f6:ef:35:75:8a:
                    45:51:80:df:42:3e:f3:28:1f:fa:77:35:1d:f4:dc:
                    13:06:05:d6:fa:eb:0f:72:87:26:69:ed:ff:cc:e7:
                    9c:8c:4e:f0:15:48:4a:14:e6:5b:32:86:73:0a:4b:
                    3d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:BA:F8:50:8C:34:50:7F:83:DF:26:17:27:17:FF:2B:E4:BE:F3:33
            X509v3 Authority Key Identifier:
                keyid:66:03:4D:21:36:C4:3B:14:38:21:57:E1:2B:B7:4B:2C:BA:9D:97:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:d1:4f:b6:cd:c3:33:a9:fe:ed:02:20:74:2f:c7:dc:12:92:
         1e:3f:dc:3d:97:92:65:1c:91:3d:98:b8:6b:46:ac:7b:51:b8:
         55:9b:65:fc:9d:cb:35:57:a9:bc:f2:eb:a5:72:21:de:07:48:
         3f:63:d2:0e:75:b3:7f:36:8e:76:5d:64:0b:ee:fb:56:58:80:
         ed:0d:cb:23:3c:91:5f:ed:af:cc:1e:6b:98:56:31:c4:3f:c4:
         c3:d0:7d:f1:b3:9e:ac:0a:a8:f3:98:3b:65:bd:20:da:ff:18:
         08:1c:bd:22:92:9b:9a:bf:49:79:a0:be:5c:f6:e5:f8:15:c5:
         35:8d:ee:e9:16:a0:75:96:c4:8a:8d:92:ee:8a:69:e9:99:cf:
         e5:e8:64:32:34:87:ed:1f:d5:9e:92:b6:54:6c:54:68:80:44:
         bc:62:04:5a:44:b6:e6:d0:9f:66:fb:12:e3:62:fe:09:6c:50:
         b0:58:40:d0:0b:cc:bf:92:68:8f:9d:2c:01:14:f3:c8:69:11:
         07:55:69:a2:de:5e:d4:10:48:8e:5c:65:2f:0c:57:12:e7:92:
         ec:3f:b1:ef:fc:d6:d8:a4:d4:64:6c:12:f6:1d:53:b9:c2:36:
         99:46:af:88:22:2d:c5:21:d5:30:6f:0b:c0:2b:46:ee:e6:63:
         f9:c3:1a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:51:43 2026 by rpki-client