Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F09FE/3803AA1C9B1211EFA87BB43BC4F9AE02/ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.mft
File:                     ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.mft (raw, json)
Hash identifier:          P4YZbFSOIBQ2VYsbFfxOFVy4YkfhLtCaIj4PlNxjdJw=
Subject key identifier:   25:FD:2F:84:DD:68:75:3A:38:94:88:EF:06:44:2D:98:F4:2E:DE:6A
Authority key identifier: 64:CC:C1:66:C5:8C:38:FE:8C:C1:97:6F:5C:F0:7C:1D:D0:6F:68:14
Certificate issuer:       /CN=A91F09FE/serialNumber=64CCC166C58C38FE8CC1976F5CF07C1DD06F6814
Certificate serial:       0154
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F09FE/3803AA1C9B1211EFA87BB43BC4F9AE02/ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.mft
Manifest number:          0150
Signing time:             Wed 19 Aug 2026 05:49:51 +0000
Manifest this update:     Wed 19 Aug 2026 05:49:50 +0000
Manifest next update:     Wed 26 Aug 2026 05:49:50 +0000
Files and hashes:         1: ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.crl (hash: mMwUo7qZfU5dsGF6QyCzKyd1wdIfXzSVS1Q9QOCHGIY=)
                          2: 841585749B1211EFBFBF913CC4F9AE02.roa (hash: c0roN8cPiQejDa+804Uoxjig98zoRoNUAxeOFr9K58Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F09FE/3803AA1C9B1211EFA87BB43BC4F9AE02/ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.crl
                          rsync://rpki.apnic.net/member_repository/A91F09FE/3803AA1C9B1211EFA87BB43BC4F9AE02/ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 05:49:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 340 (0x154)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F09FE, serialNumber=64CCC166C58C38FE8CC1976F5CF07C1DD06F6814
        Validity
            Not Before: Aug 19 05:49:50 2026 GMT
            Not After : Aug 26 05:49:50 2026 GMT
        Subject: CN=6a8543ff-cdea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:53:b1:ca:6c:a7:34:f9:32:a6:32:28:24:be:
                    58:ca:b2:3b:ab:72:47:bd:22:6d:77:2c:f0:e2:d2:
                    d4:8c:84:06:b7:01:d9:af:df:68:3e:17:da:b9:53:
                    9c:02:e6:ec:69:f2:52:cc:f5:ad:58:48:2d:8f:57:
                    3a:13:ee:8c:0f:95:a7:35:fc:6a:82:b6:16:ba:ac:
                    7e:9f:f2:36:24:e0:48:96:ae:85:66:7e:9d:5a:32:
                    b3:67:56:3b:60:4e:bb:e2:bd:6d:a3:04:c3:dc:1c:
                    8e:be:a1:3d:95:92:70:0f:8a:93:e6:a8:0e:1e:ca:
                    2a:9a:13:41:aa:24:d1:ed:28:13:7b:e3:11:cc:ec:
                    92:6c:28:92:33:85:21:33:81:8b:06:b1:a6:5d:b9:
                    24:86:10:d9:8b:da:2d:88:9e:44:73:c3:29:2b:bd:
                    dc:63:36:e8:70:5a:ae:62:fa:f6:7b:19:9a:89:47:
                    96:c7:ab:a8:40:74:4e:05:d0:2e:54:4e:56:f7:a0:
                    3b:4f:99:33:4d:a4:1d:4d:8d:28:3b:3b:10:ff:99:
                    8b:74:23:ba:13:39:4c:f8:f9:04:d6:73:ef:ff:e3:
                    16:4b:84:b2:de:dd:e4:92:b3:33:27:c9:aa:e4:43:
                    3d:4a:e6:db:0f:5c:f9:a1:a4:f2:9e:18:d2:0c:b8:
                    b1:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:FD:2F:84:DD:68:75:3A:38:94:88:EF:06:44:2D:98:F4:2E:DE:6A
            X509v3 Authority Key Identifier:
                keyid:64:CC:C1:66:C5:8C:38:FE:8C:C1:97:6F:5C:F0:7C:1D:D0:6F:68:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F09FE/3803AA1C9B1211EFA87BB43BC4F9AE02/ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F09FE/3803AA1C9B1211EFA87BB43BC4F9AE02/ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:be:ce:fe:69:9b:8e:47:49:65:b4:54:ed:19:61:f6:04:24:
         e9:aa:ea:2e:3c:d0:58:ea:27:c3:42:59:10:8f:87:77:83:c3:
         48:9e:92:0d:39:d5:ef:d2:b1:92:f9:59:65:13:55:fb:51:86:
         fe:bc:65:4d:5d:a7:d4:b8:b8:69:83:6a:77:76:89:5e:0d:d6:
         55:dd:55:8a:d5:c7:37:06:ce:4f:90:75:b6:84:98:82:19:fc:
         1c:a4:19:3c:bd:7d:ad:e3:46:27:63:d0:ea:c9:21:78:11:6a:
         62:74:14:0d:df:ca:1e:fe:c3:c6:14:b6:68:b6:74:4d:f2:c7:
         9e:04:0a:f9:56:20:72:a5:a8:0f:03:20:94:87:37:d2:4d:13:
         91:fe:f3:b6:6b:47:18:ff:dd:bd:85:7e:aa:d3:c0:d3:01:f4:
         4d:12:32:42:0a:79:49:7e:9d:3b:58:3d:07:de:0e:fe:26:af:
         78:54:ca:1a:40:32:a1:11:95:83:02:75:ba:fe:f4:31:ec:24:
         57:73:18:27:8b:0e:fa:c2:53:44:70:14:bc:69:ac:57:65:81:
         52:00:17:aa:98:91:74:2f:4d:11:47:8e:c8:22:a9:c3:0f:e7:
         95:71:83:1d:2a:54:f6:60:cd:23:35:5d:24:0b:b1:59:85:bb:
         86:76:87:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:45:23 2026 by rpki-client