Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110B82/23D4ACB61D8F11E2AE5207EE08B02CD2/zk5vKarqdsaUOXp2Em3DgNPbb74.mft
File:                     zk5vKarqdsaUOXp2Em3DgNPbb74.mft (raw, json)
Hash identifier:          EKNTrMqJ+GYCnHXrHcAteBlaydcca2omwHmb0Vjiab8=
Subject key identifier:   83:1A:85:3F:8A:9D:2D:E8:CF:5E:21:28:37:B8:A3:E2:32:BC:1A:F0
Authority key identifier: CE:4E:6F:29:AA:EA:76:C6:94:39:7A:76:12:6D:C3:80:D3:DB:6F:BE
Certificate issuer:       /CN=A9110B82/serialNumber=CE4E6F29AAEA76C694397A76126DC380D3DB6FBE
Certificate serial:       3557
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zk5vKarqdsaUOXp2Em3DgNPbb74.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110B82/23D4ACB61D8F11E2AE5207EE08B02CD2/zk5vKarqdsaUOXp2Em3DgNPbb74.mft
Manifest number:          3557
Signing time:             Sat 04 Jul 2026 14:40:35 +0000
Manifest this update:     Sat 04 Jul 2026 14:40:34 +0000
Manifest next update:     Sat 11 Jul 2026 14:40:34 +0000
Files and hashes:         1: zk5vKarqdsaUOXp2Em3DgNPbb74.crl (hash: cnwXbszhbjgb3IdZZhXyo6bTY6jJFaZWik3UVOH4opQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110B82/23D4ACB61D8F11E2AE5207EE08B02CD2/zk5vKarqdsaUOXp2Em3DgNPbb74.crl
                          rsync://rpki.apnic.net/member_repository/A9110B82/23D4ACB61D8F11E2AE5207EE08B02CD2/zk5vKarqdsaUOXp2Em3DgNPbb74.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zk5vKarqdsaUOXp2Em3DgNPbb74.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Jul 2026 14:40:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13655 (0x3557)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110B82, serialNumber=CE4E6F29AAEA76C694397A76126DC380D3DB6FBE
        Validity
            Not Before: Jul  4 14:40:34 2026 GMT
            Not After : Jul 11 14:40:34 2026 GMT
        Subject: CN=6a491b63-60c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:37:7f:90:ba:a0:cd:7c:4a:86:0e:9f:df:cd:
                    ab:a5:05:cc:d5:d5:0e:28:44:09:49:47:b7:84:2e:
                    68:31:14:99:c4:09:d8:80:ae:1a:07:4a:4f:01:42:
                    1f:b4:e9:02:4f:2e:43:f4:a6:28:9c:da:4c:ac:3a:
                    87:b8:da:8d:1c:a6:15:c6:4b:ab:4f:30:ae:e7:29:
                    af:62:20:a5:20:a9:d9:9e:a3:b0:18:04:95:4a:60:
                    3f:6d:a7:e9:6e:ba:bf:92:fa:1b:21:9e:a8:ae:26:
                    e1:1c:21:a1:24:07:97:d1:07:42:c4:42:0e:f8:39:
                    34:1d:40:e4:45:d0:67:f2:65:35:da:f6:f0:10:17:
                    6f:a1:a3:80:e5:50:62:6a:b7:c7:bd:2a:2f:6e:bf:
                    a8:da:7f:d1:22:ed:11:67:2a:e4:0a:e1:dc:e7:68:
                    ee:36:08:96:ed:02:54:e8:84:25:1d:6d:ba:0c:1b:
                    80:89:73:18:f7:6d:0c:03:48:9c:09:66:68:96:f8:
                    40:fc:a8:be:40:29:90:5a:f2:87:32:7d:b2:3d:0a:
                    14:c6:78:d1:6f:1d:fe:b5:b6:86:dd:14:bb:20:75:
                    a3:78:29:ba:fe:06:23:32:8d:a9:da:9c:b4:01:a3:
                    83:7a:e9:9f:64:d0:8b:54:9e:bf:8c:a1:a4:51:49:
                    cb:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:1A:85:3F:8A:9D:2D:E8:CF:5E:21:28:37:B8:A3:E2:32:BC:1A:F0
            X509v3 Authority Key Identifier:
                keyid:CE:4E:6F:29:AA:EA:76:C6:94:39:7A:76:12:6D:C3:80:D3:DB:6F:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110B82/23D4ACB61D8F11E2AE5207EE08B02CD2/zk5vKarqdsaUOXp2Em3DgNPbb74.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zk5vKarqdsaUOXp2Em3DgNPbb74.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110B82/23D4ACB61D8F11E2AE5207EE08B02CD2/zk5vKarqdsaUOXp2Em3DgNPbb74.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:1c:75:80:75:1d:30:09:ab:ef:8c:5f:ff:a4:3b:17:04:ec:
         16:24:4b:0a:a7:d6:9b:86:f5:3d:cb:c4:08:00:57:85:50:7f:
         06:a0:7d:38:d6:73:b2:85:73:e2:2c:7b:3b:4b:c6:17:3a:00:
         0c:b4:4c:d1:22:d8:c8:61:d4:d7:ba:8b:8f:c2:e9:dd:6f:ab:
         fd:a6:a2:b2:3c:a9:7d:c8:f8:84:a6:6a:d0:75:18:31:52:30:
         70:34:54:96:5f:d1:8b:b1:bb:80:ba:a7:ed:5f:be:d2:52:ac:
         0f:1e:fa:f7:f8:9c:eb:a3:9d:56:e4:3e:ee:24:f2:07:f0:cd:
         9c:84:58:b1:7c:e5:39:8a:ef:45:8e:8c:8f:75:cc:a2:99:83:
         ad:6e:35:fa:a6:6f:ee:fc:48:d1:0a:c5:6e:5d:85:81:7a:dc:
         b9:5e:2b:c3:d0:4d:c7:c7:45:52:84:7f:c3:29:43:c3:c1:fa:
         cd:0f:cc:07:f7:aa:ff:a2:17:ca:8d:ae:a0:37:77:83:7f:54:
         b4:be:65:3d:f6:f5:bb:5e:fd:d3:a4:2c:df:e8:6a:e9:f7:4e:
         68:50:d8:e2:9f:75:b7:7a:86:a0:d0:78:3b:32:38:34:c1:d3:
         dc:9c:d5:4f:ad:f7:e7:37:ba:e7:23:4e:28:34:bb:46:fe:31:
         3b:81:a7:48
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNVcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTBCODIxMTAvBgNVBAUTKENFNEU2RjI5QUFFQTc2QzY5NDM5N0E3NjEyNkRDMzgw
RDNEQjZGQkUwHhcNMjYwNzA0MTQ0MDM0WhcNMjYwNzExMTQ0MDM0WjAYMRYwFAYD
VQQDEw02YTQ5MWI2My02MGM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuTd/kLqgzXxKhg6f382rpQXM1dUOKEQJSUe3hC5oMRSZxAnYgK4aB0pPAUIf
tOkCTy5D9KYonNpMrDqHuNqNHKYVxkurTzCu5ymvYiClIKnZnqOwGASVSmA/bafp
brq/kvobIZ6oribhHCGhJAeX0QdCxEIO+Dk0HUDkRdBn8mU12vbwEBdvoaOA5VBi
arfHvSovbr+o2n/RIu0RZyrkCuHc52juNgiW7QJU6IQlHW26DBuAiXMY920MA0ic
CWZolvhA/Ki+QCmQWvKHMn2yPQoUxnjRbx3+tbaG3RS7IHWjeCm6/gYjMo2p2py0
AaODeumfZNCLVJ6/jKGkUUnLdwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIMahT+K
nS3oz14hKDe4o+IyvBrwMB8GA1UdIwQYMBaAFM5Obymq6nbGlDl6dhJtw4DT22++
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEI4Mi8yM0Q0QUNCNjFE
OEYxMUUyQUU1MjA3RUUwOEIwMkNEMi96azV2S2FycWRzYVVPWHAyRW0zRGdOUGJi
NzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3prNXZLYXJxZHNhVU9YcDJFbTNEZ05QYmI3NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MEI4Mi8yM0Q0QUNCNjFEOEYxMUUyQUU1MjA3RUUwOEIwMkNEMi96azV2S2FycWRz
YVVPWHAyRW0zRGdOUGJiNzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOBx1gHUdMAmr74xf/6Q7FwTsFiRLCqfWm4b1PcvECABXhVB/BqB9ONZzsoVz
4ix7O0vGFzoADLRM0SLYyGHU17qLj8Lp3W+r/aaisjypfcj4hKZq0HUYMVIwcDRU
ll/Ri7G7gLqn7V++0lKsDx769/ic66OdVuQ+7iTyB/DNnIRYsXzlOYrvRY6Mj3XM
opmDrW41+qZv7vxI0QrFbl2FgXrcuV4rw9BNx8dFUoR/wylDw8H6zQ/MB/eq/6IX
yo2uoDd3g39UtL5lPfb1u17906Qs3+hq6fdOaFDY4p91t3qGoNB4OzI4NMHT3JzV
T6335ze65yNOKDS7Rv4xO4GnSA==
-----END CERTIFICATE-----
Generated at Sun Jul 5 07:51:13 2026 by rpki-client