Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C812/6ABC5B32B3D111EC91BF3C22C4F9AE02/Zp-zqMoqIOo7gaY6f227FZ-71XQ.mft
File:                     Zp-zqMoqIOo7gaY6f227FZ-71XQ.mft (raw, json)
Hash identifier:          2s3ZKEilFBkI1RYFzwkhF9qlwDkxHA3FowbCGTZiFJk=
Subject key identifier:   57:A5:5E:F6:08:4C:63:07:80:55:08:53:8E:60:99:A5:1A:FD:5F:7C
Authority key identifier: 66:9F:B3:A8:CA:2A:20:EA:3B:81:A6:3A:7F:6D:BB:15:9F:BB:D5:74
Certificate issuer:       /CN=A911C812/serialNumber=669FB3A8CA2A20EA3B81A63A7F6DBB159FBBD574
Certificate serial:       0435
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Zp-zqMoqIOo7gaY6f227FZ-71XQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C812/6ABC5B32B3D111EC91BF3C22C4F9AE02/Zp-zqMoqIOo7gaY6f227FZ-71XQ.mft
Manifest number:          0435
Signing time:             Mon 20 Jul 2026 20:56:52 +0000
Manifest this update:     Mon 20 Jul 2026 20:56:52 +0000
Manifest next update:     Mon 27 Jul 2026 20:56:52 +0000
Files and hashes:         1: Zp-zqMoqIOo7gaY6f227FZ-71XQ.crl (hash: NI9ZKOnHj3VEr96Ln/Za1KcPbyT4fTo2vLqu/vRP78o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C812/6ABC5B32B3D111EC91BF3C22C4F9AE02/Zp-zqMoqIOo7gaY6f227FZ-71XQ.crl
                          rsync://rpki.apnic.net/member_repository/A911C812/6ABC5B32B3D111EC91BF3C22C4F9AE02/Zp-zqMoqIOo7gaY6f227FZ-71XQ.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Zp-zqMoqIOo7gaY6f227FZ-71XQ.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 20:56:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1077 (0x435)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C812, serialNumber=669FB3A8CA2A20EA3B81A63A7F6DBB159FBBD574
        Validity
            Not Before: Jul 20 20:56:52 2026 GMT
            Not After : Jul 27 20:56:52 2026 GMT
        Subject: CN=6a5e8b94-4df6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:96:0f:53:4e:46:09:05:aa:8c:c6:64:0a:ba:
                    d6:e0:fd:a0:50:4f:d1:05:a9:79:35:39:0f:e5:1f:
                    ad:79:78:af:d3:c6:27:ff:14:b7:6c:8e:a4:9a:34:
                    8f:80:c3:d4:13:39:3a:1e:85:cc:b4:9e:1a:49:44:
                    25:1d:eb:db:0b:5f:9e:f0:4a:b4:b8:df:d3:59:e3:
                    b2:49:6f:83:51:5b:4c:29:63:cb:89:d7:cb:38:45:
                    12:df:d6:e0:7e:84:19:12:7a:99:9f:64:e4:d6:cd:
                    da:79:7e:92:bb:eb:b8:2f:97:f7:79:d9:1a:5e:ae:
                    86:5d:ec:9c:3b:63:52:02:0e:52:08:bf:47:f9:9f:
                    17:e2:d6:6d:4a:62:af:11:a9:89:11:cb:d9:60:28:
                    d9:5d:9b:dc:19:09:c4:c4:2e:c9:55:ae:07:71:9d:
                    30:e1:0a:0c:19:e7:32:4c:29:99:f0:b1:99:7e:8a:
                    19:d0:97:ac:77:47:86:f1:a3:90:0c:74:95:15:48:
                    1a:e7:e1:dc:c8:c3:2b:40:37:21:19:61:ec:b2:a2:
                    f4:c4:54:50:77:71:92:38:fe:8c:26:d3:cf:a9:39:
                    e4:05:50:fc:76:ed:7a:5c:d4:7b:c2:76:56:9c:d8:
                    3e:c7:e1:ad:6f:2b:de:0f:6e:5b:2b:72:09:fc:46:
                    6c:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:A5:5E:F6:08:4C:63:07:80:55:08:53:8E:60:99:A5:1A:FD:5F:7C
            X509v3 Authority Key Identifier:
                keyid:66:9F:B3:A8:CA:2A:20:EA:3B:81:A6:3A:7F:6D:BB:15:9F:BB:D5:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C812/6ABC5B32B3D111EC91BF3C22C4F9AE02/Zp-zqMoqIOo7gaY6f227FZ-71XQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Zp-zqMoqIOo7gaY6f227FZ-71XQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C812/6ABC5B32B3D111EC91BF3C22C4F9AE02/Zp-zqMoqIOo7gaY6f227FZ-71XQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:57:c0:25:54:16:6a:89:9d:3d:d9:3c:b7:dc:b7:55:88:82:
         08:83:49:66:26:f4:50:34:c2:b1:f2:36:b1:10:3a:45:b7:78:
         96:ac:63:44:8a:81:67:7d:c3:f4:01:da:66:d4:0d:42:3d:db:
         16:65:1f:83:f8:4c:a6:b4:b4:0a:74:dd:34:23:85:2b:fb:7b:
         79:40:2c:9b:ef:e0:7b:da:71:43:e3:a0:ff:4a:ea:31:26:92:
         10:e7:25:5f:1d:a8:26:eb:3e:47:e2:11:d1:a5:2c:2f:74:93:
         1b:13:28:06:78:45:3a:58:56:c0:85:e8:e5:f0:2f:c5:fa:34:
         d2:4d:8d:de:d0:d6:57:89:21:7d:8f:f1:85:dd:d8:02:92:47:
         72:fb:6c:7f:67:66:d9:a8:e5:bb:74:43:d6:26:a4:fa:32:cc:
         63:0c:d5:8d:43:29:df:d6:0b:53:33:45:e8:5e:1b:a7:61:3e:
         68:ae:f3:63:c4:04:ca:9c:b8:03:f7:98:33:9e:8b:28:0b:8f:
         cb:ad:5b:e3:78:58:7d:76:11:0f:15:2d:af:33:de:d8:09:70:
         58:0e:19:e0:6a:58:ac:cb:b0:61:4b:95:29:cd:e3:0a:8b:77:
         b6:ab:f5:eb:05:41:c2:35:62:47:e3:b5:fb:c8:ff:d7:a3:3c:
         1b:d4:02:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:57:46 2026 by rpki-client