Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.mft
File:                     Z1BzJ_BU9TvgbB13zfB6FXYosz8.mft (raw, json)
Hash identifier:          9ia0E/8vXV0o2Zl77Uud84q4F4a38UxHNyQ6f3g01P4=
Subject key identifier:   62:FA:F5:05:A3:3D:99:97:D7:83:FB:22:3C:87:8E:BC:F3:E9:EE:3C
Authority key identifier: 67:50:73:27:F0:54:F5:3B:E0:6C:1D:77:CD:F0:7A:15:76:28:B3:3F
Certificate issuer:       /CN=A9126091/serialNumber=67507327F054F53BE06C1D77CDF07A157628B33F
Certificate serial:       03F2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1BzJ_BU9TvgbB13zfB6FXYosz8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.mft
Manifest number:          03EA
Signing time:             Fri 17 Jul 2026 01:08:00 +0000
Manifest this update:     Fri 17 Jul 2026 01:08:00 +0000
Manifest next update:     Fri 24 Jul 2026 01:08:00 +0000
Files and hashes:         1: Z1BzJ_BU9TvgbB13zfB6FXYosz8.crl (hash: hQgT5pPhKFL2dEibK9aOvzmNzFDc6ulCs3OpYzI70yk=)
                          2: 9EAF6A2EFD0011EC9DFDBB39C4F9AE02.roa (hash: fpRcMlKlCDYWLBuuGFtAiAF3XNUyl+/W9RNW0drMAfM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.crl
                          rsync://rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1BzJ_BU9TvgbB13zfB6FXYosz8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 01:07:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1010 (0x3f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9126091, serialNumber=67507327F054F53BE06C1D77CDF07A157628B33F
        Validity
            Not Before: Jul 17 01:08:00 2026 GMT
            Not After : Jul 24 01:08:00 2026 GMT
        Subject: CN=6a598070-24ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ba:bf:a4:e9:ae:1f:0a:8b:84:b5:cb:0e:a6:
                    23:b2:8f:5b:96:a8:78:73:6c:1b:d4:41:8d:ce:d9:
                    e6:37:b6:57:e5:db:49:35:17:15:01:06:ba:b6:82:
                    18:b1:7b:9e:7f:39:fc:6b:14:29:fb:16:4c:3d:db:
                    14:24:b1:20:36:cf:9e:f9:49:c4:6f:7b:eb:6c:bf:
                    f1:00:73:ff:67:f8:c6:12:14:76:ba:0f:61:46:0a:
                    74:0d:69:f9:a9:78:fe:e9:f3:6d:01:7a:95:22:33:
                    4d:60:53:f4:89:c8:01:7e:4d:2d:8a:52:88:4c:80:
                    06:d5:48:01:4c:64:8c:cd:61:7e:53:b1:d8:a3:c4:
                    08:cf:95:1d:62:47:ad:6e:b0:9f:b6:62:7b:85:74:
                    ce:b1:95:84:65:5e:fd:d6:d6:96:ed:09:26:51:22:
                    97:de:90:c2:46:75:21:c5:69:ee:cb:e0:76:04:93:
                    b7:ff:73:8c:a0:e8:40:b5:5e:63:db:14:a8:b7:b3:
                    21:f4:30:63:c3:ea:e2:81:9d:5b:96:be:a3:b6:17:
                    5f:b9:6a:ee:20:44:d2:55:f1:2c:b4:ea:cb:b1:9d:
                    f0:60:25:a8:f7:29:ee:3f:1a:e7:51:f9:5a:4a:1e:
                    bd:f3:52:3a:cd:39:b7:4b:93:b1:74:24:35:17:18:
                    b3:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:FA:F5:05:A3:3D:99:97:D7:83:FB:22:3C:87:8E:BC:F3:E9:EE:3C
            X509v3 Authority Key Identifier:
                keyid:67:50:73:27:F0:54:F5:3B:E0:6C:1D:77:CD:F0:7A:15:76:28:B3:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1BzJ_BU9TvgbB13zfB6FXYosz8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:73:e4:a8:a4:00:2f:c3:2d:8c:1e:f6:ea:5c:f6:7a:4f:ce:
         12:f5:cb:c5:d0:62:cb:e1:bf:f5:4f:1b:9c:a6:e2:a9:88:5a:
         56:28:89:bd:4b:50:c1:11:b3:b9:96:ef:73:d6:fe:59:14:69:
         f1:f3:cc:0c:5e:05:e5:ec:51:50:fa:03:7a:8d:72:f7:77:00:
         e9:7a:2e:fc:0c:3e:ad:75:d7:06:48:d0:f5:e5:ea:76:dd:4a:
         26:de:a7:01:1d:6b:04:df:8a:e6:03:a4:0c:11:15:04:10:17:
         c5:7d:69:a8:54:f1:b8:29:78:2a:b3:f5:26:3b:0d:c2:70:aa:
         87:a0:92:19:1b:9a:1e:cc:58:8c:bd:be:4d:f0:f6:84:29:de:
         bf:42:4d:e8:4d:32:88:bb:11:94:8e:99:32:a5:ac:77:88:ed:
         e0:c5:cb:f0:a3:34:7e:45:72:22:67:24:f7:83:6b:e0:ff:71:
         5c:33:67:e6:14:88:a8:f3:f6:a5:7f:a0:b7:a4:db:49:df:40:
         6d:4f:27:ea:07:0b:2b:6e:e9:6b:c2:67:1c:7e:70:c9:f8:e8:
         09:95:22:64:92:20:d2:33:c0:f3:71:5f:81:69:0d:d4:71:7e:
         d4:a0:e4:a7:0e:64:3b:58:21:94:6d:78:2d:90:03:37:89:01:
         95:ce:db:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 13:34:57 2026 by rpki-client