Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft
File:                     ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft (raw, json)
Hash identifier:          dqxfGltfRMHC+OH8MspDIcNjJS562cu0iY2ZPUzNk5s=
Subject key identifier:   09:C7:CC:C1:5E:CF:8A:AB:53:88:05:54:4B:75:C7:AD:01:36:24:AD
Authority key identifier: 66:27:CC:AB:6D:C2:E9:58:6E:2C:C1:1B:27:95:73:5A:31:FD:9B:8A
Certificate issuer:       /CN=A91269B8/serialNumber=6627CCAB6DC2E9586E2CC11B2795735A31FD9B8A
Certificate serial:       2435
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZifMq23C6VhuLMEbJ5VzWjH9m4o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft
Manifest number:          2422
Signing time:             Mon 20 Jul 2026 15:52:32 +0000
Manifest this update:     Mon 20 Jul 2026 15:52:31 +0000
Manifest next update:     Mon 27 Jul 2026 15:52:31 +0000
Files and hashes:         1: ZifMq23C6VhuLMEbJ5VzWjH9m4o.crl (hash: 4Yc02sVosQHiOtqRTiO28GENcpZJwXjszY4j6t4W82E=)
                          2: 844E61B635B811EE96EDCC53C4F9AE02.roa (hash: FMM9PWbU/oYp9w4GxmMR0Bnc2OElJZUE63nkK8Lt4YE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.crl
                          rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZifMq23C6VhuLMEbJ5VzWjH9m4o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 15:52:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9269 (0x2435)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91269B8, serialNumber=6627CCAB6DC2E9586E2CC11B2795735A31FD9B8A
        Validity
            Not Before: Jul 20 15:52:31 2026 GMT
            Not After : Jul 27 15:52:31 2026 GMT
        Subject: CN=6a5e4440-8617
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:02:4d:ad:7c:be:ad:78:2b:0f:fe:bd:1d:90:
                    14:4e:c6:8b:e6:23:77:cb:e1:4f:78:73:a2:8e:77:
                    08:a6:b4:28:79:01:75:65:ad:d8:18:3b:6c:9a:23:
                    2e:89:b3:55:ab:8b:20:e0:04:11:4e:05:79:97:a2:
                    ca:62:53:46:a8:9d:6b:ae:06:da:51:f4:24:9b:e7:
                    c6:ec:6f:d8:22:e2:89:42:78:ff:16:6d:9c:01:5f:
                    94:ac:a4:4d:c5:bc:be:a9:03:b6:a3:01:93:db:2a:
                    4b:c4:8b:e8:fb:b2:4c:31:f2:88:36:60:65:a9:5f:
                    2b:dd:bf:07:04:17:b6:1f:95:2e:87:aa:ba:6a:ff:
                    66:25:d9:de:5c:45:3e:2a:56:ea:dd:0b:b2:98:be:
                    20:e2:a7:0b:d3:06:27:bc:03:5b:d4:f1:4d:6d:85:
                    1d:62:c7:ed:64:89:0f:73:b0:bc:f4:f5:9f:28:cb:
                    33:b7:3a:a4:4b:1c:e0:f8:7a:92:4b:5f:9a:c6:d9:
                    94:72:72:7c:55:ba:be:8e:ff:d2:ae:9b:de:39:c7:
                    d9:38:ce:0d:fb:e8:d4:24:cf:a2:28:90:26:a3:d4:
                    6c:3b:08:4e:66:c0:d7:dc:b3:76:51:6b:e4:c7:5d:
                    42:0f:e3:38:42:0b:82:9f:16:11:db:f3:0b:d1:62:
                    4f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:C7:CC:C1:5E:CF:8A:AB:53:88:05:54:4B:75:C7:AD:01:36:24:AD
            X509v3 Authority Key Identifier:
                keyid:66:27:CC:AB:6D:C2:E9:58:6E:2C:C1:1B:27:95:73:5A:31:FD:9B:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZifMq23C6VhuLMEbJ5VzWjH9m4o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:f9:c1:09:3f:8b:f5:e9:53:e5:3a:f9:1b:b7:00:77:86:af:
         af:21:6d:92:ab:78:48:07:b2:fa:05:5a:4b:3c:cc:6b:fd:40:
         cc:e1:ad:7f:93:07:3b:00:a2:f1:56:3e:ba:3a:b9:25:d2:8f:
         7c:74:46:8a:69:6d:48:8e:dc:90:11:e7:ab:2d:34:8c:94:fd:
         ba:04:4f:6e:ad:c1:91:47:cd:6a:88:f7:f8:90:53:f2:f9:af:
         50:bd:fe:e6:39:cd:35:65:74:be:a7:a0:14:bc:31:aa:c8:59:
         8d:75:92:8b:ad:70:24:22:e8:03:90:7d:21:c8:d0:8c:0d:2e:
         62:3c:e2:f5:56:0d:40:3e:0d:a4:f2:57:3f:be:fc:20:cb:9c:
         93:c3:81:fa:d7:59:4b:dd:de:70:02:00:a7:b5:16:fd:8e:c7:
         c2:a3:8f:f0:8f:5b:ee:11:48:8a:6f:4c:ff:33:05:93:4a:77:
         9d:cf:3b:3d:a2:39:79:fc:be:76:ad:9e:22:da:14:a9:9e:4e:
         a8:4d:5d:dd:8d:79:cb:ea:3e:d3:df:85:80:0e:bb:d2:ac:73:
         6e:77:fa:e3:b9:f7:d0:35:80:96:c3:ee:4c:b4:a9:01:80:95:
         36:2c:d7:2d:50:5c:82:8e:f6:e7:da:b9:a0:72:fb:02:06:7a:
         a5:0c:0d:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 00:20:25 2026 by rpki-client