Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9133065/DB3514B0823311F0939BFF3FC4F9AE02/ZUvP1wq8YLVBOShTBe_Q4xXDNo4.mft
File:                     ZUvP1wq8YLVBOShTBe_Q4xXDNo4.mft (raw, json)
Hash identifier:          FtZvYip0WaNbpcYO/7XlPVrSN8sqX1Xxgijl9UyYY3U=
Subject key identifier:   84:18:95:49:5C:AF:0E:CA:FA:6E:E3:ED:F9:AC:CB:D8:51:46:22:E7
Authority key identifier: 65:4B:CF:D7:0A:BC:60:B5:41:39:28:53:05:EF:D0:E3:15:C3:36:8E
Certificate issuer:       /CN=A9133065/serialNumber=654BCFD70ABC60B54139285305EFD0E315C3368E
Certificate serial:       CD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUvP1wq8YLVBOShTBe_Q4xXDNo4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9133065/DB3514B0823311F0939BFF3FC4F9AE02/ZUvP1wq8YLVBOShTBe_Q4xXDNo4.mft
Manifest number:          BB
Signing time:             Fri 17 Jul 2026 08:24:38 +0000
Manifest this update:     Fri 17 Jul 2026 08:24:38 +0000
Manifest next update:     Fri 24 Jul 2026 08:24:38 +0000
Files and hashes:         1: ZUvP1wq8YLVBOShTBe_Q4xXDNo4.crl (hash: yOF+qbkQNWY5X+zAjHgII8RZetQX7tpmNpAIGa5yjWQ=)
                          2: CB09977AFB0D11F08355CD12746F56BC.roa (hash: YImw3kG2tsoSq5Jg/QGVhgoG+IwwHtEUZCL22XeeZOo=)
                          3: BA3B98B2FB0D11F098EF6A0C746F56BC.roa (hash: 34c/Kc0Bwls+6oOOKNDceH3aYMTH4DTkUaqgCKVVab4=)
                          4: 9D2C024A96AC11F0AFADA123C4F9AE02.roa (hash: Jr+uvL5Lzwj0xIH/fgWXn5OBXagya0JsBhe+PUP4Sn8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9133065/DB3514B0823311F0939BFF3FC4F9AE02/ZUvP1wq8YLVBOShTBe_Q4xXDNo4.crl
                          rsync://rpki.apnic.net/member_repository/A9133065/DB3514B0823311F0939BFF3FC4F9AE02/ZUvP1wq8YLVBOShTBe_Q4xXDNo4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUvP1wq8YLVBOShTBe_Q4xXDNo4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 08:24:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 205 (0xcd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9133065, serialNumber=654BCFD70ABC60B54139285305EFD0E315C3368E
        Validity
            Not Before: Jul 17 08:24:38 2026 GMT
            Not After : Jul 24 08:24:38 2026 GMT
        Subject: CN=6a59e6c6-8274
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:3f:34:d5:7e:02:48:41:1b:bf:a6:94:af:70:
                    c5:a9:a5:57:cf:b5:98:2a:fd:32:e4:46:e7:59:8d:
                    b7:fe:81:5d:72:58:2d:9b:49:1a:be:d7:2e:1c:66:
                    24:36:f5:ee:84:eb:e8:9a:0c:0e:bd:a1:81:64:82:
                    2f:e7:6c:dc:c2:48:db:b3:5d:c9:e4:2f:df:e0:cc:
                    12:ed:64:e0:91:74:90:b3:ed:6f:93:60:39:cf:16:
                    87:6f:e2:5d:bb:1e:2f:33:70:01:30:64:81:2f:84:
                    b2:2d:a0:74:b9:1c:4c:7a:40:14:3d:57:d6:53:c9:
                    64:b7:29:72:7a:f0:7a:98:78:23:de:af:11:46:90:
                    1d:f0:9f:3a:e9:47:da:c3:0b:c4:8e:01:69:1a:5e:
                    8a:01:60:ca:11:94:a2:5d:74:59:b4:c1:57:cf:8c:
                    9b:5f:17:6f:96:80:d4:22:11:86:48:4f:f4:3a:b4:
                    00:72:f4:02:75:d6:50:a6:17:df:ff:da:49:93:5a:
                    61:fd:25:1c:de:8b:70:5b:5c:da:2c:83:2b:e8:da:
                    33:9a:b5:54:cb:f8:03:02:7b:ab:d1:55:39:7d:8f:
                    fa:6b:c8:cd:c2:6a:0e:60:e2:eb:d9:63:0a:2b:df:
                    c7:d5:c0:a4:e9:b0:99:a2:0c:ab:33:1f:8f:f6:8c:
                    a0:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:18:95:49:5C:AF:0E:CA:FA:6E:E3:ED:F9:AC:CB:D8:51:46:22:E7
            X509v3 Authority Key Identifier:
                keyid:65:4B:CF:D7:0A:BC:60:B5:41:39:28:53:05:EF:D0:E3:15:C3:36:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9133065/DB3514B0823311F0939BFF3FC4F9AE02/ZUvP1wq8YLVBOShTBe_Q4xXDNo4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUvP1wq8YLVBOShTBe_Q4xXDNo4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133065/DB3514B0823311F0939BFF3FC4F9AE02/ZUvP1wq8YLVBOShTBe_Q4xXDNo4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:4b:5a:fe:5e:32:e8:b1:f6:2f:51:4d:59:39:10:46:03:5a:
         40:b5:0d:a2:50:e4:2c:33:46:77:a6:28:a1:cc:7c:27:fd:12:
         d7:00:e3:e9:ee:b6:75:9e:0e:ca:db:c3:15:3b:63:4a:50:94:
         b0:dd:92:f2:55:27:6e:bb:23:a5:0b:8b:15:1a:a4:70:81:2e:
         69:7c:cf:38:3c:5a:76:9a:01:d1:7f:0e:db:4a:4b:00:c0:1e:
         3c:e6:57:96:c2:2b:df:dc:ec:ad:33:27:ab:03:31:2b:31:81:
         66:96:82:27:27:de:0e:20:d7:d6:89:7f:6f:b1:00:86:d1:f5:
         0e:c0:58:15:bb:d4:29:d8:87:56:a5:9e:32:a2:60:a5:6f:b0:
         9f:af:4a:3b:8e:8a:73:fc:25:28:e5:c4:2c:4d:f6:3f:c8:1a:
         e9:ab:16:f0:17:ac:8b:a6:65:37:be:2d:b1:1b:6c:d8:03:8c:
         e8:86:10:c6:d9:33:aa:ce:bd:fc:7c:e2:01:76:96:79:f5:47:
         0b:f7:28:61:3d:d7:af:d2:aa:f2:40:e9:31:f9:cb:2d:82:4a:
         ac:b7:af:b2:04:a0:5c:1f:7a:ad:ed:17:22:82:d4:b0:50:8e:
         f6:ba:41:3e:21:5f:38:69:b6:31:2e:83:61:a1:52:6a:37:65:
         00:08:bf:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:19:44 2026 by rpki-client