Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/z7b2KJfnSw0H75YAuncJOQXLh1s.mft
File:                     z7b2KJfnSw0H75YAuncJOQXLh1s.mft (raw, json)
Hash identifier:          yoBW/sScoVkOCnhWz/dSHL9gWL/IzjMkbyAzeEGuinA=
Subject key identifier:   13:5C:77:75:54:1E:8A:04:61:92:84:75:28:99:31:6E:63:42:9F:61
Authority key identifier: CF:B6:F6:28:97:E7:4B:0D:07:EF:96:00:BA:77:09:39:05:CB:87:5B
Certificate issuer:       /CN=A91463ED/serialNumber=CFB6F62897E74B0D07EF9600BA77093905CB875B
Certificate serial:       024A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z7b2KJfnSw0H75YAuncJOQXLh1s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/z7b2KJfnSw0H75YAuncJOQXLh1s.mft
Manifest number:          042A
Signing time:             Wed 19 Aug 2026 02:57:02 +0000
Manifest this update:     Wed 19 Aug 2026 02:57:01 +0000
Manifest next update:     Wed 26 Aug 2026 02:57:01 +0000
Files and hashes:         1: z7b2KJfnSw0H75YAuncJOQXLh1s.crl (hash: INWZCB9SNvjPJUSqepe0cbycLIqQdhNL4HQ8dsKqT7w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/z7b2KJfnSw0H75YAuncJOQXLh1s.crl
                          rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/z7b2KJfnSw0H75YAuncJOQXLh1s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z7b2KJfnSw0H75YAuncJOQXLh1s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 02:57:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 586 (0x24a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91463ED, serialNumber=CFB6F62897E74B0D07EF9600BA77093905CB875B
        Validity
            Not Before: Aug 19 02:57:01 2026 GMT
            Not After : Aug 26 02:57:01 2026 GMT
        Subject: CN=6a851b7e-861b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:c2:53:e7:e8:2b:2b:c8:c0:be:b5:43:3c:b2:
                    bc:b3:8a:86:00:8e:7c:7a:02:67:fb:7b:40:bb:6d:
                    c2:b6:37:2d:41:55:6e:b9:8d:31:1d:ef:a8:19:2e:
                    10:d6:49:ab:06:c6:b5:d6:b8:6c:64:5c:a3:cd:85:
                    22:dd:02:01:44:45:4a:86:46:b5:14:63:fa:f1:3e:
                    30:a9:d0:c8:ef:83:4f:05:ae:7c:7b:27:cc:a9:48:
                    9e:81:4f:60:25:8c:7c:4b:e3:59:c5:ea:ce:0c:e0:
                    17:97:90:af:f4:97:f4:8d:6d:08:8b:ff:3a:4d:5e:
                    73:cd:94:a2:79:07:78:56:6d:7a:e7:40:39:31:ce:
                    13:ab:7d:6f:07:c2:8a:dd:30:5d:74:53:6d:20:3e:
                    1f:6a:df:dc:a0:a5:3d:99:b3:d7:4f:e2:33:ca:d9:
                    21:7f:da:0d:2d:7d:44:41:7c:1f:36:79:ce:fb:d1:
                    0b:9a:df:2b:ae:82:11:7a:d2:ac:37:8a:f1:b3:0d:
                    4a:02:04:d2:be:b5:65:13:64:88:06:4f:a5:46:1d:
                    b5:09:da:92:ca:7d:ba:c8:ae:f1:eb:32:98:ad:19:
                    1b:a7:be:da:40:cd:5e:eb:a8:00:a4:c5:ef:9f:f9:
                    cf:f6:45:9c:06:10:65:f3:21:58:d4:25:95:22:6e:
                    0a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:5C:77:75:54:1E:8A:04:61:92:84:75:28:99:31:6E:63:42:9F:61
            X509v3 Authority Key Identifier:
                keyid:CF:B6:F6:28:97:E7:4B:0D:07:EF:96:00:BA:77:09:39:05:CB:87:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/z7b2KJfnSw0H75YAuncJOQXLh1s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z7b2KJfnSw0H75YAuncJOQXLh1s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/z7b2KJfnSw0H75YAuncJOQXLh1s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:60:7b:82:c9:a5:1b:4f:1b:1b:48:c4:3d:73:04:e6:db:2f:
         37:95:b8:07:e6:be:6c:64:e5:db:45:01:ac:d7:cf:03:60:69:
         2e:0a:67:09:72:f0:31:cf:8d:eb:9b:64:0f:fa:15:82:0d:d0:
         8f:47:23:6e:8b:28:89:e0:e7:36:e0:19:ea:07:5e:16:55:38:
         a5:b2:4a:c5:16:28:b0:8c:94:c2:34:90:28:4f:3c:09:f9:20:
         e3:ab:68:35:69:e1:f6:2f:b5:02:09:dc:c5:e0:d4:65:34:a4:
         d5:86:b8:7a:a6:67:0f:f7:9c:1f:73:c7:1f:81:8a:65:a6:fd:
         f3:74:f7:7e:a0:88:21:98:35:0a:20:b7:67:21:45:31:77:ea:
         c8:18:fe:f1:82:b6:a4:cc:9a:64:68:e2:9d:25:94:82:7e:38:
         8e:c0:52:08:d0:69:c2:e3:28:e6:76:7a:a6:64:ba:1c:0f:b3:
         2e:aa:24:d8:6d:4a:f2:74:82:f9:87:26:12:32:32:48:96:67:
         0e:16:e1:5b:bd:76:29:57:0c:f8:7b:d8:a2:9f:87:00:a9:5e:
         58:ed:f7:d4:58:e6:e6:7f:11:94:78:51:f6:f3:5b:eb:03:5b:
         1e:7b:68:b2:84:31:98:63:68:b1:3d:18:b3:cd:e3:7f:78:b1:
         a1:f7:d7:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 13:40:43 2026 by rpki-client