Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91565C6/D265B0C6F41F11EF81708868C4F9AE02/zVNcfrMaQKP9uKxNXVd6-dbFiEg.mft
File:                     zVNcfrMaQKP9uKxNXVd6-dbFiEg.mft (raw, json)
Hash identifier:          NZR/XzVEL/h1YDEQxrNytTeTLQ8iEDVVmZ+vrSG0T/Q=
Subject key identifier:   F6:0D:C8:6C:FB:63:66:DB:DA:A6:C1:3C:25:41:66:6A:99:4A:F3:AD
Authority key identifier: CD:53:5C:7E:B3:1A:40:A3:FD:B8:AC:4D:5D:57:7A:F9:D6:C5:88:48
Certificate issuer:       /CN=A91565C6/serialNumber=CD535C7EB31A40A3FDB8AC4D5D577AF9D6C58848
Certificate serial:       0129
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zVNcfrMaQKP9uKxNXVd6-dbFiEg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91565C6/D265B0C6F41F11EF81708868C4F9AE02/zVNcfrMaQKP9uKxNXVd6-dbFiEg.mft
Manifest number:          0121
Signing time:             Mon 31 Aug 2026 06:14:20 +0000
Manifest this update:     Mon 31 Aug 2026 06:14:20 +0000
Manifest next update:     Mon 07 Sep 2026 06:14:20 +0000
Files and hashes:         1: zVNcfrMaQKP9uKxNXVd6-dbFiEg.crl (hash: rYgqk+d6xXcrU2DWivjKdMguWuy5WrXmXEP2wbeBsQw=)
                          2: 7B2FAA3C209711F196D22F2D3A3D8C67.roa (hash: 46jInQJtabZ7v+bShiZhomvrokC8+lMJ4HP9JqEdr94=)
                          3: 37783B4E20CC11F18B0BA4B30A3D8C67.roa (hash: U3KVjwUBLUlPVHRa+0vAy5Ai0f/M4Fs7JbPDlUfLDwE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91565C6/D265B0C6F41F11EF81708868C4F9AE02/zVNcfrMaQKP9uKxNXVd6-dbFiEg.crl
                          rsync://rpki.apnic.net/member_repository/A91565C6/D265B0C6F41F11EF81708868C4F9AE02/zVNcfrMaQKP9uKxNXVd6-dbFiEg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zVNcfrMaQKP9uKxNXVd6-dbFiEg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Sep 2026 06:14:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 297 (0x129)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91565C6, serialNumber=CD535C7EB31A40A3FDB8AC4D5D577AF9D6C58848
        Validity
            Not Before: Aug 31 06:14:20 2026 GMT
            Not After : Sep  7 06:14:20 2026 GMT
        Subject: CN=6a951bbc-e551
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1b:3b:83:31:61:b9:ee:7b:38:f7:99:0b:e8:
                    78:dd:42:8c:15:77:1c:8d:d8:86:11:1d:63:bf:48:
                    04:77:71:5f:b4:d1:2e:dd:ac:67:f3:2a:7f:38:ee:
                    4f:16:64:bf:56:78:7e:9b:58:a4:bd:cc:52:c6:9e:
                    c5:f3:fe:3e:2d:38:33:84:a1:63:90:c6:9b:83:44:
                    f0:46:f0:38:f4:c9:79:62:b3:53:44:d0:2c:e3:67:
                    8b:ab:84:cd:35:6a:cc:f4:29:b5:9e:e1:bc:0d:04:
                    02:eb:0d:6c:bb:cf:e8:b2:29:78:53:62:80:63:dd:
                    bb:7b:21:f7:c2:5b:94:f0:1e:5f:f8:53:47:79:41:
                    42:c3:b4:e4:b0:5f:46:f4:0d:e1:1d:e9:05:d5:7b:
                    b6:cb:8b:09:1c:65:c8:eb:73:a0:07:95:f2:37:a8:
                    e3:26:e3:e2:9b:16:d7:c3:a3:98:2b:da:ba:be:40:
                    c0:ab:7a:ac:ad:17:61:4d:61:91:a8:e4:7c:4d:35:
                    9f:77:7c:30:82:7d:77:56:7f:7a:5f:fb:e0:49:f8:
                    5c:e5:06:6a:49:a6:5a:a9:29:b6:dd:b7:cc:40:1f:
                    d4:cc:c2:07:28:d3:d5:a2:cd:0c:1d:f2:7f:5e:19:
                    09:ba:09:1e:3d:71:7d:c8:22:c1:6c:c0:a2:3a:3d:
                    6e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:0D:C8:6C:FB:63:66:DB:DA:A6:C1:3C:25:41:66:6A:99:4A:F3:AD
            X509v3 Authority Key Identifier:
                keyid:CD:53:5C:7E:B3:1A:40:A3:FD:B8:AC:4D:5D:57:7A:F9:D6:C5:88:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91565C6/D265B0C6F41F11EF81708868C4F9AE02/zVNcfrMaQKP9uKxNXVd6-dbFiEg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zVNcfrMaQKP9uKxNXVd6-dbFiEg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91565C6/D265B0C6F41F11EF81708868C4F9AE02/zVNcfrMaQKP9uKxNXVd6-dbFiEg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:46:6a:12:d6:cb:5c:bf:36:18:d8:33:bb:7d:cb:1b:91:14:
         20:43:9f:a0:9b:b8:63:95:b5:18:2f:00:7a:29:0f:8e:f2:b4:
         1d:d5:fd:c1:36:40:43:a2:43:b6:ca:54:d2:ff:b3:dd:cc:cd:
         4b:93:7d:ae:da:dc:25:18:49:6b:2d:6f:de:f6:33:e9:eb:9d:
         5e:32:33:4b:f7:c5:0a:d5:f9:30:81:20:1c:e5:ac:96:a5:07:
         81:d4:2d:df:45:b4:40:14:e2:66:98:55:9d:29:72:5e:6f:fa:
         31:2c:73:39:cd:51:a2:5f:e3:d1:55:7b:64:a4:37:ae:e5:e4:
         83:89:6f:60:05:1a:17:dd:68:de:fb:e9:33:5b:f7:13:1f:df:
         b9:25:a5:52:a6:96:a5:c5:94:11:e4:04:6b:22:94:bf:00:73:
         95:a5:9b:00:dc:60:d0:62:62:4c:91:d0:2a:bd:d9:6c:ce:a9:
         61:3e:8a:7b:62:03:1e:78:45:64:1c:61:9d:72:78:c5:c6:a0:
         f0:88:7a:95:c0:d9:a8:6d:9c:2a:98:39:90:cc:43:c7:25:75:
         35:76:64:6e:61:c7:b5:09:ed:b1:e1:38:8a:49:2a:5c:3e:8e:
         68:c2:55:ff:86:10:65:53:01:e6:d2:29:e2:44:2d:c4:0d:da:
         b3:95:ad:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 04:51:49 2026 by rpki-client