Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft
File:                     Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft (raw, json)
Hash identifier:          OJYX8Ple9xkcBDT8NEF0PZlpsACpyss+mJFwkuFhmeg=
Subject key identifier:   BA:A4:11:38:F9:07:4F:E0:D0:9A:C3:56:10:D3:1E:0A:CA:EC:3A:E1
Authority key identifier: 67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8
Certificate issuer:       /CN=A9165568/serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8
Certificate serial:       1DF6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft
Manifest number:          3FC4
Signing time:             Sun 26 Jul 2026 14:30:13 +0000
Manifest this update:     Sun 26 Jul 2026 14:30:12 +0000
Manifest next update:     Sun 02 Aug 2026 14:30:12 +0000
Files and hashes:         1: Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl (hash: V6FWkTDndlFqBhb+yZpD6mnjukRQAavd9aai/YgRgV4=)
                          2: 5D24529CAB0C11EA8D5ADE09C4F9AE02.roa (hash: SUdVIcZkUhygJe2xIbtJt7uwqKCG9Ii1WDhJ2Iav9eM=)
                          3: E1B073B689F011EABAEDCE2FC4F9AE02.roa (hash: Q016Kd6E9/hY+r6FwdJ1SCSeGt/Pfio83Euj8bOzMRo=)
                          4: 66891B80943011EA8988B883C4F9AE02.roa (hash: BqNOTLVBBC+AVn5T33rtKNkNE5KVCZAI+BxeO2sKXyk=)
                          5: 084044FC19AC11EB8759456DC4F9AE02.roa (hash: iVpOoJBlOyG/3zE1oA25hpkQYIqJe26GyQVWdLF9Bv4=)
                          6: A310F2FC8AB811EA9F89B54EC4F9AE02.roa (hash: fGEvfx/uQTHZ/v0AMbNptNU7LfD/gnvxRSl+eXIuibU=)
                          7: 195AEC4287CF11F09EDBA229C4F9AE02.roa (hash: 9d7+U0GsZDY6ZehuYxySqXSfRY3e2dmU9OZ6IPMqzmU=)
                          8: 711F090E8AB411EA89D83541C4F9AE02.roa (hash: sLIpOudm+eiKR94GEfQZoeV78WGpsM7jzLSAv9i5/tM=)
                          9: 671FF9F6943011EA8988B883C4F9AE02.roa (hash: E0gVDm9kfoK0rIa6TEKpQcI3iviwBeS9QjJmURqDGcc=)
                          10: D2EF531219AE11EB8D3BC20EC4F9AE02.roa (hash: XXo8cy9oUnqDsEuTHCCDf3i4rQnpL2CkAP7dtIYhL4s=)
                          11: A75964A28E4B11EA8A347A3EC4F9AE02.roa (hash: w7c5NBEb8TY/ZmVexUmHMzZSB1L6WF2aygP/ojjQOss=)
                          12: 9894B43E80DA11F1AF01F71A5DA30FBC.roa (hash: 746pRPtMH1SGiVoQbklMO4Qp6QGnZ4g3CyOw0Szk53A=)
                          13: 777F5CEE8AA611EA94BC0D13C4F9AE02.roa (hash: jKKRIP8Mze98sL1n15uOF95N4d5VeEeQhVHQTOvGEoE=)
                          14: FDC7AB404C4711F0BDC34276C4F9AE02.roa (hash: 6P+1AW6+9CaIAdPsa+shyJsM8Exj94kKsPKnss2Jr94=)
                          15: E206DF40E79011E699B81D0FC4F9AE02.roa (hash: HgJ0n+v739OZ1tLGuS29SCSO5u9C8UIQn4oKvIqQoV8=)
                          16: 095798588ABA11EAB5EDDE54C4F9AE02.roa (hash: lf1ISH9QTtgl8L9L0ANGqCGTHFwv9Hzc9bbQJTH1hEk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl
                          rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 14:30:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7670 (0x1df6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165568, serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8
        Validity
            Not Before: Jul 26 14:30:12 2026 GMT
            Not After : Aug  2 14:30:12 2026 GMT
        Subject: CN=6a6619f4-4f31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:09:a9:db:bc:b0:30:c4:7c:4b:4c:bc:f4:3e:
                    eb:72:46:88:4e:c1:fc:7c:a4:b4:5a:b2:d2:c6:09:
                    ac:bb:d7:44:e5:a8:89:ca:bd:32:d4:b3:cd:7b:e4:
                    f6:5b:28:40:96:ee:3a:d4:51:c9:80:19:8d:ba:f5:
                    92:7b:d9:2b:6f:bd:64:50:85:f4:c8:f5:d1:9e:d3:
                    28:0c:82:2f:36:a5:77:67:44:bf:92:8f:ea:f0:7d:
                    e2:9e:03:d6:e5:9f:ee:fd:d1:98:e7:f2:f7:75:7d:
                    77:a8:c9:02:18:8b:c4:fa:7c:4e:87:ad:dc:71:e2:
                    1d:be:3e:16:64:30:32:2b:32:b2:b6:b5:4c:81:65:
                    f1:b4:6a:18:ec:b5:bb:5e:67:d8:b2:41:2d:ee:5a:
                    cc:7f:13:58:93:49:8c:af:96:9a:45:4a:30:2e:b8:
                    a3:14:0f:d8:07:ca:75:53:65:05:33:1c:75:08:4f:
                    25:4b:5c:af:51:ae:bc:c8:51:91:a5:17:61:d1:2a:
                    a6:75:81:9c:cb:e6:23:01:73:c9:19:11:c4:f2:f5:
                    76:7a:c5:06:a7:8e:d7:91:b6:81:48:f2:63:7f:c6:
                    b7:4d:c7:0e:da:ef:d1:4a:69:f0:4a:58:a3:1f:e6:
                    ef:c5:78:92:16:1a:92:24:80:b0:b5:c9:0c:c1:ad:
                    0f:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:A4:11:38:F9:07:4F:E0:D0:9A:C3:56:10:D3:1E:0A:CA:EC:3A:E1
            X509v3 Authority Key Identifier:
                keyid:67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:15:02:07:21:43:f0:a4:05:a9:57:b9:e6:18:b8:d2:e9:a9:
         19:36:aa:2c:36:cc:c7:a1:27:af:52:4d:61:44:eb:aa:66:6a:
         a8:a9:44:ec:61:45:55:ff:e1:d1:7c:bd:01:57:45:ec:01:de:
         b9:a9:ef:63:5a:34:36:1b:31:8c:d5:c9:05:13:c9:74:1a:8e:
         85:ba:56:a3:0d:79:f3:ad:b9:3e:b4:cc:93:23:5f:91:a6:01:
         17:85:da:16:53:aa:85:a6:47:f1:b9:d7:0b:71:94:01:4c:40:
         bf:8a:45:0f:a0:a3:f4:bb:00:bd:7b:13:b9:18:7e:9a:b7:f7:
         4a:3e:35:56:b6:c4:27:e1:73:99:e7:29:e3:3b:37:9e:91:2c:
         f0:e8:85:06:2f:50:1d:b5:31:3c:7c:eb:6a:a6:fc:2c:3e:c4:
         f7:8f:c2:8f:69:02:61:c6:ac:da:16:23:cb:fb:fb:60:19:32:
         d2:44:7d:08:91:f7:e3:b1:05:35:b8:83:12:15:c9:f6:b3:d2:
         53:c6:49:e2:dc:3f:0f:de:ef:39:fb:a6:e3:0e:95:a4:fd:d7:
         6d:00:72:e9:9a:5c:27:81:f1:04:17:74:05:1b:5f:7f:e4:cc:
         4b:36:fe:66:e1:b4:12:fa:6e:22:54:6c:bb:c8:b1:79:a3:67:
         df:78:95:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 19:34:32 2026 by rpki-client