Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917D31E/4A3DD1B2B4BB11F0A1353722C4F9AE02/zcBVaYflG5M72WLX70WXHLqnosM.mft
File:                     zcBVaYflG5M72WLX70WXHLqnosM.mft (raw, json)
Hash identifier:          bb1aiIi5WYJCE78J/Xkqy6NgIrF4OO4+FceYw2UM0Uc=
Subject key identifier:   43:F6:10:B7:E8:79:B2:1E:36:EC:F8:A5:CC:3A:71:2B:A5:B2:02:4F
Authority key identifier: CD:C0:55:69:87:E5:1B:93:3B:D9:62:D7:EF:45:97:1C:BA:A7:A2:C3
Certificate issuer:       /CN=A917D31E/serialNumber=CDC0556987E51B933BD962D7EF45971CBAA7A2C3
Certificate serial:       8C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zcBVaYflG5M72WLX70WXHLqnosM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917D31E/4A3DD1B2B4BB11F0A1353722C4F9AE02/zcBVaYflG5M72WLX70WXHLqnosM.mft
Manifest number:          89
Signing time:             Fri 17 Jul 2026 08:47:48 +0000
Manifest this update:     Fri 17 Jul 2026 08:47:47 +0000
Manifest next update:     Fri 24 Jul 2026 08:47:47 +0000
Files and hashes:         1: zcBVaYflG5M72WLX70WXHLqnosM.crl (hash: 5PJpmroquBZ3Rs5BofC8Jg1NCjMbG4dhKGR3xmWCfhs=)
                          2: 53D97C4AB6E011F0AE8E6B74C4F9AE02.roa (hash: TiQZcsUf6hmm4Z9q41HFXcSU+c6S5y0lWjoRYfK9XxA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917D31E/4A3DD1B2B4BB11F0A1353722C4F9AE02/zcBVaYflG5M72WLX70WXHLqnosM.crl
                          rsync://rpki.apnic.net/member_repository/A917D31E/4A3DD1B2B4BB11F0A1353722C4F9AE02/zcBVaYflG5M72WLX70WXHLqnosM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zcBVaYflG5M72WLX70WXHLqnosM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 08:47:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 140 (0x8c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917D31E, serialNumber=CDC0556987E51B933BD962D7EF45971CBAA7A2C3
        Validity
            Not Before: Jul 17 08:47:47 2026 GMT
            Not After : Jul 24 08:47:47 2026 GMT
        Subject: CN=6a59ec33-10e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:86:0b:38:45:77:07:28:dc:8c:0e:39:22:a1:
                    e3:87:fb:d0:8e:4b:c0:c9:18:37:9d:33:2a:fc:60:
                    74:a5:af:9a:95:1e:1b:f3:7d:0e:bf:3f:a8:66:01:
                    9f:1c:0e:50:3b:a8:b6:d3:a2:50:fa:04:f3:2c:ba:
                    b5:34:64:8b:dc:ef:83:ed:c2:27:4a:59:51:06:ae:
                    eb:cb:a6:c6:00:8f:3c:72:1f:39:99:32:92:1f:bd:
                    e6:15:f8:02:76:f4:ba:dc:98:12:6c:45:ed:34:1f:
                    b4:66:bf:eb:fd:d3:37:47:00:5d:bf:9d:7a:25:51:
                    69:d9:64:28:6d:a4:f9:0f:d8:b0:54:39:dc:8e:31:
                    75:70:2c:8b:b8:4b:29:57:26:c7:46:c9:ba:fd:6e:
                    db:54:11:5c:03:c2:05:a6:8d:a9:6c:f1:c1:35:bb:
                    b3:73:f0:d6:1c:9f:39:24:4e:81:11:53:cd:5a:d8:
                    dc:8e:f6:bd:9b:21:a3:42:b2:fe:3b:57:30:05:cf:
                    7d:46:d8:f4:28:b9:e2:0d:4e:e5:3f:52:1a:e0:67:
                    38:1a:b6:28:8b:c1:9a:d8:f8:ef:10:4d:76:76:ac:
                    a9:ce:ed:2d:75:5b:9f:68:5b:e5:14:f6:bf:ef:1f:
                    0f:23:6c:08:6e:a3:dd:28:0d:91:e8:b4:73:49:e0:
                    83:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:F6:10:B7:E8:79:B2:1E:36:EC:F8:A5:CC:3A:71:2B:A5:B2:02:4F
            X509v3 Authority Key Identifier:
                keyid:CD:C0:55:69:87:E5:1B:93:3B:D9:62:D7:EF:45:97:1C:BA:A7:A2:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917D31E/4A3DD1B2B4BB11F0A1353722C4F9AE02/zcBVaYflG5M72WLX70WXHLqnosM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zcBVaYflG5M72WLX70WXHLqnosM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D31E/4A3DD1B2B4BB11F0A1353722C4F9AE02/zcBVaYflG5M72WLX70WXHLqnosM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:1b:cd:aa:0a:18:ed:2c:44:79:ea:90:cb:c4:1d:c3:ea:4c:
         a8:2b:5f:e1:d0:f6:1f:73:60:c5:e8:e4:27:a4:b4:6a:0c:c8:
         73:09:12:59:3d:eb:ff:84:ef:17:f2:f2:0d:e0:15:fb:4f:54:
         14:c9:cf:d7:22:30:a3:1f:fb:c3:64:50:93:fd:04:d6:c0:11:
         77:80:ef:d1:9b:90:c3:08:b4:6c:d9:11:9b:0e:17:4d:e6:cd:
         de:07:df:c8:48:c3:07:3c:c6:26:6c:2a:b7:f9:63:24:e1:9b:
         f2:c3:48:83:22:5b:a2:7c:d8:bf:ad:2b:54:78:ed:f2:9f:61:
         d4:b1:59:e1:6c:0b:4a:69:bd:61:fc:a9:37:72:70:74:19:0a:
         ff:9d:7a:8f:0a:6f:ee:28:c2:4e:b8:c1:15:2a:c5:c6:25:5c:
         01:a0:e1:ce:7c:20:66:9d:31:08:94:d8:6b:95:46:53:45:c4:
         7c:79:73:20:80:38:a0:4c:dd:17:f6:b4:2a:c7:40:fc:00:1a:
         96:65:02:46:72:b0:0e:98:28:9d:b9:1c:4b:89:cd:77:6c:de:
         0e:c9:cf:d5:54:64:13:bf:e1:31:7f:d7:29:4e:99:4c:20:7f:
         47:a6:78:25:3a:2d:ed:2d:f1:1c:1b:7f:86:c0:af:8f:b2:4a:
         2e:fa:15:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:30:00 2026 by rpki-client