Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91971CB/010EB288808911EB8B505F20C4F9AE02/MZsxRPBqjysw1BIHH-EhB3T-huc.mft
File:                     MZsxRPBqjysw1BIHH-EhB3T-huc.mft (raw, json)
Hash identifier:          qk2bS4MF1aiwuPFEhNNN+H4uu2gjbonwCbLItKlIDQE=
Subject key identifier:   F1:0D:6C:5F:E7:73:39:72:F8:BE:AF:E1:8D:F7:7A:2B:FA:9B:B5:C7
Authority key identifier: 31:9B:31:44:F0:6A:8F:2B:30:D4:12:07:1F:E1:21:07:74:FE:86:E7
Certificate issuer:       /CN=A91971CB/serialNumber=319B3144F06A8F2B30D412071FE1210774FE86E7
Certificate serial:       075B
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/MZsxRPBqjysw1BIHH-EhB3T-huc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91971CB/010EB288808911EB8B505F20C4F9AE02/MZsxRPBqjysw1BIHH-EhB3T-huc.mft
Manifest number:          0751
Signing time:             Mon 20 Jul 2026 15:15:27 +0000
Manifest this update:     Mon 20 Jul 2026 15:15:26 +0000
Manifest next update:     Mon 27 Jul 2026 15:15:26 +0000
Files and hashes:         1: MZsxRPBqjysw1BIHH-EhB3T-huc.crl (hash: /oPreyVPhjghX0YhQVQ3GN9SJMclKQQWB065y4H9IOU=)
                          2: 27C29E5EF94411EDB4C6E91CC4F9AE02.roa (hash: dWX5BlXnJUAo9dHvNX1RgcAB0PkL/ZoFYS5PfP1NoaI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91971CB/010EB288808911EB8B505F20C4F9AE02/MZsxRPBqjysw1BIHH-EhB3T-huc.crl
                          rsync://rpki.apnic.net/member_repository/A91971CB/010EB288808911EB8B505F20C4F9AE02/MZsxRPBqjysw1BIHH-EhB3T-huc.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/MZsxRPBqjysw1BIHH-EhB3T-huc.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 15:15:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1883 (0x75b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91971CB, serialNumber=319B3144F06A8F2B30D412071FE1210774FE86E7
        Validity
            Not Before: Jul 20 15:15:26 2026 GMT
            Not After : Jul 27 15:15:26 2026 GMT
        Subject: CN=6a5e3b8e-4f3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:18:68:98:50:08:1e:60:5e:8f:65:42:69:9f:
                    84:3b:6e:31:fe:df:1f:e3:59:22:52:d5:d0:e5:c3:
                    23:54:cd:03:e7:d5:95:fa:e0:ac:12:4f:31:c1:ad:
                    7c:81:1e:e4:52:7c:48:4a:1a:22:79:f3:3f:2a:41:
                    e8:99:53:fa:6a:af:61:80:c7:8d:2b:77:d9:fc:9b:
                    bc:43:59:b5:75:cb:c0:e2:91:88:87:9d:67:9c:b2:
                    8e:cc:98:e7:d1:e1:0b:24:d1:7b:66:47:ca:82:b0:
                    ad:70:3f:14:8d:7d:84:3b:48:73:ea:f8:18:6f:d0:
                    8d:49:f5:f6:0e:b6:09:c9:d3:43:3a:d7:f9:1c:d4:
                    fe:27:b5:58:c6:09:71:15:5d:e2:65:73:1b:a8:e3:
                    06:00:f1:c2:da:58:a1:61:03:64:6b:6e:e8:dc:b8:
                    14:5f:b8:ea:07:65:bf:48:5f:d7:43:41:f0:f8:1c:
                    87:fb:bc:bd:ff:1c:e2:de:8a:cd:45:4c:78:d0:e5:
                    e0:82:05:32:03:dc:99:0b:b3:a4:86:a1:27:33:34:
                    6e:4a:3e:48:f6:b4:cf:4a:9c:18:6f:91:ef:16:a8:
                    3a:1c:56:8a:7e:a3:44:e1:cc:ff:e4:78:9b:9a:f6:
                    dd:e5:63:51:28:f3:cd:c9:bb:aa:6e:e2:c1:6d:0c:
                    0a:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:0D:6C:5F:E7:73:39:72:F8:BE:AF:E1:8D:F7:7A:2B:FA:9B:B5:C7
            X509v3 Authority Key Identifier:
                keyid:31:9B:31:44:F0:6A:8F:2B:30:D4:12:07:1F:E1:21:07:74:FE:86:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91971CB/010EB288808911EB8B505F20C4F9AE02/MZsxRPBqjysw1BIHH-EhB3T-huc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/MZsxRPBqjysw1BIHH-EhB3T-huc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91971CB/010EB288808911EB8B505F20C4F9AE02/MZsxRPBqjysw1BIHH-EhB3T-huc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:5b:e7:61:73:5a:8b:7d:e1:91:af:cc:87:07:70:f2:78:c7:
         5a:85:7f:06:1d:66:1c:76:b2:27:45:08:6a:7d:6f:42:e1:d5:
         0e:18:56:43:d9:92:39:11:62:b1:e6:82:c7:51:c3:0a:66:9b:
         a0:5c:f3:1a:a4:a9:8e:b8:95:21:37:22:2f:1f:f9:b9:11:82:
         f4:d0:70:18:80:f3:1c:29:52:11:e8:c4:69:47:49:77:36:84:
         78:7b:ba:38:78:00:e6:42:03:d8:db:52:40:42:61:5f:ac:3d:
         e6:4d:90:16:db:63:39:80:fe:62:9d:a1:d9:f9:26:ac:76:a9:
         8c:1d:be:36:08:b1:5b:fa:c5:e6:77:3f:3a:f5:c5:a3:56:47:
         33:05:ee:80:60:9c:a5:6c:c3:23:05:e7:f3:c6:29:5b:a0:a6:
         ff:21:33:3f:bf:ab:c5:5a:64:28:2b:6f:40:48:6c:19:12:59:
         fb:59:04:09:7d:81:5a:fe:88:ef:af:c1:b1:38:4e:1c:74:85:
         f6:4f:df:43:a1:91:f3:cd:b8:4a:e0:4b:44:be:47:64:95:0e:
         53:70:8f:62:f1:a7:51:ce:49:0f:85:83:a9:51:f6:25:19:dd:
         72:2d:41:fc:6e:62:ec:86:b4:c1:09:cc:86:f9:b2:a7:54:fb:
         12:31:36:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:50:35 2026 by rpki-client