Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919BF94/8353E3F0652911F18C86F8A79AEE528E/MZfydASVOdoqReLMBqpcyHTmJ28.mft
File:                     MZfydASVOdoqReLMBqpcyHTmJ28.mft (raw, json)
Hash identifier:          xWsmFGsHbEycLmDqyEPMWCTjogRzMa/oyEg7PBZTRw8=
Subject key identifier:   4F:06:7E:51:C2:64:90:C9:41:25:12:82:41:76:25:AD:69:82:48:37
Authority key identifier: 31:97:F2:74:04:95:39:DA:2A:45:E2:CC:06:AA:5C:C8:74:E6:27:6F
Certificate issuer:       /CN=A919BF94/serialNumber=3197F274049539DA2A45E2CC06AA5CC874E6276F
Certificate serial:       2C
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/MZfydASVOdoqReLMBqpcyHTmJ28.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919BF94/8353E3F0652911F18C86F8A79AEE528E/MZfydASVOdoqReLMBqpcyHTmJ28.mft
Manifest number:          2C
Signing time:             Thu 03 Sep 2026 08:56:55 +0000
Manifest this update:     Thu 03 Sep 2026 08:56:55 +0000
Manifest next update:     Thu 10 Sep 2026 08:56:55 +0000
Files and hashes:         1: MZfydASVOdoqReLMBqpcyHTmJ28.crl (hash: GC5qDwBkfTDXJ1/6mALMq4lijm6gF8dHZj2qT+3drz0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919BF94/8353E3F0652911F18C86F8A79AEE528E/MZfydASVOdoqReLMBqpcyHTmJ28.crl
                          rsync://rpki.apnic.net/member_repository/A919BF94/8353E3F0652911F18C86F8A79AEE528E/MZfydASVOdoqReLMBqpcyHTmJ28.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/MZfydASVOdoqReLMBqpcyHTmJ28.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 08:56:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44 (0x2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919BF94, serialNumber=3197F274049539DA2A45E2CC06AA5CC874E6276F
        Validity
            Not Before: Sep  3 08:56:55 2026 GMT
            Not After : Sep 10 08:56:55 2026 GMT
        Subject: CN=6a993657-307a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:11:30:3a:92:81:77:d5:ac:4f:bc:b3:7d:e5:
                    42:d6:cf:03:1a:60:b6:98:13:88:ea:05:f9:e6:3c:
                    2e:72:b8:be:c3:8f:c2:c3:9d:9b:21:e6:da:28:28:
                    f7:c3:17:88:f4:35:67:bb:b8:b7:58:37:f3:97:4a:
                    99:d2:af:d0:b0:9e:32:82:b9:86:b9:e3:0d:8d:81:
                    cb:e7:ba:b2:d5:57:b3:b1:30:7a:e7:36:68:12:ff:
                    59:18:6c:b9:1a:ac:bf:fc:99:82:6e:09:0e:fe:30:
                    09:c4:5b:4f:5a:fc:93:60:03:0f:1a:55:c3:50:80:
                    6a:30:b7:6c:5f:3a:18:47:ca:16:94:0b:81:24:2c:
                    82:ba:c9:54:cf:be:e0:13:6a:b1:7d:b5:c2:d8:f0:
                    81:0e:45:c9:bf:f0:3d:da:46:4b:07:f0:12:1b:58:
                    f1:28:f4:1e:7e:a1:72:4e:d6:9d:12:e7:5a:20:27:
                    b6:0d:1c:11:a8:4e:e9:5b:44:71:6a:14:3b:a9:37:
                    dc:bc:45:50:7a:e0:c6:94:c2:b2:48:c9:6f:6a:2d:
                    76:7d:6f:21:aa:dc:5b:d7:1e:b0:48:b8:50:62:13:
                    0b:71:3c:6e:26:18:1b:8b:30:7c:66:bd:d9:ba:c3:
                    6f:65:29:07:17:90:3a:1b:68:f5:90:ff:03:f6:87:
                    76:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:06:7E:51:C2:64:90:C9:41:25:12:82:41:76:25:AD:69:82:48:37
            X509v3 Authority Key Identifier:
                keyid:31:97:F2:74:04:95:39:DA:2A:45:E2:CC:06:AA:5C:C8:74:E6:27:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919BF94/8353E3F0652911F18C86F8A79AEE528E/MZfydASVOdoqReLMBqpcyHTmJ28.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/MZfydASVOdoqReLMBqpcyHTmJ28.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BF94/8353E3F0652911F18C86F8A79AEE528E/MZfydASVOdoqReLMBqpcyHTmJ28.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:96:a5:87:96:94:0e:67:8c:86:22:22:22:cc:f5:a4:1a:94:
         6d:13:4a:29:b2:92:f0:a0:da:ef:fe:6b:1f:1d:3f:24:47:f6:
         f4:9b:9a:a2:ad:85:4f:40:55:c3:84:e4:37:85:cc:72:e9:de:
         21:af:3d:51:62:20:19:f1:0e:9f:7f:91:30:e5:4f:8e:76:db:
         17:25:af:da:5c:43:18:85:19:55:8b:a0:7f:9f:20:67:cb:dc:
         73:d8:4a:b0:14:89:65:ca:e2:2a:32:4c:69:a1:0a:7a:8d:10:
         59:c6:8c:6f:27:37:6f:ab:30:0c:12:2a:e4:db:84:c3:8a:a4:
         68:a6:07:72:c4:f6:b3:e7:43:a7:34:00:8a:0d:26:b7:bd:10:
         39:af:8d:a0:63:f6:e6:8f:33:10:7b:d2:05:e2:12:92:16:71:
         ee:75:79:38:81:ff:53:d7:9e:82:b4:14:89:64:2e:b0:e4:85:
         cf:08:ca:ac:a0:fc:d5:4e:91:1f:89:e3:7c:e6:9e:03:dd:1a:
         05:09:a2:d0:82:b1:0d:44:7c:87:43:0d:03:78:13:67:2e:b8:
         0c:71:cf:07:37:d3:86:f1:e4:d4:3f:38:8a:2f:9f:0d:cf:21:
         a8:d6:b6:7e:bf:0e:c7:64:e0:05:fa:d9:a7:a6:83:bc:1d:4e:
         3a:19:37:7a
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBLDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
QkY5NDExMC8GA1UEBRMoMzE5N0YyNzQwNDk1MzlEQTJBNDVFMkNDMDZBQTVDQzg3
NEU2Mjc2RjAeFw0yNjA5MDMwODU2NTVaFw0yNjA5MTAwODU2NTVaMBgxFjAUBgNV
BAMTDTZhOTkzNjU3LTMwN2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCPETA6koF31axPvLN95ULWzwMaYLaYE4jqBfnmPC5yuL7Dj8LDnZsh5tooKPfD
F4j0NWe7uLdYN/OXSpnSr9CwnjKCuYa54w2NgcvnurLVV7OxMHrnNmgS/1kYbLka
rL/8mYJuCQ7+MAnEW09a/JNgAw8aVcNQgGowt2xfOhhHyhaUC4EkLIK6yVTPvuAT
arF9tcLY8IEORcm/8D3aRksH8BIbWPEo9B5+oXJO1p0S51ogJ7YNHBGoTulbRHFq
FDupN9y8RVB64MaUwrJIyW9qLXZ9byGq3FvXHrBIuFBiEwtxPG4mGBuLMHxmvdm6
w29lKQcXkDobaPWQ/wP2h3abAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUTwZ+UcJk
kMlBJRKCQXYlrWmCSDcwHwYDVR0jBBgwFoAUMZfydASVOdoqReLMBqpcyHTmJ28w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlCRjk0LzgzNTNFM0YwNjUy
OTExRjE4Qzg2RjhBNzlBRUU1MjhFL01aZnlkQVNWT2RvcVJlTE1CcXBjeUhUbUoy
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG
RDFGRjIvTVpmeWRBU1ZPZG9xUmVMTUJxcGN5SFRtSjI4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlC
Rjk0LzgzNTNFM0YwNjUyOTExRjE4Qzg2RjhBNzlBRUU1MjhFL01aZnlkQVNWT2Rv
cVJlTE1CcXBjeUhUbUoyOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCZlqWHlpQOZ4yGIiIizPWkGpRtE0opspLwoNrv/msfHT8kR/b0m5qirYVPQFXD
hOQ3hcxy6d4hrz1RYiAZ8Q6ff5Ew5U+OdtsXJa/aXEMYhRlVi6B/nyBny9xz2Eqw
FIllyuIqMkxpoQp6jRBZxoxvJzdvqzAMEirk24TDiqRopgdyxPaz50OnNACKDSa3
vRA5r42gY/bmjzMQe9IF4hKSFnHudXk4gf9T156CtBSJZC6w5IXPCMqsoPzVTpEf
ieN85p4D3RoFCaLQgrENRHyHQw0DeBNnLrgMcc8HN9OG8eTUPziKL58NzyGo1rZ+
vw7HZOAF+tmnpoO8HU46GTd6
-----END CERTIFICATE-----
Generated at Sat Sep 5 01:00:12 2026 by rpki-client