Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3AD9/77274DC0F98011F087DA99084F6F56BC/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.mft
File:                     pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.mft (raw, json)
Hash identifier:          KEPrjUZGGMm7wtoo8aBdapWc3lx7WPPssT+4cqEbxTk=
Subject key identifier:   5D:2A:BE:3E:DF:4F:77:76:85:EF:59:40:A3:BF:25:13:90:A3:D2:29
Authority key identifier: A7:39:38:74:78:C8:AD:9D:D5:D1:95:53:AB:4B:1D:EE:F1:A9:61:FF
Certificate issuer:       /CN=A91A3AD9/serialNumber=A739387478C8AD9DD5D19553AB4B1DEEF1A961FF
Certificate serial:       6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A3AD9/77274DC0F98011F087DA99084F6F56BC/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.mft
Manifest number:          65
Signing time:             Tue 21 Jul 2026 09:57:06 +0000
Manifest this update:     Tue 21 Jul 2026 09:57:05 +0000
Manifest next update:     Tue 28 Jul 2026 09:57:05 +0000
Files and hashes:         1: pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.crl (hash: ZqP+J7SDLd6H5XZ4RPzI1pDMI5CpO/wE03ApGbjO3LM=)
                          2: 8B10B888061111F18D858310203D8C67.roa (hash: qh+VyOJbj+ug4XtQyEZqsUr8GU3LhsaDi56G0+/mtA8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A3AD9/77274DC0F98011F087DA99084F6F56BC/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.crl
                          rsync://rpki.apnic.net/member_repository/A91A3AD9/77274DC0F98011F087DA99084F6F56BC/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 09:57:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 107 (0x6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A3AD9, serialNumber=A739387478C8AD9DD5D19553AB4B1DEEF1A961FF
        Validity
            Not Before: Jul 21 09:57:05 2026 GMT
            Not After : Jul 28 09:57:05 2026 GMT
        Subject: CN=6a5f4272-1b88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:4d:24:95:4a:1d:86:21:14:0d:79:fa:63:47:
                    59:1a:d0:c2:ae:2f:eb:2b:68:f9:92:90:4f:25:ed:
                    51:ef:c4:de:f8:de:d4:07:0c:42:ae:26:6e:63:d2:
                    56:b0:37:22:49:a1:08:4c:34:1d:eb:01:3d:d4:04:
                    98:fa:1b:78:cc:3e:94:fa:aa:ad:5d:54:1e:35:24:
                    e7:51:fa:86:4b:67:dc:1e:0c:93:d0:af:94:2e:2b:
                    c3:dd:22:02:08:63:3b:b2:9c:23:37:59:65:48:45:
                    b4:09:45:60:a6:4d:8b:f4:a1:b3:7d:51:bb:bd:c8:
                    27:11:54:cb:37:73:3b:59:37:e7:ba:df:b4:20:27:
                    ec:f8:ef:26:57:bb:66:19:e3:6b:b2:f8:c1:63:08:
                    fc:5b:3c:e4:57:1c:c0:4c:61:dd:34:b5:7c:da:cf:
                    bb:fd:6a:4b:24:80:cc:92:aa:80:bc:2b:94:67:7c:
                    27:3f:8a:34:8a:e3:11:bd:41:f0:24:40:26:ae:c3:
                    e9:e1:a2:72:95:cc:8a:28:7f:76:d3:18:57:32:ee:
                    c0:76:9d:d4:fc:dd:ea:dd:df:4f:fb:2e:ec:d8:e2:
                    42:75:bf:ee:b0:d5:c1:44:b5:2a:c2:1b:bb:3d:b8:
                    ca:54:21:15:56:cf:d3:c8:0a:6d:34:e3:37:1b:40:
                    e0:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:2A:BE:3E:DF:4F:77:76:85:EF:59:40:A3:BF:25:13:90:A3:D2:29
            X509v3 Authority Key Identifier:
                keyid:A7:39:38:74:78:C8:AD:9D:D5:D1:95:53:AB:4B:1D:EE:F1:A9:61:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A3AD9/77274DC0F98011F087DA99084F6F56BC/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3AD9/77274DC0F98011F087DA99084F6F56BC/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:29:9f:3e:68:f1:22:96:4f:fb:d5:a5:c6:b1:cb:49:6f:a6:
         3f:c1:cc:a0:21:7f:14:05:b1:96:f7:99:2f:ff:15:78:9b:63:
         fc:78:b2:cb:30:08:f4:dd:42:a2:3c:47:b9:2f:a5:19:57:70:
         e0:b6:35:69:e4:ae:0e:ff:c7:ac:83:8f:c8:26:1b:e4:61:1a:
         a0:fe:a3:5a:b9:6d:97:3d:35:7a:6f:a5:4c:4e:f9:13:2e:c3:
         7b:b7:68:ee:01:14:9b:1e:03:73:39:17:d0:87:01:79:10:48:
         8d:93:0e:1e:35:97:db:09:32:1f:6f:b6:29:50:95:0b:e2:5c:
         e4:69:f3:78:2c:3d:5c:58:9f:68:fc:ef:62:ad:79:58:06:09:
         a3:00:b4:8a:5e:48:06:fc:f8:18:60:ee:4d:59:56:7f:36:0e:
         e8:3d:96:fb:52:18:d6:4d:ee:9a:d0:c2:de:37:a1:a9:fa:4d:
         04:13:11:40:19:3d:ec:a1:3f:3e:6f:f4:95:e8:84:e9:85:99:
         2b:94:c0:68:29:27:ce:8b:38:92:b3:40:97:bc:ba:3d:78:d1:
         98:6c:9e:7b:35:1d:36:70:5d:43:84:51:f3:03:95:f3:d5:fa:
         5d:f0:a5:3f:29:cb:5f:dc:68:94:ab:c6:f1:03:63:df:47:a9:
         49:4f:c8:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:15:27 2026 by rpki-client