Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.mft
File:                     ZJQ7HSvi-T3WQOAk65TY043OaoM.mft (raw, json)
Hash identifier:          HONuDhwJQvIOmbnaeRn42kfDB/8IRURtnu8fVH+NsjU=
Subject key identifier:   61:99:DA:F6:A2:14:08:C0:3B:A3:A5:10:A8:AA:75:A8:72:C9:5F:B1
Authority key identifier: 64:94:3B:1D:2B:E2:F9:3D:D6:40:E0:24:EB:94:D8:D3:8D:CE:6A:83
Certificate issuer:       /CN=A91B8F34/serialNumber=64943B1D2BE2F93DD640E024EB94D8D38DCE6A83
Certificate serial:       01FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJQ7HSvi-T3WQOAk65TY043OaoM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.mft
Manifest number:          01E2
Signing time:             Fri 17 Jul 2026 04:35:56 +0000
Manifest this update:     Fri 17 Jul 2026 04:35:56 +0000
Manifest next update:     Fri 24 Jul 2026 04:35:56 +0000
Files and hashes:         1: ZJQ7HSvi-T3WQOAk65TY043OaoM.crl (hash: in8sTLu683C8nO09htycJpxYlqF7Vp/06tqT1ZyMk8Y=)
                          2: 0D5F2416B5B811EEA8ACF557C4F9AE02.roa (hash: qfFd1OkdxxfsdrGhnn3dqFBraYFvXPIV0iQiCI0Bu+U=)
                          3: D1DEC18AB5B711EEB1FB8657C4F9AE02.roa (hash: vS3X0b44bYIp6/Y6sLtHQmuycQrRy1x+aaB6Q+t5xg4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.crl
                          rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJQ7HSvi-T3WQOAk65TY043OaoM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 04:35:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 507 (0x1fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B8F34, serialNumber=64943B1D2BE2F93DD640E024EB94D8D38DCE6A83
        Validity
            Not Before: Jul 17 04:35:56 2026 GMT
            Not After : Jul 24 04:35:56 2026 GMT
        Subject: CN=6a59b12c-bd77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:62:cf:3a:6b:d8:ba:66:e3:91:9b:4e:c3:35:
                    4c:df:b0:a0:2c:b9:23:9c:60:30:af:09:2d:ae:a7:
                    a5:a6:ff:ca:47:f7:c4:96:ce:ea:3f:f4:01:58:19:
                    1e:88:ab:01:d5:56:07:60:11:f5:d2:dd:3c:36:59:
                    c0:8f:f3:89:c0:40:76:7f:07:3d:63:a1:ef:a1:ab:
                    28:59:0d:52:e3:4f:68:8d:ab:6e:e3:eb:5c:62:f7:
                    28:d3:bb:7b:8a:13:b4:9d:de:32:ca:08:e7:eb:fe:
                    84:c3:b7:dd:33:f5:17:30:97:04:1d:48:80:51:74:
                    7d:2b:0f:4a:93:85:e5:52:9c:94:a0:82:6f:ef:16:
                    3a:62:b7:ae:5a:ea:ff:a4:60:a3:13:86:56:11:54:
                    57:fe:07:e7:e8:71:78:a5:06:77:5a:9f:a6:78:52:
                    3b:b1:3c:7a:90:cb:44:90:b9:4a:9f:08:6e:c6:30:
                    22:f6:8f:b2:69:f1:e7:5a:b0:d6:93:e6:b1:fa:27:
                    54:70:2a:8d:6d:ad:0f:5c:58:8f:80:7d:37:5f:04:
                    4c:b0:4a:c0:58:f6:b2:d4:4c:b1:b3:15:70:52:69:
                    e1:de:64:64:94:07:ca:a7:b6:b6:50:5b:43:ec:7d:
                    44:f3:9e:04:bf:29:76:3c:5c:3e:73:b8:93:4a:18:
                    8d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:99:DA:F6:A2:14:08:C0:3B:A3:A5:10:A8:AA:75:A8:72:C9:5F:B1
            X509v3 Authority Key Identifier:
                keyid:64:94:3B:1D:2B:E2:F9:3D:D6:40:E0:24:EB:94:D8:D3:8D:CE:6A:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJQ7HSvi-T3WQOAk65TY043OaoM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:56:6f:2f:a0:19:59:e4:b1:32:c9:6e:ee:91:5f:b8:1c:07:
         af:7f:f6:bb:7d:e6:de:57:05:c1:b5:ba:6f:b2:04:c1:8d:9f:
         61:50:fc:a8:6a:92:0e:f0:f1:ff:1d:d4:ae:03:8b:17:43:a1:
         e1:b2:6d:0a:6b:57:1a:82:59:a1:66:59:7e:a4:79:aa:0b:71:
         fc:e9:24:fe:50:c8:23:a6:2f:38:0f:0a:3b:1f:6f:12:54:08:
         7a:15:75:e4:9d:d9:d1:64:7f:1b:03:cc:e1:f9:60:e6:d0:22:
         57:90:10:9f:c7:ed:15:aa:12:9e:31:fe:06:66:db:1f:ba:9f:
         cb:77:b0:84:87:17:84:6b:fe:0f:94:b7:6d:89:77:7c:c9:39:
         37:90:2e:8e:34:73:c8:3f:da:ea:c4:af:26:5b:52:90:f6:68:
         39:44:23:c9:56:44:ff:c1:5f:ac:21:03:1f:2a:f3:03:d7:87:
         86:81:e1:98:bf:d4:54:ed:eb:cd:e7:fc:c4:00:20:60:20:c3:
         ba:f2:7c:e3:3e:c5:96:39:be:5a:20:12:4d:0d:ad:45:84:fb:
         f7:fa:e9:0a:71:ae:d0:75:d1:ce:7f:d0:f5:c6:2d:f0:69:b3:
         66:8f:ea:e3:9a:7a:9f:8d:e9:fc:5d:4d:6e:b1:0a:d2:11:7c:
         86:82:a5:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:27:43 2026 by rpki-client