Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.mft
File:                     zF1c4NwYIQkMvHU417txI3GQguc.mft (raw, json)
Hash identifier:          L2/Ay/OKxFgxSY8uRdMZE6IPS4dmcZKzf7Zj+qLpjuU=
Subject key identifier:   E7:23:13:C1:3F:8B:C4:4D:74:F5:BB:AD:82:F7:E6:A5:19:91:88:9D
Authority key identifier: CC:5D:5C:E0:DC:18:21:09:0C:BC:75:38:D7:BB:71:23:71:90:82:E7
Certificate issuer:       /CN=A91C91A6/serialNumber=CC5D5CE0DC1821090CBC7538D7BB7123719082E7
Certificate serial:       0908
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zF1c4NwYIQkMvHU417txI3GQguc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.mft
Manifest number:          08F4
Signing time:             Mon 20 Jul 2026 20:47:18 +0000
Manifest this update:     Mon 20 Jul 2026 20:47:17 +0000
Manifest next update:     Mon 27 Jul 2026 20:47:17 +0000
Files and hashes:         1: zF1c4NwYIQkMvHU417txI3GQguc.crl (hash: +Z4zdfHJb6RwNTYTI2L9rgu6bBALhpwe0AXiLm4HJys=)
                          2: 3A4918D41DED11F18280100E163D8C67.roa (hash: Juhjiq7zpIGJ2ca6uyWvgKrk4pkgUf8b9Px9rrY5jmY=)
                          3: A3FFFAF41DED11F18835BD3E163D8C67.roa (hash: 5k8cO87Qj/gNgbt2kI9Eh+2F5/UczXoTj75VoZrq4q4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.crl
                          rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zF1c4NwYIQkMvHU417txI3GQguc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 20:47:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2312 (0x908)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C91A6, serialNumber=CC5D5CE0DC1821090CBC7538D7BB7123719082E7
        Validity
            Not Before: Jul 20 20:47:17 2026 GMT
            Not After : Jul 27 20:47:17 2026 GMT
        Subject: CN=6a5e8956-f7ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:4c:49:55:3d:93:5a:ec:67:80:08:f4:61:f4:
                    8f:77:52:fe:fb:83:e3:d9:e9:ee:24:99:85:ca:6c:
                    de:1b:a4:3a:ef:ee:16:f6:f2:8e:1a:45:1d:2f:6d:
                    53:52:12:5b:c8:2d:f4:ab:9c:ca:c1:89:d3:b4:af:
                    82:c7:ad:6c:2a:fb:ed:82:96:18:1c:ec:1e:a9:07:
                    58:4a:56:98:16:87:a0:06:7b:3c:a4:c9:16:aa:35:
                    75:71:2b:6f:4e:7a:90:23:db:8d:74:78:cd:df:66:
                    a7:e1:9b:9a:14:2e:be:35:45:60:d6:54:c0:be:eb:
                    25:cc:a0:3b:b9:6c:88:c2:87:c9:71:47:54:8d:c3:
                    45:7c:60:3c:8d:40:4e:a7:97:42:ed:83:6f:60:c4:
                    f9:ec:f8:57:cc:d5:42:31:93:ce:a9:18:9d:e6:96:
                    54:cf:05:8d:9c:7c:0f:fc:d3:7a:ae:cd:7e:5c:c9:
                    19:c3:93:ef:0e:76:ab:79:87:7a:a3:79:b4:a4:6e:
                    64:a0:cf:47:1f:93:ae:0a:47:c6:00:92:ba:01:c1:
                    e6:fb:6d:bb:fe:47:5c:e0:c6:52:a0:48:c5:ef:34:
                    2d:c0:97:a7:fe:4c:b9:ab:de:30:40:18:c1:55:8c:
                    45:15:e3:0a:db:d9:9c:d9:42:ba:15:86:06:76:02:
                    bc:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:23:13:C1:3F:8B:C4:4D:74:F5:BB:AD:82:F7:E6:A5:19:91:88:9D
            X509v3 Authority Key Identifier:
                keyid:CC:5D:5C:E0:DC:18:21:09:0C:BC:75:38:D7:BB:71:23:71:90:82:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zF1c4NwYIQkMvHU417txI3GQguc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:c0:da:59:20:3a:e0:4b:c8:d7:a4:c4:8e:9f:27:71:68:ad:
         2f:9c:d5:f8:27:13:9c:f0:9a:18:08:73:f4:3c:c0:49:f5:e5:
         e3:f6:55:10:58:c2:2d:20:f5:d0:24:38:b1:a7:fb:57:9b:81:
         bf:93:d0:4e:5c:41:a2:f9:af:90:e7:cb:89:50:3b:d9:36:fd:
         86:b9:28:f4:9a:5d:37:c6:8c:32:4f:32:e5:96:f4:95:cb:63:
         10:ee:7d:ad:d8:97:7c:eb:98:8f:cf:04:38:0a:6a:58:98:72:
         c9:28:5e:f5:ec:03:2f:e3:ae:14:e6:82:0e:70:46:dc:79:fe:
         2b:71:47:c5:88:25:8f:db:0e:37:81:7d:99:cd:ae:53:fd:32:
         ca:e4:b3:46:3f:1b:a5:bd:97:eb:a0:52:94:14:af:63:b9:00:
         d0:1e:95:3c:e9:19:a3:23:e7:37:34:b2:e8:98:ff:3b:f0:ca:
         2f:dd:8f:0a:76:49:b0:c1:6a:86:14:17:09:db:03:88:9a:38:
         2d:60:b8:8a:e4:c9:31:95:15:96:67:7e:63:40:49:e5:63:71:
         69:05:79:c0:53:36:53:36:62:5c:f8:60:4f:85:ed:4a:c7:24:
         9f:38:fa:00:bf:c0:38:03:6e:89:8a:e4:98:2c:33:39:b7:2b:
         c1:c6:97:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 06:02:06 2026 by rpki-client